Malware Analysis Report

2025-01-22 13:16

Sample ID 241215-az46ys1kbl
Target f17b36cfddb5242cb530ee6f62fd72ad_JaffaCakes118
SHA256 a81f677c5e70b1031e5faddd50ba3492e6d536ce672fa17c173f916b88e45d46
Tags
mrblack antivm botnet defense_evasion discovery persistence trojan
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

a81f677c5e70b1031e5faddd50ba3492e6d536ce672fa17c173f916b88e45d46

Threat Level: Known bad

The file f17b36cfddb5242cb530ee6f62fd72ad_JaffaCakes118 was found to be: Known bad.

Malicious Activity Summary

mrblack antivm botnet defense_evasion discovery persistence trojan

MrBlack trojan

Mrblack family

MrBlack Trojan

File and Directory Permissions Modification

Executes dropped EXE

Write file to user bin folder

Modifies init.d

Writes file to system bin folder

Checks CPU configuration

Reads system network configuration

Reads runtime system information

Writes file to tmp directory

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-12-15 00:39

Signatures

MrBlack trojan

Description Indicator Process Target
N/A N/A N/A N/A

Mrblack family

mrblack

Analysis: behavioral1

Detonation Overview

Submitted

2024-12-15 00:39

Reported

2024-12-15 00:42

Platform

ubuntu2004-amd64-20240729-en

Max time kernel

149s

Max time network

151s

Command Line

[/tmp/f17b36cfddb5242cb530ee6f62fd72ad_JaffaCakes118]

Signatures

MrBlack Trojan

trojan botnet mrblack

MrBlack trojan

Description Indicator Process Target
N/A N/A N/A N/A

Mrblack family

mrblack

File and Directory Permissions Modification

defense_evasion
Description Indicator Process Target
N/A N/A /usr/bin/chmod N/A
N/A N/A /bin/sh N/A
N/A N/A /usr/bin/chmod N/A
N/A N/A /bin/sh N/A
N/A N/A /usr/bin/chmod N/A
N/A N/A /bin/sh N/A
N/A N/A /usr/bin/chmod N/A
N/A N/A /bin/sh N/A

Executes dropped EXE

Description Indicator Process Target
N/A /usr/bin/bsd-port/agent /usr/bin/bsd-port/agent N/A
N/A /usr/bin/acpid /usr/bin/acpid N/A

Modifies init.d

persistence
Description Indicator Process Target
File opened for modification /etc/init.d/DbSecurityMdt /tmp/f17b36cfddb5242cb530ee6f62fd72ad_JaffaCakes118 N/A
File opened for modification /etc/init.d/selinux /usr/bin/bsd-port/agent N/A

Write file to user bin folder

persistence
Description Indicator Process Target
File opened for modification /usr/bin/bsd-port/agent.conf /tmp/f17b36cfddb5242cb530ee6f62fd72ad_JaffaCakes118 N/A
File opened for modification /usr/bin/bsd-port/agent /usr/bin/cp N/A
File opened for modification /usr/bin/lsof /usr/bin/cp N/A
File opened for modification /usr/bin/bsd-port/udevd.conf /tmp/f17b36cfddb5242cb530ee6f62fd72ad_JaffaCakes118 N/A
File opened for modification /usr/bin/bsd-port/agent.conf /usr/bin/bsd-port/agent N/A
File opened for modification /usr/bin/acpid /usr/bin/cp N/A
File opened for modification /usr/bin/dpkgd/lsof /usr/bin/cp N/A
File opened for modification /usr/bin/dpkgd/ps /usr/bin/cp N/A
File opened for modification /usr/bin/ps /usr/bin/cp N/A

Writes file to system bin folder

Description Indicator Process Target
File opened for modification /bin/lsof /usr/bin/cp N/A
File opened for modification /bin/ps /usr/bin/cp N/A

Checks CPU configuration

antivm
Description Indicator Process Target
File opened for reading /proc/cpuinfo /usr/bin/bsd-port/agent N/A
File opened for reading /proc/cpuinfo /tmp/f17b36cfddb5242cb530ee6f62fd72ad_JaffaCakes118 N/A

Reads system network configuration

discovery
Description Indicator Process Target
File opened for reading /proc/net/dev /tmp/f17b36cfddb5242cb530ee6f62fd72ad_JaffaCakes118 N/A
File opened for reading /proc/net/dev /usr/bin/bsd-port/agent N/A

Reads runtime system information

discovery
Description Indicator Process Target
File opened for reading /proc/filesystems /usr/bin/cp N/A
File opened for reading /proc/cmdline /usr/sbin/insmod N/A
File opened for reading /proc/filesystems /usr/bin/cp N/A
File opened for reading /proc/filesystems /usr/bin/mkdir N/A
File opened for reading /proc/filesystems /usr/bin/cp N/A
File opened for reading /proc/filesystems /usr/bin/mkdir N/A
File opened for reading /proc/sys/kernel/version /usr/bin/bsd-port/agent N/A
File opened for reading /proc/filesystems /usr/bin/cp N/A
File opened for reading /proc/meminfo /tmp/f17b36cfddb5242cb530ee6f62fd72ad_JaffaCakes118 N/A
File opened for reading /proc/filesystems /usr/bin/cp N/A
File opened for reading /proc/filesystems /usr/bin/mkdir N/A
File opened for reading /proc/filesystems /usr/bin/cp N/A
File opened for reading /proc/stat /usr/bin/bsd-port/agent N/A
File opened for reading /proc/sys/kernel/version /tmp/f17b36cfddb5242cb530ee6f62fd72ad_JaffaCakes118 N/A
File opened for reading /proc/stat /tmp/f17b36cfddb5242cb530ee6f62fd72ad_JaffaCakes118 N/A
File opened for reading /proc/filesystems /usr/bin/mkdir N/A
File opened for reading /proc/filesystems /usr/bin/cp N/A
File opened for reading /proc/filesystems /usr/bin/mkdir N/A
File opened for reading /proc/cmdline /usr/sbin/insmod N/A
File opened for reading /proc/filesystems /usr/bin/mkdir N/A
File opened for reading /proc/sys/kernel/version /usr/bin/acpid N/A
File opened for reading /proc/filesystems /usr/bin/cp N/A
File opened for reading /proc/filesystems /usr/bin/mkdir N/A
File opened for reading /proc/meminfo /usr/bin/bsd-port/agent N/A

Writes file to tmp directory

Description Indicator Process Target
File opened for modification /tmp/notify.file /tmp/f17b36cfddb5242cb530ee6f62fd72ad_JaffaCakes118 N/A
File opened for modification /tmp/moni.note /usr/bin/acpid N/A
File opened for modification /tmp/notify.file /usr/bin/acpid N/A
File opened for modification /tmp/gates.note /usr/bin/acpid N/A
File opened for modification /tmp/moni.note /tmp/f17b36cfddb5242cb530ee6f62fd72ad_JaffaCakes118 N/A
File opened for modification /tmp/bill.note /tmp/f17b36cfddb5242cb530ee6f62fd72ad_JaffaCakes118 N/A
File opened for modification /tmp/gates.note /tmp/f17b36cfddb5242cb530ee6f62fd72ad_JaffaCakes118 N/A

Processes

/tmp/f17b36cfddb5242cb530ee6f62fd72ad_JaffaCakes118

[/tmp/f17b36cfddb5242cb530ee6f62fd72ad_JaffaCakes118]

/bin/sh

[sh -c ln -s /etc/init.d/DbSecurityMdt /etc/rc1.d/S97DbSecurityMdt]

/usr/bin/ln

[ln -s /etc/init.d/DbSecurityMdt /etc/rc1.d/S97DbSecurityMdt]

/bin/sh

[sh -c ln -s /etc/init.d/DbSecurityMdt /etc/rc2.d/S97DbSecurityMdt]

/usr/bin/ln

[ln -s /etc/init.d/DbSecurityMdt /etc/rc2.d/S97DbSecurityMdt]

/bin/sh

[sh -c ln -s /etc/init.d/DbSecurityMdt /etc/rc3.d/S97DbSecurityMdt]

/usr/bin/ln

[ln -s /etc/init.d/DbSecurityMdt /etc/rc3.d/S97DbSecurityMdt]

/bin/sh

[sh -c ln -s /etc/init.d/DbSecurityMdt /etc/rc4.d/S97DbSecurityMdt]

/usr/bin/ln

[ln -s /etc/init.d/DbSecurityMdt /etc/rc4.d/S97DbSecurityMdt]

/bin/sh

[sh -c ln -s /etc/init.d/DbSecurityMdt /etc/rc5.d/S97DbSecurityMdt]

/usr/bin/ln

[ln -s /etc/init.d/DbSecurityMdt /etc/rc5.d/S97DbSecurityMdt]

/bin/sh

[sh -c mkdir -p /usr/bin/bsd-port]

/usr/bin/mkdir

[mkdir -p /usr/bin/bsd-port]

/bin/sh

[sh -c cp -f /tmp/f17b36cfddb5242cb530ee6f62fd72ad_JaffaCakes118 /usr/bin/bsd-port/agent]

/usr/bin/cp

[cp -f /tmp/f17b36cfddb5242cb530ee6f62fd72ad_JaffaCakes118 /usr/bin/bsd-port/agent]

/bin/sh

[sh -c /usr/bin/bsd-port/agent]

/usr/bin/bsd-port/agent

[/usr/bin/bsd-port/agent]

/bin/sh

[sh -c mkdir -p /usr/bin]

/usr/bin/mkdir

[mkdir -p /usr/bin]

/bin/sh

[sh -c cp -f /tmp/f17b36cfddb5242cb530ee6f62fd72ad_JaffaCakes118 /usr/bin/acpid]

/usr/bin/cp

[cp -f /tmp/f17b36cfddb5242cb530ee6f62fd72ad_JaffaCakes118 /usr/bin/acpid]

/bin/sh

[sh -c ln -s /etc/init.d/selinux /etc/rc1.d/S99selinux]

/usr/bin/ln

[ln -s /etc/init.d/selinux /etc/rc1.d/S99selinux]

/bin/sh

[sh -c ln -s /etc/init.d/selinux /etc/rc2.d/S99selinux]

/usr/bin/ln

[ln -s /etc/init.d/selinux /etc/rc2.d/S99selinux]

/bin/sh

[sh -c ln -s /etc/init.d/selinux /etc/rc3.d/S99selinux]

/usr/bin/ln

[ln -s /etc/init.d/selinux /etc/rc3.d/S99selinux]

/bin/sh

[sh -c ln -s /etc/init.d/selinux /etc/rc4.d/S99selinux]

/usr/bin/ln

[ln -s /etc/init.d/selinux /etc/rc4.d/S99selinux]

/bin/sh

[sh -c ln -s /etc/init.d/selinux /etc/rc5.d/S99selinux]

/usr/bin/ln

[ln -s /etc/init.d/selinux /etc/rc5.d/S99selinux]

/bin/sh

[sh -c mkdir -p /usr/bin/dpkgd]

/usr/bin/mkdir

[mkdir -p /usr/bin/dpkgd]

/bin/sh

[sh -c /usr/bin/acpid]

/usr/bin/acpid

[/usr/bin/acpid]

/bin/sh

[sh -c insmod /usr/lib/xpacket.ko]

/usr/sbin/insmod

[insmod /usr/lib/xpacket.ko]

/bin/sh

[sh -c cp -f /bin/lsof /usr/bin/dpkgd/lsof]

/usr/bin/cp

[cp -f /bin/lsof /usr/bin/dpkgd/lsof]

/bin/sh

[sh -c mkdir -p /bin]

/usr/bin/mkdir

[mkdir -p /bin]

/bin/sh

[sh -c cp -f /usr/bin/bsd-port/agent /bin/lsof]

/usr/bin/cp

[cp -f /usr/bin/bsd-port/agent /bin/lsof]

/bin/sh

[sh -c chmod 0755 /bin/lsof]

/usr/bin/chmod

[chmod 0755 /bin/lsof]

/bin/sh

[sh -c cp -f /bin/ps /usr/bin/dpkgd/ps]

/usr/bin/cp

[cp -f /bin/ps /usr/bin/dpkgd/ps]

/bin/sh

[sh -c mkdir -p /bin]

/usr/bin/mkdir

[mkdir -p /bin]

/bin/sh

[sh -c cp -f /usr/bin/bsd-port/agent /bin/ps]

/usr/bin/cp

[cp -f /usr/bin/bsd-port/agent /bin/ps]

/bin/sh

[sh -c chmod 0755 /bin/ps]

/usr/bin/chmod

[chmod 0755 /bin/ps]

/bin/sh

[sh -c mkdir -p /usr/bin]

/usr/bin/mkdir

[mkdir -p /usr/bin]

/bin/sh

[sh -c cp -f /usr/bin/bsd-port/agent /usr/bin/lsof]

/usr/bin/cp

[cp -f /usr/bin/bsd-port/agent /usr/bin/lsof]

/bin/sh

[sh -c chmod 0755 /usr/bin/lsof]

/usr/bin/chmod

[chmod 0755 /usr/bin/lsof]

/bin/sh

[sh -c mkdir -p /usr/bin]

/usr/bin/mkdir

[mkdir -p /usr/bin]

/bin/sh

[sh -c cp -f /usr/bin/bsd-port/agent /usr/bin/ps]

/usr/bin/cp

[cp -f /usr/bin/bsd-port/agent /usr/bin/ps]

/bin/sh

[sh -c chmod 0755 /usr/bin/ps]

/usr/bin/chmod

[chmod 0755 /usr/bin/ps]

/bin/sh

[sh -c insmod /usr/lib/xpacket.ko]

/usr/sbin/insmod

[insmod /usr/lib/xpacket.ko]

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 connectivity-check.ubuntu.com udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 connectivity-check.ubuntu.com udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp
US 1.1.1.1:53 c2.0oo0.city udp

Files

/tmp/gates.note

MD5 f0dd4a99fba6075a9494772b58f95280
SHA1 6f34a3e0e1af181e8a78e70c146682b7ead12846
SHA256 55fdec963805de594b61b2c1692cadc2c1dfb844d6ac10c5bfed33c842087b2e
SHA512 f4bb86b6c71c4d8f66a6186d96159e2e700c259b8ef5cb1534bcaa5c7a6950354e9419a220aba836a4e91624f519412a94361f857e370d3dbbe722a370db46c1

/etc/init.d/DbSecurityMdt

MD5 4b28dd51490de8e95c780ae9561e1255
SHA1 71912a13d958ba296fea6a71df500bfc64ac95be
SHA256 4c5053f7a5bf93fc510ea44d82208ccf2429fe4e5789e52fcab3d6a8c5eb2bab
SHA512 7dfe9547d9b335259a80469bb8a0b9fa399f89f868c140448099f890fa67c4b92899e590558d25f8435ff556975e93e0e148068323dc2ea6c480ed7a67b08462

/usr/bin/bsd-port/agent

MD5 f17b36cfddb5242cb530ee6f62fd72ad
SHA1 1dad9668f72f681c865d058027d0eb474f920613
SHA256 a81f677c5e70b1031e5faddd50ba3492e6d536ce672fa17c173f916b88e45d46
SHA512 c0edc007a5030e95cc63467e5de00ba3152f3150dc9247850553fbf0542e2c6bf59543d6cca1e38dd8fdc490a2984d515a6d984e6d8833e64c90e07383d7fa16

/tmp/notify.file

MD5 79088c38abb3a242f72d3bef40de7e71
SHA1 dae965ccd8e9598f28d41f637aa0d26ed27fe254
SHA256 cb231b01ee637b58abe40914373e8eb921e5de1f3bca2a4f64e1e5ae001c273c
SHA512 5d4e06c1a9a3b40c8397f78beb7173dddefc8737fdc649a40e6e59c3df387c4e02d3c3cfa0d1c794d8b1e16d0e1a4f47e854bf602044fce7db48aff00ce4cf04

/etc/init.d/selinux

MD5 c6a80f08539a4c3176762f514976dd24
SHA1 bbc5826b01d20f5c4d315ff5dbc3f216760c64ef
SHA256 ea47e885ae227059ce55d020335f7869c565ec6d85f484497e83cd4998149d5d
SHA512 9a1e3b0142876305fe389e07880bd586e97bf709273a66299d9128ff2861459104054d4e5d836aecdf73f2c11886fa3a2a8498741adb3211b96116658b856175

/usr/bin/dpkgd/lsof

MD5 061386937ec7acf924438a2643a32be0
SHA1 01a044b9e58839bea3e58c66cb32acc16241bf91
SHA256 8a26bbae9eb85aa98ef29cfe5b0a291234db6eb394c3e0c2841983dcf7dda959
SHA512 2de2e56ac4c32f47b4a1945ccfb0db378e6d59019ee8004e3e5d2ec8935efb5aa8ee14b8a0b21c61a267e195d42a3232a6dcade8720de06118fd579277f59db7

/usr/bin/dpkgd/ps

MD5 d194576b899af45b1d2a448612ec21e5
SHA1 492f7d8f28cd4397ce22fcf0d8bf3304ea93465a
SHA256 a8cf81f3a1137c999c3cf336507ce120b3065e633ade01db6280d427b7d986ca
SHA512 b323babd9580b91772cde29c9f22ae75b27f5ce8ce0268a48ca41713c3545dd72409932a5c48f6af66ac6e43127eb5461d1f686bd667fa1b0e56a1564db3c539

/tmp/moni.note

MD5 78b9cab19959e4af8ff46156ee460c74
SHA1 7c8d848f32fa1c53815556ee08aa8ee5994c5a51
SHA256 e5ce886c0b0869006dc9a2da28fcd4f1f291f4a90835b75edb74587b66e5acc9
SHA512 adf7e3718491f26a2853ea8e397727be1f0cb8abcae556f9e2acfeab0ccfdef721614361a09c84d9cfbcea9533d1d6a93be3f870611a13d8e0cbf9ca192e2987