c858e10e29b769ca86445ba1bebdf708e88245da4e96c4afc967818e8293e099 | Triage

Submit
Reports

Overview

overview

Static

static

客户端(...EY.exe

windows7-x64

9

客户端(...EY.exe

windows10-2004-x64

9

UDP.exe

windows7-x64

3

UDP.exe

windows10-2004-x64

3

a

ubuntu-24.04-amd64

8

arm1

debian-9-armhf

4

bj.exe

windows7-x64

bj.exe

windows10-2004-x64

bjyk.exe

windows7-x64

bjyk.exe

windows10-2004-x64

cctv.exe

windows7-x64

7

cctv.exe

windows10-2004-x64

cctv_2.exe

windows7-x64

1

cctv_2.exe

windows10-2004-x64

cn.exe

windows7-x64

7

cn.exe

windows10-2004-x64

7

cn1.exe

windows7-x64

7

cn1.exe

windows10-2004-x64

3

dhl.exe

windows7-x64

dhl.exe

windows10-2004-x64

java

ubuntu-18.04-amd64

4

java (2)

ubuntu-24.04-amd64

1

java1

ubuntu-24.04-amd64

7

k5.exe

windows7-x64

8

k5.exe

windows10-2004-x64

ly1

debian-9-mips

3

mh.exe

windows7-x64

mh.exe

windows10-2004-x64

mips

debian-12-mipsel

4

pjhxx

ubuntu-24.04-amd64

1

rootkit

ubuntu-24.04-amd64

8

se.exe

windows7-x64

7

Resubmissions

02-01-2025 21:33

250102-1ejbvswpcv 10

08-12-2024 01:12

241208-bkq68azkep 10

Analysis

max time kernel
0s
max time network
129s
platform
ubuntu-24.04_amd64
resource
ubuntu2404-amd64-20240523-en
resource tags

arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
submitted
02-01-2025 21:33

Sharing

Static task

static1

upx mrblack gh0strat

6 signatures

Behavioral task

behavioral1

Sample

客户端(Client)_KEY.exe

Resource

win7-20240729-en

bootkit discovery evasion persistence

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

客户端(Client)_KEY.exe

Resource

win10v2004-20241007-en

bootkit discovery evasion persistence

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral3

Sample

UDP.exe

Resource

win7-20241010-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

UDP.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral5

Sample

a

Resource

ubuntu2404-amd64-20240523-en

ubuntu-24.04-amd64

2 signatures

150 seconds

Behavioral task

behavioral6

Sample

arm1

Resource

debian9-armhf-20240729-en

debian-9-armhf

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

bj.exe

Resource

win7-20240903-en

gh0strat bootkit discovery persistence rat

windows7-x64

16 signatures

150 seconds

Behavioral task

behavioral8

Sample

bj.exe

Resource

win10v2004-20241007-en

gh0strat discovery rat

windows10-2004-x64

14 signatures

150 seconds

Behavioral task

behavioral9

Sample

bjyk.exe

Resource

win7-20241023-en

gh0strat bootkit discovery persistence rat

windows7-x64

16 signatures

150 seconds

Behavioral task

behavioral10

Sample

bjyk.exe

Resource

win10v2004-20241007-en

gh0strat discovery rat

windows10-2004-x64

14 signatures

150 seconds

Behavioral task

behavioral11

Sample

cctv.exe

Resource

win7-20240903-en

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral12

Sample

cctv.exe

Resource

win10v2004-20241007-en

discovery evasion

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral13

Sample

cctv_2.exe

Resource

win7-20240903-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral14

Sample

cctv_2.exe

Resource

win10v2004-20241007-en

discovery evasion

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral15

Sample

cn.exe

Resource

win7-20240903-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral16

Sample

cn.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral17

Sample

cn1.exe

Resource

win7-20240903-en

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral18

Sample

cn1.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral19

Sample

dhl.exe

Resource

win7-20240903-en

gh0strat bootkit discovery persistence rat

windows7-x64

16 signatures

150 seconds

Behavioral task

behavioral20

Sample

dhl.exe

Resource

win10v2004-20241007-en

gh0strat discovery rat

windows10-2004-x64

14 signatures

150 seconds

Behavioral task

behavioral21

Sample

java

Resource

ubuntu1804-amd64-20240611-en

antivm discovery

ubuntu-18.04-amd64

4 signatures

150 seconds

Behavioral task

behavioral22

Sample

java (2)

Resource

ubuntu2404-amd64-20240523-en

ubuntu-24.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

java1

Resource

ubuntu2404-amd64-20240523-en

ubuntu-24.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

k5.exe

Resource

win7-20241010-en

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral25

Sample

k5.exe

Resource

win10v2004-20241007-en

discovery evasion

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral26

Sample

ly1

Resource

debian9-mipsbe-20240729-en

debian-9-mips

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

mh.exe

Resource

win7-20240903-en

gh0strat discovery rat upx

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral28

Sample

mh.exe

Resource

win10v2004-20241007-en

gh0strat discovery evasion rat upx

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral29

Sample

mips

Resource

debian12-mipsel-20240221-en

debian-12-mipsel

4 signatures

150 seconds

Behavioral task

behavioral30

Sample

pjhxx

Resource

ubuntu2404-amd64-20240523-en

ubuntu-24.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

rootkit

Resource

ubuntu2404-amd64-20240523-en

antivm credential_access defense_evasion discovery persistence

ubuntu-24.04-amd64

15 signatures

150 seconds

Behavioral task

behavioral32

Sample

se.exe

Resource

win7-20240903-en

defense_evasion discovery

windows7-x64

8 signatures

150 seconds

Report Analysis Logs

General

Target

pjhxx
Size

544KB
MD5

c819b1705f2938ac258397c29618fceb
SHA1

f6079e473b0f937e3dd6a8f9b76549925ca32f60
SHA256

609a5f0e44f1723d29f258c4459a532b75c9c1b2bd26607384d17352150dd3a6
SHA512

70b564bcd85289e3a7f00d98b3f587db8255ea1eca7938988f1f6c6673214e50de8c0e3ecb8d554d32bd5489d758c45fe4901d462c0f013ef28b8676bcd8f53b
SSDEEP

12288:yCAn8AR1vaStp/35mnngohox5aczgLXKJFV+61m0nwyhes/tB:yCa8ARRfmnnphS5aczgzKJFVhtwyhD

Score

1^/10

Malware Config

Signatures

Processes

/tmp/pjhxx
/tmp/pjhxx
1⤵
PID:2474

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2025

Terms | Privacy