bin[.]sh[.]elf | Triage™

General

Target
bin.sh.elf
Size 300KB
Sample250310-eb9tra11bv
SHA256 3569d3964b00a4bbb7a2984254a82bb976859cfd761f4ee6207558c51ccc1495
MD5 a0803b97b1c1f9663e30510e91d12c10
SHA1 cfc366f4e47fa578cbfc7f9589991afc58838071
SHA512 19a46c20b27bf7f9cf3c90862f9d022aefa1dc1faf7dc246728fa04121ce628e06b27c5e967bf7745bd837530f519f206f584d91adb5e3faee47b675b3a8ee15
SSDEEP 3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xio:p3lOYoaja8xzx/0wsxzSi
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

upx

Patched UPX-packed file 1 IoCs

Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

resource	yara_rule
sample	patched_upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

SHA256 3569d3964b00a4bbb7a2984254a82bb976859cfd761f4ee6207558c51ccc1495
MD5 a0803b97b1c1f9663e30510e91d12c10
SHA1 cfc366f4e47fa578cbfc7f9589991afc58838071
SHA512 19a46c20b27bf7f9cf3c90862f9d022aefa1dc1faf7dc246728fa04121ce628e06b27c5e967bf7745bd837530f519f206f584d91adb5e3faee47b675b3a8ee15
SSDEEP 3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xio:p3lOYoaja8xzx/0wsxzSi
MD5 SHA1 SHA512 SSDEEP

linux mipsbe

Patched UPX-packed file

Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.
UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx