General

  • Target
    251216-ajnh9s1nat.bin
  • Size 571KB
  • Sample260610-t5ctfaew7r
  • SHA256 776850a1e6d6915e9bf35aa83554616129acd94e3a3f6673bd6ddaec530f4273
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Family: Minocat

    Minocat is a Linux tunneler used by Earth Lamia that includes a custom "NSS" wrapper and an embedded open-source Fast Reverse Proxy (FRP) client that handles the actual tunneling.

  • Detects Minocat 1 IoCs

File Explorer

  • 251216-ajnh9s1nat.bin
    .elf 571KB

251216-ajnh9s1nat.bin

  • SHA256 776850a1e6d6915e9bf35aa83554616129acd94e3a3f6673bd6ddaec530f4273
  • MD5 SHA1 SHA512 SSDEEP TLSH