fcc8bc33ae694dcbb1495a5cb59df0a55353f5aa2e370c6404f25899d2d69848 | Triage™

Login
Reports

Overview

overview

7

Static

static

1

爱玩瓦1....ko.sh

ubuntu-18.04-amd64

7

爱玩瓦1....ko.sh

debian-9-armhf

7

爱玩瓦1....ko.sh

debian-9-mips

爱玩瓦1....ko.sh

debian-9-mipsel

爱玩瓦1....ko.sh

ubuntu-18.04-amd64

7

爱玩瓦1....ko.sh

debian-9-armhf

7

爱玩瓦1....ko.sh

debian-9-mips

爱玩瓦1....ko.sh

debian-9-mipsel

爱玩瓦1....ko.sh

ubuntu-18.04-amd64

7

爱玩瓦1....ko.sh

debian-9-armhf

7

爱玩瓦1....ko.sh

debian-9-mips

爱玩瓦1....ko.sh

debian-9-mipsel

爱玩瓦1....ko.sh

ubuntu-18.04-amd64

7

爱玩瓦1....ko.sh

debian-9-armhf

7

爱玩瓦1....ko.sh

debian-9-mips

爱玩瓦1....ko.sh

debian-9-mipsel

爱玩瓦1....ko.sh

ubuntu-18.04-amd64

7

爱玩瓦1....ko.sh

debian-9-armhf

7

爱玩瓦1....ko.sh

debian-9-mips

爱玩瓦1....ko.sh

debian-9-mipsel

爱玩瓦1....ko.sh

ubuntu-18.04-amd64

7

爱玩瓦1....ko.sh

debian-9-armhf

7

爱玩瓦1....ko.sh

debian-9-mips

爱玩瓦1....ko.sh

debian-9-mipsel

爱玩瓦1....ko.sh

ubuntu-18.04-amd64

7

爱玩瓦1....ko.sh

debian-9-armhf

7

爱玩瓦1....ko.sh

debian-9-mips

爱玩瓦1....ko.sh

debian-9-mipsel

爱玩瓦1...道.sh

ubuntu-18.04-amd64

爱玩瓦1...道.sh

debian-9-armhf

爱玩瓦1...道.sh

debian-9-mips

爱玩瓦1...道.sh

debian-9-mipsel

Sharing

Copy URL Twitter E-mail

General

Target
fcc8bc33ae694dcbb1495a5cb59df0a55353f5aa2e370c6404f25899d2d69848
Size 4.4MB
Sample260731-tnvmxsdb95
SHA256 fcc8bc33ae694dcbb1495a5cb59df0a55353f5aa2e370c6404f25899d2d69848
MD5 5f734a653a7df5c54adea623b8cd9270
SHA1 d62ffba490f48e1c0fc7ef7498bd935ed4ec9d66
SHA512 3443756370320176ed91ff47f3e7f512275a932e8ba055e9a0a54fd999fe28d035415e32c5cfe7c1c5a8c65e4494ce7cb9b81d09020afccba8b96283237a6e65
SSDEEP 98304:nvtsS0HQa92O7tBm6WfEkYbkrK/3VH8NpbCU77l2IIrtOrlbJA88boL:vP0HH2uHm3frYGK/3VcCyFIJ0laboL
TLSH
T10C263335E7810C06E78F50BF71642C91DF02C9FE2B2A6A9B89E2679B35C2750B91D47C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery linux rootkit

Static task

static1

Behavioral task

behavioral1

Sample

爱玩瓦11.0/Paradise驱动6/5.10-Pixel.ko.sh

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

4 signatures

150 seconds

defense_evasion discovery rootkit

Behavioral task

behavioral2

Sample

爱玩瓦11.0/Paradise驱动6/5.10-Pixel.ko.sh

Resource

debian9-armhf-20260513-en

debian-9-armhf

4 signatures

150 seconds

defense_evasion discovery rootkit

Behavioral task

behavioral3

Sample

爱玩瓦11.0/Paradise驱动6/5.10-Pixel.ko.sh

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

爱玩瓦11.0/Paradise驱动6/5.10-Pixel.ko.sh

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

爱玩瓦11.0/Paradise驱动6/5.10.ko.sh

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

4 signatures

150 seconds

defense_evasion discovery rootkit

Behavioral task

behavioral6

Sample

爱玩瓦11.0/Paradise驱动6/5.10.ko.sh

Resource

debian9-armhf-20260513-en

debian-9-armhf

4 signatures

150 seconds

defense_evasion discovery rootkit

Behavioral task

behavioral7

Sample

爱玩瓦11.0/Paradise驱动6/5.10.ko.sh

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

爱玩瓦11.0/Paradise驱动6/5.10.ko.sh

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

爱玩瓦11.0/Paradise驱动6/5.15-Pixel.ko.sh

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

5 signatures

150 seconds

defense_evasion discovery rootkit

Behavioral task

behavioral10

Sample

爱玩瓦11.0/Paradise驱动6/5.15-Pixel.ko.sh

Resource

debian9-armhf-20260513-en

debian-9-armhf

4 signatures

150 seconds

defense_evasion discovery rootkit

Behavioral task

behavioral11

Sample

爱玩瓦11.0/Paradise驱动6/5.15-Pixel.ko.sh

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

爱玩瓦11.0/Paradise驱动6/5.15-Pixel.ko.sh

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

爱玩瓦11.0/Paradise驱动6/5.15.ko.sh

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

4 signatures

150 seconds

defense_evasion discovery rootkit

Behavioral task

behavioral14

Sample

爱玩瓦11.0/Paradise驱动6/5.15.ko.sh

Resource

debian9-armhf-20260513-en

debian-9-armhf

4 signatures

150 seconds

defense_evasion discovery rootkit

Behavioral task

behavioral15

Sample

爱玩瓦11.0/Paradise驱动6/5.15.ko.sh

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

爱玩瓦11.0/Paradise驱动6/5.15.ko.sh

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

爱玩瓦11.0/Paradise驱动6/6.1.ko.sh

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

4 signatures

150 seconds

defense_evasion discovery rootkit

Behavioral task

behavioral18

Sample

爱玩瓦11.0/Paradise驱动6/6.1.ko.sh

Resource

debian9-armhf-20260513-en

debian-9-armhf

4 signatures

150 seconds

defense_evasion discovery rootkit

Behavioral task

behavioral19

Sample

爱玩瓦11.0/Paradise驱动6/6.1.ko.sh

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

爱玩瓦11.0/Paradise驱动6/6.1.ko.sh

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

爱玩瓦11.0/Paradise驱动6/6.12.ko.sh

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

4 signatures

150 seconds

defense_evasion discovery rootkit

Behavioral task

behavioral22

Sample

爱玩瓦11.0/Paradise驱动6/6.12.ko.sh

Resource

debian9-armhf-20260513-en

debian-9-armhf

4 signatures

150 seconds

defense_evasion discovery rootkit

Behavioral task

behavioral23

Sample

爱玩瓦11.0/Paradise驱动6/6.12.ko.sh

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

爱玩瓦11.0/Paradise驱动6/6.12.ko.sh

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

爱玩瓦11.0/Paradise驱动6/6.6.ko.sh

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

4 signatures

150 seconds

defense_evasion discovery rootkit

Behavioral task

behavioral26

Sample

爱玩瓦11.0/Paradise驱动6/6.6.ko.sh

Resource

debian9-armhf-20260513-en

debian-9-armhf

4 signatures

150 seconds

defense_evasion discovery rootkit

Behavioral task

behavioral27

Sample

爱玩瓦11.0/Paradise驱动6/6.6.ko.sh

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

爱玩瓦11.0/Paradise驱动6/6.6.ko.sh

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

爱玩瓦11.0/Paradise驱动6/执行我加入频道.sh

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

爱玩瓦11.0/Paradise驱动6/执行我加入频道.sh

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

爱玩瓦11.0/Paradise驱动6/执行我加入频道.sh

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

爱玩瓦11.0/Paradise驱动6/执行我加入频道.sh

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Malware Config

Targets

- Target
  爱玩瓦11.0/Paradise驱动6/5.10-Pixel.ko.sh
- Size 143KB
- SHA256 8b5814e9083f01673a60e635832ecd1fa66439a852cdaad48e2c414d91dbc437
- MD5 7ae15109a05396781a4c2df41bb98a44
- SHA1 e6b3019cbfef9c3231884a327745e36d7d66bdbc
- SHA512 053cea8e8e91550a319073c84f0aa94a21b169938820e076dcd2427705de960a75382315babf7c3cafdfe5cfac33153f4177908aa5b8f9cee6d8db9b3bc8bc0a
- SSDEEP 1536:T6Ywy0vxtl7JvLBGcawcDM7C5U9uCDT4zHDPkN4f6PKYdbO0xXexO3rM9:CyELjC5g8SpbexR
- TLSH
  T107E300B717937FFE7F690D8580146B648C6C6E7B8334A0817F880B5B45FA9066D278B8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery rootkit
- Loads a kernel module
  Loads a Linux kernel module, potentially to achieve persistence
  rootkit
behavioral1 behavioral2 behavioral3 behavioral4
- Target
  爱玩瓦11.0/Paradise驱动6/5.10.ko.sh
- Size 153KB
- SHA256 09cc2119967db1d879bd923938c802e1158019f6536e68a39d57ddf8c6013208
- MD5 9793d06e5bae8b25069061247ce81725
- SHA1 1ba4ce9c9f5d631d1023b732f4caedc7fae75c58
- SHA512 c493af4772ac7f2bee61cd7eba1c7fc50b7ffea3a53f7129df07a7a1af65b13afd06e1dbc725d912e50e51d4b1e3f2bbdf6c4fd7c19e6b1a6a8444d43f2643d7
- SSDEEP 1536:++0UrmOGH8aW79+LdAZCfQSvGtiAs5TfFgVYjs7T1QRwVSQWKZAlOXI03q/eNCrr:++0o7ygPmX
- TLSH
  T17BF39B7B1396FEDF7B650D88C04436645CE93E5B832C9088BECD099BA9EE504DD39878
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery rootkit
- Loads a kernel module
  Loads a Linux kernel module, potentially to achieve persistence
  rootkit
behavioral5 behavioral6 behavioral7 behavioral8
- Target
  爱玩瓦11.0/Paradise驱动6/5.15-Pixel.ko.sh
- Size 243KB
- SHA256 1bba958e1e55a6f9edb35e5bde1ab458af80e1c345753cb04d1a375d527f651e
- MD5 459ebef8a76437fb25c120e733e87c09
- SHA1 508f297ff58192279732b9277ea8d6960d2929c0
- SHA512 ff7970b40d99ffe143b7171e39c7006b3787b85003495773522d125b8e89b740cf40a5f36c3ded453476b020e52ab9aeed5f6c20de65b556eb2ce8ec0090d7df
- SSDEEP 1536:xxyBTUVb0K6I073e+oNkxj+0XNPNR3FN2II94PpHa7AJhVbwZ49mTEg5kQTIeeK8:eBqv6J7skxDX9NR3mYaUhe8GvboVXH
- TLSH
  T12F34CB370296FADB7F275D88D80536664CAC7A5B532CC048FD891FA72AFE910DC158B8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery rootkit
- Loads a kernel module
  Loads a Linux kernel module, potentially to achieve persistence
  rootkit
behavioral10 behavioral11 behavioral12 behavioral9
- Target
  爱玩瓦11.0/Paradise驱动6/5.15.ko.sh
- Size 163KB
- SHA256 74cf2ba2743521603e5aca90762f65fe8f7e02d1cd574bfe1b189c12a76c4486
- MD5 a3aeafca3b9c268c0c03306fdf60ca0f
- SHA1 257ed4d5d72cae5cc96e034b0e88af4cf40579a6
- SHA512 a12c5f24d48dd8c965bc4559e5c761cb788c4eec6331ac6c95a0140116dd794a7ce7258b61f3761c8fcb2a68b3f966239bcaea124d72fb491dcc6bff7010fbdd
- SSDEEP 1536:bAlo3JVQvOK/McvOuEZ3zkmmDSLE/a+FXyGjdpgfRoXsKP8pjkEIClEDCCucxg1S:b2oHsMcg+SL2FFXNO8F8lUu0
- TLSH
  T1D2F31FB306927FEE5FA90D85C0442F648C6C6E3B8328D0647F8A495B45FB74D6D278B8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery rootkit
- Loads a kernel module
  Loads a Linux kernel module, potentially to achieve persistence
  rootkit
behavioral13 behavioral14 behavioral15 behavioral16
- Target
  爱玩瓦11.0/Paradise驱动6/6.1.ko.sh
- Size 199KB
- SHA256 432b5eec36215072c28ae0600f07b934fd0b41669da5b934a3b1945a44287084
- MD5 0a2898da3b9d589d1e7fd0e9f736a825
- SHA1 018077e2823d6d7892cf5c661c0af60c431601ea
- SHA512 e4f0658178182e268b02a149b1aa441831ad280e727819d6860b9bab7ee4b4f3bf513cbc8eadcefe6fe7c275ba634b4af13736491ae1baee10e4a94cd61c51f1
- SSDEEP 1536:WWwbYfFwCuNZrUrCYDKKaXKgL7Zh6fa9ai+i+VUny1C6LTzcApQu8cWC+fNz3T13:WWwbOwCuXwr5gPZQf9tyuhpAKKUhm
- TLSH
  T1961410B343A7BFAE5F7F0D44C4043AA44C6D7E679239C0D47F89096A68E9245AD348BC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery rootkit
- Loads a kernel module
  Loads a Linux kernel module, potentially to achieve persistence
  rootkit
behavioral17 behavioral18 behavioral19 behavioral20
- Target
  爱玩瓦11.0/Paradise驱动6/6.12.ko.sh
- Size 144KB
- SHA256 54e3e6465625995238fa62739bf7feac459bf9a37085e72592f0ed1868f6bb89
- MD5 5fd31136c23fe9e3b6254b46f06135cf
- SHA1 c46c6fba7ad0de36c918580e5f7df2b383e4f4fd
- SHA512 2b30ffd2ba60563b4966f22f4b13dcff4c23a6a06b3a3905dbe365b5728d1305f4e91bc5d9bcfd7ebfee76b14f8b7927cd22e8ad92664a03ee3a12a1ea0d3d4c
- SSDEEP 1536:Y683CqXTwdr6a63e/Q66yecPsUh3Q81IuMaLs+Kwb7Ff6ph0Z/3RWrM9:QS49S6DcPsUh3Fzsst
- TLSH
  T1CFE3EE7B1687FFEA6B670D8880043A649CEC7E5B432C8448FECD09A764DE515DD398B8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery rootkit
- Loads a kernel module
  Loads a Linux kernel module, potentially to achieve persistence
  rootkit
behavioral21 behavioral22 behavioral23 behavioral24
- Target
  爱玩瓦11.0/Paradise驱动6/6.6.ko.sh
- Size 128KB
- SHA256 35d1d418dbb17f8c8803da8f44036b4c5d6dc2ede58c905943a3ca163a5cad1e
- MD5 535732c54c314d376fb84d62a6ac97a2
- SHA1 71e6776ff4b9bb445bbb60ccb9b7d1c53d9215e9
- SHA512 e88c66588b0d854f23bd49a4a8a65ec4c2bc10b4cf85b68f42f47d584d9a8a0e34fdd6c0501d50e8c506e981d5d0b31e7dec354184b590045e9af64a6cdaee30
- SSDEEP 1536:XUkDKChOYtZpnB/TcULPtRJLBq0FWpGMH5MCa9M5T3Ymjk7h91oWdQmtG9Cp/aJo:XUkDKh0pnB/TdbMG5
- TLSH
  T193D31D7B1286FEDE2B660C88840437245CAC3E6B572CD088FF8D0E5B68EE514DD5997E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery rootkit
- Loads a kernel module
  Loads a Linux kernel module, potentially to achieve persistence
  rootkit
behavioral25 behavioral26 behavioral27 behavioral28
- Target
  爱玩瓦11.0/Paradise驱动6/执行我加入频道.sh
- Size 872B
- SHA256 eaaecb34ddd8eab559a54cc55417f65d8ab10f7190c79f17397231f3fc5582b4
- MD5 cedac9c4116e1d92082d5501c97a67fc
- SHA1 6fdad0350b7cb49eca304549a41484a0d3c10edd
- SHA512 9aa2c23fb4c236b9f24da02e2306ed6805467a12173e1a3eead1f5dd05b190a8a72e1cb258a3c49bdd70253ee315d16f9b6eae364bfb9621ac04cc1630b518b6
- TLSH
  T1A511000AFEE491745A4ACFB4414A75973930C00F7E022E7CA34144F76D4EA9178FC6D0
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral29 behavioral30 behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Deobfuscate/Decode Files or Information

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoveryrootkit

behavioral2

defense_evasiondiscoveryrootkit

behavioral3

behavioral4

behavioral5

defense_evasiondiscoveryrootkit

behavioral6

defense_evasiondiscoveryrootkit

behavioral7

behavioral8

behavioral9

defense_evasiondiscoveryrootkit

behavioral10

defense_evasiondiscoveryrootkit

behavioral11

behavioral12

behavioral13

defense_evasiondiscoveryrootkit

behavioral14

defense_evasiondiscoveryrootkit

behavioral15

behavioral16

behavioral17

defense_evasiondiscoveryrootkit

behavioral18

defense_evasiondiscoveryrootkit

behavioral19

behavioral20

behavioral21

defense_evasiondiscoveryrootkit

behavioral22

defense_evasiondiscoveryrootkit

behavioral23

behavioral24

behavioral25

defense_evasiondiscoveryrootkit

behavioral26

defense_evasiondiscoveryrootkit

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy