1ec503120421a0a1a5149419f80fdee18ba700f0aa45f57ca55e006a31cb7c5b

Sharing

Copy URL Twitter E-mail

General

Target
xtables.zip
Size 1.6MB
Sample260805-pf7kasfm5z
SHA256 1ec503120421a0a1a5149419f80fdee18ba700f0aa45f57ca55e006a31cb7c5b
MD5 a5a1341fd6fc55fa05758b2dccfa217a
SHA1 ed66f511c65fb0b753b10a695188f0bcf5065100
SHA512 828856d6c46654010b4c37b97e38956963d93c2f707440ba3e00f15f131eec4e5847157cda22591d1fd9c4c0aa0a5de842055f0e9346a6bb613c127cd3613634
SSDEEP 6144:rPQIHUGZjG8szVcMB+Iwab4Vpruz+ygy9L/DxBjb+WRWrVlyXJSwMDxejRFLRzJM:pa+vyChynBjiXqYedFLRzJM
TLSH
T12375D95EB7128A7EC47CD33484ABC7313671E488667107273F48A6792E833984F7AD96
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery linux

Malware Config

Targets

- Target
  libarpt_mangle.so
- Size 11KB
- SHA256 8e428402b56362d25f1fc1efa69ccab973ad1f58c40ba73f7dd4a7ad54199ba2
- MD5 2d73db8fc0dd67916624d4e0172d8d6c
- SHA1 5cfd60c86a51661545ca890e59c4548e7dfb7260
- SHA512 48ceb556ddc3409a79f49cef35a92de5d8cf5a76ee996a34eb9128dbf520c7377481be593b630755eb3ac216dde95787289080b48fbb4211fca96651d4182bf3
- SSDEEP 192:RL8u43E+vmXJfHS6CqyaiMA468MCcH2As52Hgd:X+vmXJfHS6Cqyai/cM5f
- TLSH
  T1DC42D84EB7119B7DCC28D3348667C73562B5E864AA7002273F24EF351DC37D88A69A93
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  libebt_802_3.so
- Size 11KB
- SHA256 ddc28b46dfb7a49ceac86afb480647c316b4574ad3c20a8979e87a2692bc2199
- MD5 1de9f3535d4e3df2e81e11a9356e2d55
- SHA1 6d0f6b31668a4d5a362f1b3ddd9a409bf5198161
- SHA512 911e7191de49c2432bb1b913501c761380deb7fcef812dea24a5fb863c4d86ef6a4561344040461cd070f07f24f02d7a18ae72001c370f6c0f6da44774b0dfa2
- SSDEEP 192:RH8kfEXivzcckMU8yY6C5wDiolrJtRXkpDH:CXivzcckMU8eC5wBdfXkp
- TLSH
  T1EF42D78AB3128F7EC86CD338896BC63067F5D098073106173B14A6782E437984F76DAB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  libebt_among.so
- Size 11KB
- SHA256 235f15f2c65e2407b0f7224b4d8955f387290b54bcc8b8f75cb876a6aa97b6be
- MD5 34e5e61f8cf96bbd69514b36fc1ba2ad
- SHA1 b67309d11077a658511dd122b99b5a2a7b715c18
- SHA512 dfd96c624b9c2d296cc83e6784a0a772e3632f7e3642b84e4eb39297831b653e7c9497b563ab377474e099ed3cbe92fbd7e7422661ef2c808611f9bb41062ff1
- SSDEEP 192:RBy8hH45fEovUWsH4T7DrzbjLT7Drzb2+muWeGOj2uaM9J2kkNk+U6mWNMz0eIes:fnovUWDT7DrzbjLT7Drzb2+muWeGOjiG
- TLSH
  T18842D88EF3024F7DC8DCE334896BE3222BB1E4997671061B3A0855763D533688D3E966
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  libebt_arp.so
- Size 15KB
- SHA256 0a518c0bb34aa45fc77d68a877abedf389d5fb3509cd97c1d58b210058a9cc35
- MD5 f76909cec8ac1dd1dc95d538e7753d0c
- SHA1 365158c4f809a7b7c7e04f9b0e66a5ae001642dc
- SHA512 3ae5e50a27cc098c505a339a079b067b81249e700b57666455f210d2f9e2bfa24582a1e0ec65d923aede50065b60a07c85f1f4dbcf602b064d153a3123e8f888
- SSDEEP 384:PfXyRZLHotz7DLTbjrz7DLTbjr8/CSX7Z5DK5l/:PfXk6z7DLTbjrz7DLTbjrWLK5l/
- TLSH
  T1727209CFB3310A3EC9A8933485DBC7B16671E489A272032F3E4895313E577790F6A695
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  libebt_arpreply.so
- Size 11KB
- SHA256 d8efaf58a80a0b0fd60f47be93b0ea440f7d791002320e8282a301e67f16646b
- MD5 fc467e570ebb1f20606f4b6d03a32d96
- SHA1 14c04ad0df32f63d50217b5138e178c427ae231a
- SHA512 3a7005eb9d5c414b09d3585d94681ef44d35e57597b3e13594a5c6d3662820bf206d973a273e7842ee3e0cf995531e568707e49a2f36182d4b161d0209c9e9e3
- SSDEEP 96:R9BWBdvfE85xbgYWYckMU8EM2iFwcv17rxnivBm/LwYFK+VgNq+x97MQHgxcSk82:R98D3E2gockMU8EM1ZFmnPg
- TLSH
  T13242956FB7529B7DC45CD73489A7CB3073B084C95AA202233A0C96782F837489BB6C56
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  libebt_dnat.so
- Size 11KB
- SHA256 8242d4359daa6fe10bcb0627a94e2b6a4b24025f22be9818be5a03ed7959c1ce
- MD5 a614e37c4aea55e8bab26b8522580e27
- SHA1 db100255af706989ab2cc0167b0ed5ee37e7517f
- SHA512 0b6320bade5fd338c11a1f33ac27504b98f2d28e06296fc088a9523353c395bb5efc9b394178bba2a5501fc1d1f0e23e1a6907d645c1b6e3e5066ea0e216eb76
- SSDEEP 192:ROR8/53EfRffHP3/nvX7gqdtr3zEJXb7B3s:knfRffHP3/nvX0qdBA
- TLSH
  T16442B74FB712DB7DC46CE335C56BCB2523B49095222203233F28DA792D8374C9B6D9A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  libebt_ip.so
- Size 19KB
- SHA256 b4d0d9c9c41a5e20f931bf3d4b31a3b3b2c9c7555be69e880f3c03a8c722b3d5
- MD5 eedeb1aada2f8b6f883996bd253ceb9d
- SHA1 e3f8c8cb35883269da2d7380c4aabf14026b2974
- SHA512 5870f90a8db0c11bf8a7a706e62f7e6287209940fd80787937d688573a1aa8aa7a136a22dc1f87f26d812b2fc9bd46ea791bd6e57cc5affc82ccde6054418a19
- SSDEEP 384:1QcYS7xFxe6SKiayqC1NFdVtl91NFdV7bwY8GL1hm9Wb4jnlrSDdMLZ7+mVbd+4:j86SKiayqC1NFdVtl91NFdVvwY8GLaWi
- TLSH
  T19392A78AF252997EC5A4A334C85BD2327731F848B2721B2B3914D6762D933644F1EDE8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7
- Target
  libebt_ip6.so
- Size 19KB
- SHA256 527ba027128c0eb09653deefdbae9cd16880ec007d6ffb41cd12341128017964
- MD5 53fce429423a478ba469f99ba38b2797
- SHA1 db94ba4b26a0bf5872bdbc9dcddd38ca06406ce0
- SHA512 39ed6e11d879d009ed22bcc15fccacf9e2d0fcda29d8a791d9d1a34a9a407f2d83f2cbdb3c8b68bd528d1c5f9ea7c6b7622b1d947e9e4f282a76a0ff44586502
- SSDEEP 384:46hTUiq6n/3PHfXvn/3PHfXvn/6SKiN9XAI/+H8bHHkAvTLdqWiIW+X9h4ddV:tx1n/3PHfXvn/3PHfXvn/6SKiN9Xc8LQ
- TLSH
  T14F92F815F252897DC5E4E3348977C3766A61F888E1721F3B2D00DA7B2C972A40F2EDA5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral8
- Target
  libebt_log.so
- Size 11KB
- SHA256 9676f5245d1e79ef4300cb8f44910482f860f624646e5c4ba079256e038a00a6
- MD5 3943f08f4a24cef0f7d2664d3cc869b3
- SHA1 8a56fb0793d01ba3cd7064c28601500450368261
- SHA512 9ebf38930465682cab68cf88147260614493df11cfb28729dfcf3cb348579a7f33137398e5fbd90ae78abc77af4dff1b7c05bf3be8930cc0a1602c34283d5b99
- SSDEEP 192:RP8y3Et2UeOxyaiKN19ltVLQMqjxt3txYg3mI:6wUeOxyaiKN19ltVM933DYx
- TLSH
  T10F42A89BB3568B3AC078D338C5AB913432B5E859662113333A4CEA392E837548D6DD97
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  libebt_mark.so
- Size 11KB
- SHA256 384c07c84f5c6663b710f2546eb08788545ce5b1c6d299379fd61a7c7e22fb9a
- MD5 801cafbfecdcd5655fde0c448831fefa
- SHA1 d796e9a4e7b1d76599466e750d86d57a463fd7c6
- SHA512 76e7aa3ba7dd7b57c0e9049c041610e504689a34f5c04f66165a37826671849118dc36347617116282566a959d4c3518a421a9cb501a9808ab9d24440084d271
- SSDEEP 192:RwO8F3EnuN6P3/nvXfrpg7I5peJP70AE5Pb14H4nLX51:OcnuUP3/nvXftgMpOMPb14H4nD5
- TLSH
  T19C42C54FBBA1CB3DC4BCE3389067DE316AB6AD54117103272E0499782D83788AE7B556
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  libebt_mark_m.so
- Size 11KB
- SHA256 3e6aaf1b6ed8586e73cffeaddee0f52f6e98b66aee82dea6bab837278226548b
- MD5 4d2bd0f7c59fb30741504c350e1bca89
- SHA1 d7c5832da9931bd01bd180c11b32687653e171da
- SHA512 282e87f9d9dcde404d8ad95275f5330878a6d3dfb2541fd5c3adb58f3a039da7d8f173f84278c10bf57f0a3cc816d97b461179adcab49bfb7c533e6aad012d88
- SSDEEP 96:R3BWBQfE8toDWYMU8Es0E2VbgZXoaoN6yXimLJYxVx+x96s+HE8m:R382fEN9MU8Es0rVrjgyXD9wISs+
- TLSH
  T15242B75AB3520B7DC4BCA338866B8A3027B4E4D8557207273B48A6792E833945EB58D6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  libebt_nflog.so
- Size 11KB
- SHA256 ef113beebef5f2ef9175678449275a26022edadd7469a55c48a01ae50a09203b
- MD5 6a1a8408daed749c6afc162cbdcadee5
- SHA1 6dda60b37c20b4f15d24b9c7dea6840fb2cf5796
- SHA512 1763890d7024cbf6fb077b827b9e6d3d84ea37f4815edc441596d1ec14d977ceebb693079dee516c3d3e9993c798d23f88abc6433704cf9e2ee50fea633f2d72
- SSDEEP 192:Rf58X3EnPRHP3/nvXfHKlYsSwU1J0Ua03xDKuN:DnPRHP3/nvXfHWMiUaE
- TLSH
  T15A42A58E73155B2DC4ACE3349497C76027BAD844B27116337B1CF13A2E833DC5A7AA86
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  libebt_pkttype.so
- Size 11KB
- SHA256 d7efa4487ea2a81d7e67c19479889ededfceede8aca8b83cefec3ded31e64043
- MD5 6aa260e3a65ccd6f974ebdd16ea58246
- SHA1 44851968ef2e7a4d66a0c85ba7753d248df96154
- SHA512 e7cf6aec1ff84cc4ef12fa9c994824d40f25d7412aee3ec4dac822bb4e83f9d4bea0de47bb3f4c5fd401308688dc96f01a4944ca927465459e099905136d552a
- SSDEEP 192:Rj8cNfE53W0XfHP3/nKaw+BWkH5lUSi2eg:7653W0XfHP3/nA+Bu
- TLSH
  T11D42986FFB12873EDC68E3348977C63067B690996A3102373B0095791C9739C4B75E9A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  libebt_redirect.so
- Size 11KB
- SHA256 1a3ab6e93b86d6bec505ff151f374866f632b7f0d1f5e690a80049c2aaf20663
- MD5 cb2137d21e3f94649e7ae090f6f89b3d
- SHA1 0bc8f7bae0154dd77db9a499f11561efc75f7ab0
- SHA512 b7fa902285cbce07f1a9799b4cc4f91c687bf907781529a5ad786453142c0746fcdcd693a28033711056abf592baa89b481c1b543b6d0b39704a2c2ef2b7fd8a
- SSDEEP 96:RoBWBvDvfE8bLykzLWhs0ckM7QLg3k4/CcTItm1czfsjNz1AYPqA+x988nIkku/:Ro8p3Efkzss0ckM790T46gAYPu
- TLSH
  T19142720FBB529B3ED468E338809BC63067B69096563202373F44A6793D8374C8A79997
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  libebt_snat.so
- Size 11KB
- SHA256 94cf077fa07a9798cca189c1e3e63b089618518b20ebd0a065f46e02c339ab8b
- MD5 8da2ac73d153c235537fb1bf3e7493d8
- SHA1 6625aff73a91073331173223ab84d845680c3f88
- SHA512 49f373169a8fb126201f84d280e61091be9ec2d87c4fe87913e157cad5d62b4073ef06ea4b9429abd1a025941c133103eb69dff409c8c5cc00ceb72820c30f49
- SSDEEP 192:Rb803EJRHnP3/nvXfHe/Z/EOkOwf04uWv:GJRHP3/nvXfH8Bw
- TLSH
  T14D42864FB721877DC4ACD33481ABC73166F99045526203133F0CB6792D9379CAA7D9A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  libebt_stp.so
- Size 15KB
- SHA256 65292d0100c9e843dab40365562fbd7cdc468e4a721b16051e477975dd0d359e
- MD5 846a81c6a9e85c6a0f67b2577024d513
- SHA1 8d2218f4fda895e3c76f544367d14348f0b544b9
- SHA512 b8a20ddd84c0a2825bffdef2764b6cbb9e0f26af95a9f3b61d80becc30a26237ac7931aeae893e746baa983fbabe33a8d57747c8fa0cd23430f1219ebbb7a517
- SSDEEP 384:R3hT1NVdlt19FNVgIwqD34jL/NVN9sPfptW0:R3hpNVdlt19FNVgIwqD34jLFpsPx
- TLSH
  T1BA72D79E7202467BC09A93349DB7D6B21A76E450F63103A73ECCD9B52F83BE40F2A554
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  libebt_vlan.so
- Size 11KB
- SHA256 8a5a14dd5a100ea0d5fea7bc0d6ba07c8305e160647a8b380ad3ee72798b7827
- MD5 2000034ae89c5b543a61623ca90b5b12
- SHA1 9a243c8631994f631e908920fb8af46a36aa7ea3
- SHA512 4ef4d5df57fe647f77d6b933f7098840af8ffe5e0894f9f51837ce85e0f04f5f3f6f05e992f666311f0dccb4b2487e140266f6c286bf8ed40638f749da50b446
- SSDEEP 192:R58FafEYuFs0ckMU8uHk6uQ9z3ykWFIvUL:uYuFs0ckMU82k6ztbbU
- TLSH
  T1EE42966BB7519B3CC468D335C59BCB7022FD94A4562603332F18D4AD2F83398AAB9953
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  libip6t_DNAT.so
- Size 16KB
- SHA256 e9921bf25bcad0283df7db95b217e111e6f616b3c716b6c730d8b9d0c514c1a1
- MD5 2608499fc3951bed62d375884aa16a60
- SHA1 451ba2eba5d0836e8e8daffa4dfa0df902a0423d
- SHA512 0786ed1b6ae4741069f6077b2da9b23c0389890869e26d85f663c9712acc1fd9a95ae72ae9aeae103ebbeaaedf3a1f1aecd057b5a6c6f8493c0bbece6f7a9c85
- SSDEEP 192:R9D8slYEvEekdlt19FNVdlt19NzOWKE564tS2GFbJj04jFc53b6fW3g:zxvEekdlt19FNVdlt19zU4Q2wzJuGw
- TLSH
  T13A72C89BB712587FC1A9A339C56FC33036B1B088A27207072B54D7793DD77284B2B5A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral18
- Target
  libip6t_DNPT.so
- Size 11KB
- SHA256 a5ea6b39ab391798f4ec4d0908774e0b7d96d112707d235cbb70c4acd2356b9a
- MD5 f72dd174644ba3293c7c05d65169be49
- SHA1 2db5043bb4c8ca09715a71082947415ae843f65e
- SHA512 9c5618661381200bfc73927526fe41b400398f96cb1bccb79c625f429adc1f1492092b0c3d4605d7e77710b7b449742806393fbe157f6057d85c0966c192a944
- SSDEEP 96:RABWB8vfE8L4QHaWhpxZhJ8j3o04Dm5SsgY28Fd+x9boUUuZmk:RA8m3EwHvpxZhJ8boqUs72nC
- TLSH
  T1D142B66FB7519B3EC82CE33484EBCA7076B5D840267143232B5466752D8379C8FA38A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19
- Target
  libip6t_HL.so
- Size 11KB
- SHA256 92dc634de59a18f47b3d585b249e47a22256aef58dbd123981743bcc4f2f06f3
- MD5 c7258a32d023f6bbbffeaf2f9e0298dd
- SHA1 0aa18d96e842f4fa0fa3ddc721d9aafc8d93505f
- SHA512 8014e139fe567042b6407528d7174a3c07e7f4b670e395f5109c727ee2e5519328d2aeb1c7bf20428c79b7b26f2d19ab7d5fb9213aad669b38848576891e2764
- SSDEEP 96:RV4BWB/vfE8MTP1nPiW1pxZhkBXbjWcLm/jlQjHN/+x9dokUuZR:RV48p3ETnPTpxZhkBPkrSjY
- TLSH
  T13D42741BBB12A73DC82CD33989BBC37072B0D458266107132E4096B52DC72D8DF7AD99
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral20
- Target
  libip6t_LOG.so
- Size 11KB
- SHA256 69fbe5703d6837b3238f40a9bc2101b649f5be5348e4b5fc750aa221966b7f6f
- MD5 b308addf4c93988806ff00096b882a0c
- SHA1 25f3e138d7ffb945ee508bfc70f83a2216caf7ba
- SHA512 21ed262d1fc4a3935ea440e2a30fd724ba8ab1a13bf9f911768931da12d96907eea22831db53524231913e81994568a9a31ccf0cf7d640f62d28397f863e543c
- SSDEEP 192:R4873E1aFnCqyaiKSTx8NeCdfUAU+IKVP:u1aFnCqyaiKSEU9+7
- TLSH
  T15442D72DF7369A6DC7A89338506B8F713A73C84572A247332F30D6781D0B7945F2A982
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21
- Target
  libip6t_MASQUERADE.so
- Size 11KB
- SHA256 2d59cab5c48da8291f4e60170ec902ba8a8c8d06d756c44e59cc47a1be3cd4be
- MD5 370bed5fe48e3df93ce6fcf6a7b8063f
- SHA1 9159fc7ccc24b4003a2edec3afda2054f938cb64
- SHA512 2a329d36b0a45e91ae9c0c8c490b8b520b2b8c72f5e1bba4ec2c58fcc0034eb7b3165983678ab27407ed41c7e06489c02e74857c8f2cb0961d7dd76aaca2c453
- SSDEEP 192:R18CB3ELgp8EP3/nvXK+RbAXhuEkEjUZYGIn0KA:CLgp8EP3/nvXDRMgEIYGInnA
- TLSH
  T10D42B88FB711977DC8DCD334849BC6302A75E85465720B273F28B6392C837CCAEAA955
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral22
- Target
  libip6t_NETMAP.so
- Size 11KB
- SHA256 eb49ea7272fc378000ce552b5180c1b693033a50462cedb414d91736a344470b
- MD5 e79987e2d98fdd330bc7578137f29eff
- SHA1 b9a3bfcc303209e38a179b7e3737056bd87e5f15
- SHA512 f0d352ce06427e2df715ba39e5b6c8cdb29b89c37ffa930882b756615f90b213e3b825fed1d64514c928afb3105f963b0849b954f86105ce6d96ecf5ed81e111
- SSDEEP 192:RNe8uI3EeZ8HSJR5BpxqdjhiGsh+ye4G:4eZ8HSJR5Bpx60f9
- TLSH
  T1D242525FBB55AA7EC47CA33589AB863067B0D8885A7003273E04D1392DC339C5FB69D6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23
- Target
  libip6t_REDIRECT.so
- Size 11KB
- SHA256 6a29528786bf203aeae5f05225cd9cc54eb7f9c2ff26ed0001613076c74ac74c
- MD5 084e3355a368fef3c3baf2027247ee7c
- SHA1 95f3c83b7a4085b6fa9ef98ab2cec15752ef4bec
- SHA512 3e487927baf73713d33e6357f058694f36d8696f19f2a97db38605df0897317e1d04351bc53cf1807da091bdf9a802fd2382282a74bc13743777f5dcb974712f
- SSDEEP 192:R68C+3EIxK3/P3/nvXfHPqBpe6Rkh7MILzHSM+:MIxK3/P3/nvXfHPa3RLM+
- TLSH
  T1A642D79BB7129A7DC49CE731C69BC7A123B9D494113007773F1892352DE378C8A3AA51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral24
- Target
  libip6t_REJECT.so
- Size 11KB
- SHA256 6a3dcccc17fb8db854e2158ce99c26d2f2305ca5d4bb770b9ece28f144f36cf8
- MD5 d2031ff895390c84b13f48d36c35c41c
- SHA1 430412d1c7430c1f018f4e6db61f550cf1dd8144
- SHA512 fc8079af6b4ff9afdd67f5d394d41aff9a361ab3dc29bf56df7f6242bb589687fa31f8f2a39dd52d8b9df4ccde8832ee773aab129ab91db102c16ba3119cc19e
- SSDEEP 192:RQ8J3Eaxm99ltVdFN1wYC9kKkiTwaZ7tmk6sg1:waxm99ltVdFN1KX3
- TLSH
  T13742859FB321DB3EC1BCD338859BCA38A5769484526105233B1CE6781E932889A75DC3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral25
- Target
  libip6t_SNAT.so
- Size 11KB
- SHA256 5e2cf48ccb382a9840b167928bf87599789d29e959b1c5e0d660bac89a9af170
- MD5 616e218f25342a2e7a4853e9a3aec924
- SHA1 6bc435369b3f3c43288a3701629afcc3d705178a
- SHA512 027d47b8e7da0815b5a5bf397740d90bc0bedd4706274956337605dec9af6f9e1c3b6c06613da8fcecec3cbdddc10c51543e0b5dc10bb8815ed26795bb3dba6e
- SSDEEP 192:RP8Jh3E6r7FyaiKS6CqyaiKC2Jz050vUcMAMI2YLg4pwM:96r7FyaiKS6CqyaiKHJ+A/lExM
- TLSH
  T18842C75BB3514B3EC0E8E33886DBC62137B5E4442672035B2F549A393D8779C8B7A993
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral26
- Target
  libip6t_SNPT.so
- Size 11KB
- SHA256 2f235c8fbf6da861ebdb2cee83a14cd1a6bb04fa35e06172de1f957b8a0769a3
- MD5 eca4504b203a9a1aa626c5c175a25844
- SHA1 8cb9a5e65a078c51c414df8372424c674a80c1b1
- SHA512 9b19a8acd524bbc0bdcf3bf3287d92b0bebc4e3179b8a6427051c13d1d1ebdb451a79d079183187424388339dfda59feb9cf88ca3b7c1005712a987c6afdebdf
- SSDEEP 96:R+BWBJvfE8L4jHaWhpxZhJ8j3oB4Dm5Asgpwv8bTmu4U+x9boUUuZmk:R+8X3EDHvpxZhJ8boRasaw84rC
- TLSH
  T14142966FB7619B3ED86CE33484EBCA703675E850167103133A14AA792C8369C8EB3466
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral27
- Target
  libip6t_ah.so
- Size 11KB
- SHA256 02bd4b158657521bbb26f998fe17acdb04abd8831d9e1119f39e7f35be25d7f6
- MD5 c5b8b0cb7066fcb329fa9c7a82ec411d
- SHA1 0d7d97acee35c17e81a603a9dad6e67e72dd9829
- SHA512 c8ee694b825c8fa4bd135437607768fc7f5f2f25cd9a9b859c337458c0f847d01e31d9b4fa944e85cd5d4138d0d2234b4fe77baad5a38b29c12906f1375aad37
- SSDEEP 96:R6Y1BWBufE8CXynEXWhJR5BpbC5IZpyETLGeXiirRQpkmNKe9hQj++x91kUy:Rh8YfEPynnJR5Bp6I/BTyi1QXJ9Wj9
- TLSH
  T14F42A75EB352677DC86CD33894ABC73167B8D094256207233F08A9782F93258DAB3965
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral28
- Target
  libip6t_dst.so
- Size 11KB
- SHA256 623d0fb465477f9fcc03589140249c8c57a6695dd6915a4ab453495a55952864
- MD5 f26a315b27b0c2bb78c0942d3b8ac3b1
- SHA1 c1fe2f03dae4337e6ac72700efe637faf4f7e3d8
- SHA512 fc94789739c54603499dae1e8e07fd006639c3b487a639ec49c940193ff723c63f0c84344c5d4247e6192ddcef67d2fcccf807eb928eaf3eff9254cfec7e366d
- SSDEEP 192:R/8ffEirKS/nvXfHP3/aJN8OOFjvzxjXGpX1D4CMA:nirKS/nvXfHP3/4N8LVKV
- TLSH
  T1D542A54BF7119A7EC898D73585ABC72123B5D0D5223107233B5CF6B91F837A88FA6512
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral29
- Target
  libip6t_eui64.so
- Size 7KB
- SHA256 d766500340c238e56d14dfcae64ae79213faf452795f9c7e35c0b060938b0b02
- MD5 8b27239b701ec6a37e09827aed3ffa8e
- SHA1 e99e31d0043d7c7eca5bf1d078066c0e0e0f33e8
- SHA512 7cbd811276c0a9eb70a6ac1d7f5da7043c86e33e6a8a4d5bfe5270cb33516836701083facc340f698666d2f87f69d9d911f8325efb05f51d6283b48c53a7f5fb
- SSDEEP 96:RomBWBYfEp0W5jHWJmWnBWcVY+x97kUJ:Rom8qfEptjHW0WnBWW
- TLSH
  T1B5F1628AF7538E7AD83853388CBB9B7062F1E4892F5143130344F6752D476885BB699A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral30
- Target
  libip6t_frag.so
- Size 11KB
- SHA256 c89b295c027f774f98ea8747feb2212c72078ea21f932b12803931cf16295984
- MD5 5d4f356d5a85bf27dd715df4dce3e28e
- SHA1 f9ff72edbcc84bed5955d3d4a30a75d9f6b263d8
- SHA512 65788a5c76e2d1058b39e39f62531cf07b906761acf7d80b36cb3e3bbb4bcadf6ed403504a89c2819205424a440299c8d7206069d3c8aa13539e545cead4171c
- SSDEEP 192:Rz8bfEBvH0pxs0c6AZW5JtStasvMWfPNS2bA:LBvH0pxs0ckwtbbHAMA
- TLSH
  T16B42954FB3128B7EC868D335946B86B02AB5D898216147273F0CA7750F432E8DA73D96
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31
- Target
  libip6t_hbh.so
- Size 11KB
- SHA256 2d94c8876a2409983496bcd434b02ca15e422b18d049ab35c5efa1f8e151d184
- MD5 f5960a6b36f2f120989ffffa2d4513dc
- SHA1 cd037a02c44c41ecc37acd0e3a4305eda62e13da
- SHA512 8fac36787dbe3f00630e398f9ced6fb3103ef8c8be1fdcbab7b1eebaa1a9909cde076cca6fdce8d1fe19b1c972b6cfdffa7735188d246a6cc1df4b245facc6d1
- SSDEEP 192:ROs80fELEVVqP3/nvXfHS6Csn3gm3z1f3U6leIWj7arM6:YLEV8P3/nvXfHS6Cq3gmD1ffA7P
- TLSH
  T1AE42A55FBB129B3EC498E735C597C32137B6E0A4223007273E08E6751F83758DA7A996
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32