65814d32a991bacd42d20f7f5f482f27339fe46e379889b9206a88440092d284 | Triage™

Login
Reports

Overview

overview

6

Static

static

1

debian/dvd...eaddvd

ubuntu-18.04-amd64

6

debian/dvd...eaddvd

debian-9-armhf

6

debian/dvd...eaddvd

debian-9-mips

6

debian/dvd...eaddvd

debian-9-mipsel

6

debian/dvd...itedvd

ubuntu-18.04-amd64

3

debian/dvd...itedvd

debian-9-armhf

3

debian/dvd...itedvd

debian-9-mips

3

debian/dvd...itedvd

debian-9-mipsel

3

debian/get...hot.sh

windows10-2004-x64

3

debian/get...hot.sh

windows11-ltsc_2024-x64

3

debian/pat....patch

ubuntu-18.04-amd64

1

debian/pat....patch

debian-9-armhf

1

debian/pat....patch

debian-9-mips

1

debian/pat....patch

debian-9-mipsel

1

debian/rules

ubuntu-18.04-amd64

1

debian/rules

debian-9-armhf

1

debian/rules

debian-9-mips

1

debian/rules

debian-9-mipsel

1

Sharing

Copy URL Twitter E-mail

General

Target
vdr-plugin-dvdswitch_0.2.2+git20150216-2.debian.tar.xz
Size 5KB
Sample260814-xtl5hszyhs
SHA256 65814d32a991bacd42d20f7f5f482f27339fe46e379889b9206a88440092d284
MD5 ddeffbaca73214f46d1fb7a5c5e94a86
SHA1 c9e006cc0150018aeba1d8706ff3ed7451940e01
SHA512 c587fcb1c57fe56b5187f1124907b892ebb63924b14c9b4056977cddcaa7226cc591cdf4f8ec4563e2f2903246823969f5f3326dc848bf1178b55da1dba4ae7b
SSDEEP 96:7ZKJlfMf1H0SPh7AjOdKY9GJQMLJGg/3imqT7tsE2e4hHoMWnC/GPfDAYktz:gJlUfRbh7AjSLgnd/3dqT7tslnJopCdB
TLSH
T134B19F9F3D16E79D9B5232D038538A201DAF8E8D1C033A0FC65E98D95E684B76777148
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery execution linux persistence privilege_escalation

Static task

static1

Behavioral task

behavioral1

Sample

debian/dvdswitch_readdvd

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

3 signatures

150 seconds

discovery execution persistence privilege_escalation

Behavioral task

behavioral2

Sample

debian/dvdswitch_readdvd

Resource

debian9-armhf-20260513-en

debian-9-armhf

3 signatures

150 seconds

discovery execution persistence privilege_escalation

Behavioral task

behavioral3

Sample

debian/dvdswitch_readdvd

Resource

debian9-mipsbe-20260513-en

debian-9-mips

3 signatures

150 seconds

discovery execution persistence privilege_escalation

Behavioral task

behavioral4

Sample

debian/dvdswitch_readdvd

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

3 signatures

150 seconds

discovery execution persistence privilege_escalation

Behavioral task

behavioral5

Sample

debian/dvdswitch_writedvd

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

2 signatures

150 seconds

Behavioral task

behavioral6

Sample

debian/dvdswitch_writedvd

Resource

debian9-armhf-20260513-en

debian-9-armhf

2 signatures

150 seconds

Behavioral task

behavioral7

Sample

debian/dvdswitch_writedvd

Resource

debian9-mipsbe-20260513-en

debian-9-mips

2 signatures

150 seconds

Behavioral task

behavioral8

Sample

debian/dvdswitch_writedvd

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

2 signatures

150 seconds

Behavioral task

behavioral9

Sample

debian/get-vcs-snapshot.sh

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral10

Sample

debian/get-vcs-snapshot.sh

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral11

Sample

debian/patches/02_debian-paths.patch

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

debian/patches/02_debian-paths.patch

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

debian/patches/02_debian-paths.patch

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

debian/patches/02_debian-paths.patch

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

debian/rules

Resource

ubuntu1804-amd64-20260513-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

debian/rules

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

debian/rules

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

debian/rules

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Malware Config

Targets

- Target
  debian/dvdswitch_readdvd
- Size 366B
- SHA256 78df2b13a594b70ea98efdcc50598d3ded2ffc2aa807bf95e99db50df5ea7c31
- MD5 3d6a5b37155c1531f3a8a890b9ccd37a
- SHA1 2ced500254b7631e6194cf9b8912cb0fe0b6601c
- SHA512 2208a992be9c46c8790216d72f8ef462cd8b176a84f920c1834f7c47b15814c649588f2171499c70b269e88d0e063e5a9ebfe76af495cd944e210b32b859dcdd
- TLSH
  T1DAE0682629DD1A31415E3B62A40E42FD74D96AD1B33DAC046D540C80A425EF9EAE3954
- MD5 SHA1 SHA512 TLSH
Score

6^/10

discovery execution persistence privilege_escalation
- Creates/modifies Cron job
  Cron allows running tasks on a schedule, and is commonly used for malware persistence.
  execution persistence privilege_escalation
- Schedules an At job
  Schedules a job to be run using the at command.
  execution persistence privilege_escalation
behavioral1 behavioral2 behavioral3 behavioral4
- Target
  debian/dvdswitch_writedvd
- Size 2KB
- SHA256 ae42b081ffafcc000ccc2e3ab4c213962594755c86d7d128a86b764245e8b241
- MD5 b054bf90f89176a51463ac7743d524dd
- SHA1 6019d27ae28d83f182f9d60856dbb85ef8b4112b
- SHA512 beca59152d49416949b6299c5bb3b569d0166147dcbfd547830e9c0ad778ae758326495a012d5e612faf232d211b88d501f62f0a978b599ffcfd82b8739235c4
- TLSH
  T11B412106DA94E6B18B65803414C3D42EA60A8B5B4F6F1F65B15CB9683F5872CB1B0AA8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral5 behavioral6 behavioral7 behavioral8
- Target
  debian/get-vcs-snapshot.sh
- Size 802B
- SHA256 aeba817f539d48a67c84ba8bdff98cd8802a6ea6aa40280ddfe4e533e3e3ad96
- MD5 19f297ef662cbc671894ffb2e42d7d04
- SHA1 52e0b890c7b53025b1129a1cdf7fc6d07e25509e
- SHA512 edc06bf4604d00f508da1968ad886bb52dea6c15db20eb8c52eb7b3a4658367c55bc1cfa1c3990124bddda3f9cfee0c058b6545240c18671b08591b2a5503fc7
- TLSH
  T18801FD73811540F31086079776EAEA3537964F820347D82BCC5C642AF2E2F95062F376
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  debian/patches/02_debian-paths.patch
- Size 1KB
- SHA256 a6709a2d98bf675fed725636522f521e920f356f22a8e5571c2ffe0639782d35
- MD5 0c77fbc99fef5de28ecb071986f6f6db
- SHA1 4df83c357b373a00cdc0a3d39ef0077f2a0574bd
- SHA512 ec460949ac77fce9b6bce82a5a05e304ef9589186c70e96f2f679da4c49e7a4d87fa406001e38734899d294298dd807e64f6198e003229ae84d66a435f9b5445
- TLSH
  T12F2170F0783BC1F5C8A104A1AF1FB45E559671E542CEC02E507359509E14B2D9C9BB4D
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral11 behavioral12 behavioral13 behavioral14
- Target
  debian/rules
- Size 223B
- SHA256 110a8a4b0c7c5a64c5bd415f4496b7ce2fbda3fe109cca9c273b77c693ec33fd
- MD5 6ec7d28462f11d12504d45708c2a10f0
- SHA1 9aa1e0355e0c936b6e3ea60f7698e99b10396a8b
- SHA512 df4e6e60ba05d22132d5d1052400e14265b5e260808880447678c77a1987930882cfd009a5986442bde92af30bac9a4264e17c4d44112124ee51605a0a74b09c
- TLSH
  T114D0A79404E4E774085130A75B50C2695796E6BBD8BCB65368E8C9249A4C7BB301B17D
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral15 behavioral16 behavioral17 behavioral18

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Scheduled Task/Job

At

Cron

Persistence

Scheduled Task/Job

At

Cron

Privilege Escalation

Scheduled Task/Job

At

Cron

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecutionpersistenceprivilege_escalation

behavioral2

discoveryexecutionpersistenceprivilege_escalation

behavioral3

discoveryexecutionpersistenceprivilege_escalation

behavioral4

discoveryexecutionpersistenceprivilege_escalation

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

© 2018-2026

Terms | Privacy