Overview
overview
6Static
static
5xui2.0/ARC...URE.js
windows10-2004-x64
3xui2.0/ARC...URE.js
windows11-ltsc_2024-x64
3xui2.0/ARC..._RU.js
windows10-2004-x64
3xui2.0/ARC..._RU.js
windows11-ltsc_2024-x64
3xui2.0/Makefile.bat
windows10-2004-x64
3xui2.0/Makefile.bat
windows11-ltsc_2024-x64
3xui2.0/doc...x.html
windows10-2004-x64
3xui2.0/doc...x.html
windows11-ltsc_2024-x64
3xui2.0/install
ubuntu-18.04-amd64
6xui2.0/install
debian-9-armhf
1xui2.0/install
debian-9-mips
1xui2.0/install
debian-9-mipsel
1xui2.0/spe...PEC.js
windows10-2004-x64
3xui2.0/spe...PEC.js
windows11-ltsc_2024-x64
3xui2.0/src...ad.ps1
windows10-2004-x64
3xui2.0/src...ad.ps1
windows11-ltsc_2024-x64
3xui2.0/src...ons.sh
windows10-2004-x64
3xui2.0/src...ons.sh
windows11-ltsc_2024-x64
3xui2.0/src...ies.sh
ubuntu-18.04-amd64
3xui2.0/src...ies.sh
debian-9-armhf
3xui2.0/src...ies.sh
debian-9-mips
3xui2.0/src...ies.sh
debian-9-mipsel
3xui2.0/src...ork.py
windows10-2004-x64
3xui2.0/src...ork.py
windows11-ltsc_2024-x64
3xui2.0/src...er.key
macos-10.15-amd64
1xui2.0/src...x.html
windows10-2004-x64
3xui2.0/src...x.html
windows11-ltsc_2024-x64
3xui2.0/src...x.html
windows10-2004-x64
3xui2.0/src...x.html
windows11-ltsc_2024-x64
3xui2.0/src...x.html
windows10-2004-x64
3xui2.0/src...x.html
windows11-ltsc_2024-x64
3xui2.0/src...x.html
windows10-2004-x64
3Analysis
- max time kernel
66s - max time network
113s - platform
macos-10.15_amd64 - resource
macos-20250619-en - resource tags
arch:amd64arch:i386image:macos-20250619-enkernel:19b77alocale:en-usos:macos-10.15-amd64system - submitted
18/08/2026, 12:18
Behavioral task
behavioral1
Sample
xui2.0/ARCHITECTURE.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
xui2.0/ARCHITECTURE.js
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral3
Sample
xui2.0/ARCHITECTURE_RU.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
xui2.0/ARCHITECTURE_RU.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
xui2.0/Makefile.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
xui2.0/Makefile.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
xui2.0/docs/index.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
xui2.0/docs/index.html
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
xui2.0/install
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral10
Sample
xui2.0/install
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral11
Sample
xui2.0/install
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral12
Sample
xui2.0/install
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral13
Sample
xui2.0/specs/MODULE_SYSTEM_SPEC.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
xui2.0/specs/MODULE_SYSTEM_SPEC.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
xui2.0/src/autoload.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
xui2.0/src/autoload.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
xui2.0/src/bin/daemons.sh
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
xui2.0/src/bin/daemons.sh
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
xui2.0/src/bin/install/update_binaries.sh
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral20
Sample
xui2.0/src/bin/install/update_binaries.sh
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral21
Sample
xui2.0/src/bin/install/update_binaries.sh
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral22
Sample
xui2.0/src/bin/install/update_binaries.sh
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral23
Sample
xui2.0/src/bin/network.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
xui2.0/src/bin/network.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
xui2.0/src/bin/nginx/conf/server.key
Resource
macos-20250619-en
Behavioral task
behavioral26
Sample
xui2.0/src/bin/nginx/html/50x.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral27
Sample
xui2.0/src/bin/nginx/html/50x.html
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral28
Sample
xui2.0/src/bin/nginx/html/index.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral29
Sample
xui2.0/src/bin/nginx/html/index.html
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral30
Sample
xui2.0/src/bin/nginx_rtmp/html/50x.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral31
Sample
xui2.0/src/bin/nginx_rtmp/html/50x.html
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral32
Sample
xui2.0/src/bin/nginx_rtmp/html/index.html
Resource
win10v2004-20260513-en
General
- Target xui2.0/src/bin/nginx/conf/server.key
- Size 1KB
- Sample260818-pg217stsbv
- SHA256 27b205d352c99672ff15f2cba96e1c8ea1d14ebba0488e0591551b683bd552ef
- MD5 6375788d66c48fbf3c0410445545fb03
- SHA1 6d90fa4416838530e74939a28d029cd7536a2f92
- SHA512 3d5f9624f00aad9c2fcdd410058c0ec8646c39115d676dba66f0cad4567e253d73be272240f39c783815d300e7acb90c2988ccba06c6c6c528c66ee3da22ef01
- TLSH T1AD31F836D1D11E385B9DD19B06C7C79E6C98FD22C6268998B3364181C332C407CEF8A8
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/xui2.0/src/bin/nginx/conf/server.key\""1⤵PID:493
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/xui2.0/src/bin/nginx/conf/server.key\""1⤵PID:493
-
/usr/bin/sudosudo /bin/zsh -c /Users/run/xui2.0/src/bin/nginx/conf/server.key1⤵PID:493
-
/bin/zsh/bin/zsh -c /Users/run/xui2.0/src/bin/nginx/conf/server.key2⤵PID:494
-
-
/Users/run/xui2.0/src/bin/nginx/conf/server.key/Users/run/xui2.0/src/bin/nginx/conf/server.key2⤵PID:494
-
-
/bin/shsh /Users/run/xui2.0/src/bin/nginx/conf/server.key2⤵PID:494
-
-
/bin/bashsh /Users/run/xui2.0/src/bin/nginx/conf/server.key2⤵PID:494
-
MIIEuwIBADANBgkqhkiG9w0BAQEFAASCBKUwggShAgEAAoIBAQCRAuYI8lPz1/mRMIIEuwIBADANBgkqhkiG9w0BAQEFAASCBKUwggShAgEAAoIBAQCRAuYI8lPz1/mR3⤵PID:496
-
-
SRqNrLdn6Pze/IrVsf6Ah/9rd6Yoj0/vxWHKKLHyuf1y0XdWAbV4798kFW5/QriSSRqNrLdn6Pze/IrVsf6Ah/9rd6Yoj0/vxWHKKLHyuf1y0XdWAbV4798kFW5/QriS3⤵PID:497
-
-
lqr/3eXfYu1hq3IpU6/88eq5gsJ7S2L2hx/Fk8HpQt1B/okBfUr6qnPpSpkasiC8lqr/3eXfYu1hq3IpU6/88eq5gsJ7S2L2hx/Fk8HpQt1B/okBfUr6qnPpSpkasiC83⤵PID:499
-
-
lnpdmibfGan7OQq3VvbNnso7P4Ud1jAIrZ8IbL/AYkoUpvDCmXNBqjFAJuUOlbIwlnpdmibfGan7OQq3VvbNnso7P4Ud1jAIrZ8IbL/AYkoUpvDCmXNBqjFAJuUOlbIw3⤵PID:500
-
-
iWrkl7Z1yus/83CZBQHtyFY+CI76xMOFAd8+Y0pFq/oxGmA4s0Ql151pnnQwgx1hiWrkl7Z1yus/83CZBQHtyFY+CI76xMOFAd8+Y0pFq/oxGmA4s0Ql151pnnQwgx1h3⤵PID:501
-
-
WQ4ezEEjAgMBAAECgf8UJb69XyO+ytyxWvgtEpbk06KaCodE/msys9Lb6xSm3ta7WQ4ezEEjAgMBAAECgf8UJb69XyO+ytyxWvgtEpbk06KaCodE/msys9Lb6xSm3ta73⤵PID:502
-
-
CF3/CVIxXG1r2gTCqExQaPiqqcN/8FlukH05HUblQle9rz7V4d23xAGTvf38AQDICF3/CVIxXG1r2gTCqExQaPiqqcN/8FlukH05HUblQle9rz7V4d23xAGTvf38AQDI3⤵PID:503
-
-
zByt6PaMyBAg77o0CflQjTXda/DUMojE46jI9tsW/eheY4aJL1AJBVLoTbEYuNeTzByt6PaMyBAg77o0CflQjTXda/DUMojE46jI9tsW/eheY4aJL1AJBVLoTbEYuNeT3⤵PID:504
-
-
wLU+VP3LrM4JAb1g54PC061rAKmj/FzWIr9i0L+9K200Qe4krzup7+iVLwhOtAG/wLU+VP3LrM4JAb1g54PC061rAKmj/FzWIr9i0L+9K200Qe4krzup7+iVLwhOtAG/3⤵PID:506
-
-
6aBJCml459YW0OR41t8/Mj5HvcTDqeFRTdqc+hECgYEAvZq54ODBpT0dcCNDp8Kr6aBJCml459YW0OR41t8/Mj5HvcTDqeFRTdqc+hECgYEAvZq54ODBpT0dcCNDp8Kr3⤵PID:507
-
-
/PwjzfKPgREPDCI99oFoqz/AQ+mdj4aETHyMG+9LMoacAFvBmD+EmBLuV6QskGIz/PwjzfKPgREPDCI99oFoqz/AQ+mdj4aETHyMG+9LMoacAFvBmD+EmBLuV6QskGIz3⤵PID:511
-
-
F4wth2Y0hPPXckkr1LMcnLumty2ERNykvZt3xGc8MPrvQ39rKOQznEe0x1p1/L/7F4wth2Y0hPPXckkr1LMcnLumty2ERNykvZt3xGc8MPrvQ39rKOQznEe0x1p1/L/73⤵PID:512
-
-
Kakp4/yYz1uNfJ9PoVcEDzgMVS/F9S4/GyEcErtH2ESv7w25i7QbiBDHxVF4TE6QKakp4/yYz1uNfJ9PoVcEDzgMVS/F9S4/GyEcErtH2ESv7w25i7QbiBDHxVF4TE6Q3⤵PID:514
-
-
846/vzl7ZDNEhnbwKe/7nrBXGeXG+IliFUqXEFfTiB99XZQenODeFescMdsoB2H4846/vzl7ZDNEhnbwKe/7nrBXGeXG+IliFUqXEFfTiB99XZQenODeFescMdsoB2H43⤵PID:517
-
-
gtXvB458r5yMZFUJLosnOzMoQKxFZQA88Ud/AoGBAJVaKnJL/rxGyehXIW0gvT2KgtXvB458r5yMZFUJLosnOzMoQKxFZQA88Ud/AoGBAJVaKnJL/rxGyehXIW0gvT2K3⤵PID:518
-
-
kfoa7xpaAK2fuyAFmH7CJhNkHx5GDqKQ/6bURQJj5CyMNSY3dzUA/BtwR8oc36wAkfoa7xpaAK2fuyAFmH7CJhNkHx5GDqKQ/6bURQJj5CyMNSY3dzUA/BtwR8oc36wA3⤵PID:520
-
-
vUT5K4o/sivs130gZCAyvUT5K4o/sivs130gZCAy3⤵PID:521
-
-