fdf8936ed2149368996e12b9962c943406b3802c9aa4f735df08164f583e36f3

Sharing

Copy URL Twitter E-mail

General

Target
XUI2.0-main.zip
Size 44.1MB
Sample260818-pgtptss1hs
SHA256 fdf8936ed2149368996e12b9962c943406b3802c9aa4f735df08164f583e36f3
MD5 095f2afbabad866c65b933411f1122b8
SHA1 a3a80163cd9b8bfcd99a95e7fc736ebf21b4f503
SHA512 b34bbb02e6ef4eb4180fd25561d66bbe71e474cad806e5c6c6310299dd1abf06b2480f34754abb943c257e613265259f7d39b5631ccbe99f9ff79225067b29ea
SSDEEP 786432:wOKRntLMhAOtSx1nbYKGQKeuFqp7BlgWIlaL51B+ktqcJmzV3ZuPgD58kGcCBE1+:wdFtaAdx1sQRpzgyLx+Qmzx8gDbGw1ba
TLSH
T18FA723BAE75AEF22C7A3517171820102E9399920DE1CC71615F817768EFB8542A3F78F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  xui2.0/ARCHITECTURE.md
- Size 29KB
- SHA256 d72a27094b03852e8e5093b1d2e79f39e42f30d13934f1669c4d0f8f586043f5
- MD5 79753a47c6b08c458890844323c9e4a5
- SHA1 0bda3496ef935e9170dd38f986f643c9db2f28ca
- SHA512 1956f05b285f1cc02e17d7c82efff7a812d77369ba9d4d07086af9a12c3b98458d5f05087b42bfaa429686d105745fc3ef05b4d302591ff916ade7c4853dd970
- SSDEEP 768:Z4TaLn4+kbwDbykii9zJpomF4PPiN/NAc:Z4MDbLFpomF4PPW5
- TLSH
  T1D8D2C4392EA12D3F37D7F28EA6074706D662B047D988203879DDF0588BC9178937EA75
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  xui2.0/ARCHITECTURE_RU.md
- Size 37KB
- SHA256 77026d7405543521546098f81ce9a7bbe92b3d1288855f9cf117f6c0e562dc60
- MD5 6acf26f4bc1efe5542c7d1a7f2d19cc3
- SHA1 5ab7757ed5b146bb7b9e5b2f522b0826e15ea59b
- SHA512 af14acbdc75a09a62f9d7b8e07f6d2e91223df33b38dbf0b2abdf8a4923458da2ffad8894aad576bf5a8534b6c863e0a2955b4dd44fb6b395bbb8a297179fd1c
- SSDEEP 768:COwm4rhrXqd7kbxuyyJ6H/ujefEwu8hW0+4PZphnk4xFBvZf:Xwm4d6+uFJ6fTVu8hWJ4PZfnDxFBhf
- TLSH
  T17A03553019995CEF3345F40EE8057F09A89674FE7E9A2235359C7D6937F9028823DA39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  xui2.0/Makefile
- Size 11KB
- SHA256 38fdecdc08971d4bb244b7e3e0d83c1e50252ea696549c4808fa52e96367ae51
- MD5 fc8d25e82d4f1d9266bf7e04f64014a2
- SHA1 d91248afbbd802103adc91eddaf3250aaa20240e
- SHA512 6a715645e02e48dd4f42bc105ef5cc492e037696eb78de441e3ecb0079bf910859126f3f05320e30365038cf11f7d009a7c321e0b5e418de53825099b26cecc7
- SSDEEP 96:dbU8NpeXGNZzZWAl7i19X9fFxOEgPsKXCgozA/iO/OM4MVg4jt72uZf/wQP5GV06:agVQAlO1zeEgPagoG4MVg4R72kX838c
- TLSH
  T19D326675E35C8C65364DC3FCFB16C4076409F5CA7F1225248DEAFA6892DC2C422EA675
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  xui2.0/docs/index.html
- Size 5KB
- SHA256 b0c161b069379112d5494df9791f74d1219623517d57e85e92d7cfbec72ce536
- MD5 844777367525c6396941c4196dcc0108
- SHA1 083584229869dbfe29c01df0ff7e517d74250744
- SHA512 4945fe81c901bac181b1a640af0e12f5c09d87da97ab41b255e4308e0485c7083cfb8ceeebdb30dbc9fb95cf374369f6c95491ff43f2975a5dafac8d9a25ffea
- SSDEEP 96:FK58bjKWo3vw765+UievwpXcwvFVifsESOdHcLuS13vJjM:FK58bjKWio+QU5wpXc6FVifsESOdHcL2
- TLSH
  T1B6C1325BDEE304436013963DA3FBB514377AA1078906CEE93FADA258CF4834C5837A94
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  xui2.0/install
- Size 63KB
- SHA256 f6c57356a161cc03fcd961e37c026ef0185c0ddc234ea8f447d956e022b0a291
- MD5 362cb7f7ce2c17a24449b8c2162410c1
- SHA1 a0c37b40dc2473904bf0dcdecb86f07828196dd9
- SHA512 98312f3e0b09842d540c6db6c57c132f8e7b7d1aff80f415b1121bdc55091f66b71f868336d0ff5af72d745a4b5b424f378cd2e86cdee41d9d1ddbff7f5059a9
- SSDEEP 1536:g9/C7wzfaMWdVbNIpqyZ3KaCudWWOC6hQvYwl4Tlv:g9/KwzfaVIgy5KJudWWV6hSYwl4Tlv
- TLSH
  T14053B8508D448D3273D791186ED3848263A6BBA3176730347EFC42981F5E1BAD2FAB5E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery execution privilege_escalation
- Abuse Elevation Control Mechanism: Sudo and Sudo Caching
  Abuse sudo or cached sudo credentials to execute code.
  privilege_escalation defense_evasion
behavioral10 behavioral11 behavioral12 behavioral9
- Target
  xui2.0/specs/MODULE_SYSTEM_SPEC.md
- Size 67KB
- SHA256 2131b1a7d61183251592c6e87be524f97dcc7c139c2c764c934db2aae57c1061
- MD5 a16aa9a721ded6d5320e05a9227d6e67
- SHA1 a020a8b24c2c62c0190e859272420b79edb733b3
- SHA512 00d0b5260e43cee5276f91d043af9de9bb0fb32219d76fc9b77e1210fee09000c9ee96ccaafacba3dedfac0434abebfced83c676c4df4af0a298d65854ee3ae2
- SSDEEP 1536:fIiAXuE8YtYdf6pmtvpOy8gtSh9u55y1kAzF7wcdlAa8NLctV3HnXlEV9:fIi2uVYuf8m2y8gSXu55y1kAzFB2a8N/
- TLSH
  T1FE6376711AAD70EA1205F40FED047E096CE740FF7A9A2252386C3DAD37F5168837E966
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  xui2.0/src/autoload.php
- Size 16KB
- SHA256 5fffac54f9aa979a28a9da611aa6042496f87fc82bf3809e3ff2d8031ced9d62
- MD5 e277994a5ea4322e7336716da26c34a9
- SHA1 94a1faa623a9542acedae8fd07b5105f458659ee
- SHA512 70e9a5dfa0f59360c51d8b87a053c8a1dcc2abda6f604d0053591aae9ea9b9249eb009c64be78898e22a19a9f62b3865df622bf5da7bc8f0f4db4247270d8702
- SSDEEP 384:MTPcYexDzmsH3YUB0w2aDoZNgUOHu78UMqFx:l1xurNX
- TLSH
  T177721E7525C251273593E43C974E1191F22A705B73281A58BDAE33B82FCD3288AFD6F6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  xui2.0/src/bin/daemons.sh
- Size 721B
- SHA256 5064f569fe6c37514d99b0f99c15c6f5c7f9b9747c7e46ad0582b037a76908a0
- MD5 1dc0d7539a93848571e060e9c4fd935c
- SHA1 5d332ac64b1df87a96efaf3d050402b50a94499c
- SHA512 c73904b9ca7f9296edf03be201118137ca0ec885c1f109b03f33868418554dde75c582ce59b4f24cac74770a18f2495e84c7522535ea03c9a823ad2ed401e47c
- TLSH
  T1D701FB271914FCB45D3FCC6876759951EFA2D2461F3668041C112FE3976A2CB7D90D43
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  xui2.0/src/bin/install/update_binaries.sh
- Size 11KB
- SHA256 54569d287e7fc24efcad621e48f36b7a2d6dc1824dc7cc8cbf761796ac0a0568
- MD5 188deef09c3d50d41dfc47ac831b3f4b
- SHA1 350fe930867e5f7461c5e2e380fb1bab7f7bb4c7
- SHA512 d59f189e68e8febeec5854451164f50b42b01889071ce4e6e0f4850f3afa23a1ae17dc31c539ce6fadd10e1d70a04a65b37e800ca9d09bf2838664c1b68f5452
- SSDEEP 192:Hig2Xz8D5w/n5+4H3dEn7CIHixZrH4ZLohRf:HigGln5BEmIHALlx
- TLSH
  T14832B322789044F42189E2A8638628C67444458F4E5DBCBFBC6F2B183FB95D567FC28D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20 behavioral21 behavioral22
- Target
  xui2.0/src/bin/network.py
- Size 3KB
- SHA256 71826cfc19d0bd11c96db5b7c9567f4f64d2daf7a8c04461a9425669e59f845b
- MD5 91af290b527fcb06a274575520f531a6
- SHA1 8e5401b865ebebfeeaa02f79ba9c0f633e59ce1f
- SHA512 dff6d3ee04d9f9ebd623e3929e2baaa51a696b8cebac97a7187181a3062c5ab72e8502a2b67e99b5b909d7628728d151841060ed63449db6a02bbc9bc8178196
- TLSH
  T12561ED108C1A6A61DA533C2C4C1ED6B575671B233E442E60B85CC13DAF8D43EC3BE99E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  xui2.0/src/bin/nginx/conf/server.key
- Size 1KB
- SHA256 27b205d352c99672ff15f2cba96e1c8ea1d14ebba0488e0591551b683bd552ef
- MD5 6375788d66c48fbf3c0410445545fb03
- SHA1 6d90fa4416838530e74939a28d029cd7536a2f92
- SHA512 3d5f9624f00aad9c2fcdd410058c0ec8646c39115d676dba66f0cad4567e253d73be272240f39c783815d300e7acb90c2988ccba06c6c6c528c66ee3da22ef01
- TLSH
  T1AD31F836D1D11E385B9DD19B06C7C79E6C98FD22C6268998B3364181C332C407CEF8A8
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral25
- Target
  xui2.0/src/bin/nginx/html/50x.html
- Size 497B
- SHA256 876766b4e80133fd490603e073d3567425b88794828a9292104244c9e40875ed
- MD5 5a719a793405561b1a13e6cb1f403d88
- SHA1 835b9dec419c01420e78602527a9fba8c463521c
- SHA512 81a2bb82a89a8e698a267fd925367ffa4bb4ee02e482d670835ae8621751605ce856fab051c9770e8e3cb94f63fb6dd03284affe4e1161f57c1bf9178b3da472
- TLSH
  T194F09E8EB210136B94210310AC86A6527206270812B7857479CAC9B2FAA6E12F9376E8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral26 behavioral27
- Target
  xui2.0/src/bin/nginx/html/index.html
- Size 615B
- SHA256 fb47468a2cd3953c7131431991afcc6a2703f14640520102eea0a685a7e8d6de
- MD5 7df3d7cf3358af3f470ac7229387ef94
- SHA1 c51a3f0e6de4eb802d5630941c3fd9e1d0efae4b
- SHA512 098db3badb76a319c211d685b869e15bbc51e2658a912514b253d2a5ef3a61981dad1726f1ccb494f21b7869e655b88446c5c5c91fd76d4e33885a0b5aef3bad
- TLSH
  T152F0029BE3002227B48343013CB35A21775503E40354CB5578C74DD3EF2A913F4175B8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral28 behavioral29
- Target
  xui2.0/src/bin/nginx_rtmp/html/50x.html
- Size 497B
- SHA256 876766b4e80133fd490603e073d3567425b88794828a9292104244c9e40875ed
- MD5 5a719a793405561b1a13e6cb1f403d88
- SHA1 835b9dec419c01420e78602527a9fba8c463521c
- SHA512 81a2bb82a89a8e698a267fd925367ffa4bb4ee02e482d670835ae8621751605ce856fab051c9770e8e3cb94f63fb6dd03284affe4e1161f57c1bf9178b3da472
- TLSH
  T194F09E8EB210136B94210310AC86A6527206270812B7857479CAC9B2FAA6E12F9376E8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral30 behavioral31
- Target
  xui2.0/src/bin/nginx_rtmp/html/index.html
- Size 615B
- SHA256 fb47468a2cd3953c7131431991afcc6a2703f14640520102eea0a685a7e8d6de
- MD5 7df3d7cf3358af3f470ac7229387ef94
- SHA1 c51a3f0e6de4eb802d5630941c3fd9e1d0efae4b
- SHA512 098db3badb76a319c211d685b869e15bbc51e2658a912514b253d2a5ef3a61981dad1726f1ccb494f21b7869e655b88446c5c5c91fd76d4e33885a0b5aef3bad
- TLSH
  T152F0029BE3002227B48343013CB35A21775503E40354CB5578C74DD3EF2A913F4175B8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral32