General
- Target fail5ban
- Size 1.1MB
- Sample260821-dp5arafn51
- SHA256 cb5f62bf7b591e69bd38e6bf8e40e8d307d154b2935703422d44f02e403d2e78
- MD5 bf0aa35ce8ce1ef1155607e57e0227c3
- SHA1 223d99f7f0c90d8b4eeace2ac59a71b8a1f410a6
- SHA512 b77e032a5410184441b1a26591b32f20766be5acf9ea7fb10f79845ae64a3e1fdf96927bbc1bdb967cce83808d66a18d3bb4febf02cb5f6ab7f64067a6557ad1
- SSDEEP 24576:wuhI6StzCilHJ9V9iQTop3kt/Mmx+hwCOsvF/6HwalK:wu+RCI560ymUwJ0FC2
- TLSH T14135330CFA021CE1DBC9B552FE171DB60994253348ADB51844D7EB8A87BE9ECEE04B17
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
fail5ban
Resource
ubuntu1804-amd64-20260513-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target fail5ban
- Size 1.1MB
- SHA256 cb5f62bf7b591e69bd38e6bf8e40e8d307d154b2935703422d44f02e403d2e78
- MD5 bf0aa35ce8ce1ef1155607e57e0227c3
- SHA1 223d99f7f0c90d8b4eeace2ac59a71b8a1f410a6
- SHA512 b77e032a5410184441b1a26591b32f20766be5acf9ea7fb10f79845ae64a3e1fdf96927bbc1bdb967cce83808d66a18d3bb4febf02cb5f6ab7f64067a6557ad1
- SSDEEP 24576:wuhI6StzCilHJ9V9iQTop3kt/Mmx+hwCOsvF/6HwalK:wu+RCI560ymUwJ0FC2
- TLSH T14135330CFA021CE1DBC9B552FE171DB60994253348ADB51844D7EB8A87BE9ECEE04B17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.