Overview
overview
6Static
static
1debian/dvd...eaddvd
ubuntu-18.04-amd64
6debian/dvd...eaddvd
debian-9-armhf
6debian/dvd...eaddvd
debian-9-mips
6debian/dvd...eaddvd
debian-9-mipsel
6debian/dvd...itedvd
ubuntu-18.04-amd64
3debian/dvd...itedvd
debian-9-armhf
3debian/dvd...itedvd
debian-9-mips
3debian/dvd...itedvd
debian-9-mipsel
3debian/get...hot.sh
windows10-2004-x64
3debian/get...hot.sh
windows11-ltsc_2024-x64
3debian/pat....patch
ubuntu-18.04-amd64
1debian/pat....patch
debian-9-armhf
1debian/pat....patch
debian-9-mips
1debian/pat....patch
debian-9-mipsel
1debian/rules
ubuntu-18.04-amd64
1debian/rules
debian-9-armhf
1debian/rules
debian-9-mips
1debian/rules
debian-9-mipsel
1General
- Target vdr-plugin-dvdswitch_0.2.2+git20150216-4.debian.tar.xz
- Size 5KB
- Sample260822-tkatca1td1
- SHA256 7fddfc6f12685664f1559cbeede53682c9f4ce4732bead3b93285e60c9eb1602
- MD5 1cf38386e79b17a525fb70912689037f
- SHA1 732135a93658869d2e309ed20f8837471a76be7f
- SHA512 91abfb481fc25e9ddd31d387253c9da97af4a160024c5a24376731d9d6c5a27f396e066acdd7010088afbd4fdea159b263ea4a3c119228ae93863f98e99a57f5
- SSDEEP 96:Tw6IiEi6/nZ9uv/sZzIEj2D0qTtgwM/A91lIdvc7yXlhrNCz/9v:HtEi6P+vUZzNO5qA0Xlr2/9v
- TLSH T157B17DD524FE370FB85EE9CE8E3D415D211A683764978BACE13DEB5425BD6E000C2A02
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
debian/dvdswitch_readdvd
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral2
Sample
debian/dvdswitch_readdvd
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral3
Sample
debian/dvdswitch_readdvd
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral4
Sample
debian/dvdswitch_readdvd
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral5
Sample
debian/dvdswitch_writedvd
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral6
Sample
debian/dvdswitch_writedvd
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral7
Sample
debian/dvdswitch_writedvd
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral8
Sample
debian/dvdswitch_writedvd
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral9
Sample
debian/get-vcs-snapshot.sh
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
debian/get-vcs-snapshot.sh
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
debian/patches/02_debian-paths.patch
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral12
Sample
debian/patches/02_debian-paths.patch
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral13
Sample
debian/patches/02_debian-paths.patch
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral14
Sample
debian/patches/02_debian-paths.patch
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral15
Sample
debian/rules
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral16
Sample
debian/rules
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral17
Sample
debian/rules
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral18
Sample
debian/rules
Resource
debian9-mipsel-20260513-en
Malware Config
Targets
-
- Target debian/dvdswitch_readdvd
- Size 366B
- SHA256 78df2b13a594b70ea98efdcc50598d3ded2ffc2aa807bf95e99db50df5ea7c31
- MD5 3d6a5b37155c1531f3a8a890b9ccd37a
- SHA1 2ced500254b7631e6194cf9b8912cb0fe0b6601c
- SHA512 2208a992be9c46c8790216d72f8ef462cd8b176a84f920c1834f7c47b15814c649588f2171499c70b269e88d0e063e5a9ebfe76af495cd944e210b32b859dcdd
- TLSH T1DAE0682629DD1A31415E3B62A40E42FD74D96AD1B33DAC046D540C80A425EF9EAE3954
- MD5 SHA1 SHA512 TLSH
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Schedules an At job
Schedules a job to be run using the at command.
-
- Target debian/dvdswitch_writedvd
- Size 2KB
- SHA256 ae42b081ffafcc000ccc2e3ab4c213962594755c86d7d128a86b764245e8b241
- MD5 b054bf90f89176a51463ac7743d524dd
- SHA1 6019d27ae28d83f182f9d60856dbb85ef8b4112b
- SHA512 beca59152d49416949b6299c5bb3b569d0166147dcbfd547830e9c0ad778ae758326495a012d5e612faf232d211b88d501f62f0a978b599ffcfd82b8739235c4
- TLSH T11B412106DA94E6B18B65803414C3D42EA60A8B5B4F6F1F65B15CB9683F5872CB1B0AA8
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target debian/get-vcs-snapshot.sh
- Size 802B
- SHA256 aeba817f539d48a67c84ba8bdff98cd8802a6ea6aa40280ddfe4e533e3e3ad96
- MD5 19f297ef662cbc671894ffb2e42d7d04
- SHA1 52e0b890c7b53025b1129a1cdf7fc6d07e25509e
- SHA512 edc06bf4604d00f508da1968ad886bb52dea6c15db20eb8c52eb7b3a4658367c55bc1cfa1c3990124bddda3f9cfee0c058b6545240c18671b08591b2a5503fc7
- TLSH T18801FD73811540F31086079776EAEA3537964F820347D82BCC5C642AF2E2F95062F376
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target debian/patches/02_debian-paths.patch
- Size 1KB
- SHA256 a6709a2d98bf675fed725636522f521e920f356f22a8e5571c2ffe0639782d35
- MD5 0c77fbc99fef5de28ecb071986f6f6db
- SHA1 4df83c357b373a00cdc0a3d39ef0077f2a0574bd
- SHA512 ec460949ac77fce9b6bce82a5a05e304ef9589186c70e96f2f679da4c49e7a4d87fa406001e38734899d294298dd807e64f6198e003229ae84d66a435f9b5445
- TLSH T12F2170F0783BC1F5C8A104A1AF1FB45E559671E542CEC02E507359509E14B2D9C9BB4D
- MD5 SHA1 SHA512 TLSH
Score1/10 -
- Target debian/rules
- Size 161B
- SHA256 39adcb13701f774adc4329563b268a4d4d21b6579ad08ee3e7b00da5ee2bb6ec
- MD5 60cae16c6dac0fd35b62a5a523347018
- SHA1 76c772fb2abaaf723cde06e28163ee28ba34fb35
- SHA512 f710074b3fbe0b6e74afadbef1a447f948b527eae85580618d33ca02cad7972521a99322eb40473d0333c9d4197e6cefdbff998a5b59d8539584c653132b376b
- TLSH T172C0228888C80B0008A020030E80828002A8ABBB2AA8F2A228A002088B8CB32200002E
- MD5 SHA1 SHA512 TLSH
Score1/10