General
- Target run.sh
- Size 36.2MB
- Sample260828-1n8ccatelg
- SHA256 b7ce470e128fc360211084a392c2005530ac36d2d1fab55b29f73245ad4460d3
- MD5 6270b2d13efb7f87e2ef6ea6d90d6e40
- SHA1 8b33237654c715b05381a820007e7e5af5946f8a
- SHA512 f13ee6855313f7ef9886e72a34387ae896651bae5db0a4d19f78d9af977a8f9f7dc00c60795fcb242841a81a4d5d70935c2a13f5b2db6058e9d694cdd622cdd1
- SSDEEP 786432:ztpZycvGiPCwK155KAD/Oo4dBqtdesTtmHvBMrdormJuNYnX4JFwpoAoi0SK:RpZycv7PCwK1PD2okq+HXPNYX4JmqZ
- TLSH T118873301F1F95689F93FDEAA5BB9B708B3B1817D4E02450792FB26B470C3845A893B74
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
bun
Resource
ubuntu1804-amd64-20260513-en
3 signatures
300 seconds
Behavioral task
behavioral2
Sample
package/3FWCvzduYZg.js
Resource
win10v2004-20260513-en
1 signatures
300 seconds
Behavioral task
behavioral3
Sample
package/3FWCvzduYZg.js
Resource
win11ltsc2024-20260710-en
1 signatures
300 seconds
Behavioral task
behavioral4
Sample
run.sh
Resource
ubuntu1804-amd64-20260513-en
9 signatures
300 seconds
Behavioral task
behavioral5
Sample
run.sh
Resource
debian9-armhf-20260513-en
8 signatures
300 seconds
Behavioral task
behavioral6
Sample
run.sh
Resource
debian9-mipsbe-20260513-en
2 signatures
300 seconds
Behavioral task
behavioral7
Sample
run.sh
Resource
debian9-mipsel-20260513-en
2 signatures
300 seconds
Malware Config
Targets
-
- Target bun
- Size 77.0MB
- SHA256 33d56b070be6a9e3da0ab013038b43d1645d0534ca811ecdba4472599117eb4b
- MD5 8e6d5c8d09fa14ca4bf4a101739a7220
- SHA1 11066c88428eeebeddcce7bffafad27c2021da85
- SHA512 a379f84b2395962b06563a54dd231818ea8e3c077458eb0ad4d8d394057329af4f8998a88c58cf3ee8f95462323f6704b73552c6d9ff74001d925db63a478af0
- SSDEEP 786432:RwVdGZJ8rsSNM5v6U1Pyw5KgwdgHVK0UL04HxUoF6+G10R:sjsS6PywYgy0wxUoFtGO
- TLSH T1B7088E26B1A2A498D457C07027DB8762A732F87A172465DB32D8AF323F37CD15379722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score4/10 -
- Target package/3FWCvzduYZg.js
- Size 6.1MB
- SHA256 b24d121667f21f492cb9db34fbfd515d5922a8dd30b9c45215c7220abbb10ca8
- MD5 af912a5c0d847daa2816e83aacfc348d
- SHA1 342e22b373852e8941f213d8f8f4471aa347c527
- SHA512 f5a7d8326e637f140e0f6a81e885d4d6a39970951455a3badaa62c7be72bd2f7e2935266d8332b3ec7a1dbc171ee275caf730900eb2614d1dc5ee950e941bab2
- SSDEEP 768:JIRz4Du0WsIg7OgLO7TgzGvisTBy6IRyFKXrJ/L4ZPglOtqilatB0xO6MzK+TRDX:j
- TLSH T18856599C4257672CFE9CAF59C28CC56650F15ADDB2B25089CE72ED123E13ECE912089F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target run.sh
- Size 3KB
- SHA256 6fcd04a1f1fc199424a9d2b51cc70a7a839d6ac28bd89cc400eff3bd8a808198
- MD5 c48e9a438be7ab12b848c5d0783ef810
- SHA1 5fe511282a76dbde9f178fe532e9a031f79699fb
- SHA512 a5f904cf04f91448d0349f2f94930e06f9300c1f0a994cf1765d3def8bbe24de2211228581c6e68656c47f22bf991a8983e6e1c24450a472043c54d29404232c
- TLSH T14681A8B33E212731DD61C3297359F191CB43B9A23CF0B86481D66258E6444D993FFBAA
- MD5 SHA1 SHA512 TLSH
-
Executes dropped EXE