Overview
overview
3Static
static
1f b i/FBI/build.sh
ubuntu-18.04-amd64
3f b i/FBI/build.sh
debian-9-armhf
3f b i/FBI/build.sh
debian-9-mips
3f b i/FBI/build.sh
debian-9-mipsel
3f b i/FBI/...ase.js
windows10-2004-x64
3f b i/FBI/...ase.js
windows11-ltsc_2024-x64
3f b i/FBI/...ild.sh
ubuntu-18.04-amd64
3f b i/FBI/...ild.sh
debian-9-armhf
3f b i/FBI/...ild.sh
debian-9-mips
3f b i/FBI/...ild.sh
debian-9-mipsel
3f b i/FBI/payload.py
windows10-2004-x64
3f b i/FBI/payload.py
windows11-ltsc_2024-x64
3General
- Target f b i.zip
- Size 75KB
- Sample260913-gpjwlaff98
- SHA256 5e2b59154fe727bc5313bce91ca19f4aa8dea32edaa4c8ebd3b8e1881248b815
- MD5 07973148b69423ce9f540ff556b87319
- SHA1 a1a01c6161db1bc65a470fe577ff4b583006181a
- SHA512 ef9887d5879662556ebd18434c623d86aa1ecc6b74310d7ca8132d4d3658b99df61aeb586b43e08837267c372cf7fa6a7f817c870c04cdaa7a0189c045cdd78d
- SSDEEP 1536:IdyhWHkqFe0sfWRp3stfIYwgBdy8XWS/2jUGbazpIeA4iq6dI:IQWHkqFeRapcgehWwIEpTA4iPS
- TLSH T10173BD11C3044101F166BE73A5812A9392E5F1C8D4E3758F8A98F7694ED33EEE2D7B4A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
f b i/FBI/build.sh
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral2
Sample
f b i/FBI/build.sh
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral3
Sample
f b i/FBI/build.sh
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral4
Sample
f b i/FBI/build.sh
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral5
Sample
f b i/FBI/cnc/database.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
f b i/FBI/cnc/database.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
f b i/FBI/loader/build.sh
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral8
Sample
f b i/FBI/loader/build.sh
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral9
Sample
f b i/FBI/loader/build.sh
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral10
Sample
f b i/FBI/loader/build.sh
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral11
Sample
f b i/FBI/payload.py
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
f b i/FBI/payload.py
Resource
win11ltsc2024-20260911-en
Malware Config
Targets
-
- Target f b i/FBI/build.sh
- Size 10KB
- SHA256 bbccc0a31b8de37d58de709feba80c4cb083c3f46cc8993fe0aabed539a722b3
- MD5 05ce98786918f3e7efc15ee6dc5de468
- SHA1 4ca33a77f3bf71f7cd54a691acad6a62f8cc3e00
- SHA512 a1d287d8947f3dcb4126767f45ae2b626cc5e569593ce90e14b9fef9df7a6fa17ba22aeee09727b1514b9613630aa2e642b1fdc1d4e62b7121484efae2bcbed5
- SSDEEP 192:MYzl0mURmU5NczzCH/8+qEILfULHSOyeLObNYswng:Tp0mURmU5NcfCH/8+qEIlag
- TLSH T123221C19714A7CBB54875E3B71732246B1B7B4A97F30115E80B21B428EAEAD420CB5BF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target f b i/FBI/cnc/database.go
- Size 4KB
- SHA256 9b8703d8527d0db7dcdc004728aa5ed3736431cd0046c1cc8bad2578a91131fd
- MD5 4708062a3d398bece6c8797e6d623b83
- SHA1 267394b490cc30941302c03edb30d008f9a8e6e4
- SHA512 a13d33e1f0fac7a959b2e4265d2dff537a3462492842918639b296856b4a2f0d26e1643d701a6f3fa75c2c2661f0e3cc5ea1b5e706fcd43141de48867c84c8b3
- SSDEEP 96:6xh1KQ2+voQ5qd28lMekM3TrJeRbPJV4oJOWdGNCyiQw18lM1IB2wqrp+e13V8lS:iDKMoQIAukM3QR6lNCyiQi/IB2wql3Vd
- TLSH T183A152926AE149651B8BA43D88C6D800B7B5F40320575C50FCAEA7E43F1C7309B7A78F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target f b i/FBI/loader/build.sh
- Size 65B
- SHA256 5bb15012ee9420e37caa046eddecbb3c885c4b1a4e189e605c5b1492b6b6ea92
- MD5 80ad6dda322aae0afa8c930cd5571182
- SHA1 36210a6fa6c2ba67e067883e1141c1af301711f8
- SHA512 25e1c18682acb4d4929909ce4aaee7942a843fe1c9d6091914504bb21d89c6393453177845319a6ea1c14e7c4eb030a80e8b9b106ede5ec21c9305977828ee10
- TLSH T184A0222203FEC0B80808CC0000000EA08003282C0E2000A2E22082CF0C8FFEC020B080
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target f b i/FBI/payload.py
- Size 3KB
- SHA256 4bf54a84a44686921801f174ea20f734cc3beb8bafb59fc79fe6d2cba90b9df4
- MD5 298815e9abe1f82725280836113d397a
- SHA1 fc9762eed40e31e19ca6c5cdb3a85584fe17deca
- SHA512 983efa6f2bbb89449029b60f9654feae8915a4505f7140e15aea93fa0b8b949511d051cc00b44890cc4af943848e08f87037853038f5a9e7b9d986d54dcbec3b
- TLSH T1AD81FFF5B86A54B83CE2903152394D243B5B09270AA5394875BF7EF947DEF0CA1193F2
- MD5 SHA1 SHA512 TLSH
Score3/10