acfa56d5c106eb6a57aa9d42fa175a7b53a379210d126e2e9b0fda6f5d8e3499 | Triage™

Login
Reports

Overview

overview

6

Static

static

1

starlight_....0.tar

windows10-2004-x64

1

starlight_....0.tar

windows11-ltsc_2024-x64

1

starlight/50default

ubuntu-18.04-amd64

1

starlight/50default

debian-9-armhf

1

starlight/50default

debian-9-mips

1

starlight/50default

debian-9-mipsel

1

starlight/...ity.sh

ubuntu-18.04-amd64

1

starlight/...ity.sh

debian-9-armhf

1

starlight/...ity.sh

debian-9-mips

1

starlight/...ity.sh

debian-9-mipsel

1

starlight/...un0.sh

windows10-2004-x64

3

starlight/...un0.sh

windows11-ltsc_2024-x64

3

starlight/...ver.sh

ubuntu-18.04-amd64

1

starlight/...ver.sh

debian-9-armhf

1

starlight/...ver.sh

debian-9-mips

1

starlight/...ver.sh

debian-9-mipsel

1

starlight/...tor.py

windows10-2004-x64

3

starlight/...tor.py

windows11-ltsc_2024-x64

3

starlight/..._ip.sh

ubuntu-18.04-amd64

3

starlight/..._ip.sh

debian-9-armhf

3

starlight/..._ip.sh

debian-9-mips

3

starlight/..._ip.sh

debian-9-mipsel

3

starlight/...ate.sh

ubuntu-18.04-amd64

3

starlight/...ate.sh

debian-9-armhf

3

starlight/...ate.sh

debian-9-mips

3

starlight/...ate.sh

debian-9-mipsel

3

starlight/...x2.pub

windows10-2004-x64

3

starlight/...x2.pub

windows11-ltsc_2024-x64

3

starlight/...ins.sh

windows10-2004-x64

3

starlight/...ins.sh

windows11-ltsc_2024-x64

3

starlight/...pid.sh

ubuntu-18.04-amd64

6

starlight/...pid.sh

debian-9-armhf

6

Sharing

Copy URL Twitter E-mail

General

Target
starlight_proto_package_v2.5.0.tgz
Size 1.4MB
Sample261020-p6ebfabf85
SHA256 acfa56d5c106eb6a57aa9d42fa175a7b53a379210d126e2e9b0fda6f5d8e3499
MD5 9fe46c4dd00be3c661104b0d1518f634
SHA1 b1e39ca251215123d9d78ce23e0d8fb45806f003
SHA512 1aabeea4f37e77a2d07369fb84c087fe66fabb5dd6c25b3f4795482e58db210bf542bedc66a6795762cb48e02bac6bcf041249d7d5b0aa2834b6a139d2914ab7
SSDEEP 12288:Q09PnAvcMwgRYclW7Q9ysQPB22Fpn24J4s4ssuD7NSB+FN3Yk:Q8OcMwgV67PPpVJ2MUBcY
TLSH
T141659E9DD71CAC5BCB45A1315BFE41A2B334A14746813E267D9C506C8F9AB2CCCF788A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery execution linux

Static task

static1

Behavioral task

behavioral1

Sample

starlight_proto_package_v2.5.0.tar

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

starlight_proto_package_v2.5.0.tar

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral3

Sample

starlight/50default

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

starlight/50default

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

starlight/50default

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

starlight/50default

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

starlight/base_connectivity.sh

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

starlight/base_connectivity.sh

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

starlight/base_connectivity.sh

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

starlight/base_connectivity.sh

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

starlight/check_tun0.sh

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

starlight/check_tun0.sh

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral13

Sample

starlight/configure_ntpserver.sh

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

starlight/configure_ntpserver.sh

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

starlight/configure_ntpserver.sh

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

starlight/configure_ntpserver.sh

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

starlight/controller_connection_monitor.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral18

Sample

starlight/controller_connection_monitor.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral19

Sample

starlight/get_all_interface_ip.sh

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

starlight/get_all_interface_ip.sh

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

starlight/get_all_interface_ip.sh

Resource

debian9-mipsbe-20260513-en

debian-9-mips

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

starlight/get_all_interface_ip.sh

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

starlight/host_file_update.sh

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

starlight/host_file_update.sh

Resource

debian9-armhf-20260513-en

debian-9-armhf

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

starlight/host_file_update.sh

Resource

debian9-mipsbe-20260513-en

debian-9-mips

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

starlight/host_file_update.sh

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

starlight/id_rsa_ox2.pub

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral28

Sample

starlight/id_rsa_ox2.pub

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral29

Sample

starlight/initledgpiopins.sh

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral30

Sample

starlight/initledgpiopins.sh

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral31

Sample

starlight/kill_iperf_pid.sh

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

4 signatures

150 seconds

Behavioral task

behavioral32

Sample

starlight/kill_iperf_pid.sh

Resource

debian9-armhf-20260513-en

debian-9-armhf

4 signatures

150 seconds

Malware Config

Targets

- Target
  starlight_proto_package_v2.5.0.tgz
- Size 1.4MB
- SHA256 acfa56d5c106eb6a57aa9d42fa175a7b53a379210d126e2e9b0fda6f5d8e3499
- MD5 9fe46c4dd00be3c661104b0d1518f634
- SHA1 b1e39ca251215123d9d78ce23e0d8fb45806f003
- SHA512 1aabeea4f37e77a2d07369fb84c087fe66fabb5dd6c25b3f4795482e58db210bf542bedc66a6795762cb48e02bac6bcf041249d7d5b0aa2834b6a139d2914ab7
- SSDEEP 12288:Q09PnAvcMwgRYclW7Q9ysQPB22Fpn24J4s4ssuD7NSB+FN3Yk:Q8OcMwgV67PPpVJ2MUBcY
- TLSH
  T141659E9DD71CAC5BCB45A1315BFE41A2B334A14746813E267D9C506C8F9AB2CCCF788A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  starlight/50default
- Size 2KB
- SHA256 681607d4921051eb47ad861f3068c92512a23d79cf48f06884d650a6ed694490
- MD5 a17cfb1fda90e736b31f0329998dbfc3
- SHA1 4397300a2ea4c8edd6f73273d8342863cf0bcd39
- SHA512 131356ff50d61e236b002b35e3f09b0214465d019a0cfee5d5f0471d42bb8981ffbc4fceb4cb1e01135b8548c6d254457cded265e8efcb87f14ffab6307dc60b
- TLSH
  T1A451319C680E9FB1A6C0D9B4DC8378526C2D4A2B08F6344938BFF0157F8D2E8B175794
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral3 behavioral4 behavioral5 behavioral6
- Target
  starlight/base_connectivity.sh
- Size 6KB
- SHA256 9867614fda1249b2e7b1da8629311cd493bc28f808ff377c864a8e1747f6970e
- MD5 7fa9e3d6985e0ec69c974648741447c3
- SHA1 218c96804f65b26d42cd5181270f2e468b38a0e9
- SHA512 8cd5f9ae15d7b419ea48dadb46bf5af08ba3f893ae19208d770ce23e5152b3f0795430e9a571d806639dd79acfe6e03dc6967aa31dda0c035e16afcfe06f8585
- SSDEEP 192:jLWpiEl1Dlk4YglJktM0SAEnleXJKTC9o8+ei817ww+HmDT:mptTDzQgnpTZAi6cw++T
- TLSH
  T169E185202402F577162ADBB5B2C6A8256B6C08970742383977ADD75C3F40AA472F7FF6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral7 behavioral8 behavioral9
- Target
  starlight/check_tun0.sh
- Size 2KB
- SHA256 b47bdb57bdf127be9a675baebcd8244ee512e7b19aed4d93618b71730e9aa059
- MD5 99d2c156004439eda63be953882a8d73
- SHA1 177bbe022a3cbc8e96b1d201ae22e6ed250f805c
- SHA512 cc34c446e5bc0c24ab8bb0616a5ec66c5afe299ccb5903ba50ae41355e4c574ab7ba9bbe304c5719b83b89ab415e0f4052aea532ec94fcd8f8eb972795eef478
- TLSH
  T1D451D02169B0EAB74A33852B35CB7582BB9844460C66F85CF8DCA1887F60541B2A3F79
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  starlight/configure_ntpserver.sh
- Size 1KB
- SHA256 a71ab8a22bd4dcab31fa9a5a5b1128915c8bc8fa5b3c2aac7fd40ae4f3d6b155
- MD5 553a97455160ab5c8395fc336bae853a
- SHA1 627ca96110e122a09fcb79f07e6387e8ec069b04
- SHA512 8d0d31756a13026319d7956924ddf1d65c2426f93a55b3a23b3a066b69bdbb10bb6e53eaa7bfa2fe617d91d7679a25855cd545c583651329cebdfb3af148feda
- TLSH
  T15831037816D84E7F99494A15AB02F17D370A12FFC2082819F35DC57E278C25439F12CD
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral13 behavioral14 behavioral15 behavioral16
- Target
  starlight/controller_connection_monitor.py
- Size 7KB
- SHA256 b9ed60179927884d2c5400c89c62cec3f218fc58e095e50f38fbd4cf1f794990
- MD5 c2bf40c9668b8b1157075de303c0bee9
- SHA1 2fe78a7a4c373e723c27f39c98995829eb8ab790
- SHA512 a35779a7007528d9ca3ac7893e5de5e51a484544eee5fe758eff45ee0afd8c77e63684b433680121d29f44adf9ccbabe89f6ce7d916d28ea267eac941c776cb0
- SSDEEP 96:ZIJyAmcOlrgPaUA0wRaP3dNlYdNlEHXo1gQU9CrK0KaiKdPS:omcOZgnAbwPtPYdNlEHXMUgOqib
- TLSH
  T1A9E172021E6E152A9FD7448DA1E6E2587B40D5AFC64105327ACCB1A41FC5231D3EBF8E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  starlight/get_all_interface_ip.sh
- Size 332B
- SHA256 3ab8a48351b273838d48c432ab399ef60b36c9f5c7ee5d4d47a813ef731e13f3
- MD5 eca401c39805f527d541f2cf8b7d5510
- SHA1 543ae6d6025a045e4a5adf1d4ff43b16efbfbc16
- SHA512 d2da25b8e8cbefc184ae2b5e851f1fe5bad480a541263d14e9bdefbe9ce23d881a3d9dd97f1aaa3868b8e027f56c35ee98092f6b9c3262588ba9658c48b326ab
- TLSH
  T179E0201B6C045C5305120DC45EC6F065CF5F97EB44F6B6CC5A02255557D94413070AC4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral19 behavioral20 behavioral21 behavioral22
- Target
  starlight/host_file_update.sh
- Size 4KB
- SHA256 55f231ae9e58dad16c1fae908b28257794a1a621019f2670bbd33ff5e244fa56
- MD5 23a2ce4ae02cdef5a3c46d85fb304ff9
- SHA1 93849c74897a989ee76de95af4f21e9511434611
- SHA512 cb0fe4a778b44da5fcaef01d75d2075c2fcbd0692c14e29a5b1b7941841a4e7e452337b99a83ac845c30a024defc6d493b9e4deb1f671ee3df18f3bbcae94165
- SSDEEP 96:U8IDCPx7hQopsfueSUeoe/YFGRxvRBSRWsHE5:JPA5RxtGRxvRBSRWsk5
- TLSH
  T19D91931A96E0CD7C13B6C4ADBA4B5006170BD65750C40C247F9CD9881FC2E6863FEBAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23 behavioral24 behavioral25 behavioral26
- Target
  starlight/id_rsa_ox2.pub
- Size 573B
- SHA256 0fc2b4385260e18317ac6a54c5f39a7e7810354734997b9d2c8bf21794625ca3
- MD5 a639857905864bb45ee88f0ff2684e9c
- SHA1 70369b3d0ee61c6a50a5d3c06845378accfc2a71
- SHA512 4e80773a8892e1cd15b7494fe3f55ea3f5507be1077a400c763b20fa231eeed692bea25817ea09406628dba66e6e962bda764f2e6fddf7116a9f6719cabbcada
- TLSH
  T19DF041B0D288214A0C76B214171069D00A2A0B03A28CB6A1F441397A70CA895E86B570
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  starlight/initledgpiopins.sh
- Size 2KB
- SHA256 e0b8dd5efcd3bae1ea44e8f155a5ac47e6ffbe9b916b6b442ea2e0135ee3ae8c
- MD5 e75b8bccfbe25fcfccf35aba75344ad6
- SHA1 79ad632d2a832cc6b94c30fa82e8f2e596558eb1
- SHA512 c2765742a394d3fd30eb7370c195918258ce7959f4574f48a1e3fa31b7dd85ae999aaa68589a4dedc847aa39c6a3801a2b4c0dc6e858a74a31067095ece1c1fd
- TLSH
  T19A516B2731446F70A4A3203D0BAFC38474789667CB08AD5B7CAE6737E8DC580A27D51A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  starlight/kill_iperf_pid.sh
- Size 860B
- SHA256 c37fa2a473a22958cc8beea83744ee31f77a5dfb21d0227bfaef82bffb6092bc
- MD5 b2d7d83c366e5283806e3582e9bbdbc0
- SHA1 02262850e73bb52c015707b71a3f8f823c8c42b7
- SHA512 26542531f6563f72b2b8f1cedb91e82d8c1338d92536870a3e4d7f2e42fe987660c391f6d5a7b7fcd8bb182057568a2870aea022b78c09171c347c0f329f87bd
- TLSH
  T1E011C209608F687D5DEC4059155D30B52F48C60B8BB5513C7CACEDCAFFE156D30E0681
- MD5 SHA1 SHA512 TLSH
Score

6^/10

discovery
- Enumerates running processes
  Discovers information about currently running processes on the system
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy