bix[.]sh[.]elf | Triage™

General

Target
bix.sh.elf
Size 300KB
Sample261024-dxkw3sssft
SHA256 edcd4de69b7e4c14a8948a7a8c600a7ce22731fbd5da9fbdae7c8f59d5f2fb90
MD5 25e3a3b7d8b2a95a967538f331577c46
SHA1 31cd482000f10047d9bd53698953bb3c8e8d15ae
SHA512 e5837dd5cd2a67c55b0f2bb281ad2b12e42fe496ae4f20ccfcf711ed2b1e82363babe8a77ad6d64933ba1a67481e973035546327d59964bf9cc285bcf847b056
SSDEEP 3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioqa5POdOQ33QE:p3lOYoaja8xzx/0wsxzSiKPqOJE
TLSH
T1EB6401CBEB11BC3BD940077125AB0B5DF7B8DA9A82C7E180F294C55E3CBA285B7911C5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

upx

Patched UPX-packed file 1 IoCs

Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

resource	yara_rule
sample	patched_upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

SHA256 edcd4de69b7e4c14a8948a7a8c600a7ce22731fbd5da9fbdae7c8f59d5f2fb90
MD5 25e3a3b7d8b2a95a967538f331577c46
SHA1 31cd482000f10047d9bd53698953bb3c8e8d15ae
SHA512 e5837dd5cd2a67c55b0f2bb281ad2b12e42fe496ae4f20ccfcf711ed2b1e82363babe8a77ad6d64933ba1a67481e973035546327d59964bf9cc285bcf847b056
SSDEEP 3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioqa5POdOQ33QE:p3lOYoaja8xzx/0wsxzSiKPqOJE
TLSH
T1EB6401CBEB11BC3BD940077125AB0B5DF7B8DA9A82C7E180F294C55E3CBA285B7911C5
MD5 SHA1 SHA512 SSDEEP TLSH

linux mipsbe

Patched UPX-packed file

Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.
UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx