Analysis

  • custom tags

    network

General

  • Target
    winrar-keygen-linux-x64
  • Size 1.6MB
  • Sample261024-xbrx2sfe48
  • SHA256 c6d0aa76edd6a6f3cf52f7a8a2b54edfba200b85b0d3d9dc861fecf7a5408ee2
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10

Malware Config

Signatures

  • Detects references to legitimate web services potentially used as dead drop resolvers 1 IoCs

    Detects Telegram, Steam, and other legitimate web-service references that may be used to retrieve secondary C2 infrastructure.

File Explorer

  • winrar-keygen-linux-x64
    .elf 1.6MB

winrar-keygen-linux-x64

  • SHA256 c6d0aa76edd6a6f3cf52f7a8a2b54edfba200b85b0d3d9dc861fecf7a5408ee2
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Detects references to legitimate web services potentially used as dead drop resolvers

    Detects Telegram, Steam, and other legitimate web-service references that may be used to retrieve secondary C2 infrastructure.