Overview
overview
1Static
static
1customize.sh
ubuntu-18.04-amd64
customize.sh
debian-9-armhf
customize.sh
debian-9-mips
customize.sh
debian-9-mipsel
post-fs-data.sh
ubuntu-18.04-amd64
post-fs-data.sh
debian-9-armhf
post-fs-data.sh
debian-9-mips
post-fs-data.sh
debian-9-mipsel
service.sh
ubuntu-18.04-amd64
service.sh
debian-9-armhf
service.sh
debian-9-mips
service.sh
debian-9-mipsel
system_ext...cpp.so
ubuntu-18.04-amd64
system_ext...cpp.so
debian-9-armhf
system_ext...cpp.so
debian-9-mips
system_ext...cpp.so
debian-9-mipsel
system_ext...ffi.so
ubuntu-18.04-amd64
system_ext...ffi.so
debian-9-armhf
system_ext...ffi.so
debian-9-mips
system_ext...ffi.so
debian-9-mipsel
General
- Target bt_skuparser_fix_v2.0.zip
- Size 78KB
- Sample261030-krrk1aay91
- SHA256 816ef312ab152c52a0abd2dcf46f25394ba34e42c8005edca89492d4fb4663ef
- MD5 596968693e4c25b9ebdedfc171617654
- SHA1 0468b1a8782e998a9ea3352a2519acbab52cf8ea
- SHA512 da850ec38168c6174f30d6ae994fc4724f55bdb4ef7253e638ec665aac645e78f1257091a0724bc04a65d03ee4a0e5cb88cb300d89987a97c6210d124d57393a
- SSDEEP 1536:oezqtnG3XHKQMCxrquWhd6bEQs7T/MJEB1j8M5KOlBU56W2GnXYU:jqZG3zMC9QkBsfUK395KWhGnXYU
- TLSH T16D830240435C5C95E428A7B1143AAA5FF1BF38B6B365D6D42F71824E2AC38CC5370EB6
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
customize.sh
Resource
ubuntu1804-amd64-20261019-en
Behavioral task
behavioral2
Sample
customize.sh
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral3
Sample
customize.sh
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral4
Sample
customize.sh
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral5
Sample
post-fs-data.sh
Resource
ubuntu1804-amd64-20261019-en
Behavioral task
behavioral6
Sample
post-fs-data.sh
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral7
Sample
post-fs-data.sh
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral8
Sample
post-fs-data.sh
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral9
Sample
service.sh
Resource
ubuntu1804-amd64-20261019-en
Behavioral task
behavioral10
Sample
service.sh
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral11
Sample
service.sh
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral12
Sample
service.sh
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral13
Sample
system_ext/lib64/libskuparser_cpp.so
Resource
ubuntu1804-amd64-20261019-en
Behavioral task
behavioral14
Sample
system_ext/lib64/libskuparser_cpp.so
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral15
Sample
system_ext/lib64/libskuparser_cpp.so
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral16
Sample
system_ext/lib64/libskuparser_cpp.so
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral17
Sample
system_ext/lib64/libskuparser_ffi.so
Resource
ubuntu1804-amd64-20261019-en
Behavioral task
behavioral18
Sample
system_ext/lib64/libskuparser_ffi.so
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral19
Sample
system_ext/lib64/libskuparser_ffi.so
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral20
Sample
system_ext/lib64/libskuparser_ffi.so
Resource
debian9-mipsel-20260513-en
Malware Config
Targets
-
- Target customize.sh
- Size 76B
- SHA256 fed94e79b77593d1bc061cc1fab6f0ed2c05daac1c48ce279be52fcfe8c171a9
- MD5 06106c09605e8649fddc9e201b55c5fe
- SHA1 c94f26555f0ed9dcc2272955379f81c9f4b89221
- SHA512 ffb7c8ed97db91b0c327d99aa241224783df8bde5cf6d222bbbdb1117e252a1c1d8e2f150dcda3a19923e96f7da90460a47c6c2b9cd6204052ab142e4ecd9165
- TLSH T13FA024C00101104533517C0114371414173CD31037F4C4141CC741D0F4000171313D74
- MD5 SHA1 SHA512 TLSH
Score1/10 -
- Target post-fs-data.sh
- Size 1KB
- SHA256 95003d115de5a4cacf28a5287666069d7ebb32c89e72dc68a694c27b43974204
- MD5 fde1b2761ab1f89213de6660f05c4f02
- SHA1 9d97ff54812f9341f8ed2d86ec2c025a65f157bc
- SHA512 034f3fe269ea36ec6d9dd810a67d875a85318a32557e420028aa1689670cf7a26cd09278446cbda0dff8bf98a312a75d8650f053abcf37b33e2381a35470f9dd
- TLSH T1B941648A736860B43CDC00AD5CDE9B45BD70121B4ABD35494DD5F4D87A8C239B1BBA3E
- MD5 SHA1 SHA512 TLSH
Score1/10 -
- Target service.sh
- Size 2KB
- SHA256 9a2240b92edea5a0df77bdbf71a5d9a937c6f62d0b21ad3bb3cd56b0a5f7a903
- MD5 c3a269db16f79168f710e46e01e822e1
- SHA1 1d75f52cb9ded4e37c72582996213918f74884ab
- SHA512 3149235decefef61bc02b4e21ffad6f01f8a32cc2a33178972c44fa3af858f634dedfb729e4233bcf7ef44293452e0b0711408915217493b445a93874535792c
- TLSH T15241859F363564B6398D012CADCDD951B991133506BD349329D2F8C8B8BC229F1FAD35
- MD5 SHA1 SHA512 TLSH
Score1/10 -
- Target system_ext/lib64/libskuparser_cpp.so
- Size 83KB
- SHA256 b76f8a99a31bd3d1039f0f7be5c2e00d445151b84ea146a8caf350c757a9b449
- MD5 dc5c15dfbe99030fb7b749fabf5b8e8e
- SHA1 174b6f954f037256ccd5b79c33fa095df68931c9
- SHA512 1b0791caf2eaf0f490eb1ed3edd1a31d2d352926e6130de664deebe12667ba0e035f1abffcd59cb37c3a903a14ac2e5bbad9c8e68bc9c516e8d1c8a7924d6da2
- SSDEEP 768:re437trEb5eud2OIW/u4UR6elmichCXhWMUBJD9k5Zh:re437trEb5eBO1UEew3CXhWMs125n
- TLSH T12783098223AC1CB3D2C16D78C19762B89C763D74DD79D7BEA392C60F2902F442991BB5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target system_ext/lib64/libskuparser_ffi.so
- Size 176KB
- SHA256 a48be31968b1421b9d15c9c1f28cb69907444e20b9d97672ee68fe6c59f32b68
- MD5 8d38c0e99a745554b9a8342c7c996cec
- SHA1 a34ee0df038bd2ad3979fb4f75bb1a1620416e32
- SHA512 ccfaadbe42efb936a99c95f8f443ace77e2345237c4bf54f76e8960e96599e9a788e406fc996d04d6f7b8b6ebd05caa0cc7ba807f2d7ffaf21d1d6d79f5c155e
- SSDEEP 1536:lPqGBOO9Hkl6jdnvBznZop6SLd5nLZHxULUWxTzEoFK5EyTOv9pQu/ZTJE7ju:1OOOLrKu5Eydu/Zy7
- TLSH T176045C09AE3C705EFAC3943DC6190590BA77307C271251372963501BE78B6EB672E7EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10