e629171b4d9343656629f76a06880b162c9a7d2a53ee9eb72606c30d372a2bf1 | Triage™

Login
Reports

Overview

overview

1

Static

static

1

action.sh

ubuntu-18.04-amd64

action.sh

debian-9-armhf

action.sh

debian-9-mips

action.sh

debian-9-mipsel

customize.sh

ubuntu-18.04-amd64

customize.sh

debian-9-armhf

customize.sh

debian-9-mips

customize.sh

debian-9-mipsel

post-fs-data.sh

ubuntu-18.04-amd64

post-fs-data.sh

debian-9-armhf

post-fs-data.sh

debian-9-mips

post-fs-data.sh

debian-9-mipsel

service.sh

ubuntu-18.04-amd64

service.sh

debian-9-armhf

service.sh

debian-9-mips

service.sh

debian-9-mipsel

system/bin...llback

ubuntu-18.04-amd64

system/bin...llback

debian-9-armhf

system/bin...llback

debian-9-mips

system/bin...llback

debian-9-mipsel

system/bin...estart

ubuntu-18.04-amd64

system/bin...estart

debian-9-armhf

system/bin...estart

debian-9-mips

system/bin...estart

debian-9-mipsel

system/bin...-start

ubuntu-18.04-amd64

system/bin...-start

debian-9-armhf

system/bin...-start

debian-9-mips

system/bin...-start

debian-9-mipsel

system/bin...status

ubuntu-18.04-amd64

system/bin...status

debian-9-armhf

system/bin...status

debian-9-mips

system/bin...status

debian-9-mipsel

Sharing

Copy URL Twitter E-mail

General

Target
zapret2-magisk-v2.3.8.zip
Size 1.7MB
Sample261102-lvbvdsa12k
SHA256 e629171b4d9343656629f76a06880b162c9a7d2a53ee9eb72606c30d372a2bf1
MD5 434c1c020cc7131e8953857ff7c4073d
SHA1 a1ac79db7ea935ca17e930c902b6243c956dcaa8
SHA512 05c6d905b3a643db2dfa4ca0ccca76d1edf3a5523598f976eba20f129d9ad2373cda772dc9245c800fd073c60420d85ca67d06695bb7441d39f15c0f8fe27fea
SSDEEP 49152:LAcCNZqV1NU6QnLUw42HU1cCtH41aUjJyt:LlCNi1eF47cgUFC
TLSH
T1F8852378C6241196E60F95B5C18A13DD13396A0F42C77A0BB983D677FD8B0527AF20DB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

linux

Static task

static1

Behavioral task

behavioral1

Sample

action.sh

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

action.sh

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

action.sh

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

action.sh

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

customize.sh

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

customize.sh

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

customize.sh

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

customize.sh

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

post-fs-data.sh

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

post-fs-data.sh

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

post-fs-data.sh

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

post-fs-data.sh

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

service.sh

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

service.sh

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

service.sh

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

service.sh

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

system/bin/zapret2-full-rollback

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

system/bin/zapret2-full-rollback

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

system/bin/zapret2-full-rollback

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

system/bin/zapret2-full-rollback

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

system/bin/zapret2-restart

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

system/bin/zapret2-restart

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

system/bin/zapret2-restart

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

system/bin/zapret2-restart

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

system/bin/zapret2-start

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

system/bin/zapret2-start

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

system/bin/zapret2-start

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

system/bin/zapret2-start

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

system/bin/zapret2-status

Resource

ubuntu1804-amd64-20261019-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

system/bin/zapret2-status

Resource

debian9-armhf-20260513-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

system/bin/zapret2-status

Resource

debian9-mipsbe-20260513-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

system/bin/zapret2-status

Resource

debian9-mipsel-20260513-en

debian-9-mipsel

0 signatures

150 seconds

Malware Config

Targets

- Target
  action.sh
- Size 696B
- SHA256 fb4cc0a81b85392a375d6ced7f6c2e00d3e4537f6461e84fadbe46ccb6bd9f9b
- MD5 9f787dabef7dc52c27b0a19f5ce607bd
- SHA1 abf63dbcc05c432521bcbdfc6ff6feca3c2bcf8c
- SHA512 22451809dcbbfdd9528001913f075d536049cc0d89824383c8c4817ff14c96552ce069a671ee6f8de614998774ef91bb64acbbb82aa6e87ef9a751ecac11d3cb
- TLSH
  T16501C013652855334C07371311CCBE47B1B00AD6A1F8B01D755E54ACCFA29647AFFD54
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral1 behavioral2 behavioral3 behavioral4
- Target
  customize.sh
- Size 8KB
- SHA256 b8e0e020c477c1bc7ed8bd750b7a3fe88494977e041f369cd353d28bea5fffd7
- MD5 8ce9e8cd7219a59f2b42e3e4d2637108
- SHA1 55d9c54bf3d78202acd479065db04b06c4bd2adf
- SHA512 934762e9d5ac33473b030f6f6d7bd82a74d882c2f902b7ef82181ee7bb2d795d2b3754975edfc48edf88c0b1d99251e2a0f9ef372cfeeb07819765de24ad11d5
- SSDEEP 192:DXxIBw8nDGun9MiQkcZoiDyDbvS70xTt6AIxhFyg4+6RohuULGNuEHZ4IUG:DBIGUnfjcZkRr6AI7gd+6RohuULG0E5h
- TLSH
  T18E0209A4F5940675154AD3A2E3840482BBB1D6FB99C87394F01D86EC1FB88F171B7BB2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6 behavioral7 behavioral8
- Target
  post-fs-data.sh
- Size 930B
- SHA256 fb0e560d92d15c128bc75e3b426d95b87d38c644df92b91dbe145ebb9efd9194
- MD5 fd118538d9e0fb863e13ff471cc31ee9
- SHA1 2f8655b6ae65a8e9d2af28bf22eba72c29141ba0
- SHA512 50ddc60ca8d9969f63158286a7c533f213e9b7c928f71c640abbf037f955b073db745ea4806c3f91f4058984d136d86e00954ff1c4e8bea542866dbc21ec0c75
- TLSH
  T163114191568D92330B8391A0B7CEA7E2376231317DB3302CA8DD20489A8701E31E7FA6
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral10 behavioral11 behavioral12 behavioral9
- Target
  service.sh
- Size 8KB
- SHA256 35576beb91197d25755a2845216d754e9021c820e66d24e1825f37e0dc9b1f80
- MD5 81daf82b71aeb88adf8476117c05c414
- SHA1 e3b20b7b6531cf70be51cb38e07a58708d59bc16
- SHA512 8f1ffd0544ca078f62f9a6ec0439ddd28d8c5d6af4432ee5099b7f9b85ee5eca0e2664c5fe6539f35c9ad21156482599dd7868ab9b13b51e7aea80aafb1b55a5
- SSDEEP 192:cbBx8rgzWsJY2EOOXl+1FJRHih782dPMtlPP8KyG:JGK2EOCKFJZi7SpPpyG
- TLSH
  T1FE0296526547427B2F92805DEABEA2807B6461934FA33078BC9DA35C3F0D04E42F97E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14 behavioral15 behavioral16
- Target
  system/bin/zapret2-full-rollback
- Size 93B
- SHA256 0202089c79f5a2ec9b7ce93ca680f835a5ef70692beb7b386f21d0175a965a28
- MD5 1bde0059bcabe6bdd057adf8ad2d6b1b
- SHA1 471c716b54726005e29a82dcab99844809ec23cb
- SHA512 cd873d56009e3c88c591608a3bc446541dc293e6d9d03455e263953805364203ce82d62a3bc990e4f857a3d511048e9ef6c328b58b5a0de9dd3c23ced481248b
- TLSH
  T134B0123C0A2114B1244BA4339D50711405AB2DC036C401810546C2AF640A1292E73283
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral17 behavioral18 behavioral19 behavioral20
- Target
  system/bin/zapret2-restart
- Size 87B
- SHA256 09c4ec2d4cda596f62d538da9dd6cceed3519524b42cfdae5912bccc81d5a582
- MD5 57aeba12a29a344ffe099175a650ad1f
- SHA1 5b552e1e3ecf58ad19870a5fa2dca662b79717dc
- SHA512 c7f599766e56dbc019fe80b3f65ea344565c4eb4c3b2e672a88b82632c8be01c24201454bb44ff7d079b803d54e4f955b9d681f420d473c3d7757ad76f78036e
- TLSH
  T15AB0123415211021180950235D60711005EB2CC033C000450946C19E640912D2D73683
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral21 behavioral22 behavioral23 behavioral24
- Target
  system/bin/zapret2-start
- Size 85B
- SHA256 26281ae6b75020ac8898d9b45158d8074b278c15ade3234b4c6af62b1928c94d
- MD5 1cc54f1669c15dc2f57121b5376b274f
- SHA1 f94588fc5bc2b60d4cb5e7754ac4d415aaf76b98
- SHA512 19c377e9863afd88fd33e7bf3db839363a24f91542faf94b687faef86b4ce87fd76b2f1d19304fbde31fc8acbe4fc4f7808d415ae9fa39bbc99270cb96c92116
- TLSH
  T174A0123515225021280950225D50721005E72CC032C000450946C19E640A1292D72283
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral25 behavioral26 behavioral27 behavioral28
- Target
  system/bin/zapret2-status
- Size 86B
- SHA256 642cc0836d869ed770686966461d747b8dbe8963e7823fce0729d431c8d41646
- MD5 deeaffb1bfccad1959707400baebd09d
- SHA1 112baa22fabbd391eeac71c77337f004f21cce81
- SHA512 94da1288347df4daea8bf833e89d70c0edfa2d93e0c10d1e5e50715418d3c88f34387a9313a1f4420a8312f2a69f87c734cef86a69fccca0dbbe5e8274a21fc7
- TLSH
  T15FA0123A15215021280950625D50712009AB2CC032C000550546C19E64091652D732C3
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral29 behavioral30 behavioral31 behavioral32

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy