678bcebe60ffaac6942aa066c3e2fc4d7888b00bc5d1e621acf415cf94b7ec1b

General

Target
Relay-Linux.tar.gz
Size 15.3MB
Sample261113-nffadaaz4n
SHA256 678bcebe60ffaac6942aa066c3e2fc4d7888b00bc5d1e621acf415cf94b7ec1b
MD5 31d9fe822a313b06d1889464121d8716
SHA1 12ca02c5ef7271d368f3916a2f3350f3563d7ee4
SHA512 21f33c04d14acc13ca36fbb047df03fd9256a8e099008d889e741360dc2a3d89b6094f79b64a3601204391b5dc4505601ba2eeac204be53433551596681016fa
SSDEEP 393216:ZB2XUYd0LvzPrK6PLFAGTTjFhE97REGvRcQbDui50zi+3LZ1Ua:D2XUogRPxAGTTjFhE9VEGvRcKDV0ZLZv
TLSH
T125F633A053B0E5E3423B4F697CED74B42815E274BE9D9E028065DF00761BCDB0B7AA6D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Relay-Linux/Relay.desktop
- Size 223B
- SHA256 1c18ad88f0721dd4e3873ce7ebcd1f17120d8f35cfba5f510e59a15d96768b76
- MD5 088f19eb89d46de120385ebd02b47a3e
- SHA1 046c0fbcfcf2d0f89e011230f2fd5688ac37a76c
- SHA512 035ec9add658fa6a256b6b9c39b3ee8931d239b6decdc00d4eec980dfb32fa8fc14205307d0e49fe00ba619913a9f0e0440c6304f0861a3eeb89ea0625650f95
- TLSH
  T139D023570C1931BE5A4D7094CBC2DA45B67BD45D01E834FC7590461F62D05CC64C6DD7
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral1
- Target
  Relay-Linux/relay
- Size 4.1MB
- SHA256 ce6541abd611d21b8de180eabb777cf5b9d2a48d57dee558528ca92a053c508f
- MD5 5e3a2afed0ecb98cdf66e521b6cfecae
- SHA1 7d7a01026782081d9ed75609581c4b64a1de247d
- SHA512 f548ebd32cba60757a2922666b2816ae1ba07a0b473178157497772a7e7841be0e792ef505817cb33b4752f18b6f7b26441beba6d867025b02bb0bdf6fd4fd6f
- SSDEEP 49152:XPpyTMRIyTfGGwIU6iooN5lk3AsS3gVTnjdllIUSmH6mkdqZYcgyUGDFTHGdqyGT:XPTBP+7Fk3As7FVkA1gIFTHGdqW6x
- TLSH
  T17C165B43F9B144E8C9AACC34839EA133E725F84A4625B66B3BD85B003F2AF509F1D755
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

antivm discovery
- Checks hardware identifiers (DMI)
  Checks DMI information which indicate if the system is a virtual machine.
  antivm
- Reads hardware information
  Accesses system info like serial numbers, manufacturer names etc.
  discovery
behavioral2
- Target
  Relay-Linux/run-relay.sh
- Size 72B
- SHA256 b6ca06c408519b629122253a2112b6cdf11fc504e5858fae1fb5fcef79a6b2bf
- MD5 0788fa419fb2425e2efb0728c7670f80
- SHA1 8e2d665897d9d43944c3c2fcb7836b007c4ce234
- SHA512 62c4a730bd9b6160fef666e21d1f8788c6823de3c9f6b3ef9e4acf63b84dea1c0b41de96d944ad72de456248bcb660828846271c3e17431931275d01b3432d7e
- TLSH
  T104A024053C050C54C74577030C0007405DD1D0FF0300FC4C40D01C05C31034334C471D
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral3
- Target
  Relay-Linux/syncthing
- Size 32.4MB
- SHA256 f5c12679f2bad1b5eff619ba7b04ead1a457e439a1e55dc640d4d8995d7f4dbd
- MD5 5b39e1d77ef084d47320d156243cc99a
- SHA1 add5b47bc3e194c55b6810eb6c4eb8166566e14a
- SHA512 6d66b6bcad1559638de5e62b98bf96c8dfe3f7a893bb6f6bc99be02a2db9f6eb057c462965fcbf4a261201e3b945002f2f5baaa7335bd7c6784c719f22bed9c4
- SSDEEP 196608:m+Xp01tEmesZdRP9XIIGc5RD8rFrphm8KiDQLT0HJi5zSQB9y9S52u5CzNnA4:m+ZytmYdx9FAZmz800A5g22u5yJ
- TLSH
  T155775B03EA6604E8C1EED535C6629623BB717C498B3023D72B60F6342F76BD066BE754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4