sh4

First submission 2024-07-05 15:07:02

File details

File type: ELF 32-bit LSB executable, Renesas SH, version 1 (SYSV), statically linked, stripped
Mime type: application/x-executable
File size: 90.0 KB (92164 bytes)
MD5: 657cfd86ba1f0ef73f57942d0462e904
SHA1: 7565a2261f36139e52bd6fc609a939e21c65d76e
SHA256: b6942243f88534a8a2b1c5a616497286a7406b453c0e774693291ae02a84b574

File features detected

Is DLL
Packers
Anti Debug
Anti VM
Signed
XOR

OSINT Enrichments

Virus Total: 44/78 VT report date: 2024-07-13 00:25:40
Malware Type 2 trojan dropper
Threat Type 3 gafgyt mirai bashlite

Strings analysis - Possible IPs found 8

107.182.129.217
1.9.2.8
3.0.4.2
8.8.8.8
1.9.0.8
8.8.4.4
1.9.1.1
1.9.1.3

Strings analysis - Possible URLs found 5

http://www.baidu.com/search/spider.html)
http://www.baidu.com/search/spider.htm)
http://www.billybobbot.com/crawler/)
http://fast.no/support/crawler.asp)
http://feedback.redkolibri.com/