Oblivion121.sh

First submission 2024-07-09 18:26:02

File details

File type: Bourne-Again shell script, ASCII text executable
Mime type: text/x-shellscript
File size: 1.74 KB (1780 bytes)
MD5: 67d459f74be70ae41a5f3a5b3b179f45
SHA1: 8e29b54544f21fb1d963d66ac0ee9453952f5f04
SHA256: 73c28f32bf1e407cd00ad8874c19a08aa224e28822750a909d7ae55a3cbf655a

File features detected

Is DLL
Packers
Anti Debug
Anti VM
Signed
XOR

URLs, FQDN and IP indicators 1

URL Host (FQDN/IP) Date Added
hXXp://dhcp-211-248-59-5.metro86.ru/Oblivion121.sh VirusTotal Report dhcp-211-248-59-5.metro86.ru VirusTotal Report 2024-07-09 18:26:02

Strings analysis - Possible IPs found 1

5.59.248.211

Strings analysis - Possible URLs found 20

http://5.59.248.211/bins/jade.sh4;
http://5.59.248.211/bins/jade.arm5;cat
http://5.59.248.211/bins/jade.sh4;cat
http://5.59.248.211/bins/jade.arm4;cat
http://5.59.248.211/bins/jade.ppc;
http://5.59.248.211/bins/jade.arm6;cat
http://5.59.248.211/bins/jade.arm7;
http://5.59.248.211/bins/jade.arm4;
http://5.59.248.211/bins/jade.arm6;
http://5.59.248.211/bins/jade.m68k;
http://5.59.248.211/bins/jade.mpsl;cat
http://5.59.248.211/bins/jade.m68k;cat
http://5.59.248.211/bins/jade.x86;
http://5.59.248.211/bins/jade.arm7;cat
http://5.59.248.211/bins/jade.x86;cat
http://5.59.248.211/bins/jade.mips;cat
http://5.59.248.211/bins/jade.mips;
http://5.59.248.211/bins/jade.mpsl;
http://5.59.248.211/bins/jade.arm5;
http://5.59.248.211/bins/jade.ppc;cat