bins.sh
First submission 2024-10-15 14:50:02
File details
File type: | Bourne-Again shell script, ASCII text executable, with very long lines |
Mime type: | text/x-shellscript |
File size: | 10.33 KB (10578 bytes) |
MD5: | 83b52b0f54758f58e53ac3ca4befd5a5 |
SHA1: | 3a5c0995d436353a1d213f1438ab31c30b050ccb |
SHA256: | 52c53ae0d6f0b2d57a887b90f874470911959cda17d86d3082a09ae31e590dd5 |
File features detected
Is DLL
Packers
Anti Debug
Anti VM
Signed
XOR
URLs, FQDN and IP indicators 1
Strings analysis - Possible IPs found 1
87.120.84.230 |
Strings analysis - Possible URLs found 28
http://87.120.84.230/bins/4BdfuLg907FGFgziFPeazPcwIhFLVjuRoN; |
http://87.120.84.230/bins/IGibxY4zOYwprLLhJNKrry2UiiJ2yAOrYX;/bin/busybox |
http://87.120.84.230/bins/i5BKWG1FDLGCdZQIYZJflKFx4L5qTn0WBR; |
http://87.120.84.230/bins/i5BKWG1FDLGCdZQIYZJflKFx4L5qTn0WBR;/bin/busybox |
http://87.120.84.230/bins/NxoSNyQAfjK3fuQfJEXVjlVjy3Al3xh7Yz;/bin/busybox |
http://87.120.84.230/bins/NwjCWnVGO624lMhHpzt0SgZ09k6Jx7YmVF;/bin/busybox |
http://87.120.84.230/bins/bc2zcAkVZAQXwDHsI4IioAxNiIOz3MW7XQ; |
http://87.120.84.230/bins/iZjBEp0O8lgVrkFduCbBaW3lnl1qiVjFSA; |
http://87.120.84.230/bins/9j2wv67rQ1cC4cluaQNEjYtXDY6I0LJ9uk; |
http://87.120.84.230/bins/qJgPyUEoRB5JEOeVTrA5UMHWySH2Ba31lX; |
http://87.120.84.230/bins/s6njwjQVrYNqocYjghtSRassod5mATAfJU; |
http://87.120.84.230/bins/9j2wv67rQ1cC4cluaQNEjYtXDY6I0LJ9uk;/bin/busybox |
http://87.120.84.230/bins/RavulrRjVV4A6kwn4BPEB7ipKRk6cBZSow;/bin/busybox |
http://87.120.84.230/bins/IGibxY4zOYwprLLhJNKrry2UiiJ2yAOrYX; |
http://87.120.84.230/bins/RavulrRjVV4A6kwn4BPEB7ipKRk6cBZSow; |
http://87.120.84.230/bins/NxoSNyQAfjK3fuQfJEXVjlVjy3Al3xh7Yz; |
http://87.120.84.230/bins/f9aeCeTtw365to8SquTIrUgrCyysFr79aj; |
http://87.120.84.230/bins/CLVJOwlTFaWrkXsAa4IRv2mWLrjKCvZBxH;/bin/busybox |
http://87.120.84.230/bins/QVxiV2PcuzKm9mDrJwEjYHrvF6kSDPYS7L; |
http://87.120.84.230/bins/QVxiV2PcuzKm9mDrJwEjYHrvF6kSDPYS7L;/bin/busybox |
http://87.120.84.230/bins/s6njwjQVrYNqocYjghtSRassod5mATAfJU;/bin/busybox |
http://87.120.84.230/bins/f9aeCeTtw365to8SquTIrUgrCyysFr79aj;/bin/busybox |
http://87.120.84.230/bins/bc2zcAkVZAQXwDHsI4IioAxNiIOz3MW7XQ;/bin/busybox |
http://87.120.84.230/bins/CLVJOwlTFaWrkXsAa4IRv2mWLrjKCvZBxH; |
http://87.120.84.230/bins/iZjBEp0O8lgVrkFduCbBaW3lnl1qiVjFSA;/bin/busybox |
http://87.120.84.230/bins/NwjCWnVGO624lMhHpzt0SgZ09k6Jx7YmVF; |
http://87.120.84.230/bins/4BdfuLg907FGFgziFPeazPcwIhFLVjuRoN;/bin/busybox |
http://87.120.84.230/bins/qJgPyUEoRB5JEOeVTrA5UMHWySH2Ba31lX;/bin/busybox |