skid.arm4

First submission 2024-02-08 17:35:02

File details

File type: ELF 32-bit LSB executable, ARM, version 1 (ARM), statically linked, with debug_info, not stripped
Mime type: application/x-executable
File size: 101.31 KB (103742 bytes)
MD5: 8402933b4622e3981e527e942cd03a05
SHA1: ee3430a518432cdad86c65a1b3cc8ef269a7f850
SHA256: cf77d10a4548ec5b86b137735849f53a31c79a4974511182af547b7bfd909e30
Virus Total:

File features detected

Is DLL

Packers

Anti Debug

Anti VM

Signed

XOR

URLs, FQDN and IP indicators 1

URL Host (FQDN/IP) Date Added
hXXp://54.88.122.159/skid.arm4 VirusTotal Report 54.88.122.159 VirusTotal Report 2024-02-08 17:35:02

Strings analysis - Possible IPs found 7

1.9.2.8
54.88.122.159
1.9.0.8
8.8.4.4
3.0.4.2
1.9.1.1
1.9.1.3

Strings analysis - Possible URLs found 5

http://www.baidu.com/search/spider.html)
http://www.baidu.com/search/spider.htm)
http://www.billybobbot.com/crawler/)
http://fast.no/support/crawler.asp)
http://feedback.redkolibri.com/