DigitalSide Threat Intel

pftp

First submission 2024-10-11 20:50:03 Last sumbission 2024-10-11 22:36:04

File details

File type: ELF 32-bit MSB executable, Motorola m68k, 68020, version 1 (SYSV), statically linked, not stripped
Mime type: application/x-executable
File size: 156.29 KB (160038 bytes)
MD5: 9f66878a7c904a91c38c623939d90361
SHA1: 695b99d6f9a266988c54d17a61a69e0292545583
SHA256: 6a33c1d93ab8ab95cdc4a70da46db07d609244680b330327d13a7b4a83bf4bb9

File features detected

Is DLL
Packers
Anti Debug
Anti VM
Signed
XOR

URLs, FQDN and IP indicators 2

URL Host (FQDN/IP) Date Added
hXXp://srothienhoa.com/pftp VirusTotal Report srothienhoa.com VirusTotal Report 2024-10-11 22:36:07
hXXp://160.22.160.59/pftp VirusTotal Report 160.22.160.59 VirusTotal Report 2024-10-11 20:50:03

Strings analysis - Possible IPs found 11

1.9.2.8
3.0.4.2
8.8.8.8
1.9.0.6
1.9.2.6
1.9.2.4
1.8.1.11
1.9.0.8
160.22.160.59
1.9.1.1
1.9.1.3

Strings analysis - Possible URLs found 5

http://www.baidu.com/search/spider.html)
http://www.baidu.com/search/spider.htm)
http://fast.no/support/crawler.asp)
http://feedback.redkolibri.com/
http://www.billybobbot.com/crawler/)