Benign Download

ivtv-alsa.ko.zst

C2 infrastructure using multiple communication methodsRepeated NOP-run pattern in executable section
SHA-25610ed4089be2110489cbc33bc0d55aa9b1d366c16bb181334fbe862c0bcfa9d4b
MaleculeO₂(AsC)

Evidence

Repeated NOP-run pattern in executable section 0x98–0xe8
0x9800000000000000000000000000000000................
0xa890909090909090909090909090909090................
0xb8e8000000004885ff7459554889f84889.....H..tYUH..H.
0xc8e54883ec08488bbf900100004885ff74.H...H......H..t
0xd820488b174885d2740b48c782803c0000 H..H..t.H...<..
0xe800000000488945f8e800000000488b ....H.E......H.
C2 infrastructure using multiple communication methods 0xa74–0xaa4
0xa742b05000000000f85b70000005a4489e0+...........ZD..
0xa84595b415c415d415e5d31d231c931f631Y[A\A]A^]1.1.1.1
0xa94ff4531c04531c9e90000000031f689c1.E1.E1......1...
0xaa448c7c20000000048c7 H......H.
GPL license reference 0x17c6–0x17f6
0x17c66e3d312e342e33006c6963656e73653dn=1.4.3.license=
0x17d647504c006465736372697074696f6e3dGPL.description=
0x17e6435832333431352f4358323334313620CX23415/CX23416
0x17f6414c53 ALS

No evidence locations were recorded for this file. Raw result

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.