Benign Download

pds-vfio-pci.ko.zst

C2 infrastructure using multiple communication methodsRepeated NOP-run pattern in executable section
SHA-25649ee7a683b57688c3727a512692aa4120f9e6d24027ef85e7d66ad85a3bd692c
MaleculeO₂(AsC)

Evidence

Repeated NOP-run pattern in executable section 0x3e0–0x430
0x3e000000000000000000000000000000000................
0x3f090909090909090909090909090909090................
0x400e800000000554889e5415541544989fc.....UH..AUATI..
0x410534889f34883ec5048895598654c8b2dSH..H..PH.U.eL.-
0x420000000004c896de04189cde800000000....L.m.A.......
0x430ba08000000410fb78c247c06000048 .....A...$|...H
C2 infrastructure using multiple communication methods 0x1108–0x1138
0x11088b45d865482b0500000000754b4883c4.E.eH+.....uKH..
0x1118585b415c415d415e5d31c031d231c931X[A\A]A^]1.1.1.1
0x1128f631ff4531c0e9000000008b8b780600.1.E1........x..
0x1138004589e848c7c20000 .E..H....
GPL license reference 0x60e0–0x6110
0x60e05d31ffe9000000006c6963656e73653d]1......license=
0x60f047504c00617574686f723d4272657474GPL.author=Brett
0x610020437265656c6579203c62726574742e Creeley <brett.
0x6110637265 cre

No evidence locations were recorded for this file. Raw result

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.