Benign Download

via-sdmmc.ko.zst

C2 infrastructure using multiple communication methodsRepeated NOP-run pattern in executable section
SHA-25685a4e071e574f14181711dca58e780634f62bc0c5ea04329adfa1c0c2b22160b
MaleculeO₂(AsC)

Evidence

Repeated NOP-run pattern in executable section 0x1c0–0x210
0x1c000000000000000000000000000000000................
0x1d090909090909090909090909090909090................
0x1e0e80000000055488b47384889e58a5002.....UH.G8H...P.
0x1f083ca308857428a50058857458a500788..0.WB.P..WE.P..
0x20057478a50088857488a50098857498a40WG.P..WH.P..WI.@
0x2100a88474a5d31c031d231ffe9000000 ..GJ]1.1.1.....
C2 infrastructure using multiple communication methods 0x149f–0x14cf
0x149fd000000048c7c700000000e800000000....H...........
0x14af585b415c415d415e5d31c031d231c931X[A\A]A^]1.1.1.1
0x14bff631ffe900000000488b7008e960ffff.1......H.p..`..
0x14cfff498b142448c7c600 .I..$H...
GPL license reference 0x228a–0x22ba
0x228a657320496e632e006c6963656e73653des Inc..license=
0x229a47504c0073726376657273696f6e3d35GPL.srcversion=5
0x22aa343734364331433331393931374142424746C1C319917ABB
0x22ba314139 1A9

No evidence locations were recorded for this file. Raw result

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.