Benign Download

nfcsim.ko.zst

C2 infrastructure using multiple communication methodsRepeated NOP-run pattern in executable section
SHA-2569f2bd4889ae7066a155b5bda6b53651b55f3507634e75ef11eddd9c9be294a9a
MaleculeO₂(AsC)

Evidence

Repeated NOP-run pattern in executable section 0xd0–0x120
0xd000000000000000000000000000000000................
0xe090909090909090909090909090909090................
0xf0e80000000055488b47204088b0900000.....UH.G @.....
0x1000031c04889e55d31f631ffe900000000.1.H..]1.1......
0x11090909090909090909090909090909090................
0x120e800000000488b472085f67521b901 .....H.G ..u!..
C2 infrastructure using multiple communication methods 0xc01–0xc31
0xc0105000000007405e8000000005a4889d8.....t......ZH..
0xc11595b415c415d415e5d31d231c931f631Y[A\A]A^]1.1.1.1
0xc21ff4531c0e90000000000000000000000.E1.............
0xc3100000000000000b703 .........
GPL license reference 0x1185–0x11b5
0x1185f631ffe9000000006c6963656e73653d.1......license=
0x119547504c0076657273696f6e3d302e3200GPL.version=0.2.
0x11a56465736372697074696f6e3d4e464353description=NFCS
0x11b5696d20 im

No evidence locations were recorded for this file. Raw result

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.