Benign Download

Spoofer.Linux.Kod.b

Imports POSIX socket creation APINo RELRO (GOT writable after load)
SHA-256b0821d1b57f1c94921fcf9939c23c42e7add813ed82cd07f090db829e382c995
MaleculeH(Cm₄)Md(He)

Evidence

Converts host to network short 0x26b–0x36b
⋯3 more rows
0x29b66006d656d63707900706572726f7200f.memcpy.perror.
0x2ab736f636b6574005f5f64657265676973socket.__deregis
0x2bb7465725f6672616d655f696e666f0073ter_frame_info.s
0x2cb656e64746f006d656d736574006e746fendto.memset.nto
0x2db687300676574686f737462796e616d65hs.gethostbyname
0x2eb0068746f6e730065786974005f494f5f.htons.exit._IO_
0x2fb737464696e5f75736564005f5f6c6962stdin_used.__lib
⋯7 more rows
Usage: label (title case) 0x967–0xa17
0x96700000000000000000000000000000000................
0x9770000000000000000004b4f442073706f.........KOD spo
0x9876f6665722062792049676e69746f7220ofer by Ignitor
0x997616e64206b6c6570746f0a0055736167and klepto..Usag
0x9a7653a202573203c7372633e203c647374e: %s <src> <dst
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.