Benign Download

ascot2e.ko.zst

C2 infrastructure using multiple communication methodsRepeated NOP-run pattern in executable section
SHA-256c5a47feb7a8635e23ac03ecd194cffa2bbe66543263bb8496ad95ecb6d8364cb
MaleculeO₂(AsC)

Evidence

Repeated NOP-run pattern in executable section 0x130–0x180
0x13000000000000000000000000000000000................
0x14090909090909090909090909090909090................
0x150e800000000488b8718030000556900e8.....H......Ui..
0x1600300004889e55d890631c031f631ffe9...H..]..1.1.1..
0x170000000009066662e0f1f840000000000.....ff.........
0x180909090909090909090909090909090 ...............
C2 infrastructure using multiple communication methods 0xa37–0xa67
0xa3745d865482b0500000000751a5a4889d8E.eH+.....u.ZH..
0xa47595b415c415d415e5d31d231c931f631Y[A\A]A^]1.1.1.1
0xa57ffe900000000e8000000000f1f006666..............ff
0xa672e0f1f840000000000 .........
GPL license reference 0x19f2–0x1a22
0x19f200000000000000006c6963656e73653d........license=
0x1a0247504c00617574686f723d696e666f40GPL.author=info@
0x1a126e657475702e72750064657363726970netup.ru.descrip
0x1a2274696f tio

No evidence locations were recorded for this file. Raw result

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.