Benign Download

act_ctinfo.ko.zst

C2 infrastructure using multiple communication methodsRepeated NOP-run pattern in executable section
SHA-256cbe7be65baa2be4787cc8d7cec64e952b065934144c3142a5709808aa24f4031
MaleculeO₂(AsC)

Evidence

Repeated NOP-run pattern in executable section 0x80–0xd0
0x8000000000000000000000000000000000................
0x9090909090909090909090909090909090................
0xa0e800000000488b074839c77464554889.....H..H9.tdUH.
0xb0e54156448b350000000041554989fd41.AVD.5....AUI..A
0xc0544c8d60d853e800000000498b842460TL.`.S.....I..$`
0xd00e00004a8b1cf0e800000000488b33 ...J........H.3
C2 infrastructure using multiple communication methods 0xc15–0xc45
0xc15482b15000000000f858c0300004883c4H+...........H..
0xc25585b415c415d415e5d31d231c931f631X[A\A]A^]1.1.1.1
0xc35ff4531c04531c94531d24531dbe90000.E1.E1.E1.E1....
0xc4500000fb7f031d24889 .....1.H.
GPL license reference 0x14e4–0x1514
0x14e400000000000000006c6963656e73653d........license=
0x14f447504c006465736372697074696f6e3dGPL.description=
0x1504436f6e6e656374696f6e20747261636bConnection track
0x1514696e67 ing

No evidence locations were recorded for this file. Raw result

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.