Benign Download

mpr121_touchkey.ko.zst

C2 infrastructure using multiple communication methodsRepeated NOP-run pattern in executable section
SHA-256dc9412c7b480b8fcb398863b3758da64baaba3ec28ccdad48113ac83480138c8
MaleculeO₂(AsC)

Evidence

Repeated NOP-run pattern in executable section 0x90–0xe0
0x9000000000000000000000000000000000................
0xa090909090909090909090909090909090................
0xb0e80000000055488d4fe04889e54883ec.....UH.O.H..H..
0xc010488b5778f687ec0000000174274883.H.Wx.......t'H.
0xd0bf2801000000741d8bbf2403000031f6.(....t...$...1.
0xe0488955f048894df8e800000000488b H.U.H.M......H.
C2 infrastructure using multiple communication methods 0x2c3–0x2f3
0x2c3e8000000004409f00f85000000006690.....D........f.
0x2d35a5b415c415d415e5d31d231c931f631Z[A\A]A^]1.1.1.1
0x2e3ffe900000000418b4d14488d73208945......A.M.H.s .E
0x2f3dc48c7c20000000048 .H......H
GPL license reference 0x101a–0x104a
0x101a6c652e636f6d3e006c6963656e73653dle.com>.license=
0x102a47504c0073726376657273696f6e3d38GPL.srcversion=8
0x103a364430364441463535383034313239386D06DAF558041298
0x104a393532 952

No evidence locations were recorded for this file. Raw result

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.