Suspicious
Suspect

3150895aa401e9b2be8d75753b19ea2b

GZIP Archive
MD5: 3150895aa401e9b2be8d75753b19ea2b
Size: 4.47 MB
application/gzip

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
GZIP archive
Size
4.47 MB · 4,468,167 B
Hashes
MD5 3150895aa401e9b2be8d75753b19ea2b Sha1 0e74d9dc0a3e2b0ca7fa28243eb9c4da892e5bd7 Sha256 47881d6351a790090a82c7df270b27e430d1d09c967f9e32af40c49edb763791 Sha384 892c8f3a6b169bc1d13e77e50378434623663b7349fbb62ee43210dc2fa05426614dc80cc4433f81fad5929e5accf4c5 Sha512 d0d3864e5d23b9c84ada88e1a2231f8eb04009769e1cbf0e6f06fed15702e10497949c14f36cb0f5f9c25d6b4c44548cb81949d2a9d9d6ce9a218a3e537219bb SSDeep 98304:j58JjEg9aVFX604ZT1Zu9dI7qmVZ1X/k3xebJuiga/0/:WJjEXVFK04ZJo9d9mVDexeNuins/ TLSH 9C2633902C652167D6D1F47BCF373B3ADAC77E65A4170308FB2DA5CB629AC41C2E06A4
22 files
GZ3150895aa401e9b2be8d75753b19ea2b
TARfile_0.bin
BIN.rsync
BINd41d8cd98f00b204e9800998ecf8427e
BINinit2
BINb
BINrun
BINa
BINstop
BINa
BINinit01
BINrun
BINa
ELFkswapd00
BINstop
BINinit02
BINinit
BINc
BINkthreadadd
BINtop
BINrun
BINstop
ELFkthreadadd32
ELFkthreadadd64
BINstart
BINinitall
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:gz>arc:tar>elf
Shape arc:gz>arc:tar>elf
3 nodes
22 files
GZ3150895aa401e9b2be8d75753b19ea2b
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙