Overview

overview

3

Static

static

31.214.157...tor.sh

windows7_x64

3

31.214.157...tor.sh

windows10_x64

3

31.214.157...tor.sh

windows7_x64

3

31.214.157...tor.sh

windows10_x64

3

31.214.157...or1.sh

windows7_x64

3

31.214.157...or1.sh

windows10_x64

3

31.214.157...ode.sh

windows7_x64

3

31.214.157...ode.sh

windows10_x64

3

31.214.157...de1.sh

windows7_x64

3

31.214.157...de1.sh

windows10_x64

3

31.214.157...rst.sh

linux_amd64

31.214.157...rst.sh

linux_mipsel

31.214.157...rst.sh

linux_mips

31.214.157...ond.sh

linux_amd64

31.214.157...ond.sh

linux_mipsel

31.214.157...ond.sh

linux_mips

31.214.157...pt3.sh

windows7_x64

3

31.214.157...pt3.sh

windows10_x64

3

31.214.157...ile.sh

linux_amd64

31.214.157...ile.sh

linux_mipsel

31.214.157...ile.sh

linux_mips

31.214.157...ver.py

windows7_x64

3

31.214.157...ver.py

windows10_x64

3

31.214.157...der.sh

windows7_x64

3

31.214.157...der.sh

windows10_x64

3

31.214.157...cro_cr

linux_amd64

31.214.157...cro_cr

linux_mipsel

31.214.157...cro_cr

linux_mips

31.214.157...save.1

linux_amd64

31.214.157...save.1

linux_mipsel

31.214.157...save.1

linux_mips

31.214.157...save.2

linux_amd64

Resubmissions

30-11-2023 19:32

231130-x8zddshb2y 10

28-06-2021 11:05

210628-3vdg7sx13e 3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    31.214.157.40_#[email protected]

  • Size

    7.1MB

  • Sample

    210628-3vdg7sx13e

  • MD5

    bb1570ca408cf76448102c7ecbbe322c

  • SHA1

    0445c648174ca1930c2cdb0b89902cd4e984a9ea

  • SHA256

    b0baf071692d63267aaf41bd3db933826523b59e8fca49655e1656ce0c656c71

  • SHA512

    53efbbd752d2b0dd1e13231bf8d917a5ac512962860f6ac46f76d6fb618b4a83a54cabdee5295b20805bbd6a9ce343ff2967257679419185ede4b4ab45294a3f

Score
3/10
linux

Malware Config

Targets

    • Target

      31.214.157.40_#DarkRadiation_by_@r3dbU7z/api/bash_decryptor.sh

    • Size

      341B

    • MD5

      013e22cea40101aabb5104374b9799f1

    • SHA1

      a7e7734c2c6f929bca996a20ecbe15f5a7647ae8

    • SHA256

      c881660ad1883ad35f1f6b6cb75ef28cda471b54b58ef594b45183ba71ee6126

    • SHA512

      eedde28f522f3d779cff26d9605b1d9250797df9cd375c0eb657e0d976853611ab12161f2f5309f9b346a49101a4e0d19efdfa773f80a9f444460a5745267b5d

    Score
    3/10
    behavioral1behavioral2

    • Target

      31.214.157.40_#DarkRadiation_by_@r3dbU7z/api/bash_encryptor.sh

    • Size

      2KB

    • MD5

      27be323f0057b258961da949655deaec

    • SHA1

      05d60c843a5b85cc51799d638cfaad2b4009dbf9

    • SHA256

      122d4473f8336fa9b3e69d3fb58112b22e7efd9435f53f90d06f9cf8a1dbccc1

    • SHA512

      98a48ae25952ec165b3d99516f67948062b2810ff43d993d33f7c2770c78b5739547208c2003d1b6e53d7fdb4212361f202fbfee49e8546c60e55a40a2d3e758

    Score
    3/10
    behavioral3behavioral4

    • Target

      31.214.157.40_#DarkRadiation_by_@r3dbU7z/api/bash_encryptor1.sh

    • Size

      2KB

    • MD5

      ba7d82ff5ddaa55e206e346bdfdf2872

    • SHA1

      8fc79950d628ec81bc04bda01dd7aa4868c8259e

    • SHA256

      691afd4ef5f33d99053c57456ce9fa126e29d51d4dd510928193d8c3332547b1

    • SHA512

      92d4454ea73182d86686f0384480aaee09636705655b7e7a40e470d12677cd9ab471e33af79b81de52c362a2119292b7952fb6b84c42baa44812e07d348696ae

    Score
    3/10
    behavioral5behavioral6

    • Target

      31.214.157.40_#DarkRadiation_by_@r3dbU7z/api/code.sh

    • Size

      4KB

    • MD5

      4409d0036c0668c33ca152abb8eb8776

    • SHA1

      e918e127494ac5dcc839e827b1ca9e40a0650cb0

    • SHA256

      4c037b151ab09258f31193160d5b715c2fd14290344bfdf12fab16301095f7b7

    • SHA512

      e0524e00bd42d3d4eb38e1b84e80416d95d9f081792e66f16a38e8fb8b5b71bd3b06b9fc7143bddeb87f4101aa12beacabcd540a985e8f2249a8e6f4d7a18059

    Score
    3/10
    behavioral7behavioral8

    • Target

      31.214.157.40_#DarkRadiation_by_@r3dbU7z/api/code1.sh

    • Size

      9B

    • MD5

      9cc18818c45b8fe0999c315c2195563d

    • SHA1

      d9190b425679cf5a1504ccc15e25aba46c573ac5

    • SHA256

      e31a27236c48bd15977bfa014ca28a2f601625fd1c0ba02a65067cdd3f723c93

    • SHA512

      323bad4242af6f33fce91c82b08ef7d9cdacd7c9efa0968a02223bc670ae874e6536700941b16a19ed9d79480572ed056f9e7bca4f0ed5753e4db0056d91ec02

    Score
    3/10
    behavioral9behavioral10

    • Target

      31.214.157.40_#DarkRadiation_by_@r3dbU7z/api/crypt2_first.sh

    • Size

      17KB

    • MD5

      8224c9faafd5f4a8678bfa511fc4b5e2

    • SHA1

      215d777140728b748fc264ef203ebd27b2388666

    • SHA256

      e380c4b48cec730db1e32cc6a5bea752549bf0b1fb5e7d4a20776ef4f39a8842

    • SHA512

      3946c910a579ffe0e0939b1df0183fb06fbc470e454e6af268d18df0db02bcf46a73c14948a1b25be858d9b330ef89fb5b2c06a179e4cbb2d1152356905e8038

    Score
    1/10
    behavioral11behavioral12behavioral13

    • Target

      31.214.157.40_#DarkRadiation_by_@r3dbU7z/api/crypt2_second.sh

    • Size

      17KB

    • MD5

      35dbc971ba859fb80c291d811154b112

    • SHA1

      1168e6f49632123d6df8c0f91291512ed82f6b1e

    • SHA256

      719e0120cf1e5c0dd80e8e88d9c0c621f8b6f0fd03f7c10758eb453006aecf1f

    • SHA512

      a82d86d8c74ad034f1530c83cfe13c13f1f5bae63f31fcc26d08b632da1a02e4eb64ac7ba609a119d25d6c129ef98741417b1accb482c641ade09602810e2277

    Score
    1/10
    behavioral14behavioral15behavioral16

    • Target

      31.214.157.40_#DarkRadiation_by_@r3dbU7z/api/crypt3.sh

    • Size

      5KB

    • MD5

      3402c9373726396598011ef6ec1ea243

    • SHA1

      919b574a4d000161e52d57b827976b6d9388b33f

    • SHA256

      0243ac9f6148098de0b5f215c6e9802663284432492d29f7443a5dc36cb9aab5

    • SHA512

      138d3d9de064a3107218856a510d968a857860c90a3bd7250eb79a8f7df13e588d7bfc90563a63c5a4dc9027e5d4d21cadb4118f4ff1add6fac6b2b9510b1ba6

    Score
    3/10
    behavioral17behavioral18

    • Target

      31.214.157.40_#DarkRadiation_by_@r3dbU7z/api/crypt_file.sh

    • Size

      124B

    • MD5

      d8f152e71f32f0d07d4484b6857fa13f

    • SHA1

      583014546cbd25056bb27eb913e076614d014d17

    • SHA256

      100211701ce54cc15504e60e27306fef339155bbd37bb9294c4c01cabf56c52c

    • SHA512

      059ca3af5a78e27962985dd1050a17387ff0bf8bfd58239cc76fbd9311c36faf95b40ffd4321daac19bac55b766da48a599b85c3c86e8352467430113c3deecc

    Score
    1/10
    behavioral19behavioral20behavioral21

    • Target

      31.214.157.40_#DarkRadiation_by_@r3dbU7z/api/pass_server.py

    • Size

      697B

    • MD5

      4a1fac60bd99e94b19b6e0931aa7db49

    • SHA1

      136f498634beee9675611f34bcbdb61a7cc93a24

    • SHA256

      027a6a3e0c29ea68df362a51d0b0a364dc520c51f32f0bfc74f43cf4422f4c54

    • SHA512

      c5b04e47942427095b6a1177ced272afc23b9283818506ea3edef6d751e48e237df9d3ea71a747922a4f475dd4523f48332f8f5c5926804d33c6c8c781e0d9cd

    Score
    3/10
    behavioral22behavioral23

    • Target

      31.214.157.40_#DarkRadiation_by_@r3dbU7z/api/socket_code_sender.sh

    • Size

      291B

    • MD5

      db15346a93b40e336693d3f49e850348

    • SHA1

      4bd6faebfc7ed9a318f6ea3a1afe03b4729f19ec

    • SHA256

      3b8e890720156f68c94d813afd7efa357c12ff15307f104efb77d885998aedd6

    • SHA512

      99c49cbdcb2c695673d702435804ef53d04b20f7724b5046d8bd0577993228cc1085aa91f4e635c0583e4e73d49a6456ae2f9272dde39e980d7da80aae2d208e

    Score
    3/10
    behavioral24behavioral25

    • Target

      31.214.157.40_#DarkRadiation_by_@r3dbU7z/api/supermicro_cr

    • Size

      19KB

    • MD5

      219202aa2355b68ee4ea61056fb13b37

    • SHA1

      e437221542112affc30e036921e4395b72fe6504

    • SHA256

      d0d3743384e400568587d1bd4b768f7555cc13ad163f5b0c3ed66fdc2d29b810

    • SHA512

      b4e9cae7a02def79571fcbfc4990a462a8ac70e252226011a4a1b45ea4d52afb8cb7e708f8b6e3400f57deee2d2b174ddf4998442098e9b4643204145e9fe0f3

    Score
    1/10
    behavioral26behavioral27behavioral28

    • Target

      31.214.157.40_#DarkRadiation_by_@r3dbU7z/api/supermicro_cr.save.1

    • Size

      15KB

    • MD5

      c55db4b6722cfd651b3cd17e30558c6e

    • SHA1

      70f9cf0388462fa659216e82ebbf80cc582d1a64

    • SHA256

      6f40f2ee97a08d6f4c6eb7995b481f5a2f5aae97e4ab2f776b6e5b64dfa87c12

    • SHA512

      d05363ef23efdcaa00a0a5c60ba8b3dba875786f2e7652476ed1941ef0da9ab7cb6092db5a1c915544c3efc00dd58c15d1c9e0992e18945c10cf7e642abc3780

    Score
    1/10
    behavioral29behavioral30behavioral31

    • Target

      31.214.157.40_#DarkRadiation_by_@r3dbU7z/api/supermicro_cr.save.2

    • Size

      19KB

    • MD5

      219202aa2355b68ee4ea61056fb13b37

    • SHA1

      e437221542112affc30e036921e4395b72fe6504

    • SHA256

      d0d3743384e400568587d1bd4b768f7555cc13ad163f5b0c3ed66fdc2d29b810

    • SHA512

      b4e9cae7a02def79571fcbfc4990a462a8ac70e252226011a4a1b45ea4d52afb8cb7e708f8b6e3400f57deee2d2b174ddf4998442098e9b4643204145e9fe0f3

    Score
    1/10
    behavioral32

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

8
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks