NEWKalnai_Horejsi-VB2015.indd
Image Description
Common Information
Type Value
UUID 43177b95-4991-4532-96ab-f62bd26af075
Fingerprint e2cb427eefa18e8a6923696d061402424e546698549733a8534f8fee9c6428b8
Analysis status DONE
Considered CTI value 2
Text language
Published March 29, 2016, 11:39 a.m.
Added to db April 14, 2024, 9:33 a.m.
Last updated Aug. 31, 2024, 6:59 a.m.
Headline NEWKalnai_Horejsi-VB2015.indd
Title NEWKalnai_Horejsi-VB2015.indd
Detected Hints/Tags/Attributes 148/3/103
Attributes
Details Type #Events CTI Value
Details Domain 32
avast.com
Details Domain 3
libamplify.so
Details Domain 1
dos32.pid
Details Domain 3
udev.sh
Details Domain 13
cron.sh
Details Domain 19
blog.malwaremustdie.org
Details Domain 17
www.botconf.eu
Details Domain 11
upx.sourceforge.net
Details Domain 403
securelist.com
Details Domain 1
www.prolexic.com
Details Domain 13
www.giac.org
Details Domain 9
vms.drweb.com
Details Domain 202
krebsonsecurity.com
Details Domain 78
securityaffairs.co
Details Domain 8
www.alienvault.com
Details Domain 53
blog.avast.com
Details Domain 22
reeye.com
Details Domain 2
blog.level3.com
Details Domain 4127
github.com
Details Domain 219
gist.github.com
Details Email 2
horejsi}@avast.com
Details File 3
fake.cfg
Details File 1
xmit.ini
Details File 1
sword.exe
Details File 3
kill.txt
Details File 1
fuckopen.txt
Details File 1
getsetup.rar
Details File 1
down-report-of-op-china-elf-ddoser.html
Details File 1
multiplatform-ddos-botnets.pdf
Details File 1
a4-092414.pdf
Details File 1
ddos-binary-bot-iptables-v6-a4.pdf
Details File 1
2014-itw-infection-of-elf.html
Details File 1
hackers-use-bash-bug.html
Details File 1
2014-fuzzy-reversing-new-china.html
Details File 3
anatomy_of_a_brutef.html
Details Github username 2
mncoppola
Details Github username 1
manawyrm
Details Github username 2
valdikss
Details sha256 1
f126c3f8530587f7cadeb8b969bc04ab114b468922171a953211345ad5a8f380
Details sha256 1
48183d0dd8da484639adda9f60e5fea340d7c6b4c77458384ee98cb21972ade5
Details sha256 1
d1f922a762bbd4e0725d4625be4a39cebfa03d1875339e9f01f825a2dcdc9e65
Details sha256 1
568a52aa9a9ac2698ba7c49fe4a3aee34d96fe0f25eccb31fc726d941bb135ea
Details sha256 1
3e89f0d71671db79506050e0823d121ea5a19457308af3e379ac45a0338b1b33
Details sha256 1
21acda48cad399b049d03a51a64c9e4bb2dc96c1916bc4eecd6fc828e8036083
Details sha256 1
a86b1899821c2833b989a736e928a4137fa6d0954c9816747f6afef536f757f9
Details sha256 1
1eb72c76f79fa01ce39198c91af5c7a4e36897e9a9a8f5d29ca68ba7371a2361
Details sha256 1
87934d993bb5262fb2826da05cb4657ec6b20849a65c5d00d260bbf58878f45e
Details sha256 1
992ed01def5ece5b90ce242820d2bfdd580fddde12dbc10ce5a395a7923922c9
Details sha256 1
1828ac46c67e120274688a562d04e9e9a629c39090a848956fb7db45b6551b74
Details sha256 1
e83f69052fc240dc43fc2b32f77408b2b3488e67b29b04041e7c6b8622ce8602
Details sha256 1
f2df127535902e6390ce2ec198c12a5bd9a361901c2d8008a064df96efd10e29
Details sha256 1
6dd946e821df59705dcfeb79fab810336d0ee497fd715fb5b6711e05c0428f4d
Details sha256 1
8766317f20b05c792514addd8bb4904021049acd86e8d70e9fffd1d12fad51ce
Details sha256 1
26fcbdc7ebe2750b4008d8c67186a9da03d34b994662bd93e49d7c572aadbae0
Details sha256 1
736c08988602155954c02cbef0b4ed3dd916c7eb659032202f15081620058988
Details sha256 1
8499e6727253fa98dacc3d753cc08cb207c64a290d9521e94a65c2bda34f405e
Details sha256 1
af765c0f87846e6e1a184b64a4da8e51588f0f6a7048fefdd60b53058373c6b6
Details sha256 1
d6e77d8f2ffdf61981241022e8d7034014927bffa23793739051cad34867f766
Details sha256 1
288d91af1b5f3a57c0b3d66330f56bbcd38604948b3154cd4842d277fa86f664
Details sha256 1
0940e4a72dba133838ccd0992914c5fb2bf106d5a018f289b9c5896c0e237cc6
Details sha256 1
8a1ce3302e896cd695528eb0cc744ec6e18c1d708c944be7c8affb3b4d44bd5d
Details sha256 1
4ed6e5cfa9d7006e021bbd099aafd4f2adaae3307dc25262e240d9e8829b960d
Details sha256 1
f41c4c9ee0fbaeff5397f27531a91135c1d98c54a9e0bdc6ca52315e3e208537
Details sha256 1
9f89ca6f4580f6ebe021d2c2e2c528b93e4492c4b6e6bd5f339361e86f8585d8
Details sha256 1
e75e49ac157dadc8c4e7230d531be0db6fbc339b5d75b7ab8fa6202ce0ec8e2a
Details sha256 1
59d53a8dfb2b646293e422743eaf8c6f3ab576baccdf36bb133c4f458aaf60a3
Details sha256 1
496f413e6c8b6f258c238af6eaf61c2b524dc0dc985e4e659627adae1ed31517
Details sha256 1
ba84c056fb4541fe26cb0e10bc6a075585990f3ce3cde2b49475022ad5254e5b
Details sha256 2
44153031700a019e8f9e434107e4706a705f032898d3a9819c4909b2af634f18
Details sha256 1
ad26abc8cd8770ca4ecc7ed20f37b510e827e7521733ecaeb3981bf2e4a96fbf
Details sha256 2
859a952ff05806c9e0652a9ba18d521e57090d4e3ed3bef07442e42ca1df04b6
Details sha256 2
49963d925701fe5c7797a728a044f09562ca19edd157733bc10a6efd43356ea0
Details sha256 1
6be322cd81ebc60cfeeac2896b26ef015d975ad3dda95ae63c4c7a28b7809029
Details sha256 1
2a04c216fce75d19e5162081eb747b8a77c205f6dd933b0864c08fb086c929c5
Details sha256 1
baabcecac23775fdd3e52cd1fb0e4c46777a6747e854074ece751767d13f6dd7
Details sha256 1
28ea6ee1080b4d436685d0d0c87eef492ea2a376917437e865d0d1513114b8d7
Details sha256 1
67ff5f3f10ad86ed0a9f90244e7b5be839afb0aaeb49e22130551a09a0f08ff8
Details sha256 1
04bef883e7098fda9148a75c43165d45ac5fbb8b6032848e9c5d9a5e3897df52
Details sha256 1
7f13a4c911ab0682d9a7f5988da9c7be0ae781ce15945e4c0aa76a78e22cbf2f
Details sha256 1
d59c7cf8d9efbd93f0b907c12bb4c18cc5ce7d800b234db219d2d919c0b0afdc
Details sha256 1
277d2d00e27bcf4536bb492cac16001e8832dc9bbed384a8c523b49a199790e6
Details sha256 1
4e611fb1466920885d1216ab7d9b4f16a3f31d52cf7b39ffc21fc6ca41534738
Details sha256 1
8d0b152a91202356b3b5470c5c017b4e9595c5325d8c14da1debbe1782225a14
Details sha256 1
1af299a269ffdb4461e181ca774fc307a592288ad4b3f6b93226c955eb9b8084
Details Url 1
http://blog.malwaremustdie.org/2014/09/tango-
Details Url 1
https://www.botconf.eu/wp-content
Details Url 3
http://upx.sourceforge.net/.
Details Url 1
https://securelist.com/analysis
Details Url 1
http://www.prolexic.com/kcresources/prolexic-
Details Url 1
https://www.giac.org/paper
Details Url 1
http://blog.malwaremustdie.org/2014/06/mmd-0025-
Details Url 2
http://vms.drweb.com
Details Url 2
http://krebsonsecurity.com
Details Url 1
http://securityaffairs.co/wordpress/28626/cyber-
Details Url 1
http://vms.drweb.com/virus/?i=4242198
Details Url 1
https://www.alienvault.com/open-threat-exchange
Details Url 1
http://blog.malwaremustdie.org/2014/09/mmd-0028-
Details Url 1
https://blog.avast.com/2015/01/06/linux-ddos-trojan-
Details Url 17
https://www.fi
Details Url 1
http://blog.level3.com
Details Url 1
https://github.com/mncoppola
Details Url 1
https://gist.github.com/manawyrm
Details Url 2
https://github.com/valdikss