CLEAN — uninstall.py

CLEAN — uninstall.py is a shell sample analyzed by MalwareAnalyzer by Cyble with a clean verdict (0/100). 0 of 53 detection engines flagged it.

Identification

• SHA-256: 0ac3a286abdbe9903a3baecbef4a177a82c778e7cdccc33cf07f60fbd6a8720c
• SHA-1: 0d68acf6d0de59dbb0670b25865c41ee4a9a0a71
• MD5: ea2775dfdf29c2f96c506d240ad79ed6
• ssdeep: 48:lQPSySF0ghopElw+4H7mS2pgRKIzk597S5Nf6qJ5e5qWW3/R1WDOC0otCGI3:cooew3iS252BfvR1hotBI3
• TLSH: T18B1812C4712874FF6A9C89C76DF88A6D16226BDE705C8C9986D423883C33D1519371ED
• Submitted as: uninstall.py
• File type: shell · Size: 3868 bytes
• Verdict: clean (0/100)

Detections (0 of 53 engines)

No engine flagged this sample.

Dynamic analysis (linux)

895 behavior events · 0 ATT&CK techniques · 0 dropped files.

Runtime network

• desktop-hsgcbep._dosvc._tcp.local
• desktop-hsgcbep
• desktop-hsgcbep(1)._dosvc._tcp.local
• _dosvc._tcp.local
• 2.0.0.0.1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.f.f.ip6.arpa
• 3.0.0.0.1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.f.f.ip6.arpa
• 252.0.0.224.in-addr.arpa
• b.f.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.f.f.ip6.arpa
• ntp.ubuntu.com
• 224.0.0.251
• ff02::fb
• ff02::1:3
• 224.0.0.252
• ff02::16
• ff02::1:ff12:3456
• 10.240.0.255
• 10.240.0.1
• ff02::1
• ff02::2
• 224.0.0.22

Embedded domains

• req.name
• self.name

Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report