CLEAN — 98d87e32669c294c26cb4336270945fa9dcaa2b461a8041f262f0cc08cb21a9a
CLEAN — 98d87e32669c294c26cb4336270945fa9dcaa2b461a8041f262f0cc08cb21a9a is a shell sample analyzed by MalwareAnalyzer by Cyble with a clean verdict (21/100). 2 of 50 detection engines flagged it.
Identification
- SHA-256:
98d87e32669c294c26cb4336270945fa9dcaa2b461a8041f262f0cc08cb21a9a - SHA-1:
e8aa9b6b252b755d9b42a2987e3232079bd854e8 - MD5:
2836125d03b31db987e4ff9b80ac2bb1 - ssdeep:
384:+b21os6NRFj6QGfEaW3r133nukemyL2vS0bzV5jbbS0F6sSu:+S1/ct+EPok6f0bzS03Su - TLSH:
T1C6304F4D73987A8FD787299E2C6478CCDF0A97A5722138E426ECC2C6C579D41E4120DB - Submitted as: 98d87e32669c294c26cb4336270945fa9dcaa2b461a8041f262f0cc08cb21a9a
- File type: shell · Size: 36346 bytes
- Verdict: clean (21/100)
Detections (2 of 50 engines)
- Microsoft Defender: Trojan:JS/Agent.AG!MSR
- Kaspersky (KVRT): HEUR:Trojan.Script.Generic
Why this verdict
The clean score of 21/100 is the fusion of 1 weighted signal:
- Embedded network infrastructure: http://closure-compiler.googlecode.com/svn/trunk/contrib/externs/maps/google_maps_api_v3_3.js, http://gmaps-utility-library-dev.googlecode.com/svn/tags/markerclusterer/, http://google-maps-utility-library-v3.googlecode.com/svn/trunk/markerclusterer/ - static signal, weight 0.35, confidence 0.60
Dynamic analysis (linux)
841 behavior events · 0 ATT&CK techniques · 0 dropped files.
Runtime network
- desktop-hsgcbep
- 250.255.255.239.in-addr.arpa
- b.f.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.f.f.ip6.arpa
- ntp.ubuntu.com
- 252.0.0.224.in-addr.arpa
- 3.0.0.0.1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.f.f.ip6.arpa
- 2.0.0.0.1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.f.f.ip6.arpa
- desktop-hsgcbep._dosvc._tcp.local
- ff02::1:3
- 224.0.0.252
- 224.0.0.251
- ff02::fb
- 169.254.255.255
- 10.240.0.255
- 10.240.0.1
- ff02::16
- ff02::1:ff12:3456
- 224.0.0.22
- 239.255.255.250
- 185.125.190.58
Embedded URLs
- http://closure-compiler.googlecode.com/svn/trunk/contrib/externs/maps/google_maps_api_v3_3.js
- http://gmaps-utility-library-dev.googlecode.com/svn/tags/markerclusterer/
- http://www.apache.org/licenses/LICENSE-2.0
- http://google-maps-utility-library-v3.googlecode.com/svn/trunk/markerclusterer/
- http://www.movable-type.co.uk/scripts/latlong.html
Embedded domains
- closure-compiler.googlecode.com
- gmaps-utility-library-dev.googlecode.com
- www.apache.org
- google-maps-utility-library-v3.googlecode.com
- www.movable-type.co.uk
- style.top
- rgddallas.org
- shikshadallas.org
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report