sábado, 27 de maio de 2023

HiddenWasp Linux Malware Backdoor Samples





Intezer HiddenWasp Malware Stings Targeted Linux Systems 




Links updated: Jan 19, 2023


File informatio


8914fd1cfade5059e626be90f18972ec963bbed75101c7fbf4a88a6da2bc671b
8f1c51c4963c0bad6cf04444feb411d7
 shell

f321685342fa373c33eb9479176a086a1c56c90a1826a0aef3450809ffc01e5d
52137157fdf019145d7f524d1da884d7
elf

f38ab11c28e944536e00ca14954df5f4d08c1222811fef49baded5009bbbc9a2
ba02a964d08c2afe41963bf897d385e7
shell

e9e2e84ed423bfc8e82eb434cede5c9568ab44e7af410a85e5d5eb24b1e622e3
cbcda5c0dba07faced5f4641aab1e2cd
 elf shared-lib

d66bbbccd19587e67632585d0ac944e34e4d5fa2b9f3bb3f900f517c7bbf518b
2b13e6f7d9fafd2eca809bba4b5ea9a6
64bits elf shared-lib

2ea291aeb0905c31716fe5e39ff111724a3c461e3029830d2bfa77c1b3656fc0
568d1ebd8b6fb17744d3c70837e801b9
shell

8e3b92e49447a67ed32b3afadbc24c51975ff22acbd0cf8090b078c0a4a7b53d
33c3f807caea64293add29719596f156
 shell

609bbf4ccc2cb0fcbe0d5891eea7d97a05a0b29431c468bf3badd83fc4414578
71d78c97eb0735ec6152a6ff6725b9b2
tar-bundle gzip contains-elf

d596acc70426a16760a2b2cc78ca2cc65c5a23bb79316627c0b2e16489bf86c0
6d1cd68384de9839357a8be27894182b
 tar-bundle gzip

0fe1248ecab199bee383cef69f2de77d33b269ad1664127b366a4e745b1199c8
5b134e0a1a89a6c85f13e08e82ea35c3
64bits elf 
Related articles
  1. Github Hacking Tools
  2. Blackhat Hacker Tools
  3. What Are Hacking Tools
  4. Hacking Tools For Windows Free Download
  5. Pentest Tools Framework
  6. Pentest Tools Online
  7. Usb Pentest Tools
  8. Hacker Tools Linux
  9. Hacker Tools For Pc
  10. Hacker Tools Windows
  11. Hacking Tools Windows 10
  12. Hacking Tools Github
  13. Hacking Tools For Beginners
  14. Hacking Tools Usb
  15. Hacking Tools For Windows 7
  16. Hacking Tools Kit
  17. Hacking Tools For Pc
  18. Best Pentesting Tools 2018
  19. Hackrf Tools
  20. Hacker Tools Linux
  21. Hackrf Tools
  22. Hacking Tools For Games
  23. How To Hack
  24. Hack Tools Download
  25. Hacking Tools Hardware
  26. Pentest Tools For Windows
  27. Hack Tool Apk No Root
  28. Hacking Tools For Kali Linux
  29. Hacking Tools Github
  30. Hack Tool Apk No Root
  31. Pentest Tools Linux
  32. What Is Hacking Tools
  33. Hacker Tools For Ios
  34. Pentest Tools Linux
  35. Top Pentest Tools
  36. What Are Hacking Tools
  37. Hack Tools For Windows
  38. Github Hacking Tools
  39. Hack Tool Apk No Root
  40. Hacker Tools For Pc
  41. Hack Tools 2019
  42. Hacking Tools For Windows 7
  43. Hacking Tools Download
  44. Hacking Tools
  45. Computer Hacker
  46. Pentest Tools Windows
  47. Growth Hacker Tools
  48. Blackhat Hacker Tools
  49. Pentest Tools Tcp Port Scanner
  50. Pentest Box Tools Download
  51. Hack Website Online Tool
  52. Pentest Tools Kali Linux
  53. Hacker Tools Software
  54. Tools Used For Hacking
  55. Hack Tools For Mac
  56. Nsa Hacker Tools
  57. Ethical Hacker Tools
  58. Pentest Tools Kali Linux
  59. Pentest Tools Framework
  60. Tools For Hacker
  61. Hack Tools For Games
  62. Hacking Tools For Windows Free Download
  63. Hacking Tools
  64. Hacking Tools 2020
  65. Black Hat Hacker Tools
  66. Hacking Tools For Pc
  67. How To Hack
  68. Pentest Tools Github
  69. Hack Tools Download
  70. Hacking Tools Usb
  71. Pentest Tools Github
  72. Pentest Tools Website
  73. Physical Pentest Tools
  74. Hacking Tools For Pc
  75. Pentest Tools Alternative
  76. Hack Tools For Pc
  77. Pentest Tools For Windows
  78. Tools Used For Hacking
  79. Hack Website Online Tool
  80. Hacker Tools List
  81. Hacking Tools Usb
  82. Hacking Tools For Kali Linux
  83. Hacking Tools Windows 10
  84. Hacking App
  85. Pentest Tools For Mac
  86. Hacker Tools Github
  87. Hacking Tools For Kali Linux
  88. Pentest Recon Tools
  89. Pentest Tools List
  90. Github Hacking Tools
  91. Pentest Tools Bluekeep
  92. Pentest Recon Tools
  93. Hack Tools Github
  94. Hacking Tools And Software
  95. Hacker
  96. Tools For Hacker
  97. Hacking App
  98. Hacker
  99. Best Hacking Tools 2019
  100. Pentest Tools Free
  101. Tools Used For Hacking
  102. Hacking Tools 2019
  103. Hack Tools For Ubuntu
  104. Hacking App
  105. Hacker Tools Mac
  106. Hacker Tools Apk
  107. Hack Apps
  108. Hacking Tools Mac
  109. Top Pentest Tools
  110. Top Pentest Tools
  111. Hacker Techniques Tools And Incident Handling
  112. Hack Tools Mac
  113. Hacking Tools 2019
  114. Hack And Tools
  115. Pentest Tools Bluekeep
  116. Usb Pentest Tools
  117. World No 1 Hacker Software
  118. Pentest Tools Windows
  119. Underground Hacker Sites
  120. Best Hacking Tools 2020
  121. Pentest Tools Kali Linux
  122. Hacker Search Tools
  123. Hacking Tools For Pc
  124. Hacking Tools 2019
  125. Best Pentesting Tools 2018
  126. Hacker Tools Windows
  127. Nsa Hack Tools Download
  128. Pentest Reporting Tools
  129. Pentest Tools For Ubuntu
  130. Hacking Tools For Windows 7
  131. Game Hacking
  132. Pentest Tools Windows

Video Archives Of Security Conferences And Workshops


Just some links for your enjoyment

List of security conferences in 2014

Video archives:




AIDE (Appalachian Institute of Digital Evidence)


Blackhat
Botconf
Bsides
Chaos Communication Congress
Defcon
Derbycon
Digital Bond's S4x14
Circle City Con
GrrCON Information Security Summit & Hacker Conference
Hack in the box HITB
InfowarCon
Ruxcon
Shmoocon
ShowMeCon
SkyDogCon
TakeDownCon
Troopers
Heidelberg Germany
Workshops, How-tos, and Demos

Special thanks to  Adrian Crenshaw for his collection of videos
Related word

2020-12-13 SUNBURST SolarWinds Backdoor Samples

Reference

I am sure you all saw the news. 

Links updated: Jan 19, 2023


The Resurgence of Russian Threat Actor, NOBELIUM

 
Well, here are the Sunburst binaries. 
Here is a Sunburst malware analysis walk-through video by Colin Hardy




Hashes






SolarWinds.Orion.Core.BusinessLayer.dll


 Trojan:MSIL/Solorigate.B!dha
A Variant Of MSIL/SunBurst.A

SolarWinds.Orion.Core.BusinessLayer.dll
32519b85c0b422e4656de6e6c41878e95fd95026267daab4215ee59c107d6c77
dab758bf98d9b36fa057a66cd0284737abf89857b73ca89280267ee7caf62f3b
eb6fab5a2964c5817fb239a7a5079cabca0a00464fb3e07155f28b0a57a2c0ed
c09040d35630d75dfef0f804f320f8b3d16a481071076918e9b236a321c1ea77
ac1b2b89e60707a20e9eb1ca480bc3410ead40643b386d624c5d21b47c02917c
019085a76ba7126fff22770d71bd901c325fc68ac55aa743327984e89f4b0134
ce77d116a074dab7a22a0fd4f2c1ab475f16eec42e1ded3c0b0aa8211fe858d6
a25cadd48d70f6ea0c4a241d99c5241269e6faccb4054e62d16784640f8e53bc
d3c6785e18fba3749fb785bc313cf8346182f532c59172b69adfb31b96a5d0af
0f5d7e6dfdd62c83eb096ba193b5ae394001bac036745495674156ead6557589
6e4050c6a2d2e5e49606d96dd2922da480f2e0c70082cc7e54449a7dc0d20f8d

CORE-2019.4.5220.20574-SolarWinds-Core-v2019.4.5220-Hotfix5.msp
d0d626deb3f9484e649294a8dfa814c5568f846d5aa02d4cdad5d041a29d5600

appweblogoimagehandler.ashx.b6031896.dll
c15abaf51e78ca56c0376522d699c978217bf041a3bd3c71d09193efa5717c71

TEARDROP
b820e8a2057112d0ed73bd7995201dbed79a79e13c79d4bdad81a22f12387e07
1817a5bf9c01035bcf8a975c9f1d94b0ce7f6a200339485d8f93859f8f6d730c

RAINDROP
be9dbbec6937dfe0a652c0603d4972ba354e83c06b8397d6555fd1847da36725

This is the compromised installer file ( was still on Solarwinds update downloads  on Dec 14, 2020)

File size 419.76 MB
CoreInstaller.msi

ad2fbf4add71f61173975989d1a18395afb8538ed889012b9d2e21c19e98bbd1

2020-04-21 17:31:02
SolarWinds Orion Core Services 2020.2
{77E2D294-3D5C-4D93-ADF1-884CCEAD93B0}
File Version Information
Date signed 05:32 PM 04/21/2020
Signers
Solarwinds Worldwide, LLC
Symantec Class 3 SHA256 Code Signing CA
VeriSign
VT - 0 (Dec 14, 2020)

If you unzip, check 

SolarWinds.Orion.Core.BusinessLayer.dll under OrionCore







More articles