UnknownPublished 20 Jun 2025Updated 16 Aug 2026

Malicious File Creates Network Socket and Contacts fdh32fsdfhs.shop - Kunai Analysis Report sample - 2d266ab2597c72424aa21bc00718f9a13e5836e8

Source CIRCL OSINT Feed

TLP:WHITE, disclosure is not limited

Description

Impact

The impact is limited to the malicious file's network activity contacting a suspicious domain. There is no information about further payloads, data exfiltration, or system compromise. Given the low severity rating and absence of known exploits, the immediate risk appears minimal.

Defensive guidance

No patches or official remediations are available or indicated. Standard security practices such as blocking suspicious domains and monitoring network connections may help mitigate risk. Since no vendor advisory or fix exists, users should remain vigilant and apply general endpoint protection measures.

Summary

The analyzed file exhibits malicious behavior by establishing a network socket and reaching out to the domain fdh32fsdfhs.shop. The source of this information is an OSINT feed with a certainty rating of 50%, indicating moderate confidence. There are no known exploits in the wild, no vendor advisories, and no patches available or required. The report lacks detailed technical specifics or indicators of compromise.

Indicators of compromise

Domains 13

fdh32fsdfhs.shop
fdh32fsdfhs.shop
fdh32fsdfhs.shop
fdh32fsdfhs.shop
fdh32fsdfhs.shop
fdh32fsdfhs.shop
fdh32fsdfhs.shop
fdh32fsdfhs.shop
fdh32fsdfhs.shop
fdh32fsdfhs.shop

IP addresses 14

8.8.8.8
196.251.88.165
196.251.88.165
196.251.88.165
196.251.88.165
196.251.88.165
196.251.88.165
196.251.88.165
196.251.88.165
196.251.88.165

Hashes 4

a231b1d76e93c3c5f2f595bb6ed53e3f
2d266ab2597c72424aa21bc00718f9a13e5836e8
0d2211b7e92fcc6a9f7c94d4adf8e47f6f97e31dacd3b2ffb6cce3c485fcef26
a58aed72544a8ac72083e7316aa3e02bd21006460c05e142d8c40f03e93df088b6380830326cb92c265120358a5198c2ce506b7c90a08052ef13ff0c88577e1d

Text 5

/root/bin
AF_INET
UDP
AF_INET
TCP

Port 2

53
59123

Datetime 12

2025-06-19T11:42:24.490414+00:00
2025-06-19T11:42:28.598684+00:00
2025-06-19T11:42:37.752756+00:00
2025-06-19T11:42:45.721202+00:00
2025-06-19T11:42:46.798233+00:00
2025-06-19T11:42:51.949524+00:00
2025-06-19T11:42:57.062967+00:00
2025-06-19T11:43:02.074597+00:00
2025-06-19T11:43:09.267985+00:00
2025-06-19T11:43:10.286242+00:00

File 3

634928e6-5d30-4879-817c-475eeb6dc201
activity-graph.svgsample activity graph
kunai.json.gzkunai logs for sample

Size in bytes 1

46256

Float 1

6.4998981401139

Malware sample 1

634928e6-5d30-4879-817c-475eeb6dc201|a231b1d76e93c3c5f2f595bb6ed53e3f

Community reviews

Loading reviews…