Overview

overview

3

Static

static

Admin pane.../1.dll

windows7_x64

3

Admin pane.../1.dll

windows10-2004_x64

3

Admin pane.../2.dll

windows7_x64

1

Admin pane.../2.dll

windows10-2004_x64

1

Admin pane.../3.dll

windows7_x64

3

Admin pane.../3.dll

windows10-2004_x64

3

Admin pane.../4.dll

windows7_x64

3

Admin pane.../4.dll

windows10-2004_x64

3

Admin pane.../5.dll

windows7_x64

1

Admin pane.../5.dll

windows10-2004_x64

1

Admin pane.../6.dll

windows7_x64

1

Admin pane.../6.dll

windows10-2004_x64

1

Admin pane.../7.dll

windows7_x64

3

Admin pane.../7.dll

windows10-2004_x64

3

Admin pane...x.html

windows7_x64

1

Admin pane...x.html

windows10-2004_x64

1

Admin pane...x.html

windows7_x64

1

Admin pane...x.html

windows10-2004_x64

1

Admin pane...x.html

windows7_x64

1

Admin pane...x.html

windows10-2004_x64

1

Admin pane...x.html

windows7_x64

1

Admin pane...x.html

windows10-2004_x64

1

Admin pane...x.html

windows7_x64

1

Admin pane...x.html

windows10-2004_x64

1

Admin pane...min.js

windows7_x64

1

Admin pane...min.js

windows10-2004_x64

1

Admin pane...rge.js

windows7_x64

1

Admin pane...rge.js

windows10-2004_x64

1

Admin pane...x.html

windows7_x64

1

Admin pane...x.html

windows10-2004_x64

1

Admin pane...2.4.js

windows7_x64

1

Admin pane...2.4.js

windows10-2004_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Oski.rar

  • Size

    21.3MB

  • Sample

    220426-q5s9mschf6

  • MD5

    58fc883abb03735eef2d85e773dc955b

  • SHA1

    8322ecffcb5e3fbcbde3271bdeb8772db65d879b

  • SHA256

    8f10f73d173f60a76815cb046b9bc333f44ca45d080eb1c29342e34115cc51b0

  • SHA512

    682cc815c25d2d3eb752878b309f42fdfc539ffef7adc85412e69d3be3751e9e071f86f146d9f1ee5afc40c7d4d45ed4c2859e2f4560592627f63cb250f2299c

Score
3/10

Malware Config

Targets

    • Target

      Admin panel v9.1.1/www/1.jpg

    • Size

      630KB

    • MD5

      e477a96c8f2b18d6b5c27bde49c990bf

    • SHA1

      e980c9bf41330d1e5bd04556db4646a0210f7409

    • SHA256

      16574f51785b0e2fc29c2c61477eb47bb39f714829999511dc8952b43ab17660

    • SHA512

      335a86268e7c0e568b1c30981ec644e6cd332e66f96d2551b58a82515316693c1859d87b4f4b7310cf1ac386cee671580fdd999c3bcb23acf2c2282c01c8798c

    Score
    3/10
    behavioral1behavioral2

    • Target

      Admin panel v9.1.1/www/2.jpg

    • Size

      326KB

    • MD5

      ef2834ac4ee7d6724f255beaf527e635

    • SHA1

      5be8c1e73a21b49f353c2ecfa4108e43a883cb7b

    • SHA256

      a770ecba3b08bbabd0a567fc978e50615f8b346709f8eb3cfacf3faab24090ba

    • SHA512

      c6ea0e4347cbd7ef5e80ae8c0afdca20ea23ac2bdd963361dfaf562a9aed58dcbc43f89dd826692a064d76c3f4b3e92361af7b79a6d16a75d9951591ae3544d2

    Score
    1/10
    behavioral3behavioral4

    • Target

      Admin panel v9.1.1/www/3.jpg

    • Size

      133KB

    • MD5

      8f73c08a9660691143661bf7332c3c27

    • SHA1

      37fa65dd737c50fda710fdbde89e51374d0c204a

    • SHA256

      3fe6b1c54b8cf28f571e0c5d6636b4069a8ab00b4f11dd842cfec00691d0c9cd

    • SHA512

      0042ecf9b3571bb5eba2de893e8b2371df18f7c5a589f52ee66e4bfbaa15a5b8b7cc6a155792aaa8988528c27196896d5e82e1751c998bacea0d92395f66ad89

    Score
    3/10
    behavioral5behavioral6

    • Target

      Admin panel v9.1.1/www/4.jpg

    • Size

      429KB

    • MD5

      109f0f02fd37c84bfc7508d4227d7ed5

    • SHA1

      ef7420141bb15ac334d3964082361a460bfdb975

    • SHA256

      334e69ac9367f708ce601a6f490ff227d6c20636da5222f148b25831d22e13d4

    • SHA512

      46eb62b65817365c249b48863d894b4669e20fcb3992e747cd5c9fdd57968e1b2cf7418d1c9340a89865eadda362b8db51947eb4427412eb83b35994f932fd39

    Score
    3/10
    behavioral7behavioral8

    • Target

      Admin panel v9.1.1/www/5.jpg

    • Size

      1.2MB

    • MD5

      bfac4e3c5908856ba17d41edcd455a51

    • SHA1

      8eec7e888767aa9e4cca8ff246eb2aacb9170428

    • SHA256

      e2935b5b28550d47dc971f456d6961f20d1633b4892998750140e0eaa9ae9d78

    • SHA512

      2565bab776c4d732ffb1f9b415992a4c65b81bcd644a9a1df1333a269e322925fc1df4f76913463296efd7c88ef194c3056de2f1ca1357d7b5fe5ff0da877a66

    Score
    1/10
    behavioral9behavioral10

    • Target

      Admin panel v9.1.1/www/6.jpg

    • Size

      141KB

    • MD5

      a2ee53de9167bf0d6c019303b7ca84e5

    • SHA1

      2a3c737fa1157e8483815e98b666408a18c0db42

    • SHA256

      43536adef2ddcc811c28d35fa6ce3031029a2424ad393989db36169ff2995083

    • SHA512

      45b56432244f86321fa88fbcca6a0d2a2f7f4e0648c1d7d7b1866adc9daa5eddd9f6bb73662149f279c9ab60930dad1113c8337cb5e6ec9eed5048322f65f7d8

    Score
    1/10
    behavioral11behavioral12

    • Target

      Admin panel v9.1.1/www/7.jpg

    • Size

      81KB

    • MD5

      7587bf9cb4147022cd5681b015183046

    • SHA1

      f2106306a8f6f0da5afb7fc765cfa0757ad5a628

    • SHA256

      c40bb03199a2054dabfc7a8e01d6098e91de7193619effbd0f142a7bf031c14d

    • SHA512

      0b63e4979846ceba1b1ed8470432ea6aa18cca66b5f5322d17b14bc0dfa4b2ee09ca300a016e16a01db5123e4e022820698f46d9bad1078bd24675b4b181e91f

    Score
    3/10
    behavioral13behavioral14

    • Target

      Admin panel v9.1.1/www/App/index.php

    • Size

      144B

    • MD5

      83667fe64dc25693d6a95183bd264d1e

    • SHA1

      c02f117b8ae2ad965a82b4f68604dea052c84ca5

    • SHA256

      d63a65cc2e7c4d99a80e905b159e38c27705ecc4a07b1d733bf5b1d3a4ebeed3

    • SHA512

      0e1267310ccdb40266819f44090254e609788718debed5b9f4f3cb682b3a2d46a7a28880bebf58f15c6848c8485eb9f7d30398c0a3de4cb5404aea60de33784f

    Score
    1/10
    behavioral15behavioral16

    • Target

      Admin panel v9.1.1/www/Configs/index.php

    • Size

      144B

    • MD5

      83667fe64dc25693d6a95183bd264d1e

    • SHA1

      c02f117b8ae2ad965a82b4f68604dea052c84ca5

    • SHA256

      d63a65cc2e7c4d99a80e905b159e38c27705ecc4a07b1d733bf5b1d3a4ebeed3

    • SHA512

      0e1267310ccdb40266819f44090254e609788718debed5b9f4f3cb682b3a2d46a7a28880bebf58f15c6848c8485eb9f7d30398c0a3de4cb5404aea60de33784f

    Score
    1/10
    behavioral17behavioral18

    • Target

      Admin panel v9.1.1/www/GeoIP/index.php

    • Size

      144B

    • MD5

      83667fe64dc25693d6a95183bd264d1e

    • SHA1

      c02f117b8ae2ad965a82b4f68604dea052c84ca5

    • SHA256

      d63a65cc2e7c4d99a80e905b159e38c27705ecc4a07b1d733bf5b1d3a4ebeed3

    • SHA512

      0e1267310ccdb40266819f44090254e609788718debed5b9f4f3cb682b3a2d46a7a28880bebf58f15c6848c8485eb9f7d30398c0a3de4cb5404aea60de33784f

    Score
    1/10
    behavioral19behavioral20

    • Target

      Admin panel v9.1.1/www/Logs/index.php

    • Size

      132B

    • MD5

      c077ebf3827d001c3317ef6ba0fe21b9

    • SHA1

      2a3aea9ca11a9aa4314d89d5e5d1340112d0bbd7

    • SHA256

      3aac856de8207c89ecccb90a0b78175f680c3125d4a3c72a5bd0423e581cc472

    • SHA512

      a82ff660b94151a36794670d27595c8e9882a570cbbc51c481eb9e4008a8f06093bcff8f9e0a3770fb0337c1617fcfb1b57049c8ea9016ec745b439e7566023f

    Score
    1/10
    behavioral21behavioral22

    • Target

      Admin panel v9.1.1/www/Models/index.php

    • Size

      132B

    • MD5

      c077ebf3827d001c3317ef6ba0fe21b9

    • SHA1

      2a3aea9ca11a9aa4314d89d5e5d1340112d0bbd7

    • SHA256

      3aac856de8207c89ecccb90a0b78175f680c3125d4a3c72a5bd0423e581cc472

    • SHA512

      a82ff660b94151a36794670d27595c8e9882a570cbbc51c481eb9e4008a8f06093bcff8f9e0a3770fb0337c1617fcfb1b57049c8ea9016ec745b439e7566023f

    Score
    1/10
    behavioral23behavioral24

    • Target

      Admin panel v9.1.1/www/Template/FileSaver.min.js

    • Size

      2KB

    • MD5

      c88b3eece69dcc3e02b09420a2e51908

    • SHA1

      92d3d3b35ec6d6dfcd8cadd3edcb900ebc52554e

    • SHA256

      d115f6f9f591ca414fdbff07d25014c800d2dd0551cb24e78986128018057e98

    • SHA512

      94fde6d8a0570bff559ab26788a1ae0ea39e7194067f2e80ed74645d0ed49bd099293f9478245e322f22156552d2f9536da95f3b5b63b972a66333a40c8293f1

    Score
    1/10
    behavioral25behavioral26

    • Target

      Admin panel v9.1.1/www/Template/assets/js/dashforge.js

    • Size

      3KB

    • MD5

      4ba129120304b00f9221323180b560d6

    • SHA1

      44502ecabd36fb78bca746a45201451966eedd0c

    • SHA256

      4d65466592dfaca8556a23d05f50a45089e072dbcac3b74a3b65ac8afba603f0

    • SHA512

      4ac7c8487b239dc78bed69d18596c94684ea1abb47ed87225cfb097909505d753097fa96c6a8d21be079688e1f6e7b63657fb338a672c0d937350dbfc4cfc7c3

    Score
    1/10
    behavioral27behavioral28

    • Target

      Admin panel v9.1.1/www/Template/index.php

    • Size

      132B

    • MD5

      c077ebf3827d001c3317ef6ba0fe21b9

    • SHA1

      2a3aea9ca11a9aa4314d89d5e5d1340112d0bbd7

    • SHA256

      3aac856de8207c89ecccb90a0b78175f680c3125d4a3c72a5bd0423e581cc472

    • SHA512

      a82ff660b94151a36794670d27595c8e9882a570cbbc51c481eb9e4008a8f06093bcff8f9e0a3770fb0337c1617fcfb1b57049c8ea9016ec745b439e7566023f

    Score
    1/10
    behavioral29behavioral30

    • Target

      Admin panel v9.1.1/www/Template/jquery-1.12.4.js

    • Size

      286KB

    • MD5

      fb2d334dabf4902825df4fe6c2298b4b

    • SHA1

      433836da7e015f2eb3fc386817de88b78248f6ef

    • SHA256

      430f36f9b5f21aae8cc9dca6a81c4d3d84da5175eaedcf2fdc2c226302cb3575

    • SHA512

      8cac69ec91c437aa5e126ce683a6bb5c904e44d4c1d084c3d8f8bee85524735e8f09a340257d9a859d5e8e7d69d6e637ecfc728ab9ffd0e30d65b2136c48378f

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

6
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks