Overview
overview
1Static
static
BONUS/ANONNY/AM.pl
ubuntu-18.04-amd64
BONUS/ANONNY/AM.pl
debian-9-armhf
BONUS/ANONNY/AM.pl
debian-9-mips
BONUS/ANONNY/AM.pl
debian-9-mipsel
BONUS/BACK...HOE.pl
ubuntu-18.04-amd64
BONUS/BACK...HOE.pl
debian-9-armhf
BONUS/BACK...HOE.pl
debian-9-mips
BONUS/BACK...HOE.pl
debian-9-mipsel
HAQ.ps1
windows7-x64
1HAQ.ps1
windows10-2004-x64
1NITEFALL.vbs
windows7-x64
1NITEFALL.vbs
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
BONUS/ANONNY/AM.pl
Resource
ubuntu1804-amd64-en-20211208
Behavioral task
behavioral2
Sample
BONUS/ANONNY/AM.pl
Resource
debian9-armhf-en-20211208
Behavioral task
behavioral3
Sample
BONUS/ANONNY/AM.pl
Resource
debian9-mipsbe-en-20211208
Behavioral task
behavioral4
Sample
BONUS/ANONNY/AM.pl
Resource
debian9-mipsel-en-20211208
Behavioral task
behavioral5
Sample
BONUS/BACKD0RZ/BACKHOE.pl
Resource
ubuntu1804-amd64-en-20211208
Behavioral task
behavioral6
Sample
BONUS/BACKD0RZ/BACKHOE.pl
Resource
debian9-armhf-en-20211208
Behavioral task
behavioral7
Sample
BONUS/BACKD0RZ/BACKHOE.pl
Resource
debian9-mipsbe-en-20211208
Behavioral task
behavioral8
Sample
BONUS/BACKD0RZ/BACKHOE.pl
Resource
debian9-mipsel-en-20211208
Behavioral task
behavioral9
Sample
HAQ.ps1
Resource
win7-20220812-en
Behavioral task
behavioral10
Sample
HAQ.ps1
Resource
win10v2004-20220812-en
Behavioral task
behavioral11
Sample
NITEFALL.vbs
Resource
win7-20220812-en
Behavioral task
behavioral12
Sample
NITEFALL.vbs
Resource
win10v2004-20220812-en
General
-
Target
4c4cca6db7952a1f6c47516c97bb22f7225dfd32b6ab0781a79faf0eeb24dd69
-
Size
116KB
-
MD5
69e626724eb41281de94fa5ffec8e019
-
SHA1
ff9811f267302edc80e3a2821aa2cf76b68a436b
-
SHA256
4c4cca6db7952a1f6c47516c97bb22f7225dfd32b6ab0781a79faf0eeb24dd69
-
SHA512
dbec3efe150653129bb2676f501fa3ad533298fe404427c72bd0aea69d6407091f62dc6cb94513c47b661d8a8a55a4dad5184ec3467e86933dd28f4d8991a262
-
SSDEEP
3072:LqsJfnhgUnqjnbkNMKBMaS/NglD4NrUw+2J1aEDEhpkkD0017HcwxjvB:LqsJfnhgUqjnbcMKBMaS/N2D4Nrt+2Dy
Malware Config
Signatures
Files
-
4c4cca6db7952a1f6c47516c97bb22f7225dfd32b6ab0781a79faf0eeb24dd69.zip
-
ALIEN.NFO
-
BONUS/ANONNY/AM.PL.pl .sh linux
-
BONUS/BACKD0RZ/1.C
-
BONUS/BACKD0RZ/BACKHOE.PL.pl .sh linux
-
BONUS/BACKD0RZ/PHUNK.C
-
BONUS/CC/CC.ZIP.zip
-
1
-
10
-
11
-
12
-
13
-
14
-
15
-
16
-
17
-
18
-
19
-
2
-
20
-
21
-
22
-
23
-
24
-
25
-
26
-
27
-
28
-
29
-
3
-
30
-
31
-
32
-
33
-
34
-
35
-
36
-
37
-
38
-
39
-
4
-
40
-
41
-
42
-
43
-
44
-
45
-
46
-
47
-
48
-
49
-
5
-
50
-
51
-
52
-
53
-
6
-
7
-
8
-
9
-
BONUS/CHM/CHM.C
-
BONUS/POOL/POOL.C
-
BONUS/SHELCODE/001
-
BONUS/SHELCODE/002
-
BONUS/SHELCODE/003
-
BONUS/SHELCODE/CONT
-
FILE_ID.DIZ
-
HAQ.FAQ.ps1
-
NITEFALL.000
-
NITEFALL.001
-
NITEFALL.002
-
NITEFALL.003
-
NITEFALL.004
-
NITEFALL.005
-
NITEFALL.006
-
NITEFALL.007
-
NITEFALL.008
-
NITEFALL.009
-
NITEFALL.010
-
NITEFALL.011
-
NITEFALL.012
-
NITEFALL.013
-
NITEFALL.014
-
NITEFALL.015
-
NITEFALL.016
-
NITEFALL.017
-
NITEFALL.018
-
NITEFALL.019
-
NITEFALL.020
-
NITEFALL.021.vbs
-
NITEFALL.022
-
NITEFALL.023
-
NITEFALL.024
-
NITEFALL.025
-
NITEFALL.026
-
NITEFALL.027
-
NITEFALL.028
-
NITEFALL.029