Overview

overview

1

Static

static

iPRS導入...pp.xml

windows7-x64

1

iPRS導入...pp.xml

windows10-2004-x64

1

iPRS導入...ail.js

windows7-x64

1

iPRS導入...ail.js

windows10-2004-x64

1

iPRS導入...orm.js

windows7-x64

1

iPRS導入...orm.js

windows10-2004-x64

1

iPRS導入...pp.xml

windows7-x64

1

iPRS導入...pp.xml

windows10-2004-x64

1

iPRS導入...orm.js

windows7-x64

1

iPRS導入...orm.js

windows10-2004-x64

1

iPRS導入...er.vbs

windows7-x64

1

iPRS導入...er.vbs

windows10-2004-x64

1

iPRS導入...es.vbs

windows7-x64

1

iPRS導入...es.vbs

windows10-2004-x64

1

iPRS導入...ute.js

windows7-x64

1

iPRS導入...ute.js

windows10-2004-x64

1

iPRS導入...pp.xml

windows7-x64

1

iPRS導入...pp.xml

windows10-2004-x64

1

iPRS導入...orm.js

windows7-x64

1

iPRS導入...orm.js

windows10-2004-x64

1

iPRS導入...er.vbs

windows7-x64

1

iPRS導入...er.vbs

windows10-2004-x64

1

iPRS導入...es.vbs

windows7-x64

1

iPRS導入...es.vbs

windows10-2004-x64

1

iPRS導入...e1.htm

windows7-x64

1

iPRS導入...e1.htm

windows10-2004-x64

1

iPRS導入...e2.htm

windows7-x64

1

iPRS導入...e2.htm

windows10-2004-x64

1

iPRS導入...er.vbs

windows7-x64

1

iPRS導入...er.vbs

windows10-2004-x64

1

iPRS導入...es.vbs

windows7-x64

1

iPRS導入...es.vbs

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4af108185a4bbd10d02ebc07ff5d2a751ae5846369a31007f4683be747ede135

  • Size

    5.0MB

  • Sample

    220926-ckhqhshaa4

  • MD5

    08fcc403d1124efc2fa61839f43fcaca

  • SHA1

    41a30730e0db778b3f7e46a3b75f9a95e61d4d35

  • SHA256

    4af108185a4bbd10d02ebc07ff5d2a751ae5846369a31007f4683be747ede135

  • SHA512

    aae3c425c70abfe0dff73638f4300200d0a3b7975e783eae99d2f233f3a205136fa5ef864893e6aa0cda44b98b96b186df41027ad64ac3b9c4114d377bf0140f

  • SSDEEP

    98304:gpvDYyRSpzd3D5hBZgBEBqAdGWbi1XESbbqRNvDBuOBPjeNH+cTSZt78y:gtYyKDT+EoQY1XtbbwNvV5BaQMEtQy

Score
1/10

Malware Config

Targets

    • Target

      iPRS導入包/App/FCM_Report/App.config

    • Size

      1KB

    • MD5

      c5cc9f821ce5b929332202b6f8fa0896

    • SHA1

      16f5364a58c75a56f9bfd4e0f19dd0c138734f94

    • SHA256

      6729193d39f39980b6d169bd0a6ae8e0059f3306ef365e19acfbc8a98554a00f

    • SHA512

      da3c51c2f28cb6e948bed96aa63dd32a120b0da1227277609b45a0de5ae57874a4599015e1cf5c5ae3bab39f364e6eccfe7642fc95887e8e7730194b0eaafe5a

    Score
    1/10
    behavioral1behavioral2

    • Target

      iPRS導入包/App/FCM_Report/App_Code/CommonLayer/DataAccessLayer/Business/busMail.cs

    • Size

      58KB

    • MD5

      8c4f5fb4752997f6132bb9b9e77fcbc0

    • SHA1

      ad5937c4170b07270cd8ab8bd6f5ceca372a977c

    • SHA256

      d827900ea355008492b15672583a48f770f207ae35922daaa62e3ded009926a4

    • SHA512

      475d0c8b880256b0895761590e9309c6fafad4547c8f63ff70ab0ec9a478bab135fcbbca4bc5c845261bfaa71c7c60ecb807b36115592c19f014da0d214d36d2

    • SSDEEP

      1536:R58cON/jCCmtdCiXACiqACiU8mmGb6mFUaJ:R58cq/jCPtd9b6mFUaJ

    Score
    1/10
    behavioral3behavioral4

    • Target

      iPRS導入包/App/FCM_Report/App_Code/CommonLayer/DataAccessLayer/Business/busform.cs

    • Size

      66KB

    • MD5

      f0f25eaf240d6f2d201cf74bba6b7718

    • SHA1

      a5096eff80a9a45301bea502132e7746f49259e7

    • SHA256

      952c74a05e841963cbdfb354660b6263c53b83b1915be97107e5b266019bacc3

    • SHA512

      589b7a7ab01661bdb05be7c130c106cb30d056949bc5143909fa2f9f24a3b8452ce1abaf5ab6713c52de6bc9ca495c612bfe9c6861ca139823e2cea27f39098e

    • SSDEEP

      768:X6DwsrfhBmZf5HWEpOUqfLaIzt+fp/lYPhnSuPTT1jVY0uoPne2+rkiWyBm7L+se:IwsTHUR2E8bLwftgZtTTwae2+rH8vd5E

    Score
    1/10
    behavioral5behavioral6

    • Target

      iPRS導入包/App/FCM_Report/Backup/App.config

    • Size

      1KB

    • MD5

      545110149366b98773049a4740ecadda

    • SHA1

      ac8ab6f068db46a90e7e53334b441e216f9feedc

    • SHA256

      f6875e8bbb51ec893b6daf6a099c7f10b1124fb7ac44737331ec77a5a372daf4

    • SHA512

      b72e6dd58c0e5efafd3f5eac1ea8e0351c4572003ba7b9cebcc5f8bd1dc66ea85782276f3f454066b0a7b835177a80bfa14976f033ff7e3b3de2783ff18136dc

    Score
    1/10
    behavioral7behavioral8

    • Target

      iPRS導入包/App/FCM_Report/Backup/App_Code/CommonLayer/DataAccessLayer/Business/busform.cs

    • Size

      50KB

    • MD5

      1f83a3463fbd78c01fd947aa6fbaca76

    • SHA1

      ce127b7bd0e980fc95d18972eeaf9d8c418a2bc1

    • SHA256

      c9d01f3a3a7868d331157f54c7129b5159e4c09d062b6cf9e0dbb0271e0624f4

    • SHA512

      088f131db11304f083c07e5900a116228569f9bcf03c5d51c1e02fa2b27a9b15a7fcb235a16f90d0649f66d3754ecb07f412a88948811ced9ebf131f54eb5e55

    • SSDEEP

      768:SDwsrfhBmZf5HWEpOUqFLaIzt+fp/lYPhnfuPJexGvSfw1q2SMl1rcoRr7:wwsTHUR2E85LwftgZwJc5eN7N7

    Score
    1/10
    behavioral9behavioral10

    • Target

      iPRS導入包/App/FCM_Report/Backup/Properties/Resources.Designer.cs

    • Size

      2KB

    • MD5

      de713cfb4bb1960bef7154ebbeddde53

    • SHA1

      9e70d1868b17f0456e9b69045cfb2634d8b2eeac

    • SHA256

      6af6f5c8f90612571bf8df27d58fc460513bd12c321f9eab189f2f2d6980a29a

    • SHA512

      1806bd48e4154bb1a8f103900493e816dff34e424f6f525ef1c1bc9e952071abc861ed9d313dd6ae65831ff580a75d3bcfb9431bc8140beefbaacc6a226c7f5f

    Score
    1/10
    behavioral11behavioral12

    • Target

      iPRS導入包/App/FCM_Report/Backup/Properties/Resources.resx

    • Size

      5KB

    • MD5

      0cd8c971317d19bbed44757809bcb92b

    • SHA1

      47b15748ecc8e952c5935170090db7c269ce4b4f

    • SHA256

      66b5ebd1b0fc73f041ba669ce2184f6f471d5e3524efa34ca31233e9f5395262

    • SHA512

      883dba84bf7daae3ea49f9d54c13dda4f125da82ba63f90eeba0900602896ad9492a0adf7b69b67d838034090af20926af5c2934797afaadb38aa069786c1fc6

    • SSDEEP

      96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT200qSdvabvDIwQBugqvA:KjrbLPD9sLvIzSvKgIqUEa2

    Score
    1/10
    behavioral13behavioral14

    • Target

      iPRS導入包/App/FCM_Report/Backup/formExcute.cs

    • Size

      5KB

    • MD5

      e402b816d13f3a40bb4d46436fcb913f

    • SHA1

      975d5c29a5dec5952413db975303d16cf92ac9d6

    • SHA256

      2b83a2a6277a853bd69ceb26c0a91bb81f2e9faf7c6edc2c159273fe94915c28

    • SHA512

      655a896c760c3a1698877b081623c3c6f53d2a89430ec4001925d7711d932fdd40017d671070504d81e350df182b6b3a03c5615a827e5d73c0d870d1064e4530

    • SSDEEP

      96:Co4htF3noGslksktLDaHdP+Q+uD1AScObmvzB:Ylmlkskt2hVu

    Score
    1/10
    behavioral15behavioral16

    • Target

      iPRS導入包/App/FCM_Report/Backup4/App.config

    • Size

      1KB

    • MD5

      3fb0fd17c7d9b2668b206b45ad3232ed

    • SHA1

      ecce036f7a8e52415c5fe85b8fcfa8411a1f8246

    • SHA256

      604918ca1652cdb92f6e552effe25de38010e7dabefd180a0b6b811afa555ddf

    • SHA512

      b8fd30583c997685c782d6aacd0716b959d1c50d6b3f66f650fa27875cd8f2c9a29313e09f46179f55a25f43f9ed9b4f3d2c2f0462586d0c57544f585662ee66

    Score
    1/10
    behavioral17behavioral18

    • Target

      iPRS導入包/App/FCM_Report/Backup4/App_Code/CommonLayer/DataAccessLayer/Business/busform.cs

    • Size

      48KB

    • MD5

      5455d3253ab485a1ea65806f9b7aad2f

    • SHA1

      004aabf735ea124cce625a37b7b58f7100ad5d69

    • SHA256

      02210cf6ce289f7c5543d43871c04d7811aa62ae81acd71c37a938f92fee9f0f

    • SHA512

      d7b6c04f3e38b54a95c9fbecf319d8f131a543667433f748d7c733dfc87d6a537071e97261505e7c6544b08c73db932c40495ba7efe3d5daee1008458d93c4c8

    • SSDEEP

      768:SDwsrfhBmZf5HWEpOUqFLaIzt+fp/lYPhnfePkOU3YSfw1q2SMl1rcoRr7:wwsTHUR2E85LwftgZAkf5eN7N7

    Score
    1/10
    behavioral19behavioral20

    • Target

      iPRS導入包/App/FCM_Report/Backup4/Properties/Resources.Designer.cs

    • Size

      2KB

    • MD5

      de713cfb4bb1960bef7154ebbeddde53

    • SHA1

      9e70d1868b17f0456e9b69045cfb2634d8b2eeac

    • SHA256

      6af6f5c8f90612571bf8df27d58fc460513bd12c321f9eab189f2f2d6980a29a

    • SHA512

      1806bd48e4154bb1a8f103900493e816dff34e424f6f525ef1c1bc9e952071abc861ed9d313dd6ae65831ff580a75d3bcfb9431bc8140beefbaacc6a226c7f5f

    Score
    1/10
    behavioral21behavioral22

    • Target

      iPRS導入包/App/FCM_Report/Backup4/Properties/Resources.resx

    • Size

      5KB

    • MD5

      0cd8c971317d19bbed44757809bcb92b

    • SHA1

      47b15748ecc8e952c5935170090db7c269ce4b4f

    • SHA256

      66b5ebd1b0fc73f041ba669ce2184f6f471d5e3524efa34ca31233e9f5395262

    • SHA512

      883dba84bf7daae3ea49f9d54c13dda4f125da82ba63f90eeba0900602896ad9492a0adf7b69b67d838034090af20926af5c2934797afaadb38aa069786c1fc6

    • SSDEEP

      96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT200qSdvabvDIwQBugqvA:KjrbLPD9sLvIzSvKgIqUEa2

    Score
    1/10
    behavioral23behavioral24

    • Target

      iPRS導入包/App/FCM_Report/HTMLPage1.htm

    • Size

      33KB

    • MD5

      48f1f7deed73d3c2b2bed41bc1ad36a3

    • SHA1

      4b380a0606d18a5d634e9d0049dc1768e5c40bdb

    • SHA256

      f252de974a6290e9257f8929abbef233ce8bc4f266f6677c84773e82b790c1e7

    • SHA512

      c0ddbe71fb0a3b72a3ecc06f9fd6fa7ba86f88caf36b8f69c48a736a0069c109f0bde8fe68f7a75e0a41a984046505932d67f15af68216c937da102923741ad4

    • SSDEEP

      96:JfNQ3qQ3IQ3yQ3l/krGJXQ3qQ3IQ3yQ3H/krXMddGKddEBbfgqcHbfHpbfhI79U6:JfN7jNeX7jNf/tJfQfhf0af2

    Score
    1/10
    behavioral25behavioral26

    • Target

      iPRS導入包/App/FCM_Report/HTMLPage2.htm

    • Size

      20KB

    • MD5

      0b45f91613308b938c288948f754d57b

    • SHA1

      22976e850ed95f7ef15144378c9e4658320f10e5

    • SHA256

      2d79eb20a13b9b0bd76464b6d0d17ace1681513cd6eeddba1978b9cb60dc4586

    • SHA512

      e2585cc0fd96e77281e715a4dc8246cc02bb2a170a297c6878487379778dbde69cc6a9b51ef8eb813dcaef399168397d8a407d8f1388c0e486e54b1584efed25

    • SSDEEP

      96:H1/krRQ3qQ3IQ3yQ3GGJXQ3qQ3IQ3yQ3H/kr2rvgqcdvXrvR4rN8vZg:HE7jNzeX7jNervyvbvE8ve

    Score
    1/10
    behavioral27behavioral28

    • Target

      iPRS導入包/App/FCM_Report/Properties/Resources.Designer.cs

    • Size

      2KB

    • MD5

      de713cfb4bb1960bef7154ebbeddde53

    • SHA1

      9e70d1868b17f0456e9b69045cfb2634d8b2eeac

    • SHA256

      6af6f5c8f90612571bf8df27d58fc460513bd12c321f9eab189f2f2d6980a29a

    • SHA512

      1806bd48e4154bb1a8f103900493e816dff34e424f6f525ef1c1bc9e952071abc861ed9d313dd6ae65831ff580a75d3bcfb9431bc8140beefbaacc6a226c7f5f

    Score
    1/10
    behavioral29behavioral30

    • Target

      iPRS導入包/App/FCM_Report/Properties/Resources.resx

    • Size

      5KB

    • MD5

      0cd8c971317d19bbed44757809bcb92b

    • SHA1

      47b15748ecc8e952c5935170090db7c269ce4b4f

    • SHA256

      66b5ebd1b0fc73f041ba669ce2184f6f471d5e3524efa34ca31233e9f5395262

    • SHA512

      883dba84bf7daae3ea49f9d54c13dda4f125da82ba63f90eeba0900602896ad9492a0adf7b69b67d838034090af20926af5c2934797afaadb38aa069786c1fc6

    • SSDEEP

      96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT200qSdvabvDIwQBugqvA:KjrbLPD9sLvIzSvKgIqUEa2

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v6

Tasks