Overview

overview

1

Static

static

2.8.7.4(2k...g.html

windows7-x64

1

2.8.7.4(2k...g.html

windows10-2004-x64

1

2.8.7.4(2k...py.bat

windows7-x64

1

2.8.7.4(2k...py.bat

windows10-2004-x64

1

2.8.7.4(2k...oi.bat

windows7-x64

1

2.8.7.4(2k...oi.bat

windows10-2004-x64

1

2.8.7.4(2k...ks.bat

windows7-x64

1

2.8.7.4(2k...ks.bat

windows10-2004-x64

1

2.8.7.4(2k...th.cmd

windows7-x64

1

2.8.7.4(2k...th.cmd

windows10-2004-x64

1

2.8.7.4(2k...ev.exe

windows7-x64

1

2.8.7.4(2k...ev.exe

windows10-2004-x64

1

2.8.7.4(2k...ec.cmd

windows7-x64

1

2.8.7.4(2k...ec.cmd

windows10-2004-x64

1

2.8.7.4(2k...py.cmd

windows7-x64

1

2.8.7.4(2k...py.cmd

windows10-2004-x64

1

2.8.7.4(2k...aw.cmd

windows7-x64

1

2.8.7.4(2k...aw.cmd

windows10-2004-x64

1

2.8.7.4(2k...nc.cmd

windows7-x64

1

2.8.7.4(2k...nc.cmd

windows10-2004-x64

1

2.8.7.4(2k-XP)/ln.exe

windows7-x64

1

2.8.7.4(2k-XP)/ln.exe

windows10-2004-x64

1

2.8.7.4(2k...n.html

windows7-x64

1

2.8.7.4(2k...n.html

windows10-2004-x64

1

2.9.3.3/wi...g.html

windows7-x64

1

2.9.3.3/wi...g.html

windows10-2004-x64

1

2.9.3.3/wi...n.html

windows7-x64

1

2.9.3.3/wi...n.html

windows10-2004-x64

1

2.9.3.3/wi...py.bat

windows7-x64

1

2.9.3.3/wi...py.bat

windows10-2004-x64

1

2.9.3.3/wi...oi.bat

windows7-x64

1

2.9.3.3/wi...oi.bat

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2fcec8cf31e17e159da8723cc3cc05b2652b38fa29d4ba74057d546922955404

  • Size

    3.1MB

  • Sample

    221010-lgcvjabdb4

  • MD5

    7b6695042d5eea8332f4390d6d3cdc5e

  • SHA1

    7dc5d3b71e030bd93908788eb8b38197086c9e8c

  • SHA256

    2fcec8cf31e17e159da8723cc3cc05b2652b38fa29d4ba74057d546922955404

  • SHA512

    30366f4d1c30cad356ed011a62e7224303a4026004dcb93a4d3bf9f0bf142d193772b176f2344e0098a4a5fde54de9b54b667348162c260a36295d64b22c9538

  • SSDEEP

    98304:en7aLYhAfVXKBZ/YUMeP1qmFMr2JmmMFcKYfVrA:k7aUbAsjhXzvfVE

Score
1/10

Malware Config

Targets

    • Target

      2.8.7.4(2k-XP)/Blog/blog.html

    • Size

      8KB

    • MD5

      8a5da9c7cbac968c6b96d8c37ae43397

    • SHA1

      9380bfb32c8672a172826c156786c7aa49d84c20

    • SHA256

      09b0a74afb421fa5ea43a7bcc039eeb2124e7e5c4f4514bc3e092213479f099c

    • SHA512

      2afa21752746decc1caf7babfab55d5e4ab0bfe33b57f921ef2ce6c9677c5549dcfc6d6bffe9ea314356b6833019fb9e11b37262af98ddfda2b783f7f6544a4f

    • SSDEEP

      192:GflXI1udvjA34v1V3KpsXMSLwBHBO9k+J8:GfYudvjggVTMS81B

    Score
    1/10
    behavioral1behavioral2

    • Target

      2.8.7.4(2k-XP)/bat/DeLoreanCopy.bat

    • Size

      1KB

    • MD5

      fd7228c668202ad77197702687894387

    • SHA1

      ef38408e90e001333508428a02fbde9de1307fa5

    • SHA256

      89a74052ac993cea6c59ac01346b3268bc62b9610bb4d55d163bd6767036b54b

    • SHA512

      f2835b2d5dc696845ce4c758441a83ab7b9e6494e5d74decb77c02bf76d4ec9e620e369b1e2b4daec3a88fb9e032e6480445ed28ee0345c21fff121ae977f072

    Score
    1/10
    behavioral3behavioral4

    • Target

      2.8.7.4(2k-XP)/bat/DeLoreanHanoi.bat

    • Size

      3KB

    • MD5

      3f1b42fa0b4af75cdc23f1e3359b9a80

    • SHA1

      ad8b582ec5cdf6785d9a7413733f1790db9358c7

    • SHA256

      e4a7e45a0e438417fa312ba66766d998b9e6832eeed513bbf21d8643eb8cade6

    • SHA512

      ce2cac19492140079a9947729c5afa58c8b62f42f25eaf5c38e45e89f564a690b3ba40ad6040200814d72c775c00ef7dc025027e4fba965587ef5865292def04

    Score
    1/10
    behavioral5behavioral6

    • Target

      2.8.7.4(2k-XP)/bat/DeleteAllHardlinks.bat

    • Size

      431B

    • MD5

      452f3a7921be1c46e9fd3233870c4c19

    • SHA1

      69f092078cc41176dff1044d08b6025cf097d96c

    • SHA256

      a5ca285df3098259c01a1941a5b99017a669666061877a519e80b73faf015f5e

    • SHA512

      28d9fd361cdf7c453b4aab4679f107e832ee14a92ad42d0086489c76276484b0428d2f64b0bbc5adceb48041b3b30a65396e3b7504590c1128092b19e3b23aff

    Score
    1/10
    behavioral7behavioral8

    • Target

      2.8.7.4(2k-XP)/bat/QueryPath.cmd

    • Size

      1KB

    • MD5

      308e1b3fbcd332e08e569d37424806f3

    • SHA1

      3191dec898e6e91c24dcbb8bf64aac7f0cef6aa4

    • SHA256

      70eaeb10a6198bb4169a6cad46b37997965d16b5d4373c52ea32309c6b9b5b20

    • SHA512

      1a85e6aa1e0235bbd7be4456ba7eab0f83252d239be08c663c1e1fdf7ed4cee6c701aa65f139891ac8bd650a76b81f42e947ca433081892d79fc4c1be288808c

    Score
    1/10
    behavioral9behavioral10

    • Target

      2.8.7.4(2k-XP)/bat/dosdev.exe

    • Size

      7KB

    • MD5

      866ed029bce8a26b21350a3a1c5c8e64

    • SHA1

      fb17f1c3f558a6b31bc1d7190ec0555bb48b2264

    • SHA256

      b1894e121fc6df8698c0c4838dce24422376e786a345c8bf82f5551dcbb7dae3

    • SHA512

      19af89735dc07bc1f55a7b3c983218265e9d773e0ba310f9400491cf2ffc696049a3842fae07e9f4b50ebc64fb227bed04c6f538051b48b7e0f47965e09f8c14

    • SSDEEP

      96:MUWyGJnD0jT3F7XzWDUeV6AzQ0fwQVpMRqLH5:BGJwvFDGUAzQ0fwQvH5

    Score
    1/10
    behavioral11behavioral12

    • Target

      2.8.7.4(2k-XP)/bat/vss-exec.cmd

    • Size

      444B

    • MD5

      2a5f42009fcc0695d3300359800cbcba

    • SHA1

      97407907f39fdb922bb195ac1565fdf8f509a128

    • SHA256

      4b0bff37a16b09b7fa9d557999d91bccefb658fe15a4d3d9f28dbfe3baafb58a

    • SHA512

      443b55a33946c41fda98d6755c0d8904c4347938117753fb25cd5599d5529e837cd6431cd9dbc82a6e77b75edee2ee45888b03cf5482638815cdece1febbe4af

    Score
    1/10
    behavioral13behavioral14

    • Target

      2.8.7.4(2k-XP)/bat/vss_drivecopy.cmd

    • Size

      507B

    • MD5

      0885e7df1c3848929aff9a0bb3ece8c1

    • SHA1

      222a1e130925b52e952434d4a81c4f593e7f3aed

    • SHA256

      87884e01486bfadb8a6a764d0feaae778ea2a29d739e4734b136f19d51687f03

    • SHA512

      a1cd408288aa6ee1cf65d84ce1afd110bb115f8f1b627aa835218855a8325b0dc022f0dce3b483641d2f54a7c41ba742f9e891b1cd197aebb8e5a25d6d6c3f23

    Score
    1/10
    behavioral15behavioral16

    • Target

      2.8.7.4(2k-XP)/bat/vss_raw.cmd

    • Size

      507B

    • MD5

      c3186cf33c23d5936ee7ea9e1c4e08b1

    • SHA1

      20321cbf7417426f24d735e48b1697ea9540bd4c

    • SHA256

      7827a05c14124b9d45a919f83bff369c19f68161b24d6eb268084757ff00e8d3

    • SHA512

      b6cb23c7a8b476a8428abf073be31a00557ca5e4138a4b3b2b234b468cfb89b6ed03f2164559fbf6ddb7056fe870fb560b7534d375c744ff224587ab0da5f45f

    Score
    1/10
    behavioral17behavioral18

    • Target

      2.8.7.4(2k-XP)/bat/vss_unc.cmd

    • Size

      856B

    • MD5

      dbffec9bec8f9b44ee7b3804c852d1ca

    • SHA1

      07fd4bbd993306aaeed0cc470f37bed5a60b2d67

    • SHA256

      719a104a92d2d07bdf573c580bc0881c77f6860a26eaeccfd053291395fbb09a

    • SHA512

      64e200f44eb69c1f5066f77cb9405e9ba3bef1ead4cc8a83aecabcfd749857fae3c65e05d4fb47da14c9d019de00ff4cd732893b6e0287190392594e42bfb086

    Score
    1/10
    behavioral19behavioral20

    • Target

      2.8.7.4(2k-XP)/ln.exe

    • Size

      404KB

    • MD5

      948c576641f5ee5b62ff8e6f4de22686

    • SHA1

      59a469b5c5f1adf3cc786b99195e12421b68a289

    • SHA256

      cf74d828121bad46e8b59f047d079691262555ca1cebf4829c68a71dcc96a79d

    • SHA512

      9f3c6516341ef0382845e7169574aa161504645879d9574b9ef9827afdc3e8a1dc098f8f9803391ff55f0a741d9b2a4a233a858bea084d3d7fb1524c2d019473

    • SSDEEP

      6144:/zpBQ92HMlXZnvCLc4U+w6/gTF7NDAxeQ3YvipQ3FntJKHOOUuYV9:/zpknv14e6kDAjo6petJKRdw

    Score
    1/10
    behavioral21behavioral22

    • Target

      2.8.7.4(2k-XP)/ln.html

    • Size

      253KB

    • MD5

      6359288b93552e628ef8d7a948096d74

    • SHA1

      6dc99c96736dd47e686b0ee2be519316a71cd4f8

    • SHA256

      ce69dff10c80d130a002c6f1c1fcd4b1138e96167ce093f0af694311b4ea221d

    • SHA512

      3073cddd6ace77c4f3b713e8e762913694cda8cb53971b4877b9a159444b373cf0568ae5cab9f2ffaee6beaea8c4268e136164e4f7246cca51c8359d71ce9707

    • SSDEEP

      6144:ZX7Sh0dsr3ZpNSL8vhbcg7kdlQ3bF63/gXQoA6ErMGbjvnd7gMBWlBG26ja:ZLirppNSovlWFoA6ErMGbjvnd7gMklBx

    Score
    1/10
    behavioral23behavioral24

    • Target

      2.9.3.3/win32/Doc/Blog/blog.html

    • Size

      8KB

    • MD5

      8a5da9c7cbac968c6b96d8c37ae43397

    • SHA1

      9380bfb32c8672a172826c156786c7aa49d84c20

    • SHA256

      09b0a74afb421fa5ea43a7bcc039eeb2124e7e5c4f4514bc3e092213479f099c

    • SHA512

      2afa21752746decc1caf7babfab55d5e4ab0bfe33b57f921ef2ce6c9677c5549dcfc6d6bffe9ea314356b6833019fb9e11b37262af98ddfda2b783f7f6544a4f

    • SSDEEP

      192:GflXI1udvjA34v1V3KpsXMSLwBHBO9k+J8:GfYudvjggVTMS81B

    Score
    1/10
    behavioral25behavioral26

    • Target

      2.9.3.3/win32/Doc/ln.html

    • Size

      337KB

    • MD5

      d74ab50b5fdd66148cc8114aa4aa937f

    • SHA1

      c27018e520910a3bca18072ebc98baf5f529d95b

    • SHA256

      befa1d9242e386cf48924f9baa53357993077f25c41bf424ebca81ef5347bdef

    • SHA512

      a1496d0e3879c27d77dbb697e943dd69e529eafa74c3753bc69764b5041fcbcbfa915cf7f63139f873abd775f87b248463ab8b5aaafa777e4432fafa7bcbae93

    • SSDEEP

      6144:g0idqvdLbxA1tcd7U3kfJOcEf+ax3+FbZq8g6XKU11oi3PYjVfBc5uJxMxXXYOe:gFSbe1tcZUUfS78g6XKU11oi3PYjVfBL

    Score
    1/10
    behavioral27behavioral28

    • Target

      2.9.3.3/win32/bat/DeLoreanCopy.bat

    • Size

      2KB

    • MD5

      792ea39cd19a82d82c58bddb75d8139f

    • SHA1

      cbc405f0f69b891fa39b9b758bd0a2b1827cea02

    • SHA256

      ee6dc2cd113f27fcc4a54c53c03446b3b393a94a891384ce09655aef50763fe1

    • SHA512

      80d182e269db7ac478e83459f1bbd8668551b0c78f5ce3debf0cfe1618e1cbd7098944d61141877b860d1b8cdeffa065f5fa340fbaf5862c6173ceedec2f024e

    Score
    1/10
    behavioral29behavioral30

    • Target

      2.9.3.3/win32/bat/DeLoreanHanoi.bat

    • Size

      3KB

    • MD5

      3f1b42fa0b4af75cdc23f1e3359b9a80

    • SHA1

      ad8b582ec5cdf6785d9a7413733f1790db9358c7

    • SHA256

      e4a7e45a0e438417fa312ba66766d998b9e6832eeed513bbf21d8643eb8cade6

    • SHA512

      ce2cac19492140079a9947729c5afa58c8b62f42f25eaf5c38e45e89f564a690b3ba40ad6040200814d72c775c00ef7dc025027e4fba965587ef5865292def04

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v6

Tasks