Overview

overview

3

Static

static

mdapi/PHPM...DME.js

windows7-x64

1

mdapi/PHPM...DME.js

windows10-2004-x64

1

mdapi/PHPM...ler.js

windows7-x64

1

mdapi/PHPM...ler.js

windows10-2004-x64

1

mdapi/PHPM...OP3.js

windows7-x64

1

mdapi/PHPM...OP3.js

windows10-2004-x64

1

mdapi/PHPM...MTP.js

windows7-x64

1

mdapi/PHPM...MTP.js

windows10-2004-x64

1

mdapi/admi...ig.ps1

windows7-x64

1

mdapi/admi...ig.ps1

windows10-2004-x64

1

mdapi/asse...7ol.js

windows7-x64

1

mdapi/asse...7ol.js

windows10-2004-x64

1

mdapi/asse...dex.js

windows7-x64

1

mdapi/asse...dex.js

windows10-2004-x64

1

mdapi/asse...ut.ps1

windows7-x64

1

mdapi/asse...ut.ps1

windows10-2004-x64

1

mdapi/asse...ple.js

windows7-x64

1

mdapi/asse...ple.js

windows10-2004-x64

1

mdapi/asse...elp.js

windows7-x64

1

mdapi/asse...elp.js

windows10-2004-x64

1

mdapi/asse...ace.js

windows7-x64

1

mdapi/asse...ace.js

windows10-2004-x64

1

mdapi/asse...ing.js

windows7-x64

1

mdapi/asse...ing.js

windows10-2004-x64

1

mdapi/asse...rt.ps1

windows7-x64

1

mdapi/asse...rt.ps1

windows10-2004-x64

1

mdapi/favicon.png

windows7-x64

3

mdapi/favicon.png

windows10-2004-x64

3

mdapi/index.js

windows7-x64

1

mdapi/index.js

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    40d8119cf4c4c2fc6cc4ee29561eb2bb65434215ce306b55921801c8aa2de88e

  • Size

    1.3MB

  • Sample

    221102-wm3cgsaga6

  • MD5

    fa4fa457a8dc19b6c816cdf9d25f318d

  • SHA1

    c83c6445d0f6e4c1797b02b796aa8960e364b7c0

  • SHA256

    40d8119cf4c4c2fc6cc4ee29561eb2bb65434215ce306b55921801c8aa2de88e

  • SHA512

    d14329e2165805a7cb14d6f80fcdbd00f191c4603618c8f3c8c6b603c41e0525bcaaf48aa3ddbebc5fcaeed38080050304f63577732c2545aa440b823978aefa

  • SSDEEP

    24576:1NoLJa7c8QRGanOS0f7T6TPI6WlOKaJscRlKnyl6dNKwFMLPROK+3fsOz//:1NoCc8AhOSqP6TPIXlWR0nyl6dsweFOH

Score
3/10

Malware Config

Targets

    • Target

      mdapi/PHPMailer/README.md

    • Size

      14KB

    • MD5

      1b77b40942a8a1a0c85cba527509dec1

    • SHA1

      2eb249ec120baef2a33f318328b7bfdb3e8e76bc

    • SHA256

      026733de108982a4585957de41b7ee5edf63660cdf25b870806b6d48ac39175a

    • SHA512

      b5696e6c402c8b7c0050bd39dba4141f298bd75d39179a2aac7dbd1e324fbe5520507655deb0fc56923d5449ed7d897ac038181594e64ef25dde1597925db368

    • SSDEEP

      384:C0TNCPJawc71uVxzyTbim6oagvq+/ekBshbdvP:C5Ybhlag8bFP

    Score
    1/10
    behavioral1behavioral2

    • Target

      mdapi/PHPMailer/src/PHPMailer.php

    • Size

      163KB

    • MD5

      82b366a4b99f5f4eeb4bab0549d1ee61

    • SHA1

      d4db5117fc9b8306e1e75208b8f8c87b275e68b4

    • SHA256

      476f32ee5a1ca5442741daedbd6c5ec15664aac05b51d659f96ce5fb04eaea30

    • SHA512

      2168e33ed83a7c0b29adb7d9023e18a774f2e8096f2e588c6f12cfdfc13bfd03c4e6f8cb1b3baed8fc754b1f907861459a21e2a7febcc4be8e6aca21bf963fdb

    • SSDEEP

      3072:WhrI02Y0h9DQ0R5w7Kg16b1RKbsf2WmfPpUfgP+mlLqX6dgOQbzcDkcDIIS:sI02Y0Tw/16bb2rlLo6dYzcDkOIIS

    Score
    1/10
    behavioral3behavioral4

    • Target

      mdapi/PHPMailer/src/POP3.php

    • Size

      11KB

    • MD5

      be31109cd8b238d6282aeea2792ae171

    • SHA1

      1349dd3b5768f843e808f3b2255c55bafcf945f0

    • SHA256

      615f927b3177392b7a9630e09a98e67d91440ec58951880fe933dc82b37cd98c

    • SHA512

      2819882cecb4376758f737ae816f7d740c54cf1d4e129b445ff069ff0398d5d135742148a66ded827cad6e379d8e8e3206d9b7c497fbd100500493463cd8983a

    • SSDEEP

      192:LBxp966G6S61A6P6CGCRelnM6V6r6Jm/4KmK6Fy6LOPIYoHetAB2GVD22rfJNvy7:LBf+4MIIj2GUYU

    Score
    1/10
    behavioral5behavioral6

    • Target

      mdapi/PHPMailer/src/SMTP.php

    • Size

      45KB

    • MD5

      71755bb008a7c8f78b896c076a44ec94

    • SHA1

      86af782439cfd1a9df994aaba68d8f163ab72cf3

    • SHA256

      6c30e7f52488a92787b69f72e8de2231f400ea2a7603ae4565ebcf4ebb77f4a1

    • SHA512

      3f15916785778c745cd40d8733aa531edbdf2332b5f6a3bb540110cff102f7551028ed5ee52b9a8cb4424697a27152939d39d8a1535aba3f1fdabc6f6bff62e6

    • SSDEEP

      768:67A3Qo6hOlxzrqK1hRbj4m7/qW085zTJEcrTR+Uc4IxMI3WU0:6S6AlxzrqsZ4mDqW0QTJEc/sUc4IxMI+

    Score
    1/10
    behavioral7behavioral8

    • Target

      mdapi/admin/config.php

    • Size

      4KB

    • MD5

      1184aee36792cdccef96b7321b9e7a3f

    • SHA1

      1391f25fe435bddade138e9cb20098649808c057

    • SHA256

      de9f8fe2d9d1709e2514cd2baaf752ddc78b61f67bde11649f3737d9e2a984cc

    • SHA512

      0d57ca8103558b3d86284ef8dd7cc2d6cf77cdaeeb539ed2187038061ebbfca1baaa426ce19b2fad01414fca34ce446cfa813deb2a6a819b54790fa47481032f

    • SSDEEP

      96:rHWZNjV3f/32YxokvQcsEB9htOrFrK/JI7U25bGMm:aXzQcsyTkp2/OdRGMm

    Score
    1/10
    behavioral9behavioral10

    • Target

      mdapi/assets/js/0047ol.js

    • Size

      10KB

    • MD5

      b9aab01d2f1a91ea1e59f0e3f6997208

    • SHA1

      1a3b02d82233c09fcb589c6ebfa46034bf46a069

    • SHA256

      83c9f97677a8ae16ece1c28b78582278ac79cc7528195548b39120aa04b3e4f5

    • SHA512

      17c4f297b7616ca265c6d138f48ff1c8a55e6bdc9c8b1d3dd33c5b89b8e6fb01abf5462f38b2c04e88229794140abafa1172253a5323164f3fd1cd2f8c00f1a8

    • SSDEEP

      192:wYmVzDKB/t0P8qwlc5cuM+ID1UgCZIYWdx5bOakRvY0oMaCXKvUBvV4eYMEZnMcU:wYmVzDKBV0P8qwlc5c7C2txA7QCXKsBz

    Score
    1/10
    behavioral11behavioral12

    • Target

      mdapi/assets/js/index.js

    • Size

      61KB

    • MD5

      90ab88601410679fbfa1bab174779d70

    • SHA1

      54b30ca0c2ee0e2d81eacc6bf9087813705fb089

    • SHA256

      991ada036329137643e6adf81b4e8b0c53873add0a4210e5d76ff64e40c06524

    • SHA512

      e116d6588ec40371be7d0ca8ccc21993c80bb86025b8f4b4598f1b79dd52ac19aabad8bd1011a46e8ebe09800a9ffc75cf5e46905527451589ce6fd6b9bd3c37

    • SSDEEP

      768:ORjZFG0XvXeeY8iHSf2Tg08p5EyEcoYr92zEte:uG0XvX8Tg08I

    Score
    1/10
    behavioral13behavioral14

    • Target

      mdapi/assets/php/layout/about.php

    • Size

      10KB

    • MD5

      e1d7daf43e7ed7c03d4edb1a8df2e693

    • SHA1

      ebc1449a2ede4a0b412bb9d8fb9ade1d38ba2568

    • SHA256

      1f238192ddcf7a35b18fa59be5b20386ffafeff3eb18ee194f3fb8ceeac849e7

    • SHA512

      abf8ff9a07fa84a62618cbd049f8c943ba5c7d85c38ff876e51bc55adab6b888bf555fad8c65fe91e4a4d11d70116737e1f5fe452d6d104e1910649b37117ee5

    • SSDEEP

      192:pn/Qg+//keGnwpewvaef0diR8a0rP2a0CZcGa0mORcnG0B0QBNef0d1Rna0rGnaK:p/eGUeRwDqsZ1X79y

    Score
    1/10
    behavioral15behavioral16

    • Target

      mdapi/assets/php/layout/example.php

    • Size

      10KB

    • MD5

      0d3258bf5f2502af43f1f95a196b67f6

    • SHA1

      2c869dd005011b8059daa87babbe6f49d3f4fe51

    • SHA256

      a35bd3172632fdb8bc5effb4a8a509048f2a8cd14619e01a006e284b99ee0cde

    • SHA512

      d3ef7f76c2616f3cc388a91b37a0c6e7d810440dcc98364b58d4a9aca381ba20c525f0e1f791794207c188642b7cce5bab68f1acb3422f95611353c4782682b6

    • SSDEEP

      192:KHIYMhG+JcyCR1sL2NaKlIMIFXBVSrDGFXcQ2FSrrNrPXPafVAP9ehvh5KZY3umn:EMA+Jc7nsfZMIFXDFXnrPCfcehvh5KZ6

    Score
    1/10
    behavioral17behavioral18

    • Target

      mdapi/assets/php/layout/help.php

    • Size

      9KB

    • MD5

      efd2b057a9774be79991353b611314f5

    • SHA1

      2aef8ae8b5e823f64892a4ae28643e579074f2fd

    • SHA256

      75f67507bd1d62132c045a6465d47c2ee7b52e6ef11bffac99b09192d8908f5a

    • SHA512

      18f0987994ee1ce2720dbcd93fd1bc4280b2079b4cb38a0f9ef3322b76fd5f36d867fd076bcafb479d5fd9a76a239050be0c04d54673204590c741df519ad36f

    • SSDEEP

      192:pQ/0/agYjC8EFcnFVSTMJFFV8wTMZGlV0nwtnw4npGKTRKh:pO+1cnF9FllV+wtnw4npGK1Kh

    Score
    1/10
    behavioral19behavioral20

    • Target

      mdapi/assets/php/layout/interface.php

    • Size

      677B

    • MD5

      78a7f15daf2cddc43360c0d34dd9f3cd

    • SHA1

      1cd3e9ca1525a9144e1b731f8a0dde7226b1388d

    • SHA256

      1d666c643b9bb9ba2a5a32b6500b3b6e7a55107402bee9dbe49b4a34bf72f66c

    • SHA512

      44faa3d7e9dd29f91f3e9d34e3ade653a805e5e30473cb0c1e7befd9e8c680c22407942028abd7541f8f812ffde7d97c2e17b899253d2ae63460fda13bc10dab

    Score
    1/10
    behavioral21behavioral22

    • Target

      mdapi/assets/php/layout/setting.php

    • Size

      25KB

    • MD5

      52e60deb03d806c2d2eea82d3bfe12c7

    • SHA1

      cb27478a78fe60f599b37c77a616446045c4ffba

    • SHA256

      8d06364441badae3dea059ce61b5b76628af5282eaba06c45b0b269b86cc2c43

    • SHA512

      9aab5494458c5bc4cb512507b8bbb2b9adc3ff65d62cfa865db6ae6cbfdd23dca69af5faa0543407279858c2568a522757e6e92c1152b151fb39889f58ec2531

    • SSDEEP

      768:jpZU0M5MeYEiMiMKdQNkF/fBfcGD5fXI2fgRs5nVzfOYc:jpZU0M51Y3MiMKdQNK5fXI2fgRs5V7fc

    Score
    1/10
    behavioral23behavioral24

    • Target

      mdapi/assets/php/layout/support.php

    • Size

      13KB

    • MD5

      55e7d25ff8d76e84c7919d439ea90cd3

    • SHA1

      b74c060a5f0fc60cd81b6e8d89efd8670441e552

    • SHA256

      79e251d2a998b829ba9a44956ec076ee02770a6abe446b8934ec806678f86d2a

    • SHA512

      73a57ae1a7e4736888519f24393a0ff82f31628253ebb7fa0190c1238bbb5d4d34089a6792d82c3b073b9c7ed1ed49cbbe6d3d700af7f6f385107533ccbee9be

    • SSDEEP

      192:RqEp8Ue6lj2Egj08bzfKexwtbCke40aX8Uu0aPEUI60azFIUQx1TjVde40Na1Tpv:6Ue6rGfKp/xv7+jG8s

    Score
    1/10
    behavioral25behavioral26

    • Target

      mdapi/favicon.ico

    • Size

      2KB

    • MD5

      ee5712ad0060b47f71e5a20a0d6b60a4

    • SHA1

      5eab94ed6554bdfb8fed98bef80ab9644a5459b5

    • SHA256

      332dc8ddb1902f6be802249257ef82d13c65b2ade34e7978f72eb8d0d60af328

    • SHA512

      24690c654ff6e16e637a6894ff1cec53e685d5aad6155bde91bd4eced35574f2dbcaec9119e4439ee5e57ca31a75be78cf06f53ea0cdabb18beb9ff7115e86b4

    Score
    3/10
    behavioral27behavioral28

    • Target

      mdapi/index.php

    • Size

      19KB

    • MD5

      add0bfada25a6bd5f2aa384d310a1bbb

    • SHA1

      f1d09bd88517f3649e07c14db2a3a614f73bfc45

    • SHA256

      bdae2f30532d7660483eaf4a854fec8cbf9e257aca42e4f0cb933a5910689947

    • SHA512

      aa7ab10537115ab8f76a23301ceafca719faf5982e023088930eafe239f607ca45be625b366e26e6227e0129cf4be16f3d6fc156111dd0dea30565abae216daf

    • SSDEEP

      384:H0BBbLaKuqiUduFZNjsgOciQBNyxoGr2moG:HyTiQuFZNjsgOrQDubP

    Score
    1/10
    behavioral29behavioral30

MITRE ATT&CK Enterprise v6

Tasks