67f7331b4bd63152957fe8fd9638156615286b3608d8d07fa34944aff6ce09f0

Sharing

Copy URL Twitter E-mail

General

Target

Archive.tar.gz
Size

14.0MB
Sample

230115-x2h3tsbb49
MD5

f866c7910b88a2bbba3d38da81900e80
SHA1

405ae8655b89dd2c492ad1afb057ef8748da753b
SHA256

67f7331b4bd63152957fe8fd9638156615286b3608d8d07fa34944aff6ce09f0
SHA512

3d310fa5562e2c13c535909d7b6d937d22f3d4a99954928c9239ee40c89e09fef5215197f119f000a34ef777e34f2f67379320b97bab969af73421e5079510ec
SSDEEP

196608:M80wEe5PFK4rSnfECkkuQXrnJi6Bj1LdiXWWxtMtXn35/H6jJz2kCRbsohgx7eNj:M80m5PFniuQXtBBuXBxtSJKJURfgINdF

Score

7^/10

Malware Config

Targets

- Target
  
  MicrosoftWindows.Client.WebExperience_421.20070.195.0_x64__cw5n1h2txyewy/Dashboard/WebContent/node_modules/@babel/core/lib/config/caching.js
- Size
  
  7KB
- MD5
  
  d1702d4d66100aedd8160cf8a98f1a02
- SHA1
  
  9b681784bf151ca717aef363ac4c3b36420f7e37
- SHA256
  
  eec7a2b1a7813dd78cafc93c3909095025919b4db8ea1bd3afb9eccd14d0ad7c
- SHA512
  
  09812da373b218e71701fd5a26647a6050d03840f4818715a424fba5850c177f7da5db38e392efee1809bda9902fcb2e6880e90b8d2ce90f61d055903106fb64
- SSDEEP
  
  192:UqO/6JCrgcUFTziJZZK1ni0JhYOSIwfkKfHMJQifOFInE:hrCkbFCJYPnYBQAInE
Score

1^/10
behavioral1 behavioral2
- Target
  
  MicrosoftWindows.Client.WebExperience_421.20070.195.0_x64__cw5n1h2txyewy/Dashboard/WebContent/node_modules/@babel/core/lib/config/config-chain.js
- Size
  
  17KB
- MD5
  
  5de14b3857898f48406d8f57e8b454cf
- SHA1
  
  3123cebfb5286026f59b47a1042884bba9f68d4c
- SHA256
  
  07b45e9d96ff16569ca18ebbea1f6db92e00f12fdf05c60a5549c34fcb797ed6
- SHA512
  
  42b0648f589dec9fd5f7417b5bd8656e570161f913fcee89a289013bec868937d74b26b90375adb6207620004b7746579fdb61b2889a80bafc7fdf4ff7dda02e
- SSDEEP
  
  384:hYG6XfDrwYUWrVJVDVox+ysvp1n/9sD3/+gwRpjM6:hY1XLEYxn/zw6
Score

1^/10
behavioral3 behavioral4
- Target
  
  MicrosoftWindows.Client.WebExperience_421.20070.195.0_x64__cw5n1h2txyewy/Dashboard/WebContent/node_modules/@babel/core/lib/config/config-descriptors.js
- Size
  
  6KB
- MD5
  
  838cd824e12931cbfe2557f77dc36f0d
- SHA1
  
  4e2a9c1282c9d2a00d9f5aa60052d7b8cca8bb38
- SHA256
  
  42ce9e8f74fb10b441eeb6e8e6d47711467fa36953be4350c02de7407d8ce692
- SHA512
  
  b3a9bd237843e927c9f4c4a5d149f86f0ce9031d5067003ac8ffcf0aeb0bc272767c08bfa571a02ef1718ba119e30f6193b5e70e9155daad3540338dfed63355
- SSDEEP
  
  192:Uq67/6fBaQxIgTm+4yu/gmtwPIsy8Ad7zT5ErjPDLmYFS:h6OfBaQxIgpaKPM5Evn/FS
Score

7^/10
- Unexpected DNS network traffic destination
  Network traffic to other servers than the configured DNS servers was detected on the DNS port.
behavioral5 behavioral6
- Target
  
  MicrosoftWindows.Client.WebExperience_421.20070.195.0_x64__cw5n1h2txyewy/Dashboard/WebContent/node_modules/@babel/core/lib/config/files/configuration.js
- Size
  
  9KB
- MD5
  
  32996e2333ac95292b72c1cc4f89ee05
- SHA1
  
  afec9f268e3953e99d2c0c3f38eea0a46f451630
- SHA256
  
  a51db182f9566b682d3441b5383f322d7877045df4963d4de13efcd9bb8eb9d4
- SHA512
  
  17da88781f71211db3d6837c28624a6341e78dc51f254861d38406e1b669c519f9e1e578739c75307a73cbd94983ba30931438c6b599a0ac785ad39446093ec1
- SSDEEP
  
  192:Uq1lNRv//bMx0GDEdROjK391Rs9wnfJXgZy1hkGaLaM9dByd7PDKnG0sJ1wCGX7J:h1dMx0GoNyzogtdAJerYH+H
Score

1^/10
behavioral7 behavioral8
- Target
  
  MicrosoftWindows.Client.WebExperience_421.20070.195.0_x64__cw5n1h2txyewy/Dashboard/WebContent/node_modules/@babel/core/lib/config/files/import.js
- Size
  
  165B
- MD5
  
  7b51086e6a0a48f6c19a452121399ce2
- SHA1
  
  5f6a7dc9cbb6b5fd55f657aea8bcd2694cd6f845
- SHA256
  
  a54fc79a6b4d4e96befc699340ec33b0cfb53b9dab3d0ea10c312a0714f5137a
- SHA512
  
  ba6be3e84fd09785c274ac1998cd167ad789e4d66ed482bfa798b261750aa7d094bab3022a01a6ac7117ef03006e95ca802d82c2076017999aef757a853101e2
Score

7^/10
- Unexpected DNS network traffic destination
  Network traffic to other servers than the configured DNS servers was detected on the DNS port.
behavioral10 behavioral9
- Target
  
  MicrosoftWindows.Client.WebExperience_421.20070.195.0_x64__cw5n1h2txyewy/Dashboard/WebContent/node_modules/@babel/core/lib/config/files/index-browser.js
- Size
  
  1KB
- MD5
  
  6d4c4e63c62521fddddf5f9ed5199f6d
- SHA1
  
  331c9f4b9a54f4c14a623f6dc297a58a4ec6e854
- SHA256
  
  c7b4f401540cb12a0f551cc281ea5f9b0bd516131cd0ff5e1ccefab5c0f26278
- SHA512
  
  0a45a3ce4e4fee3880f56235cff1472a7096b21d663f3c475b1a66d4529da3e6b78be43e5a798f4c953bd5b0d2873661a9429c5f187276efb258122e6d2f9f6d
Score

1^/10
behavioral11 behavioral12
- Target
  
  MicrosoftWindows.Client.WebExperience_421.20070.195.0_x64__cw5n1h2txyewy/Dashboard/WebContent/node_modules/@babel/core/lib/config/files/index.js
- Size
  
  1KB
- MD5
  
  b790c1b845de6a31abb6171f0a501936
- SHA1
  
  598118e2429f1740537e78c4e85693bef6d57d1c
- SHA256
  
  4eb8f4bc7f810907a1627bfad3792efe9ed93779f899a990fcd086777b2a0e4a
- SHA512
  
  ad0cb851615e45029b239fb8933d4897976f15e30c463c72ccdd7c6e2ee40c08e9c4551f48c4b73e66e36bfb41809ac2e9dda1c6c41885e0d98721d6b374f015
Score

7^/10
- Unexpected DNS network traffic destination
  Network traffic to other servers than the configured DNS servers was detected on the DNS port.
behavioral13 behavioral14
- Target
  
  MicrosoftWindows.Client.WebExperience_421.20070.195.0_x64__cw5n1h2txyewy/Dashboard/WebContent/node_modules/@babel/core/lib/config/files/module-types.js
- Size
  
  2KB
- MD5
  
  866c7190295956a97da64bd61b8ccf2b
- SHA1
  
  88bdcf9499fe4bb77f36b793a291dceb17f80d8c
- SHA256
  
  53b5bbc97558db18875bad68b1fce2ca037677fd71d98ec45bebc6df6680052a
- SHA512
  
  f37fbcfac1a24b6f77e915e8b54b5bf2ffbaab23cc7f713b68b206839564853ec0dc82fae162421b52d408b96f3aec4acc5d2a86ae33ce4c6adb031110ffe987
Score

1^/10
behavioral15 behavioral16
- Target
  
  MicrosoftWindows.Client.WebExperience_421.20070.195.0_x64__cw5n1h2txyewy/Dashboard/WebContent/node_modules/@babel/core/lib/config/files/package.js
- Size
  
  1KB
- MD5
  
  22031033c54c6cc2a84c8fa3a303aff9
- SHA1
  
  f5b85c148290c9d02bd27b0828847f6c83cd3233
- SHA256
  
  03a6ba3392863cda4b1750edd42016b1c1465526a355431a72c52e6530b23ab6
- SHA512
  
  76811184493c98067e06b7536fca74820a05f684ee51d010c032198a6f6cd041bca22ca56e8b9979dcfc1fe14d506f88e160561727a694521316f8316ae9ad53
Score

1^/10
behavioral17 behavioral18
- Target
  
  MicrosoftWindows.Client.WebExperience_421.20070.195.0_x64__cw5n1h2txyewy/Dashboard/WebContent/node_modules/@babel/core/lib/config/files/plugins.js
- Size
  
  6KB
- MD5
  
  c48f51f529e73e806e6ebf88451bbd49
- SHA1
  
  8c8ca6b325192b4ae9860def1c4097c096a2bdcc
- SHA256
  
  ac80067bd80c62e7c71300dd754db5af2b30ae509ae1e60e646088051338853e
- SHA512
  
  3d4c66beb7ea679bef642b3a915e092bc21d47ca20458c2b16f38bfa4a8cdc34b1f8ed3cec0a8bcee309bd6e5b68204ff8927b81278411abb94ac7568f4e1bcd
- SSDEEP
  
  96:UqBk8EklRvoxooEd8G/Pa++/oyDzXoaDYAkpmgIfIzF+IQ/Id0noSkdj2qZ5:UqblRAxNEdtShhDzhDYAkYCB0Yj/
Score

1^/10
behavioral19 behavioral20
- Target
  
  MicrosoftWindows.Client.WebExperience_421.20070.195.0_x64__cw5n1h2txyewy/Dashboard/WebContent/node_modules/@babel/core/lib/config/files/utils.js
- Size
  
  856B
- MD5
  
  122136c808654ff8091abeadbbaf23e7
- SHA1
  
  b9a763c54b5053a42b98dcf608c93e6bf0801865
- SHA256
  
  fab7c9a6a4bd89e24bf54886b5fa5248870101db26a84a375d05fab3a1184b9b
- SHA512
  
  794aea6ee2cca7654eb44224dc3304a20f45715a329a2ac88e010ef70e45de1cb2626c5e3110d563b86632c1f0fe24eefb6b21628fa0d7bbb672125584a2f5b8
Score

1^/10
behavioral21 behavioral22
- Target
  
  MicrosoftWindows.Client.WebExperience_421.20070.195.0_x64__cw5n1h2txyewy/Dashboard/WebContent/node_modules/@babel/core/lib/config/full.js
- Size
  
  8KB
- MD5
  
  b7b997b3c2d6e7fbdef770cac819bef5
- SHA1
  
  36533fa27741b72e7d4f9e5e317635ca8dc1ee88
- SHA256
  
  ef38122263715e30416ab2da798323ec8f45bbd06896764bdb0b6682b73253b0
- SHA512
  
  a4e4945648891bbc348f8be02018adbd0744821d8dd7d96f42704ab76e55e5b9679eaa0b990f0a8f26bccd244846634f4a146b9bb658f56b14d76a14b1e6a8ad
- SSDEEP
  
  192:UqF/6zLEIXALtn6PYl+Z0agDSxGyam0g5hpsHgLl085XMta4duN:hsEIX5Azg+A23d2
Score

1^/10
behavioral23 behavioral24
- Target
  
  MicrosoftWindows.Client.WebExperience_421.20070.195.0_x64__cw5n1h2txyewy/Dashboard/WebContent/node_modules/@babel/core/lib/config/helpers/config-api.js
- Size
  
  2KB
- MD5
  
  d20494dd5e50cbcfac9c8a9d6547b155
- SHA1
  
  530e1dd283cd51f24f9a4a5cff86692d3b0112cb
- SHA256
  
  f1b9f8cbfb2a24647af1a519dafecb678ee757fdea768fa22f4f4bc15fcd1d57
- SHA512
  
  524e232055d95b3c1e843853de513c4bc65a9ee2ceb1252ec118aebb30c51c5fe09aad6f4fcb89b1133f5d22223cd1988b796c5ed2eda68dacfaee00512219e9
Score

7^/10
- Unexpected DNS network traffic destination
  Network traffic to other servers than the configured DNS servers was detected on the DNS port.
behavioral25 behavioral26
- Target
  
  MicrosoftWindows.Client.WebExperience_421.20070.195.0_x64__cw5n1h2txyewy/Dashboard/WebContent/node_modules/@babel/core/lib/config/helpers/environment.js
- Size
  
  227B
- MD5
  
  025034188192e15b34dc999fcb88e75b
- SHA1
  
  ec5e90cc0d51aeb7328df6c3071fa810c289e3b4
- SHA256
  
  a5c83f64422199bf66e5519848210b3328d685dfb95bb24a06b83043a57d307e
- SHA512
  
  d4265dbe1be6b92cd2979174ddf526aad60fbf0a80c96612a3ad58c3293198668bb7b62d8e742f17792244dfce03b1761cbb447d60ee5a606bc0b4790fd5e0a9
Score

7^/10
- Unexpected DNS network traffic destination
  Network traffic to other servers than the configured DNS servers was detected on the DNS port.
behavioral27 behavioral28
- Target
  
  MicrosoftWindows.Client.WebExperience_421.20070.195.0_x64__cw5n1h2txyewy/Dashboard/WebContent/node_modules/@babel/core/lib/config/index.js
- Size
  
  2KB
- MD5
  
  46e62cd23d4297c880f3441d42ce03fc
- SHA1
  
  ea09b82cc25f6f1d108298c2f98c6b3846163f46
- SHA256
  
  4bff3c1a45ca1290f8497c6a6c5b29c4cbaf6d09256ec3cb1e12780f86b5e079
- SHA512
  
  8e5c42a869427f4e0d25998fa61fc4b51816b375ce30af0be473429240d650d423d6c43a279031b54d81786a13e81da605da154b88e0aa507c69cac8ddb18d74
Score

1^/10
behavioral29 behavioral30
- Target
  
  MicrosoftWindows.Client.WebExperience_421.20070.195.0_x64__cw5n1h2txyewy/Dashboard/WebContent/node_modules/@babel/core/lib/config/item.js
- Size
  
  1KB
- MD5
  
  ccec6a700c1911a18f7a38a0f204d262
- SHA1
  
  58e10bb61ef43074cec740254d20dbae5c80372e
- SHA256
  
  900cc62c09a000bf6d948b36c1aadc8ea7d92a414b69efea650ec7d5aaa6ec6d
- SHA512
  
  63df1f53a36e35b0356690865eb915b61249d29b6cbe52ad73d2b9497da7f92f6fd503c3cc049d3f00241b9918d6367f86e385385b3d39129ce035e2d5b8424c
Score

7^/10
- Unexpected DNS network traffic destination
  Network traffic to other servers than the configured DNS servers was detected on the DNS port.
behavioral31 behavioral32

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Targets

Unexpected DNS network traffic destination

Unexpected DNS network traffic destination

Unexpected DNS network traffic destination

Unexpected DNS network traffic destination

Unexpected DNS network traffic destination

Unexpected DNS network traffic destination

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32