Overview

overview

3

Static

static

3

billing-ce-cp/.xml

windows7-x64

1

billing-ce-cp/.xml

windows10-2004-x64

3

billing-ce...er.jar

windows7-x64

1

billing-ce...er.jar

windows10-2004-x64

1

billing-ce-cp/.xml

windows7-x64

1

billing-ce-cp/.xml

windows10-2004-x64

3

billing-ce...26a.js

windows7-x64

1

billing-ce...26a.js

windows10-2004-x64

1

billing-ce...167.js

windows7-x64

1

billing-ce...167.js

windows10-2004-x64

1

billing-ce...3d.xml

windows7-x64

1

billing-ce...3d.xml

windows10-2004-x64

3

billing-ce...e7.xml

windows7-x64

1

billing-ce...e7.xml

windows10-2004-x64

3

billing-ce...1cb.js

windows7-x64

1

billing-ce...1cb.js

windows10-2004-x64

1

billing-ce...c2a.js

windows7-x64

1

billing-ce...c2a.js

windows10-2004-x64

1

billing-ce...112.js

windows7-x64

1

billing-ce...112.js

windows10-2004-x64

1

billing-ce...958.js

windows7-x64

1

billing-ce...958.js

windows10-2004-x64

1

billing-ce...b8.xml

windows7-x64

1

billing-ce...b8.xml

windows10-2004-x64

3

billing-ce...b4.xml

windows7-x64

1

billing-ce...b4.xml

windows10-2004-x64

3

billing-ce...2b.xml

windows7-x64

1

billing-ce...2b.xml

windows10-2004-x64

3

billing-ce...b76.js

windows7-x64

1

billing-ce...b76.js

windows10-2004-x64

1

billing-ce...48.vbs

windows7-x64

1

billing-ce...48.vbs

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Quarantined Messages (8).zip

  • Size

    76.9MB

  • Sample

    230807-wbyvxsab7s

  • MD5

    5a5dae1c75163dd1ad6d86758b69c39b

  • SHA1

    77adfa7f8b0b2fde5723855126af4724b106afb9

  • SHA256

    b6afe64ae4567147667d6e8e1ad9a2532ea376f1e9cdeb37b1bdb64030c9ed16

  • SHA512

    02f4367d4349144848f78efd721b9d1caf118aa39f524f47cff57553f2e0b206236b385c0cad7fe01c4ef8ea01c8375abfb333362b20ebcaf80d9d598b52884f

  • SSDEEP

    1572864:+Gpc3RbBKbUbeUdI3dbUft4SqVb+s841ooHQKRLgEjIrwoR3otmab92X:+oqNSU6I4S+qVvowKOEjxu4cagX

Score
3/10

Malware Config

Targets

    • Target

      billing-ce-cp/.classpath

    • Size

      1KB

    • MD5

      c2d2d379399605b0f66ddaa0c61ece75

    • SHA1

      61b566679865bc72336715822f2c5713caf24ed8

    • SHA256

      626a5742001e53d55afa2ee9629c84be8d557b28987487c64f526da11851cec2

    • SHA512

      bb376ced293757387a4a5e37ab018f25de06ac330a716da6c1b5e8884777527a0acf28e68b3d21167bc9bb0413c92bc76b113a135e8bba4443fe4314676d2991

    Score
    3/10
    behavioral1behavioral2

    • Target

      billing-ce-cp/.mvn/wrapper/maven-wrapper.jar

    • Size

      47KB

    • MD5

      f24493a75bff0bff5a83b097f6726f11

    • SHA1

      ca0763264dc2e879c0ec8f3460f35d017fd8f61c

    • SHA256

      1dfe794c50f17f7808b1ed3cde3c009ba9a1b56aeb5c54e1dd3c3b1a93feefe7

    • SHA512

      e403eba75f0c30dc0cb33557bea01cc8c0751d0916464542044b423b3be41adc796880f9debc69114628b28ae081a38427fac0d5d70bbb99d44615b0a1110e5e

    • SSDEEP

      768:b2tJqNRmMZy6X9TEimVZPi2/uI5Wqzf9zLawzc+7pxm8JN+tL5zBcL/k+HpmseCg:b2r05S3VZPi22IgqjxL9BVN+jVcFHvel

    Score
    1/10
    behavioral3behavioral4

    • Target

      billing-ce-cp/.project

    • Size

      718B

    • MD5

      3dba8c709e82ee3e4df8526963efef45

    • SHA1

      0e5ec3ce511ed20d4adf01abf3fe8b4de3caf23d

    • SHA256

      903cb3cb8ea1f8f420226b400108ea65c332bad585c8c2bae14eb18409efeeba

    • SHA512

      b503acb9f695861d839f391225032a27f1da6638de8ab71cd44380ff57ad0a62939ae80222b120145749b4b9dbab989e632315d6658e183a3935111faec73f55

    Score
    3/10
    behavioral5behavioral6

    • Target

      billing-ce-cp/.svn/pristine/02/02395241e5276448ddfb37627c2cfd6f946d326a.svn-base

    • Size

      4KB

    • MD5

      fa6d773787dad787dc473d46f5a75eb5

    • SHA1

      02395241e5276448ddfb37627c2cfd6f946d326a

    • SHA256

      44ec252d27552e7916ac847863de73f0306e00a2dd10a119c0f8c2c55f6578fd

    • SHA512

      493e8b656fa956e632f85370f8244550aa75a0e56d9c6d2e85b164aec0fc01761a05998c688c3ca4537fd55b83be1cc2163b49da1fdbd8f584f5e4ff727b6271

    • SSDEEP

      48:cUSateEG7/v0QrkUPE7C0FoIgUuG6ALODOuOsUlBLYhttG/XYRs/CX6qQjjPcx9M:cUSJES/M2kUbGoIgUV2ONshefHP2U

    Score
    1/10
    behavioral7behavioral8

    • Target

      billing-ce-cp/.svn/pristine/09/09225e90422df3279598d961d28c040a24100167.svn-base

    • Size

      9KB

    • MD5

      dcfbd91598f78adc139bd538640bfa3b

    • SHA1

      09225e90422df3279598d961d28c040a24100167

    • SHA256

      63d68cb0b1701cf2fc56ef05ea2f83fabcec4e555b7ba485968f7fa9a5cc9434

    • SHA512

      ededf4515a79967d24a6a8c43256c426c5366a68e28b11bcacec0090e109799064f3fad3a77d7970fe3a99f70919cb33380bf5ea90a27beff4d4f6c17ce92a32

    • SSDEEP

      192:t3XoYUq4WghOgrI+BWoDblQGQu/BsHM+W:t3nUq4N/I+gNoBsHk

    Score
    1/10
    behavioral10behavioral9

    • Target

      billing-ce-cp/.svn/pristine/0e/0e5ec3ce511ed20d4adf01abf3fe8b4de3caf23d.svn-base

    • Size

      718B

    • MD5

      3dba8c709e82ee3e4df8526963efef45

    • SHA1

      0e5ec3ce511ed20d4adf01abf3fe8b4de3caf23d

    • SHA256

      903cb3cb8ea1f8f420226b400108ea65c332bad585c8c2bae14eb18409efeeba

    • SHA512

      b503acb9f695861d839f391225032a27f1da6638de8ab71cd44380ff57ad0a62939ae80222b120145749b4b9dbab989e632315d6658e183a3935111faec73f55

    Score
    3/10
    behavioral11behavioral12

    • Target

      billing-ce-cp/.svn/pristine/19/192571290a9ffa871fe23122edddfab634c61ae7.svn-base

    • Size

      6KB

    • MD5

      f8c792af2f74494eb07c2c43ad66d182

    • SHA1

      192571290a9ffa871fe23122edddfab634c61ae7

    • SHA256

      c4836fb84dda2b02af7c7cab0bab826bb5f9c16c385055df95db4c2eea081bb9

    • SHA512

      da2d9cafb55e36ecc4000087542fe080a4069e65ce76473b6beefabf3cc5853184cd5c8007f16b9b7224cd6fdb0cccc37ccf979eb3f1166dd2c1b80aecb15e01

    • SSDEEP

      192:2PR/OboOPsmib25ETzZhpRfLP6GMGvSO7y7NyizAjAUcr9OEYpqnC3uVT:2PAbo+smib25EHZhPfT6GbvSWy7QOAjy

    Score
    3/10
    behavioral13behavioral14

    • Target

      billing-ce-cp/.svn/pristine/22/229e076ad7e176204c5108cf972590ea658051cb.svn-base

    • Size

      2KB

    • MD5

      42b60751eb1724bb708fbe91cf6538a2

    • SHA1

      229e076ad7e176204c5108cf972590ea658051cb

    • SHA256

      24dde25a649296fa22db5eb754fc959c505c1d194a9dcc8c74d411fcf98eb5fa

    • SHA512

      de0a1cfc42797f6c7d87fd4033fee134b67bcf5a68c03daa01955388d756f4a7a3baec3c2efdfba8558ed43d1a850353671e74e8b4674ddd250a452ca3f7f1b0

    Score
    1/10
    behavioral15behavioral16

    • Target

      billing-ce-cp/.svn/pristine/24/2450134711d3eb7e779346a6d47b56a26230fc2a.svn-base

    • Size

      4KB

    • MD5

      5f0fdad52c36970899cd65bacacee954

    • SHA1

      2450134711d3eb7e779346a6d47b56a26230fc2a

    • SHA256

      f46abc60c0f1b99b4dba90e6d0a55ee6c3eb5d3544e0c65462805ef93442a394

    • SHA512

      8b2b8b2d19749bec3e97a0a2f7f0e8b341ce800fc09f9c4c58ea1a213753a803115b1162dd40c412efc55786aff6fc3d847a954e4e77d9e9c5aef410286d1466

    • SSDEEP

      96:xQ+QgIPfH3EZyq+PTwqUnZFR+F5rFk7dvgCyubYQbOaycprriA3Mc:ugWfHpVTmnUEgCyubYQbdycprribc

    Score
    1/10
    behavioral17behavioral18

    • Target

      billing-ce-cp/.svn/pristine/2b/2bd34639f0cd1d756a27afc6d44ba29c2182a112.svn-base

    • Size

      7KB

    • MD5

      9754c7ed17f823cc129e29ffa5670f8e

    • SHA1

      2bd34639f0cd1d756a27afc6d44ba29c2182a112

    • SHA256

      126f3c2cb4ea30e1222a1043a9dbe164d77be2976be42dc34daaffc51c3074a3

    • SHA512

      4f2f0e70a88f18d3a8eda63203841eb015c6ad19124d6463eaf02f26d1c760338e839ad79cbed2ab499cd89ab206c46a1456f35b27180a2a0a22e1ddce9a9ff3

    • SSDEEP

      96:cU1EukBiodbAud+ULu411UW6u411UWOR9wUCE7Eu4WSt4VCYN0dzRuozWSt4VlfF:cD4oFAa1L2B2H9ecE30N0dtXs

    Score
    1/10
    behavioral19behavioral20

    • Target

      billing-ce-cp/.svn/pristine/34/34bf30a6c5c9d46cdac4a9469cedcc3ff0e09958.svn-base

    • Size

      5KB

    • MD5

      9e7c7e91874ebc41a0a28f1dfc13c2b8

    • SHA1

      34bf30a6c5c9d46cdac4a9469cedcc3ff0e09958

    • SHA256

      61b3175f9a7ac47678e4eb90edd2de5b686eb7d4e45a025a5d511d0773c4daa4

    • SHA512

      f5440823d38a24406ddf1494af21290eee71da6b97e11b0027e4dd8f71ca775cb31fba7c5621ae42cf943442bec0efd837bbf09886a2eab73dcc8cd0d1cce151

    • SSDEEP

      48:cUEXda4WbafXuQ/QtqoXUrd2FJFfGcPWEDRIG2icHLsF632xa+jUo8Z2RXOWoZ+n:cUEN3feyAqoXUZkbeXdt06GkYNYEAqV

    Score
    1/10
    behavioral21behavioral22

    • Target

      billing-ce-cp/.svn/pristine/37/372924d0e561e64f1200690be39f3c797dbf95b8.svn-base

    • Size

      3KB

    • MD5

      8642914ad244f675b1bde9ef67106dbb

    • SHA1

      372924d0e561e64f1200690be39f3c797dbf95b8

    • SHA256

      1b1913d822e3f5c47cb0d9e6b3f9ba0bd625dae3cbba3a33f26fae31418b987a

    • SHA512

      fa4c72386f553837d55c315211868043c7507610660ac866dd0b112646c0905ee7dab980f6f94c29e9662a9812aae3c794d5fdb405d60f4690757d6349eab03b

    Score
    3/10
    behavioral23behavioral24

    • Target

      billing-ce-cp/.svn/pristine/5d/5da08716833222bf1e2070b041b094c43766d4b4.svn-base

    • Size

      1KB

    • MD5

      ce77a25821b3fd9bad732d2401526821

    • SHA1

      5da08716833222bf1e2070b041b094c43766d4b4

    • SHA256

      e2bff5431105efbff71a3261292e978930c63d5048411db1b3fe342e9f39c679

    • SHA512

      735af962c94aed56270583aa692e1c412bd05807b7a025a2bb825f585a9ab727ebf64e72891ee7a7d86b0163ae0dbd8a57d9ed7a1c4e92d8d14f32f0c03e9072

    Score
    3/10
    behavioral25behavioral26

    • Target

      billing-ce-cp/.svn/pristine/80/8040d33ff07ae7ca25253042c2dcfef37b32b12b.svn-base

    • Size

      1KB

    • MD5

      4336220d2b4bec28e425a1ae8dcb2018

    • SHA1

      8040d33ff07ae7ca25253042c2dcfef37b32b12b

    • SHA256

      5eb6a9af4f23daed5bafdc626e6d078498276a0362053b8543761000d0c8485a

    • SHA512

      469e3da43a9f4916944a11b9fd4bc965ab47f30e2b56a5332c863e4a2e4a63ae0b39b7bdb683529426be6ea986c735acc87a6d26bac14580e38feea28c05cd88

    Score
    3/10
    behavioral27behavioral28

    • Target

      billing-ce-cp/.svn/pristine/80/80fbad6c51215de7679e680755a74e18d343db76.svn-base

    • Size

      1KB

    • MD5

      dbba155f1c7c891f1cbdb291bb56499a

    • SHA1

      80fbad6c51215de7679e680755a74e18d343db76

    • SHA256

      0688b196437bbb59d898f211f1d23dfdf298e05f27c3f83179ab3a277d1295de

    • SHA512

      9e2a024159d8066ba2655dc433760a7482a5ce796fb28c95a504e6d8889955d2cd5aca65bdc74ff1bbee218eb3823861a9bc9f117f8385d007e5ccab441cc1b4

    Score
    1/10
    behavioral29behavioral30

    • Target

      billing-ce-cp/.svn/pristine/9c/9c6d2f7349fb906818588a912e7676ba5fa98148.svn-base

    • Size

      5KB

    • MD5

      bd6438d1011e75000683300468bdb0d7

    • SHA1

      9c6d2f7349fb906818588a912e7676ba5fa98148

    • SHA256

      98636d9c28e3140c1cd3b6037d0a334a7328aa1350c0ab127d90ca99912df3f1

    • SHA512

      0e440275ed49843718309507f75bf16193cc5b3faacdb2f6dee3329490c7e03f6749c8a6ea4d1373d61c1160adb502e36da4b8374fd98df98e10872661b1e5a6

    • SSDEEP

      96:iQ6tEJHNg0UqfHYR4GCe/yIHDsPrwIHcJUhf6oIclrNOaMbmvuqgUUIpe/0dos:4EJHnRGCetH4rB8yQclIZbkXBpe0z

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Matrix ATT&CK v13

Tasks