Overview
overview
1Static
static
1Plugins/icmp.js
windows7-x64
1Plugins/icmp.js
windows10-2004-x64
1Plugins/ms...exp.js
windows7-x64
1Plugins/ms...exp.js
windows10-2004-x64
1Plugins/rdp.js
windows7-x64
1Plugins/rdp.js
windows10-2004-x64
1Plugins/scanner.js
windows7-x64
1Plugins/scanner.js
windows10-2004-x64
1WebScan/info/rules.js
windows7-x64
1WebScan/info/rules.js
windows10-2004-x64
1WebScan/lib/check.js
windows7-x64
1WebScan/lib/check.js
windows10-2004-x64
1WebScan/lib/eval.js
windows7-x64
1WebScan/lib/eval.js
windows10-2004-x64
1WebScan/li....pb.js
windows7-x64
1WebScan/li....pb.js
windows10-2004-x64
1WebScan/po...-1.vbs
windows7-x64
1WebScan/po...-1.vbs
windows10-2004-x64
1WebScan/po...-2.vbs
windows7-x64
1WebScan/po...-2.vbs
windows10-2004-x64
1WebScan/po...47.vbs
windows7-x64
1WebScan/po...47.vbs
windows10-2004-x64
1WebScan/po...88.vbs
windows7-x64
1WebScan/po...88.vbs
windows10-2004-x64
1WebScan/po...ss.vbs
windows7-x64
1WebScan/po...ss.vbs
windows10-2004-x64
1WebScan/po...ce.vbs
windows7-x64
1WebScan/po...ce.vbs
windows10-2004-x64
1WebScan/po...ce.vbs
windows7-x64
1WebScan/po...ce.vbs
windows10-2004-x64
1WebScan/po...ce.vbs
windows7-x64
1WebScan/po...ce.vbs
windows10-2004-x64
1General
-
Target
2771c24ec49f71eb91ab3e6cee00f9eb113b9346e0380b2da0d838a9dbd4e5ec
-
Size
3.7MB
-
Sample
230903-e647ragc3v
-
MD5
0cd375f6b1a319dceb56cadd66a51dfd
-
SHA1
692432b1c05203238d939b02eb0920b5222f9914
-
SHA256
2771c24ec49f71eb91ab3e6cee00f9eb113b9346e0380b2da0d838a9dbd4e5ec
-
SHA512
f4269aa8ffed327e8e67c4432d9caeade8b5e204c872062260eb78c7b75ce0850bd9a2d079db1ddc5c6e7b4198b7ca8f31cc7ad82f68b00819535a8fecb4cfd9
-
SSDEEP
98304:kkgOWBQWI1sc5Kdc8IsTDFIJ0JM0FdBAnUvqNCxB:PPWz25Kc4/K70F/Anru
Static task
static1
Behavioral task
behavioral1
Sample
Plugins/icmp.js
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
Plugins/icmp.js
Resource
win10v2004-20230831-en
Behavioral task
behavioral3
Sample
Plugins/ms17010-exp.js
Resource
win7-20230831-en
Behavioral task
behavioral4
Sample
Plugins/ms17010-exp.js
Resource
win10v2004-20230831-en
Behavioral task
behavioral5
Sample
Plugins/rdp.js
Resource
win7-20230831-en
Behavioral task
behavioral6
Sample
Plugins/rdp.js
Resource
win10v2004-20230831-en
Behavioral task
behavioral7
Sample
Plugins/scanner.js
Resource
win7-20230831-en
Behavioral task
behavioral8
Sample
Plugins/scanner.js
Resource
win10v2004-20230831-en
Behavioral task
behavioral9
Sample
WebScan/info/rules.js
Resource
win7-20230831-en
Behavioral task
behavioral10
Sample
WebScan/info/rules.js
Resource
win10v2004-20230831-en
Behavioral task
behavioral11
Sample
WebScan/lib/check.js
Resource
win7-20230831-en
Behavioral task
behavioral12
Sample
WebScan/lib/check.js
Resource
win10v2004-20230831-en
Behavioral task
behavioral13
Sample
WebScan/lib/eval.js
Resource
win7-20230831-en
Behavioral task
behavioral14
Sample
WebScan/lib/eval.js
Resource
win10v2004-20230831-en
Behavioral task
behavioral15
Sample
WebScan/lib/http.pb.js
Resource
win7-20230831-en
Behavioral task
behavioral16
Sample
WebScan/lib/http.pb.js
Resource
win10v2004-20230831-en
Behavioral task
behavioral17
Sample
WebScan/pocs/74cms-sqli-1.vbs
Resource
win7-20230831-en
Behavioral task
behavioral18
Sample
WebScan/pocs/74cms-sqli-1.vbs
Resource
win10v2004-20230831-en
Behavioral task
behavioral19
Sample
WebScan/pocs/74cms-sqli-2.vbs
Resource
win7-20230831-en
Behavioral task
behavioral20
Sample
WebScan/pocs/74cms-sqli-2.vbs
Resource
win10v2004-20230831-en
Behavioral task
behavioral21
Sample
WebScan/pocs/CVE-2022-22947.vbs
Resource
win7-20230831-en
Behavioral task
behavioral22
Sample
WebScan/pocs/CVE-2022-22947.vbs
Resource
win10v2004-20230831-en
Behavioral task
behavioral23
Sample
WebScan/pocs/activemq-cve-2016-3088.vbs
Resource
win7-20230831-en
Behavioral task
behavioral24
Sample
WebScan/pocs/activemq-cve-2016-3088.vbs
Resource
win10v2004-20230831-en
Behavioral task
behavioral25
Sample
WebScan/pocs/alibaba-nacos-v1-auth-bypass.vbs
Resource
win7-20230831-en
Behavioral task
behavioral26
Sample
WebScan/pocs/alibaba-nacos-v1-auth-bypass.vbs
Resource
win10v2004-20230831-en
Behavioral task
behavioral27
Sample
WebScan/pocs/amtt-hiboss-server-ping-rce.vbs
Resource
win7-20230831-en
Behavioral task
behavioral28
Sample
WebScan/pocs/amtt-hiboss-server-ping-rce.vbs
Resource
win10v2004-20230831-en
Behavioral task
behavioral29
Sample
WebScan/pocs/apache-flink-upload-rce.vbs
Resource
win7-20230831-en
Behavioral task
behavioral30
Sample
WebScan/pocs/apache-flink-upload-rce.vbs
Resource
win10v2004-20230831-en
Behavioral task
behavioral31
Sample
WebScan/pocs/apache-httpd-cve-2021-41773-rce.vbs
Resource
win7-20230831-en
Behavioral task
behavioral32
Sample
WebScan/pocs/apache-httpd-cve-2021-41773-rce.vbs
Resource
win10v2004-20230831-en
Malware Config
Targets
-
-
Target
Plugins/icmp.go
-
Size
6KB
-
MD5
292003c2b5ab015147657374a120f75e
-
SHA1
97f2b8a409eb5da03928ffab364c89d88ef3f2fe
-
SHA256
fd1120c9d670e6779039a466a54c4be9a088e89fe90a39957900366ed006fb46
-
SHA512
e6e7e1cb767f3eaa913dce6c44562b802b01e687fad3cf35fec3f8482ef604dfa8071a0aebbf88c223fb353cb7245f4049b3bad3527c383e5b684b7c5e7e36fa
-
SSDEEP
192:Mgt/ZegHtaC+dgpBjPxVHSLdh498+iwXnfV:M6QE/JSfe8N4
Score1/10 -
-
-
Target
Plugins/ms17010-exp.go
-
Size
35KB
-
MD5
dcfb3c1b1af25ded69b645bf805db575
-
SHA1
ea14c2aa6d113835aba5b77b4e2bd0f3842b0e6c
-
SHA256
f570b82e5e84aa2a0c90486c4b6fe0b5f3f989bd02c65b77f9637288322dd04b
-
SHA512
b88d15d2ab268300d711c14ac99a96009a1e4b4503d25f16a75ec2def6a875ae77c3cfce64872ea1d3acf5081f68b74f7ee9c97d61a146f832e901458e5273b9
-
SSDEEP
768:mqKkucRKo41zF7HJewsjp0/WOKXKHKjdc6hbv:m3Fq5hb
Score1/10 -
-
-
Target
Plugins/rdp.go
-
Size
4KB
-
MD5
93151f0b0106d41ecef43fa0b07fe964
-
SHA1
083f23a86685e514041a1dd262ec6eb3a14435d5
-
SHA256
ce4d615cb6d4803159b62a5d77363a67dd9d313709fcb86b725afe562810a833
-
SHA512
43e86fcda4f64f27e1d06c2fa91264834f411e9563cd5265fa876b50bd2831dd6527bf427aaadf39108ce785c3d2655edaf9c64983543336b3f51c8e64b2075a
-
SSDEEP
96:wzqVNNDuFeT1wXwn7y9TLQlAcBMfmXQ9IFmSu6TbPNKrN5cJ:+cNNuvE7yRWA+MfwN9TzNKrN5e
Score1/10 -
-
-
Target
Plugins/scanner.go
-
Size
3KB
-
MD5
a7a8bcf3a7955c0ad3a4920acf0f9c4a
-
SHA1
f887bad8a6c4e6c1240350330af96b3cb38d0631
-
SHA256
60acacbd1baf3cbb15179eb2fad7313abaae4d5ad504f2845ce55918d9929120
-
SHA512
8b4f54be931f34d8b19ca00be06d19ace512494056418efde64dba993a2c6c5fc66b86b37fe04f80e8c0a86eb247adafdfc579fec37bb17b8da4fee5bdc6128e
Score1/10 -
-
-
Target
WebScan/info/rules.go
-
Size
18KB
-
MD5
b1de51522a24a1d3600046f435d07079
-
SHA1
b93d581f1f5dacaaea1654ed6ee325e952467fad
-
SHA256
9ad850980344ed85239e3c70304d89e37cd4d74d5edbdc284934c32a53b918ad
-
SHA512
7c98e2ee9b169a2c69bc6135c84b37b1e0795abee6335ce5515834924812e03bc9e348633ec9840e54514d4d2cb20a414d8c24072d8c9a84c6020f264a263b0a
-
SSDEEP
192:vUyrxroqVKM4kGbVOZpDIxaRZWJmBctNtZusHDJTj4PRf90g8AEu0JazLy0nw8M8:vUyFaM4IZpD6aFctnZjJTSRfGem0/Mvk
Score1/10 -
-
-
Target
WebScan/lib/check.go
-
Size
14KB
-
MD5
8ccfa59fb54660c87210162a29c99306
-
SHA1
921b3cdc18347541701cab7f9c51d2051509d955
-
SHA256
66a2f842c3b4675bffd3303ae19baa9fe303a5dc2bd228e06033b3ca83b369f8
-
SHA512
c3a1670b8721dda32fcc358d6923632f800345fe42d29e643df9dd6469a536e99dfe1f5ea6bef100b4a1193cd8ea11c2127bba6a2b846753ca1fc05b5f06947e
-
SSDEEP
384:TzG8tjk/FRfT30FJsVgn8llox0jjKEDk6eCmeyUT2HGaOt:TzGEjeRYFJagn8llrj5ca
Score1/10 -
-
-
Target
WebScan/lib/eval.go
-
Size
20KB
-
MD5
8908985ac0d5a8dc407f2b7c5f841391
-
SHA1
037d791d3b4a52e70b65befa3dbf2ed1db0a7300
-
SHA256
91ee717a8481a99404df40ee2e70f9910355228ab0f9918b2bba783bd851496c
-
SHA512
a2b64735114e0e9910f2fcf5870a5ea6d5073c8a82f0c769c639c7d37eb515dca1ea35cdb8ea11deaf29b9df592a2e22fff0570a63053354031fc5eadba516d9
-
SSDEEP
384:HGDdfAdRCkUL/DND5jJjQLxNmPmCKZpjsj0SAB+ukfDHhCWAvo:mD9ubZpjsj0SAB+ukfDM/Q
Score1/10 -
-
-
Target
WebScan/lib/http.pb.go
-
Size
16KB
-
MD5
a1bf4e2db47f34efe2666d6816d2f345
-
SHA1
d4a36a79ac10ecd3383deb4578cdab0fa202dae4
-
SHA256
ba52fc2bff505c539d37522cabdf3d0e6001abb67bcf4b1989fe06c65fcab57f
-
SHA512
f9aef884de342096cb012eb52a655d3b29a0c04eceb286e3a37fa6ce7b3af1bda9295315e5dcdf47055073bde9aafdb7738240a31e0a5a652e36f65876236e1f
-
SSDEEP
192:QTnnS8cT9CtTKm6COUKRsz9E6wMwYgbJl1TbvHbBkMvosutY433wur+jSLKBdXK:Qm6+QqbhbmdP+Y7sSLKBd6
Score1/10 -
-
-
Target
WebScan/pocs/74cms-sqli-1.yml
-
Size
719B
-
MD5
397a06009dad22c64d9ca9dcf3b6bf02
-
SHA1
753234c740c612bda0bbad502835da7863108bde
-
SHA256
34177730371027c91612639f72272fa5daeb92c270dec22c99fa433f92ba6cf6
-
SHA512
f6c9ee0b83f578f5aaaf47f77e88ed5f01e7b3545482aa109833455e4ec35f78866c146f38401070778f04ddfac07f67c98fd667421f5284f28651aa291f3e08
Score1/10 -
-
-
Target
WebScan/pocs/74cms-sqli-2.yml
-
Size
373B
-
MD5
31fa7fd0d2708608f1f0ceda9f66135f
-
SHA1
58f4838d8cac814570c0612a989b32d5b76dfc0e
-
SHA256
93b47d76c545a6d064e375c2ab7441e64114dc81c5a33736590a9efb3f02ded0
-
SHA512
626c5da2bd1e50532061ef707cd62e9e63ae7ede15e937f730d289f2dcf12a1c669db7215d609a1461198b4b37f42ebaf6548fe58a4ad7514f22c2a9dcfde108
Score1/10 -
-
-
Target
WebScan/pocs/CVE-2022-22947.yml
-
Size
1KB
-
MD5
dc46f113d784704a0d266334f800bf95
-
SHA1
d7e903ea457b1be0c19c175d05c268d8686d2657
-
SHA256
e424026cbc4889d0507e92cfbe3a80dc8c3c49a6e854c1533b59ee3478f22bd4
-
SHA512
8890052404c935f08f7ba7356a8abfc4beffdfe7fa8e37ac782f9aa7bc2aeb0e02fa1fb891edad0d15f4af0f8a7258540ecbaf59902beb84518c45616a3b490b
Score1/10 -
-
-
Target
WebScan/pocs/activemq-cve-2016-3088.yml
-
Size
942B
-
MD5
8bc3aa6ba31d31a5fbffb39140b8b2dd
-
SHA1
235f89aa50ab3f279afbfc291b872012fc021594
-
SHA256
88c8456f88e97592c29414bd07434d4fef48de884b7dc68512c27565ec8f6b47
-
SHA512
e1d2a6493f4d8245b24c2e929e1eea1b1afe8e83694e2c8643f9651757d22403416650da80168ed9b48f63b1d389430e5446def387b3e73353c4d0aeafeff20e
Score1/10 -
-
-
Target
WebScan/pocs/alibaba-nacos-v1-auth-bypass.yml
-
Size
860B
-
MD5
1f8e08f2357ecdd6d5a5006a234d5b3b
-
SHA1
7f084c825d5a44a46abefb4e7ee4b943cddb7578
-
SHA256
8885b55a5e90188a34a4295f8f338d96d2e3b2d732fc3a42994d2487de2ec5e9
-
SHA512
d0c19f1137455add65359968f7165c8c13c311911822fa08d67614e9aa92058072d43a6e2527a3e7c82c1ea0255787cdce1a092891fa9338b3e9a646b40c85a6
Score1/10 -
-
-
Target
WebScan/pocs/amtt-hiboss-server-ping-rce.yml
-
Size
898B
-
MD5
1894ee30db65cd9d189b9f442a067337
-
SHA1
07c942857e6fd0d1f0e7b9f3bb100c2cbca418db
-
SHA256
a4f7666e46d772f951af8af5d56fddf8b29de8836edc65acc67c76272210e04d
-
SHA512
cd014e110d8609bbcdf689ae1efff1a8a3dfe69183de514ed581d52f39ae234d00e9eae6c057ef5384e736f13840bb008fe0afaa20c633e5a9b5d335d86e78c9
Score1/10 -
-
-
Target
WebScan/pocs/apache-flink-upload-rce.yml
-
Size
1KB
-
MD5
fe5a4cd39dfe6db4ba25fb4d51f29af0
-
SHA1
a16eacaeb21a51be550891c398b8f98ff680e5e0
-
SHA256
1ceea2e471a20fff1162e4b19cb9e87b257ba21715b059691adf1cd42038f58c
-
SHA512
bce2bbfb01593ed3b017e16cdfa989638fde9d2822839967563d180974a7a7c69ed048497b427fa2dd466a9ffd5c848c315da464e9dc134f4f3612ad79c468ab
Score1/10 -
-
-
Target
WebScan/pocs/apache-httpd-cve-2021-41773-rce.yml
-
Size
478B
-
MD5
e3a489051a446ecfb81866e3414b4453
-
SHA1
366d305b99a35730ba36dc846aeeeabdfb34c019
-
SHA256
53849b778e546bf6aab8514db4a6f9da05b2bd744e29f0e5272ef401b788c233
-
SHA512
fccd77b0b930871260e63858faf848067cfba3ef76055236465998c711f93a5c03c9afc9e373842e4704af8a482b0362a67789dfa9c5d4c41f2ea207b79059eb
Score1/10 -