Overview
overview
1Static
static
1exploits/a...der.js
windows7-x64
1exploits/a...der.js
windows10-2004-x64
1exploits/exNetbios.js
windows7-x64
1exploits/exNetbios.js
windows10-2004-x64
1lsass2_spreader.js
windows7-x64
1lsass2_spreader.js
windows10-2004-x64
1untHTTPDownload.js
windows7-x64
1untHTTPDownload.js
windows10-2004-x64
1untNetbios.js
windows7-x64
1untNetbios.js
windows10-2004-x64
1untRunOnClose.js
windows7-x64
1untRunOnClose.js
windows10-2004-x64
1untSockets.js
windows7-x64
1untSockets.js
windows10-2004-x64
1untTCPIPPatcher.js
windows7-x64
1untTCPIPPatcher.js
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
exploits/asn1_spreader.js
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
exploits/asn1_spreader.js
Resource
win10v2004-20231020-en
Behavioral task
behavioral3
Sample
exploits/exNetbios.js
Resource
win7-20231023-en
Behavioral task
behavioral4
Sample
exploits/exNetbios.js
Resource
win10v2004-20231023-en
Behavioral task
behavioral5
Sample
lsass2_spreader.js
Resource
win7-20231020-en
Behavioral task
behavioral6
Sample
lsass2_spreader.js
Resource
win10v2004-20231023-en
Behavioral task
behavioral7
Sample
untHTTPDownload.js
Resource
win7-20231023-en
Behavioral task
behavioral8
Sample
untHTTPDownload.js
Resource
win10v2004-20231020-en
Behavioral task
behavioral9
Sample
untNetbios.js
Resource
win7-20231023-en
Behavioral task
behavioral10
Sample
untNetbios.js
Resource
win10v2004-20231023-en
Behavioral task
behavioral11
Sample
untRunOnClose.js
Resource
win7-20231023-en
Behavioral task
behavioral12
Sample
untRunOnClose.js
Resource
win10v2004-20231023-en
Behavioral task
behavioral13
Sample
untSockets.js
Resource
win7-20231020-en
Behavioral task
behavioral14
Sample
untSockets.js
Resource
win10v2004-20231023-en
Behavioral task
behavioral15
Sample
untTCPIPPatcher.js
Resource
win7-20231023-en
Behavioral task
behavioral16
Sample
untTCPIPPatcher.js
Resource
win10v2004-20231023-en
General
-
Target
48f96623061d87ed6941ea84dce06763ae0e3f521a5d9ea56dbce01896c5763e.zip.zip
-
Size
93KB
-
MD5
9367cc2b7c8e830b98ea151b60647371
-
SHA1
e50d6b4c4a67dccb3e24e04045465e2aed4765aa
-
SHA256
c7ee8e6c9d18be7659171c6eee8fdee62fa471f0cb03e2a95eec2d9fcf85cc71
-
SHA512
b87914e0e7e0e84f48a55086c2bc66a2ea370ba3754b7f71e62b38f2c8878f5c624456ad283730d273c20c7e5b7bf1b9fd40fe012d8d3c9b83bd27a3104a7ab2
-
SSDEEP
1536:/+sep19Tn3ogrSX6dnkpHUOPt9f1d6HQOB+X8zCTnWg5Y5MNMokHrHSJcUN+Z:ObTny8nLOVd1duQOHCbW8MnyxNo
Malware Config
Signatures
Files
-
48f96623061d87ed6941ea84dce06763ae0e3f521a5d9ea56dbce01896c5763e.zip.zip.zip
Password: infected
-
48f96623061d87ed6941ea84dce06763ae0e3f521a5d9ea56dbce01896c5763e.zip.zip
-
ELiRT.dcu
-
EliRT.pas
-
EliRT_OMF_B.obj
-
Ninja.ini
-
Readme.txt
-
TempNinja.dpr
-
exploits/asn1_spreader.pas.js
-
exploits/exASN.ini
-
exploits/exASN1.pas
-
exploits/exDCOM2.pas
-
exploits/exNetAPI.dcu
-
exploits/exNetAPI.pas
-
exploits/exNetApi.ini
-
exploits/exNetbios.dcu
-
exploits/exNetbios.pas.js
-
exploits/exPNP.dcu
-
exploits/exPNP.pas
-
exploits/exVNC.dcu
-
exploits/exVNC.pas
-
exploits/upnp_spreader.dcu
-
exploits/upnp_spreader.pas
-
lsass2_spreader.pas.js
-
lsass_const.pas
-
uStrList.pas
-
untBot.pas
-
untCrypt.pas
-
untFTPD.pas
-
untFunctions.pas
-
untGlobalDeclare.pas
-
untHTTPDownload.pas.js
-
untHoneyPot.pas
-
untNetbios.pas.js
-
untOutputs.pas
-
untRunOnClose.pas.js
-
untScanner.pas
-
untSockets.pas.js
-
untTCPIPPatcher.pas.js
-
untThreads.pas