Overview

overview

3

Static

static

3

ajax.ps1

windows7-x64

1

ajax.ps1

windows10-2004-x64

1

api/index.htm

windows7-x64

1

api/index.htm

windows10-2004-x64

1

api/新云软件.url

windows7-x64

1

api/新云软件.url

windows10-2004-x64

1

attach/index.htm

windows7-x64

1

attach/index.htm

windows10-2004-x64

1

cache/index.htm

windows7-x64

1

cache/index.htm

windows10-2004-x64

1

class/archive.ps1

windows7-x64

1

class/archive.ps1

windows10-2004-x64

1

class/array2xml.js

windows7-x64

1

class/array2xml.js

windows10-2004-x64

1

class/cache.js

windows7-x64

1

class/cache.js

windows10-2004-x64

1

class/calendar.ps1

windows7-x64

1

class/calendar.ps1

windows10-2004-x64

1

class/cart.js

windows7-x64

1

class/cart.js

windows10-2004-x64

1

class/chinese.js

windows7-x64

1

class/chinese.js

windows10-2004-x64

1

class/clas...ler.js

windows7-x64

1

class/clas...ler.js

windows10-2004-x64

1

class/config.vbs

windows7-x64

1

class/config.vbs

windows10-2004-x64

1

class/db.mysql.js

windows7-x64

1

class/db.mysql.js

windows10-2004-x64

1

class/email.js

windows7-x64

1

class/email.js

windows10-2004-x64

1

class/excel.ps1

windows7-x64

1

class/excel.ps1

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0b5f1b467a1b2d2243508df68ce1d0e4

  • Size

    10.2MB

  • Sample

    231230-cqw54adab7

  • MD5

    0b5f1b467a1b2d2243508df68ce1d0e4

  • SHA1

    4e43e1fd8cfcd0847ecf69a6c7bc82722d457b59

  • SHA256

    834c4b46e8a5d23772d2ef3f59cf00ba515232ff5f29ca1a7155dd78080aeac3

  • SHA512

    5bc24b4855f93e6024ea3108a89df6b39340bf0f7e7cff3da6e18e1d18420183e1fc740607e0ba8890f84babe506fcf5e560916f4663b5726328747c49a64be9

  • SSDEEP

    196608:ClTPccMAjdKmSVly1Qq1HKNvMsQQj88Yy3QW9Wkimg3bIPLVr6m4uFT838M:ClT9jdoy1l4veQj88YOxSNbId6Xo83r

Score
3/10
linkqr

Malware Config

Targets

    • Target

      ajax.php

    • Size

      13KB

    • MD5

      b4f6d910419a7a19ec7b9598006e4a04

    • SHA1

      49e9d9f76ee9bbce3e4c351d34499f34ff078524

    • SHA256

      4571e2ca28e32d8fafd1af059babe194388091d179fb678d05726ac942180e73

    • SHA512

      5a38130395972b70bd5a2be785a9ce9d466e5b76d75b8320b034cebb93a7b52aeb5f97735d466d9315717bbdf2360212386d6140e0752792307c033ab7025b7b

    • SSDEEP

      192:NWeuazJHK+kSa7wMhOxTat3x7o194HwH1:x+Bdhe+h0f4Hu1

    Score
    1/10
    behavioral1behavioral2

    • Target

      api/index.htm

    • Size

      69B

    • MD5

      b48f668d29cf52a6db9a95f56b3fb67e

    • SHA1

      70d9a5412e54da30dc44868e21e1c00cabf04a15

    • SHA256

      544503741cd48b65bf728ac517f8ed5b40961a7d8d359127b2d2fc24169cfb4d

    • SHA512

      e30f600598f12bf6608a284eec1153720d1f8cc5e722a85928d02d2c3d53c533a1cebbda558066d4965b50d6c57ab06959b5003b622469c99db1d471a65b895b

    Score
    1/10
    behavioral3behavioral4

    • Target

      api/新云软件.url

    • Size

      133B

    • MD5

      4f0017b3b346bd0626f0c3b915e6e734

    • SHA1

      823bf3ff9e16cd636c9dc0dc690d6a586fcbfe92

    • SHA256

      df65af1fc1e09f6effbde7e0ef1cb64d6caeef1f62b0e6467821efa032533678

    • SHA512

      0f5eb5024cf6a0323f7998d419995a707c48de917a5899a185369e6acfeb17c09ffa03f7d110adc87b8de20b7d4bf30d50c72479bfb18614d2e21cbe169dc5a6

    Score
    1/10
    behavioral5behavioral6

    • Target

      attach/index.htm

    • Size

      69B

    • MD5

      b48f668d29cf52a6db9a95f56b3fb67e

    • SHA1

      70d9a5412e54da30dc44868e21e1c00cabf04a15

    • SHA256

      544503741cd48b65bf728ac517f8ed5b40961a7d8d359127b2d2fc24169cfb4d

    • SHA512

      e30f600598f12bf6608a284eec1153720d1f8cc5e722a85928d02d2c3d53c533a1cebbda558066d4965b50d6c57ab06959b5003b622469c99db1d471a65b895b

    Score
    1/10
    behavioral7behavioral8

    • Target

      cache/index.htm

    • Size

      69B

    • MD5

      b48f668d29cf52a6db9a95f56b3fb67e

    • SHA1

      70d9a5412e54da30dc44868e21e1c00cabf04a15

    • SHA256

      544503741cd48b65bf728ac517f8ed5b40961a7d8d359127b2d2fc24169cfb4d

    • SHA512

      e30f600598f12bf6608a284eec1153720d1f8cc5e722a85928d02d2c3d53c533a1cebbda558066d4965b50d6c57ab06959b5003b622469c99db1d471a65b895b

    Score
    1/10
    behavioral10behavioral9

    • Target

      class/archive.php

    • Size

      19KB

    • MD5

      39e20a8e8095459616971856fa1b8c5f

    • SHA1

      0cde1b33fbaebce5180b815a0608b7f360207840

    • SHA256

      be8045e51dcaca22a1f1583e88176f8761a539c7b96b382134dbcea466373e92

    • SHA512

      640c346ae2074534ad96f6faf2baf5a1e8e26356b94be1d5ce86fbaba266f7d5f5bc5978dbc9d899a8e6921875401c70f8ea111aed8d797b3f3f8fefcb49de75

    • SSDEEP

      192:WETvQo2+SSxy7aHyeuj6+Qk6Ack2geMElaMkrHCfDRPDRds/ZUZw35QKuw1g56Cy:W2or6+QknObDRPDRuCNK8M

    Score
    1/10
    behavioral11behavioral12

    • Target

      class/array2xml.php

    • Size

      3KB

    • MD5

      6c5d267c2babbca1cbf6c9bc4e6b750e

    • SHA1

      f3a3e28288233c078fcc2db9403ca9a85d2cb423

    • SHA256

      2df15401bad596bd17f5961cf341969a7e8d940e31d078900c848e07c84eda82

    • SHA512

      c8f962b26c9aec0a9afef7c7066f306d7ce81120a6646eb46ebf88749ccd22d9ead18ae2df1eb1ea0709412668bb7a2fc7084cd151a2e634f0ba57ce0f955bf2

    Score
    1/10
    behavioral13behavioral14

    • Target

      class/cache.php

    • Size

      4KB

    • MD5

      bf15afa1de8177de7ea0e8a150c40bff

    • SHA1

      7ca9fa54404bec7714ca805bead0b9dcdbd9279e

    • SHA256

      e34a8bee2f43822c50469469514dad75540df2108877ecd222834ba5c848c28a

    • SHA512

      3dca54a9280fe32521a0fab733a5e89a2aefe60dc972edbda54766ffbf4a03f33e6634e693f3145cd8c3a87ce37779b7588a8be62b9b06152474e120a12f6256

    • SSDEEP

      96:RjVyH2s2gYLs9KTAWgiG7sarEue47e7AMi:lVyHvYYh4Av

    Score
    1/10
    behavioral15behavioral16

    • Target

      class/calendar.php

    • Size

      7KB

    • MD5

      12d38de38b007f747d10940244b55c23

    • SHA1

      1357c58814a9bc686f76c280b14466251fe9209d

    • SHA256

      f112c9e7859d9b32279abb545d3ce8838612904ae51457e628a2ec927c69c562

    • SHA512

      9b700a392ae0fd8df993c953663f3cef26f4883cb0de3f0821789d79ad619aadf59ce6718383bcfd2ac3f19180f1ffa2950c3205d1d4fb509b5dae95178cd2a3

    • SSDEEP

      96:dFJ+gM8cl43CKNH2e63sRi9l2KH0IXIga6LU1b4t9wNA6b6Lg144t9TB4wqr3nCr:EaCMlUss31UI4CiNLJBa3CN5

    Score
    1/10
    behavioral17behavioral18

    • Target

      class/cart.php

    • Size

      4KB

    • MD5

      a8d99f5fecf22d780664dcb97f5f8296

    • SHA1

      93b73017cb57680de9a5889ed8fc7e7f1f52c02e

    • SHA256

      ef048f25f7bf77df7206e5c89b04cdce820a870ea25ab8d6bfeaff577f8b3e37

    • SHA512

      8fdd58733a47ac40d1c0bde6b7f3cb59ca4d6039baf7b3026f76b45702a5be52865272fadfef978e2793c9f07cbadd63a5a58fb04c8e4cdaed10ea0da0cb8df0

    • SSDEEP

      96:8cyyufUC6N74wfK1BcvXsgfnkNCwUZSc8nSAO9NUsfRIghVWSwd5IdL:8dHcC6N4wfK12J/MfmxRi5gL

    Score
    1/10
    behavioral19behavioral20

    • Target

      class/chinese.php

    • Size

      6KB

    • MD5

      77a0692df50edad9d2d517f711a47b5e

    • SHA1

      03ca778044a1a4c663a749dd2d76f33f08595370

    • SHA256

      72521c3f52065171e6abd907ca5adb742092e47977de62054eb653397638c936

    • SHA512

      10b0be17a3bd169130ffd62711f4d5f850b872eb8a7373abb84c98156575ee75e6f384eaa86592acf7b47c562a3199fa73d471ed721b6747839b26cefc01d839

    • SSDEEP

      192:QUCBdrwzvcrKvYHXwpH0nmnP1eGHXvCH0HBd+poeZjS7vciV/HXvpH0Es7T:QUC/rwrcrKvYHXwpH0nmnP1eGHXvCH0g

    Score
    1/10
    behavioral21behavioral22

    • Target

      class/class.phpmailer.php

    • Size

      72KB

    • MD5

      32949e7e28e8c2fcd15d6192d84130c1

    • SHA1

      a8a4a7559db5035bed3cf6697c9de809631a6bb7

    • SHA256

      abf818e76ae6664c7894f361d21f629f35784e9832d434db3fcdb6513a4958e3

    • SHA512

      fb29b392fad575881c7a7aa6b8e5003c5e6e8e22a0edb22b4f525483fc105a5cab32382c3a22f54758ee4eb6e9f1e2bce93f90955bb89c2fd15e454127fd8485

    • SSDEEP

      1536:uvUDTcIDjz6ZVL/L3F/5w8y00uvXsnYQHr+IT7kQpjyqpJI:uvZIDjz6ZVL/L3F/UumYQHrF7kkjyqpm

    Score
    1/10
    behavioral23behavioral24

    • Target

      class/config.php

    • Size

      1KB

    • MD5

      711d4367dae73f1afe7ba1f542103a1a

    • SHA1

      c9ce443f1f0748c6dd35e034023e9ca70834d6dd

    • SHA256

      5df867ed77efa8e34763da20e8dd92b3947fb4df681aba5030744fe703cd539e

    • SHA512

      c43fa751b73f301266b7dd15d26f6c0019a6d75c256ff1a82e8c33f66e248d6fb6d602cb7a2346a25a07301434e428da1e7e1acf92d985a72f65816756068655

    Score
    1/10
    behavioral25behavioral26

    • Target

      class/db.mysql.php

    • Size

      11KB

    • MD5

      de37f16df2b0eba1dc8e589376f7bdbe

    • SHA1

      459196414d4ce8081a98f360ad0a1e629ad99a4b

    • SHA256

      8bff898517f58b8f3ac71cb181cf3f7f6adb0e1e69277656a5c95eca9562064a

    • SHA512

      fdcb0bbd4c036e5cdd8cac69124d9a8ae9e32085ee374feed1e8bb60907834510bd67ffb13fc5cd31716b16807433673bed92a0b187c22eb45f52795443bb95a

    • SSDEEP

      96:VUPUw8bR8ESb65ROOu+vu6+wh6YntivF+9Z9MxlMj3monpL2T51fJ8Fvfvua/b3:mcw8tabQOr+vu6+Do0Dwj2J8FXma/b3

    Score
    1/10
    behavioral27behavioral28

    • Target

      class/email.php

    • Size

      13KB

    • MD5

      7dd05763cd4f66710ca8be16dbf8ed8c

    • SHA1

      11344f9c89669b8db236ac2a008fcc43b9282247

    • SHA256

      4a1fa708bb0442703bd6e92686261f3653e3e0741c3bf1b5d91e4bdb79cfe7ab

    • SHA512

      c42203d62ab9e9158aa03660ef5433e80ad020f927b4783d6f3a05861d3ade3b71fb3ea70b1f10defbb8c3460ee37aa726620fb7101490adff70081520e39de0

    • SSDEEP

      192:toLoUMNJEL0vp74p/+C9fEJQzlTv3ZJ8xh86Tf/:TNrpckGIhpn

    Score
    1/10
    behavioral29behavioral30

    • Target

      class/excel.php

    • Size

      5KB

    • MD5

      b87c23f50d7b0e1a61ca60aa7fe4af2f

    • SHA1

      a2e1d045ea8cfe023e986c6e638969b4388ff822

    • SHA256

      896bdbfe695b5aa92ab621055faea35033441b6846cd43d876ca65fa560d9ecb

    • SHA512

      03e2e53d7d79233c4e9faa272182c8100533ac7c2a1e69be23988bcc850c69d488e3878e58a6f3345d216d505e0647fa00000e706616cf19d5580fb9f0018a98

    • SSDEEP

      96:9i/ReiSBEPjSGlQHAogq6Rdc0VZ6ZMGONLwo1Z3VjASF9CB3V473Rz0p3:90eaQHA+6kMZ1NcsCA9C3V472p3

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks