Overview

overview

3

Static

static

1

About/about.htm

windows7-x64

1

About/about.htm

windows10-2004-x64

1

About/about1.htm

windows7-x64

1

About/about1.htm

windows10-2004-x64

1

About/新�...��.url

windows7-x64

1

About/新�...��.url

windows10-2004-x64

1

CHAT/CHECK.vbs

windows7-x64

1

CHAT/CHECK.vbs

windows10-2004-x64

1

CHAT/ERROR.html

windows7-x64

1

CHAT/ERROR.html

windows10-2004-x64

1

CHAT/EXIT.vbs

windows7-x64

1

CHAT/EXIT.vbs

windows10-2004-x64

1

CHAT/INDEX.js

windows7-x64

1

CHAT/INDEX.js

windows10-2004-x64

1

CHAT/KILLONE.vbs

windows7-x64

1

CHAT/KILLONE.vbs

windows10-2004-x64

1

CHAT/LIST.vbs

windows7-x64

1

CHAT/LIST.vbs

windows10-2004-x64

1

CHAT/MAIN.asp

windows7-x64

3

CHAT/MAIN.asp

windows10-2004-x64

3

CHAT/ONLINE.asp

windows7-x64

3

CHAT/ONLINE.asp

windows10-2004-x64

3

CHAT/RELOAD.js

windows7-x64

1

CHAT/RELOAD.js

windows10-2004-x64

1

CHAT/SAY.asp

windows7-x64

3

CHAT/SAY.asp

windows10-2004-x64

3

CopyData/css/i.htm

windows7-x64

1

CopyData/css/i.htm

windows10-2004-x64

1

CopyData/css/js.js

windows7-x64

1

CopyData/css/js.js

windows10-2004-x64

1

CopyData/data.asp

windows7-x64

3

CopyData/data.asp

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    16aa2b683f831044255dbf6bb573ebca

  • Size

    1.3MB

  • Sample

    231230-m5awhsgbc6

  • MD5

    16aa2b683f831044255dbf6bb573ebca

  • SHA1

    0a203d8084bcd65af0f60e2ca89f822887cc4a42

  • SHA256

    44e9212e31c62bbf090a66cb8cf29c8d5dcad29e11f7f0ab8f2d1c7dbc3eb1ec

  • SHA512

    ccdfd5ec76c79a48781b04bfb457f084020cf0844814ebace0180e588bb5702543f426854a193a7269db9a2f75933ebb02702810848878deb14666be2dda2974

  • SSDEEP

    24576:q1iKVezkDIyD62Pomrhf5hb8MWtqk1bG3j1VE0CWBIKO4dbB/h4wMk+XWFNEugL6:WiKUS35omrhj4jTG3zDGKHbB/h4wMk+u

Score
3/10

Malware Config

Targets

    • Target

      About/about.htm

    • Size

      1KB

    • MD5

      b12205491479762e4d323a186c908d4a

    • SHA1

      9837b1e194b67fd961bd7798a5ce816a74893499

    • SHA256

      7d849001ae10258e6aed084424673f2281eff8a6af3341b7f2fb21eab4b594ad

    • SHA512

      cb8088676aff867cfca57bfd0322a632a47f1740a06207fcc0404a4dd104d4149b561bdf3a7a9c506f87884c26d859e2ef11bc7629b62aef905920419080a2be

    Score
    1/10
    behavioral1behavioral2

    • Target

      About/about1.htm

    • Size

      2KB

    • MD5

      b6d7ede1edf40b0a127e86b8c85172ea

    • SHA1

      732bfcf6329f780fdc17971b324191ccbf18e21a

    • SHA256

      8aa22a4085a82653e0067383ad3aee0d4f896178432d4d503d22459fda7096b4

    • SHA512

      99d2a116fcd44bc91fc9fad4eab0e205cb005c16ee9aa49704402d128f107cabfc55de95b97fd7981ebd8a7e0c68adaafbd43384948ede912f7a0f7b702225dd

    Score
    1/10
    behavioral3behavioral4

    • Target

      About/新云软件.url

    • Size

      133B

    • MD5

      4f0017b3b346bd0626f0c3b915e6e734

    • SHA1

      823bf3ff9e16cd636c9dc0dc690d6a586fcbfe92

    • SHA256

      df65af1fc1e09f6effbde7e0ef1cb64d6caeef1f62b0e6467821efa032533678

    • SHA512

      0f5eb5024cf6a0323f7998d419995a707c48de917a5899a185369e6acfeb17c09ffa03f7d110adc87b8de20b7d4bf30d50c72479bfb18614d2e21cbe169dc5a6

    Score
    1/10
    behavioral5behavioral6

    • Target

      CHAT/CHECK.ASP

    • Size

      2KB

    • MD5

      331a41ee68bf11d76eab661377907013

    • SHA1

      120ff040d88e3bc26570c58501977a9af0dab9cc

    • SHA256

      d44e740bd364e3f3272f573e235d5ff770f3f2e47fb30511a95eb6845485bb7a

    • SHA512

      8bf2a0aae9136ee23f8a03e19bf00d7d899c1a5c12c78ef2373c6ba3b669b0c7c991654de785291ed6a3c79e1878e6d57b3cb336af69d21259c61ec884732052

    Score
    1/10
    behavioral7behavioral8

    • Target

      CHAT/ERROR.ASP

    • Size

      439B

    • MD5

      03adc0f0aef376b3e12b3daf2137d85e

    • SHA1

      7bad971ea059b1df24664bf17c7ce2018f5958a7

    • SHA256

      49d32a43378a8d6df8a2719751e733fb13098dc4a6ac5f1afbc375ffe7aad6ca

    • SHA512

      37ea89bb34e69f7f4c37fc1f1679b5a2fdb52f52e1bd23b6550cfc4933612d97a1fd5f3f6e14368e72a0a1b0bccb125443b7a3426ba77832f045e233568a3a1e

    Score
    1/10
    behavioral10behavioral9

    • Target

      CHAT/EXIT.ASP

    • Size

      1KB

    • MD5

      d41648912c98e2f4b4e64f90d709101f

    • SHA1

      2f22de0ce06accfa6cca2b2e4ead7bf624f7df62

    • SHA256

      db0f7a9973f09f122b0b202ab2eef32ebe8fb67db6450b4ac9638b2ac69e2f99

    • SHA512

      64667be8d9cf05e43acf0a6e2510d9dc8c1384ff168a1adcc68ec298fb6403ac9b5918b8eb89c01d291b8368649993b86b00c32898a791b98186d8fa726c4ba0

    Score
    1/10
    behavioral11behavioral12

    • Target

      CHAT/INDEX.ASP

    • Size

      4KB

    • MD5

      b7df500de83df00bf4600f2923c7939f

    • SHA1

      ba94eb7e9c3be4f6d88bbee8843de844c0307df6

    • SHA256

      0c5829256c5f4bade2e1129c705a9c7f22747f36d26bbd41b03754b87e1424e4

    • SHA512

      1c66de714cd6e59dc26712c642c65de6dab0e49d0e42c3e59103bf1f134cb71130c463b77d8df600d56307e7a1fc7766c6b8f793c5f630a8b2068ec467d00815

    • SSDEEP

      96:APu+rspfRRRcRA8PHgVtHqZfTDpVP9kPy/V/617B+:AdIH2A8PHkZq5TVVC1o

    Score
    1/10
    behavioral13behavioral14

    • Target

      CHAT/KILLONE.ASP

    • Size

      2KB

    • MD5

      443e99a9f171b6c5a63a410cfa9e02ec

    • SHA1

      d6c55e5eee06a3dd234272a04527bdbc836fa6fc

    • SHA256

      56868a6e182c90170fdca5cb0eecf4a987bc449d2b93fb12d0bc070006dfcff3

    • SHA512

      7d26bf62f891781ac562c0a505420d31558576bc575f0d1a6e4184c73d04c3b2e8e52aba48b7314dcad45f93956140338cb79f5103fef1cdb58e05e3d0132715

    Score
    1/10
    behavioral15behavioral16

    • Target

      CHAT/LIST.ASP

    • Size

      6KB

    • MD5

      b100292ac6efad08fc1112cde704c7b4

    • SHA1

      3e863f966c355722c22651b5f0f023f56a9f33fa

    • SHA256

      778e564a3d0a19b6466056c3a7e8473f9275e62daa9f3c3a717921f828cb4c9a

    • SHA512

      962717845fa9541bac7531e72cc84fe635d663b8234f6ea2523ffb28a7a00b16d8c06d83e26060568e5cfb20f62a7d122846c1333963507efd6f734b209e0034

    • SSDEEP

      96:APu+rT8tOtPJzQ6yBcE/Q6VEWysjL5VQ6YMdnaqpyddna4yEUMCTWJYSsqOYoQu9:AdkE5J86yi6VysZ665avatMCqJlxOGi/

    Score
    1/10
    behavioral17behavioral18

    • Target

      CHAT/MAIN.ASP

    • Size

      2KB

    • MD5

      e943a4c88bfb66f1d48bd07e6befb960

    • SHA1

      a1d15878731daed6ef756c0876186726ca12b050

    • SHA256

      2f449ba06c30f1748c8352108eaae4e79b07071258179fafe615a5c8b66ae33c

    • SHA512

      23d406b259b47123968f2aa7a817e9aab5cc1cabf3eb098d5303dde61b799094f39b3b5e4bffcab0c8582b77f17a18460d8598ff39ee72991b62079bf0492a42

    Score
    3/10
    behavioral19behavioral20

    • Target

      CHAT/ONLINE.ASP

    • Size

      2KB

    • MD5

      1c7a48cb7856d21a9938b52b620edbad

    • SHA1

      fd7fb1b678a1754745fd29ec3fa8c5018edfed10

    • SHA256

      47d0a3d6d94a45548b8c04c52248428dc899db3bf7ec5daed32e8d09f8ee19c9

    • SHA512

      40dbbb22a39b1f08879f9e52fa8493701f6b00a7a50a3eb3476f10ee3b352d42d631a15188cf39499e3ea0212acb73777723eb018092e65307e3e38103559cc4

    Score
    3/10
    behavioral21behavioral22

    • Target

      CHAT/RELOAD.ASP

    • Size

      2KB

    • MD5

      2960b8c2a141b0d49aa57cb28d7beb64

    • SHA1

      9a98f7d32579c47660df031a09c2e89f7c38f1fe

    • SHA256

      cd376cfca8fb483f03a71fdce574d4a2068e72d87d07ac4259222e9d79334e66

    • SHA512

      9ea60fc06007b3948b346ffccb3450ffd840b597a38a98b48d7210a200a706f7f595222f5666c77bb73b6ae56e40f2f1b53ef9c041d41f94c18008ee2b4a5cc1

    Score
    1/10
    behavioral23behavioral24

    • Target

      CHAT/SAY.ASP

    • Size

      11KB

    • MD5

      0d7b576d6daa2d2d93a25a59d6a55fb4

    • SHA1

      5f5876baa16ee9d32d7da323c6d104d966e900d4

    • SHA256

      f9982ff45054ad2661d8b1a49cb272facfb8fc3312370c745060481ec3003278

    • SHA512

      528ed816d30a58aa47a540b6aa92e80c11ec527e4cf22d513847006fa47c9a7c76659d9290e1acda24ba6d665fae5a5a7ceeaaf2123370df210386e0a3c75f51

    • SSDEEP

      192:DWQYUdFRARfRcjlwhoGcLlePTSpoO7sfzx5NBnQI9z/zM4Kc:qhRcjUbc5wTSpoh5Nlz/wpc

    Score
    3/10
    behavioral25behavioral26

    • Target

      CopyData/css/i.htm

    • Size

      3KB

    • MD5

      466be2cac541c0bbc1daf94976e79688

    • SHA1

      e0570dc71a3b5f0b141af743f583e55f9ce070ed

    • SHA256

      3ba3549c22e63b21771f17c52db6f0c2043ce48184801acebb085c410d305eaf

    • SHA512

      de753f8edb338623184f566f16d0395fc04c6eee7e8a1359c703ec9593bdc1b165077fbd2b6e1a23d531a91d5a90937d793e002501b09c644e62a3677864025e

    Score
    1/10
    behavioral27behavioral28

    • Target

      CopyData/css/js.js

    • Size

      2KB

    • MD5

      a10b062dbd77ca03dbb76521f2f8d640

    • SHA1

      a1705b8e59a7f800bcc07d477f873123b8182264

    • SHA256

      1b1fb8a93767d6f745752ecd683d536c043911354d24d72848bb8297db65e61e

    • SHA512

      2c44c35b8c3e887f76308d2ee6b94901312a78d32d34c55d34b54672fd07696e3b260a76a0b6d5026c240fe64fa0163acdadbe15a872d4561157077074dbe4c2

    Score
    1/10
    behavioral29behavioral30

    • Target

      CopyData/data.asp

    • Size

      12KB

    • MD5

      c511fa9e2712be771d7c746592f294a1

    • SHA1

      c7ee5fcc1011f34f91b419b2b5f942b35eba79f4

    • SHA256

      9360e6c085319dba6a43b86dea95d4200d47860a84aa7cee405032e12fc9a90c

    • SHA512

      b4c8fd9e886d27170202440337ffde41780f2905a5bbbe08fbcbef1aa0c7ee03c2a8b49225eec8a4bca80402d84d36ecc68b7fce055b1226065273e7d679d9d6

    • SSDEEP

      192:2ds7zPoq7Ps9brSpHmLudb+eKs6HqKYi/PEF3p4Ghgd/HeFt5:D7z7qb2pKudb+eKstK0FCTdWx

    Score
    3/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks