e13c66ae1d4df6f6b364aa1ab9b305bff536c16701d18e0544d7498fa5fa90ab

Sharing

Copy URL

Twitter E-mail

General

Target

3b946659d9ec704bd1cb8cc2a0bc3f86
Size

5.3MB
Sample

240101-b6f85scca4
MD5

3b946659d9ec704bd1cb8cc2a0bc3f86
SHA1

70772418261120906b395f9fe14b28573f3c91b5
SHA256

e13c66ae1d4df6f6b364aa1ab9b305bff536c16701d18e0544d7498fa5fa90ab
SHA512

ea8c579f0ccf359488b518d9a4cf9a1ede7d92c7ce9c5162b068f675b37d44dfad9f568063e0ae88940cae275ac84856e9c31bf52e35ebcbd8b6e70181b289f5
SSDEEP

98304:DDRQfY1RygCRYJ2xuFMgQwKmLBdeSDexJLy4C++LQL4yWk73ySV1rhb:D9QyogCmJ24FIwKtSDev95+JFkbyErx

Score

7^/10

upx

Malware Config

Targets

- Target
  
  ClientSetup.exe
- Size
  
  3.6MB
- MD5
  
  3439fab56ae86d13e751a7df5715b339
- SHA1
  
  01c4d24db6fbb4a6fbe15f1f61e3fb95a519daad
- SHA256
  
  6b6fee52bd65eedfb3552f948e5aa360e0582707755537861e62ac01e31aac4f
- SHA512
  
  b9ec4c64edf406cabcd98540cecb4bc0efad4ddfd37ac193f33a50b66fd8985e7252571b6c9a1382b335240cfadf9cebb8f6ac72269ed979c1786fbcb5f3436c
- SSDEEP
  
  49152:hxBb3umRcMuNvYMyeTIzRG2Ucc4qwmepiAYVvCfZRXy/kPZk42Hzu8+aheU25Yo8:hz3WN/+VqwbpjcSisFGwnVy
Score

7^/10

upx
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2
- Target
  
  ServerSetup.exe
- Size
  
  2.0MB
- MD5
  
  78b620c7ac858e87b39bf02d7b2086a3
- SHA1
  
  bfb3052ac0690ea93a9558dc14eb1baead2526bd
- SHA256
  
  bc25ea0accfc2382cde4574f2e0aa65ab62134bcc0398a7f6ba302501e555a2f
- SHA512
  
  d0c20d3a3c1f8c5e2466022dfb03a92debfa9aaae0f5250fedb1214c34d8892fda792d7e4cd03f588b7c5dd0e81c9d30fea9eb10f12c4b947d5a1d56026e2ffd
- SSDEEP
  
  49152:hi1pRP506e7tc2juZF4EQqKxScDa7VwU2aYogi6O:huP57e5c26D4EQrScDMnVN
Score

7^/10

upx
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral3 behavioral4
- Target
  
  Conn.asp
- Size
  
  278B
- MD5
  
  de4c21548d7c30975cb2e951d435246a
- SHA1
  
  63a5ed3eef34b55bb188ce45f88b21b45761ad97
- SHA256
  
  ac3978e15a7bedb5163a33881de6a1bf61905e3c2d8220ce0e4f3d89ae2468ac
- SHA512
  
  01f6d310172c716dce964f3241a8f9beed0f951a6011b0793689d26143ae333e7deed27f5a0c40f363d6da37f4d3f736646f1582e03c013c24d3796d2d214c32
Score

3^/10
behavioral5 behavioral6
- Target
  
  action.asp
- Size
  
  2KB
- MD5
  
  1e20dfd140e96a27afae084f3e332a59
- SHA1
  
  6a8293df40c490e83a8416c4bbd02f910206f22d
- SHA256
  
  339568db9f17724d3caad23f97e694c70c4103368d3f886b99f862376f40dfde
- SHA512
  
  873e9551f9b6a7d023d5372b2a09828196904c8aff752f3153ae3390cb9062c9b9104aac0db476cdaf75473f968477f878f5cb713287411c5b32f3a811d95413
Score

3^/10
behavioral7 behavioral8
- Target
  
  bottom.asp
- Size
  
  682B
- MD5
  
  f184b7ea2493da36afdde974666bc345
- SHA1
  
  3fba401b26665cc177fbc1c749de2f9e61e6ecc5
- SHA256
  
  ace1149bc2051aaa02b6a3494b77ad4a37db75fad7f18b92e4bd1d85f4a54ef4
- SHA512
  
  54615b6f5cc729377f3b29e3616c0bacd57ecc5f12d7a9fcfdf6fee5ee3c4ac0f2640dd29968643acfa9ff8e55062b5f69b1ae6cecf8cf76e724e757d040c6ba
Score

3^/10
behavioral10 behavioral9
- Target
  
  checkSys.asp
- Size
  
  1KB
- MD5
  
  db49ce69b6a0ab728244579e39d4b64d
- SHA1
  
  1ab1ea3fe30233253d3283569f566ab758e70acb
- SHA256
  
  93e8a03ad666fc0ac7458853d0b2727e58f61addbca537eaca780dcec8661e66
- SHA512
  
  8751236a5542e8e0a982a1a6ae6720e9a79745ef4a2ce2bd7fcd80824fdc1edcc64809f77caf18c699a9c2d210e6ade8292253f8a63320a1b8c1dc1b1bb290ff
Score

3^/10
behavioral11 behavioral12
- Target
  
  chk.asp
- Size
  
  745B
- MD5
  
  1b055cc503a8ec523951a14497578bd0
- SHA1
  
  716894df283eeaf2538d02dba57b7b9b48ff7db7
- SHA256
  
  76a60e12d0eec393a19d69c8cc31604fe7c6af0c75ca57896926630902eb3357
- SHA512
  
  35e78b02d222d5a8377b4b68f349e547f6430c144c14484a6957248789a025beb3dfd3f930ae13cdb777907f1dd275a9b52354c508485c02d2f31b5691c4cf5b
Score

3^/10
behavioral13 behavioral14
- Target
  
  cxctl.asp
- Size
  
  5KB
- MD5
  
  1afcfd248e6765217326023ecc57cdda
- SHA1
  
  15bca45a3e94aadad1a567e8a9d70b4a6371fdf5
- SHA256
  
  20240fed1b1dca5fe833eefe343f4723e99c4feaf1b2af994ba8ad596b7e31d8
- SHA512
  
  9cdc64f59174b862020f1e93c23bbf72150b0c1f99fd7fec1d3aa7c2ee6729fffff90f610046ebd56cee8606e5dd719deb9a75f2d9262299f431115e3b8ca57f
- SSDEEP
  
  96:AjkIMj3AeVREF2nVuaAGnTJsTbvXb88xb:gkIyFbEFArAauT/Jxb
Score

3^/10
behavioral15 behavioral16
- Target
  
  default.asp
- Size
  
  5KB
- MD5
  
  6fafda815c3153c00a774a1978995723
- SHA1
  
  5d73e74ed14abd47af052bd8fc1aa8bb217af17e
- SHA256
  
  ecc8ef07cae21d7061ba10270da121c0a7a591374d03e9b35e7a1cf0b022fd1d
- SHA512
  
  5637ee29ae696fc7e4759c057fa624ab8ff8e5e8dc41d4230858be183e156d7375a09b21002fabf7e89b0a6bdbd940821a6776e18feca515407d7bf7159a7495
- SSDEEP
  
  96:ikIdQWCq7S8ZJ/EmiApRB7nfapQwW02Xi0sbZ/6Mh08ddkddEdd/dduedddd30CW:ikImWi8ZD7fAkiXJ6E0HJ1
Score

3^/10
behavioral17 behavioral18
- Target
  
  dt.asp
- Size
  
  476KB
- MD5
  
  ee0baad48b2f32032b6891c37487d076
- SHA1
  
  25c18c1e6ae6a606c95e1680c48bbbf5344b8f80
- SHA256
  
  8df9e80aceec79e861103f51325ba5f75f2713a15a9c8845ed28bee6ff67d43d
- SHA512
  
  e5db06fe56227ed02c15432261160bffd6ab5afe7db05f4364e3f444fa72c318bf05b250a3219d2fe3d29d2dec64c1f66071e0b8a0efdcf6d1d945fbe57699f1
- SSDEEP
  
  768:h2a1PT+Ovy7xlEkSXPhmw+AEUTSwh50nQTWFiCdwh0o3NWcqvjddqYiuqX:h2aXy7xsYeSwf1d
Score

3^/10
behavioral19 behavioral20
- Target
  
  getdata.asp
- Size
  
  5KB
- MD5
  
  0ca492d5acbc544870503577e2ac789d
- SHA1
  
  149863413d06c11e4cebabf3cda73e03edae6051
- SHA256
  
  aa97d042663b782902ba0869f4b58d80f81561331977ca0c3b7ed17c936c3897
- SHA512
  
  d618189601a241d56f75ba53d0434b3f99cfe1b8a576e4867c74c82a003f1e135bdd4e3bb09c22162dc2057abbcfd7586c8b4f8de640a6460956cdf89c8d0717
- SSDEEP
  
  96:IkIoESSV55ZnTgCSdmf3YG8qYXzy5oDYU+FMaPIwPLdzdm6YcGp0y6soNmdw6LPL:IkIoESSV5zTgRmforzy5oDHagwRE6YLj
Score

3^/10
behavioral21 behavioral22
- Target
  
  gfhcx.asp
- Size
  
  1KB
- MD5
  
  fb6faed53d1f190f5da9723134953e0c
- SHA1
  
  1550434d032d081b417aaa5f75ededb182fc465b
- SHA256
  
  cfa0a2ced265741bec4d08b26144618d74e3e9cac8ed000d10a3fde5fb57e31c
- SHA512
  
  d2f3a2fe9ec2ba0aa53b7c13cda1f340edeaa6a71fe6816cac06cb157b8d6bf4be180ed0000f5cbecb3158bcbc805f58afb0dd5491f37516f081674c00fca1cf
Score

3^/10
behavioral23 behavioral24
- Target
  
  groupset.asp
- Size
  
  5KB
- MD5
  
  f7893a94bdcae447c12bba7e69d3d89d
- SHA1
  
  b76a4fe463f4d25818949c4ecdf0e271a5272d00
- SHA256
  
  dffc1793dc82ceec44d5e651d7c0bf0f3110923a0f7b649dcb471f189f375a94
- SHA512
  
  c24336a3b66e70d00695e64ccdbc7a45e07fdb822a5e640e329c91561adc80392cd5aa6d842ee63633ec329c952cdd6fba91160f527cc5074ca8354906e7173f
- SSDEEP
  
  96:kkIRJv0/nlhEYEYLU+YmDA9dM4//8ShkU/pnhe9CvoUDWQRESzjSd3y3RM+KC3Ot:kkIRJv4nlhEYEOM0A9t8Shkanhe9Koa4
Score

3^/10
behavioral25 behavioral26
- Target
  
  gscreencx.asp
- Size
  
  1KB
- MD5
  
  56373533210411bdf467807553904fff
- SHA1
  
  be756ba3afd1ef24b553b87ceedbfe854b099a6c
- SHA256
  
  d9c6aa18f3fdc9b4b2f3c71171952c838bf0def25c1dd62499cf3827e066bb99
- SHA512
  
  c7d29216301d157efaf187a4f3d36999900c9a94d6706bd91a41b33f461bca6f0a9ed7176c59ffa76bcca60c27b9097c50c4011813fdf8d482aadf976b7ef21f
Score

3^/10
behavioral27 behavioral28
- Target
  
  gsysset.asp
- Size
  
  1KB
- MD5
  
  b73b8f13e6b469589eba2f64dca8f992
- SHA1
  
  4ce7f8a67b767645b9f71f67b1cb8b865f12b863
- SHA256
  
  4b3c096dca6a657f59fdb11f153e76b7778a342444b5c44b10b54922ae5efaab
- SHA512
  
  f0868d02680911847f4200bc0cdbecc039bbc688243f32b6c76ae9ae40c5ffa61b82eede7b433ff2d3dcc2abc9001a669d18122afebb528866f7058e98269a5e
Score

3^/10
behavioral29 behavioral30
- Target
  
  gurlset.asp
- Size
  
  1KB
- MD5
  
  c287aec72c60315109361799bbd25e54
- SHA1
  
  268ee63cee0887855e31d569ac92b81d57210d41
- SHA256
  
  46d1e24d4b7f6bc40b91d6d7adda131ecab23b3c12ba9451a24d0db5f7ee5444
- SHA512
  
  f4b5d884bed18ccd3a5a52a42bf73295118cf527962975de87f6f0d3debb26c99236bf12bddcd13541b64566c4339ee5b5bea643a511ddff68e539b995f34e5c
Score

3^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

UPX packed file

Executes dropped EXE

Loads dropped DLL

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32