Overview
overview
1Static
static
1bin/console
ubuntu-18.04-amd64
1bin/console
debian-9-armhf
1bin/console
debian-9-mips
1bin/console
debian-9-mipsel
1bin/setup
ubuntu-18.04-amd64
1bin/setup
debian-9-armhf
1bin/setup
debian-9-mips
1bin/setup
debian-9-mipsel
1data/explo...64.vbs
windows7-x64
1data/explo...64.vbs
windows10-2004-x64
1data/explo...db.vbs
windows7-x64
1data/explo...db.vbs
windows10-2004-x64
1data/explo...ot.vbs
windows7-x64
1data/explo...ot.vbs
windows10-2004-x64
1data/explo...ep.vbs
windows7-x64
1data/explo...ep.vbs
windows10-2004-x64
1data/js/de...ons.js
windows7-x64
1data/js/de...ons.js
windows10-2004-x64
1data/js/de...ons.js
windows7-x64
1data/js/de...ons.js
windows10-2004-x64
1data/js/detect/os.js
windows7-x64
1data/js/detect/os.js
windows10-2004-x64
1data/js/me...ib2.js
windows7-x64
1data/js/me...ib2.js
windows10-2004-x64
1data/js/me...xec.js
windows7-x64
1data/js/me...xec.js
windows10-2004-x64
1data/js/me...xec.js
windows7-x64
1data/js/me...xec.js
windows10-2004-x64
1data/js/me...ray.js
windows7-x64
1data/js/me...ray.js
windows10-2004-x64
1data/js/me...ib2.js
windows7-x64
1data/js/me...ib2.js
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
bin/console
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral2
Sample
bin/console
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral3
Sample
bin/console
Resource
debian9-mipsbe-20231222-en
Behavioral task
behavioral4
Sample
bin/console
Resource
debian9-mipsel-20231222-en
Behavioral task
behavioral5
Sample
bin/setup
Resource
ubuntu1804-amd64-20231222-en
Behavioral task
behavioral6
Sample
bin/setup
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral7
Sample
bin/setup
Resource
debian9-mipsbe-20231215-en
Behavioral task
behavioral8
Sample
bin/setup
Resource
debian9-mipsel-20231222-en
Behavioral task
behavioral9
Sample
data/exploits/cmdstager/vbs_b64.vbs
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
data/exploits/cmdstager/vbs_b64.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
data/exploits/cmdstager/vbs_b64_adodb.vbs
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
data/exploits/cmdstager/vbs_b64_adodb.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral13
Sample
data/exploits/cmdstager/vbs_b64_noquot.vbs
Resource
win7-20231129-en
Behavioral task
behavioral14
Sample
data/exploits/cmdstager/vbs_b64_noquot.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral15
Sample
data/exploits/cmdstager/vbs_b64_sleep.vbs
Resource
win7-20231215-en
Behavioral task
behavioral16
Sample
data/exploits/cmdstager/vbs_b64_sleep.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral17
Sample
data/js/detect/ie_addons.js
Resource
win7-20231129-en
Behavioral task
behavioral18
Sample
data/js/detect/ie_addons.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral19
Sample
data/js/detect/misc_addons.js
Resource
win7-20231129-en
Behavioral task
behavioral20
Sample
data/js/detect/misc_addons.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral21
Sample
data/js/detect/os.js
Resource
win7-20231215-en
Behavioral task
behavioral22
Sample
data/js/detect/os.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral23
Sample
data/js/memory/explib2/lib/explib2.js
Resource
win7-20231129-en
Behavioral task
behavioral24
Sample
data/js/memory/explib2/lib/explib2.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral25
Sample
data/js/memory/explib2/payload/drop_exec.js
Resource
win7-20231129-en
Behavioral task
behavioral26
Sample
data/js/memory/explib2/payload/drop_exec.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral27
Sample
data/js/memory/explib2/payload/exec.js
Resource
win7-20231215-en
Behavioral task
behavioral28
Sample
data/js/memory/explib2/payload/exec.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral29
Sample
data/js/memory/heap_spray.js
Resource
win7-20231215-en
Behavioral task
behavioral30
Sample
data/js/memory/heap_spray.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral31
Sample
data/js/memory/heaplib2.js
Resource
win7-20231215-en
Behavioral task
behavioral32
Sample
data/js/memory/heaplib2.js
Resource
win10v2004-20231215-en
General
-
Target
411e2d74bcd0f523cf6f84b11bac508f
-
Size
77KB
-
MD5
411e2d74bcd0f523cf6f84b11bac508f
-
SHA1
c07a8d154fcd309f027ac6c0e5f8bdba28258bd4
-
SHA256
ac0007cd429ae865406a1aa3a1151ee21c34d681cd5e5793248371c6ea79522c
-
SHA512
81cd2e8ab8a8230be66f8597a85894cf92e969c21864c04525eed93a614eb467e6ac6d1bb2bfc91ff68b1795be7a27c03c136c5976f9f76736e972bf2e7b890a
-
SSDEEP
1536:OtCQIEHUmCf9rWuqndG+iVykQyGjxc5XNzbjpmThGwGCljlKfzBlE+R:OgQpHUma9ckVNQpjxkXt4dX1llS
Malware Config
Signatures
Files
-
411e2d74bcd0f523cf6f84b11bac508f.tar
-
checksums.yaml.gz.gz
-
checksums.yaml
-
checksums.yaml.gz.sig
-
data.tar.gz.gz
-
data.tar.tar .vbs polyglot
-
.gitignore
-
.rspec
-
.travis.yml
-
CODE_OF_CONDUCT.md
-
Gemfile
-
LICENSE
-
README.md
-
Rakefile
-
bin/console.sh linux
-
bin/setup.sh .vbs linux polyglot
-
data/exploits/cmdstager/debug_asm
-
data/exploits/cmdstager/debug_write
-
data/exploits/cmdstager/vbs_b64.vbs
-
data/exploits/cmdstager/vbs_b64_adodb.vbs
-
data/exploits/cmdstager/vbs_b64_noquot.vbs
-
data/exploits/cmdstager/vbs_b64_sleep.vbs
-
data/js/detect/ie_addons.js.js
-
data/js/detect/misc_addons.js.js
-
data/js/detect/os.js.js
-
data/js/memory/explib2/lib/explib2.js.js
-
data/js/memory/explib2/payload/drop_exec.js.js
-
data/js/memory/explib2/payload/exec.js.js
-
data/js/memory/heap_spray.js.js
-
data/js/memory/heaplib2.js.js
-
data/js/memory/mstime_malloc.js.js
-
data/js/memory/property_spray.js.js
-
data/js/network/ajax_download.js
-
data/js/network/ajax_post.js.js
-
data/js/network/xhr_shim.js.js
-
data/js/utils/base64.js.js
-
data/ropdb/flash.xml.xml
-
data/ropdb/hxds.xml.xml
-
data/ropdb/java.xml.xml
-
data/ropdb/msvcrt.xml.xml
-
data/ropdb/reader.xml.xml
-
data/ropdb/samba.xml.xml
-
data/ropdb/stagefright.xml.xml
-
lib/rex/exploitation.rb
-
lib/rex/exploitation/cmdstager.rb
-
lib/rex/exploitation/cmdstager/base.rb
-
lib/rex/exploitation/cmdstager/bourne.rb
-
lib/rex/exploitation/cmdstager/certutil.rb
-
lib/rex/exploitation/cmdstager/curl.rb
-
lib/rex/exploitation/cmdstager/debug_asm.rb
-
lib/rex/exploitation/cmdstager/debug_write.rb
-
lib/rex/exploitation/cmdstager/echo.rb
-
lib/rex/exploitation/cmdstager/fetch.rb
-
lib/rex/exploitation/cmdstager/printf.rb
-
lib/rex/exploitation/cmdstager/tftp.rb
-
lib/rex/exploitation/cmdstager/vbs.rb
-
lib/rex/exploitation/cmdstager/wget.rb
-
lib/rex/exploitation/egghunter.rb
-
lib/rex/exploitation/encryptjs.rb.js
-
lib/rex/exploitation/heaplib.js.b64
-
lib/rex/exploitation/heaplib.rb
-
lib/rex/exploitation/js.rb
-
lib/rex/exploitation/js/detect.rb
-
lib/rex/exploitation/js/memory.rb
-
lib/rex/exploitation/js/network.rb
-
lib/rex/exploitation/js/utils.rb
-
lib/rex/exploitation/jsobfu.rb
-
lib/rex/exploitation/obfuscatejs.rb.js
-
lib/rex/exploitation/omelet.rb
-
lib/rex/exploitation/opcodedb.rb
-
lib/rex/exploitation/ropdb.rb
-
lib/rex/exploitation/seh.rb
-
lib/rex/exploitation/version.rb
-
rex-exploitation.gemspec
-
data.tar.gz.sig
-
metadata.gz.gz
-
metadata
-
metadata.gz.sig