Overview

overview

3

Static

static

1

Demo01/ADM...s_.asp

windows7-x64

3

Demo01/ADM...s_.asp

windows10-2004-x64

3

Demo01/ADMIN/DELV.vbs

windows7-x64

1

Demo01/ADMIN/DELV.vbs

windows10-2004-x64

1

Demo01/ADM...se.vbs

windows7-x64

1

Demo01/ADM...se.vbs

windows10-2004-x64

1

Demo01/ADMIN/Jobs.vbs

windows7-x64

1

Demo01/ADMIN/Jobs.vbs

windows10-2004-x64

1

Demo01/ADMIN/USER.asp

windows7-x64

3

Demo01/ADMIN/USER.asp

windows10-2004-x64

3

Demo01/ADM...ews.js

windows7-x64

1

Demo01/ADM...ews.js

windows10-2004-x64

1

Demo01/ADM...shi.js

windows7-x64

1

Demo01/ADM...shi.js

windows10-2004-x64

1

Demo01/ADM...gce.js

windows7-x64

1

Demo01/ADM...gce.js

windows10-2004-x64

1

Demo01/ADM...ic.vbs

windows7-x64

1

Demo01/ADM...ic.vbs

windows10-2004-x64

1

Demo01/ADM...ex.vbs

windows7-x64

1

Demo01/ADM...ex.vbs

windows10-2004-x64

1

Demo01/ADMIN/class.js

windows7-x64

1

Demo01/ADMIN/class.js

windows10-2004-x64

1

Demo01/ADM...te.vbs

windows7-x64

1

Demo01/ADM...te.vbs

windows10-2004-x64

1

Demo01/ADMIN/exit.asp

windows7-x64

3

Demo01/ADMIN/exit.asp

windows10-2004-x64

3

Demo01/ADM...ex.asp

windows7-x64

3

Demo01/ADM...ex.asp

windows10-2004-x64

3

Demo01/ADM...tou.js

windows7-x64

1

Demo01/ADM...tou.js

windows10-2004-x64

1

Demo01/ADMIN/news.js

windows7-x64

1

Demo01/ADMIN/news.js

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    45c30bf25d622aae1c0940154593fc2a

  • Size

    3.1MB

  • Sample

    240106-kd2ttabhan

  • MD5

    45c30bf25d622aae1c0940154593fc2a

  • SHA1

    b024198b6125a3b27f9de6de340a0e2ae4a40a2f

  • SHA256

    d142649d66af0e8cd39c401ed18d55edacc6b8a745371bd577ed7e4b1cb4684b

  • SHA512

    9752e4aaf83e59ae848cc9bd4ff54d55a292825ce52b43e7104581aae8ae1e59219bda813c1550dfe72cf860fa680f3d16446e0416fc6e3c462b81e781d2d6c4

  • SSDEEP

    98304:tnXK/rKp8VQcLpyp+siO6fd6JMLRoFpZ0I9b:tne6JoYliqMR2/0I9b

Score
3/10

Malware Config

Targets

    • Target

      Demo01/ADMIN/Cookies_.asp

    • Size

      129B

    • MD5

      bea43b801fde5340e9e6d5f8e56c333b

    • SHA1

      8d3f7c9cd667ef7d38ad225cd7869eaee0427dcb

    • SHA256

      d8c285d953e1c730bc1d929fbe94e51b45ed87daae5426a959db2014f94475ed

    • SHA512

      b9520bd1b0b1d0a7e192a801fdccfc133cecd52efda28d85cea298d9dea6c8f5c6c5223cc29ecb10e809471dc484b0331e1b8556d682eb1a4c24b9b04c3110d0

    Score
    3/10
    behavioral1behavioral2

    • Target

      Demo01/ADMIN/DELV.ASP

    • Size

      386B

    • MD5

      f894a97410d1fbd90be92deac1b1eeac

    • SHA1

      eb14781f5656e637304e8cede5e6c974ac33d69c

    • SHA256

      42e0da4d33d8eae22c70655d8f622697b2bfd8ca01d23434631b61a32d80224b

    • SHA512

      d40a7ba0f036a682e7163a4aeed234660f0facb2e2392e92245d781689cb4bf66dcfd49ad3698c4a9c9d19a35fc2d08041b00483976d1b9fdffc0d940acd63c2

    Score
    1/10
    behavioral3behavioral4

    • Target

      Demo01/ADMIN/Enterprise.ASP

    • Size

      7KB

    • MD5

      dd8b52801fe615746d686437c8586df0

    • SHA1

      d33f2448c1eb4fb26c02956f924741c92b2e83c3

    • SHA256

      2dd9c5623430a5bab629b7ea4874cfeb8d74c706e999580bf0171587b2c1c208

    • SHA512

      d0732b96d3231885cb8f69a03143a65cedd6929d417e7d7e5a3156bc9674147d804b293160dd1fa5af1885793d261f138ff77fcd54d819504ab317c526c182cb

    • SSDEEP

      192:3l8PSXVIraYY/jCKz2XQ/8rBZ2vA7/1CKz6XnnbrVqEDAm:3l8PgIrqTS24f8vAm

    Score
    1/10
    behavioral5behavioral6

    • Target

      Demo01/ADMIN/Jobs.asp

    • Size

      7KB

    • MD5

      d2f9fab1654271b1e952c6f8ceeca3fd

    • SHA1

      121f174828ef222749744240644fea1c6e8dc06a

    • SHA256

      fd18e47776787f79f9ae8514a01ab6e639de38ceb3d0a13c05a002f0f37ebb72

    • SHA512

      6f94865195e837422887daa5473d1ec8341ae08486654965b875fbd387d25834fb907e8fd53659cfc6d026954c03a63a92f723d53cc4b886899b5037c65c91f3

    • SSDEEP

      192:3KtXXP90sKYtXQkbEBuLrmcJsrasK0dXngIoVqGq:3KtPaHknVseEgq

    Score
    1/10
    behavioral7behavioral8

    • Target

      Demo01/ADMIN/USER.ASP

    • Size

      740B

    • MD5

      121188c160e5d0b53b6f7114e923b6d3

    • SHA1

      b07e48a85d17c8088f486a1658f9c84610e357c4

    • SHA256

      fac780cba57e6d057cd3cd9e0cdab2ba1089add25a3b996d87a2b68058e213e3

    • SHA512

      86f5c112134919e6766b47147cf6224a503fba21260bd920639f048483dce44556c0272652e6dc05402fc64b47a88b9bb4c86f683bfee4d606aab04a570d2325

    Score
    3/10
    behavioral10behavioral9

    • Target

      Demo01/ADMIN/addnews.asp

    • Size

      12KB

    • MD5

      f5fd19098418875dab864558de798651

    • SHA1

      9e1c3d939ab30ad82515586a82bd01cd880b1b3b

    • SHA256

      90c8e3576fc072a2356dcddd7731c1e295943fef3d09b512b0b84c2d3888e47b

    • SHA512

      d8d687618f33a73e7b921c6bc14c8d4c228fb3bdd2f066ef31ea9101e9dfefa6c01173173d2eeef58de248e4e25956d7487ecee4716680c2f0c80d9af8c28405

    • SSDEEP

      192:w5TV78lm4L0geT36VU28R/nDteLD0CPul6b:w598m4L0geT36VUtR/DteVPr

    Score
    1/10
    behavioral11behavioral12

    • Target

      Demo01/ADMIN/addrenshi.asp

    • Size

      11KB

    • MD5

      23e72f0db55cc01b00debc57a581bd1b

    • SHA1

      3c85f1dfaa779a01af791a2d1b9443a984f331ae

    • SHA256

      8d3e8515dc0684ff41173cdfa58441830a4f5895ad000d7fcb411080505a3921

    • SHA512

      f4be99ee7ba762a702f1aea6cad8e2220efeb08c768ab15ecf38c8be59d669290ebc609c420e980cbdc962190034b036c669bdfa0de84e65360fa5568517d0e3

    • SSDEEP

      192:m5TV78lm4L0geT36VU28R/nDte8D0Dxhl6F:m598m4L0geT36VUtR/Dtebxk

    Score
    1/10
    behavioral13behavioral14

    • Target

      Demo01/ADMIN/addzhengce.asp

    • Size

      12KB

    • MD5

      268137d28a3292b862cba121686bb0ae

    • SHA1

      9979c4d68cbece0a250e50c7c0bd8d243c85d624

    • SHA256

      c4c88ec8926581bc718fdf3f6d8511a300bc026bc2a073ffbfcd31b8ccd9288e

    • SHA512

      f0fb60f95a0d6937aef61880c719225b3386bd1c1ec5dfce9bfddd0d5bd54abb18ce3887bb47336e65ee5c52708403ad7e4d851edfd2dcabba32c81fb60b2148

    • SSDEEP

      192:w5TV78lm4L0geT36VU28R/nDte1D0tZhl6H:w598m4L0geT36VUtR/DteMZ8

    Score
    1/10
    behavioral15behavioral16

    • Target

      Demo01/ADMIN/bannerpic.asp

    • Size

      293B

    • MD5

      fd1bd8fe6b0a69dbfd75d1a7d67c9ccb

    • SHA1

      1e7d742dd4c7bf24196a964b0184014f30e3ac5a

    • SHA256

      6ea7492480769d5f3cf8b9197daacd337cf3b92091a9cc3a6e03b35b2c0b7996

    • SHA512

      031ee050607317d88eca540e42f5abab3168e770a88ecdb2d583b8a2eff4d252a61632481f4a080df4e4547955f64e01dfcec4ae28e4a6bec0208a8f880515f2

    Score
    1/10
    behavioral17behavioral18

    • Target

      Demo01/ADMIN/chkindex.asp

    • Size

      650B

    • MD5

      e5fc2988d1e102db8a0089571addf1d9

    • SHA1

      0b6d74dcc76de73cde3a1c78183669f8be1c78c8

    • SHA256

      e5795eded77362db850e6c0fc66558ea95cea74b68ef8bb2390bb1dd109ea7b2

    • SHA512

      bd4d5bb71aec4742d54e4ced1a3f8d8406996ebc4493efbc240d9a9c593cbb1f20520df8948ef4a75bdae4a6fa3ac482ed37121f86c89f35a67771e30d717230

    Score
    1/10
    behavioral19behavioral20

    • Target

      Demo01/ADMIN/class.asp

    • Size

      9KB

    • MD5

      efb2c27ccb17c1707eb5440949870c35

    • SHA1

      e842fdd7740c37df5650a8d46521a3bdc556f705

    • SHA256

      6a4132f633b935dc3aaf334fc55a7bebc1d4fa7a81a8f3368d7bafeccfdba39c

    • SHA512

      db27941c4f32e1bef804d5e728e652a0822b9a8c2b7858cc03c9d5c1d284ae331686791287d232fa47db8bace78a669abdf7af7d930d15e33636d7cd5fc1af50

    • SSDEEP

      96:BBHj3V7f8XVWC2SbSQC4L0tYna9Ml0LzoFCePc2eFI4E+nDtHs9bSs9ZTDszoStH:B5TV78lm4L0geT36VU28R/nDte8PH

    Score
    1/10
    behavioral21behavioral22

    • Target

      Demo01/ADMIN/clearvote.asp

    • Size

      507B

    • MD5

      adf69a793b959c1c433e6b1fff2c9f4b

    • SHA1

      ed07e5e7145c67154e869eb5f79bc7ab04ba1fb2

    • SHA256

      986866db057f7c394b0b1c15cf8c2b93b057f2f3232b5e87e1f30513dfd4ef32

    • SHA512

      4932fb728c369dab5a7a326a6a6f0940b19758f6da29668abad089d35c82bd926fa6ba94bf7681e281af2cea822b44b1f203cc7c28fecf2e29287fd95770395f

    Score
    1/10
    behavioral23behavioral24

    • Target

      Demo01/ADMIN/exit.asp

    • Size

      120B

    • MD5

      a37f4d54100b0db794c63b6d05abe177

    • SHA1

      7c27ef741a6709008105d2215570d20444096c4c

    • SHA256

      5ccc9e32cc55804ba21d9503c392cbeebe6541c7984c962f3e9bf5e6090066cb

    • SHA512

      8f6222afa71bd193a10627224cc345994bb229219cadb52f9e96f9c40d28cb3daa810e004935b98283470030405d527e3e32b781fc93177aeb7457cab7e6a23d

    Score
    3/10
    behavioral25behavioral26

    • Target

      Demo01/ADMIN/index.asp

    • Size

      47B

    • MD5

      b8ba4e157b337c7195a62ea999c2789d

    • SHA1

      9b9be7e02aab5c1eeeebb1e5e87e886e445e3206

    • SHA256

      0ceecbb6ab0c6ead0d9acf25d4522e6bf3d7b0e94c605e54afcde5987850ca9a

    • SHA512

      6a3cc10e4345ca323ead33d4f455f7d64603f04da1103482428777d9cdd3a21c5380a624cbfeedb10e3ef32bccea5f60b3eb572a92c13441697da65414d018ba

    Score
    3/10
    behavioral27behavioral28

    • Target

      Demo01/ADMIN/leitou.asp

    • Size

      9KB

    • MD5

      c1d1bbe24e4ed081dbfa3556cb5a618a

    • SHA1

      2ca48448d2c4b8951649beb252b37743fbeed5e6

    • SHA256

      2509253e4db88fa9bd80e54f257c65b7a7d5d20077d5bea068d16c5af48d30be

    • SHA512

      13a41f21767dd135c93199367e5f8f3528d1c2e9d1c5182615a377e280d9312e89d43b9275ae34dbca64c6bf7505630fdfa76b722f6545def1872f9bfa264f32

    • SSDEEP

      96:BBHj3V7f8XVWC2SbSQC4L0tYna9Ml0LzoFCePc2eFI4E+nDBHs9bSs9ZTDszoStH:B5TV78lm4L0geT36VU28R/nDBe8PH

    Score
    1/10
    behavioral29behavioral30

    • Target

      Demo01/ADMIN/news.asp

    • Size

      15KB

    • MD5

      665541bec12356662a95ce1f4beec7bb

    • SHA1

      5a698323b6ea9e63179b03af83cb854b14f15ae3

    • SHA256

      8a575ce8e36c93635f6eadc36e322d5f24893007618411f364984d0f0135a987

    • SHA512

      415d2b699c766b68d596ee31fef82a3f556807600a5067f06717b7a898d54c54c9ddbbf09efda8108ee61afc6ace4857d912733e2a087f441b1ecfb5411dff9d

    • SSDEEP

      192:K5TVt78lm4L0geT36VU28R/nDtep+jbv+rB5LLsfpy1:K578m4L0geT36VUtR/Dtep+0

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks