Overview

overview

3

Static

static

1

Admin.asp

windows7-x64

3

Admin.asp

windows10-2004-x64

3

Admin_AD.vbs

windows7-x64

1

Admin_AD.vbs

windows10-2004-x64

1

Admin_Add.vbs

windows7-x64

1

Admin_Add.vbs

windows10-2004-x64

1

Admin_Announce.vbs

windows7-x64

1

Admin_Announce.vbs

windows10-2004-x64

1

Admin_BackData.vbs

windows7-x64

1

Admin_BackData.vbs

windows10-2004-x64

1

Admin_Default.vbs

windows7-x64

1

Admin_Default.vbs

windows10-2004-x64

1

Admin_Edit.vbs

windows7-x64

1

Admin_Edit.vbs

windows10-2004-x64

1

Admin_Gaob...fo.asp

windows7-x64

3

Admin_Gaob...fo.asp

windows10-2004-x64

3

Admin_Guestbook.vbs

windows7-x64

1

Admin_Guestbook.vbs

windows10-2004-x64

1

Admin_HrDemand.vbs

windows7-x64

1

Admin_HrDemand.vbs

windows10-2004-x64

1

Admin_HrDemandAdd.vbs

windows7-x64

1

Admin_HrDemandAdd.vbs

windows10-2004-x64

1

Admin_HrDe...it.vbs

windows7-x64

1

Admin_HrDe...it.vbs

windows10-2004-x64

1

Admin_HrManage.vbs

windows7-x64

1

Admin_HrManage.vbs

windows10-2004-x64

1

Admin_Left.js

windows7-x64

1

Admin_Left.js

windows10-2004-x64

1

Admin_List.vbs

windows7-x64

1

Admin_List.vbs

windows10-2004-x64

1

Admin_Login.vbs

windows7-x64

1

Admin_Login.vbs

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    45c33184084b23ba1de8b4eb39a03ddd

  • Size

    5.9MB

  • Sample

    240106-kebn1sdab8

  • MD5

    45c33184084b23ba1de8b4eb39a03ddd

  • SHA1

    92765fd3deb8e80df7bf4575c9b64d20cbfa2eb2

  • SHA256

    e68febf6df1847d41f4cb62eaf58d819a8cf07541cd5f4dbfa45c372026662a8

  • SHA512

    ff4e1da174fc387d67a84a82af533a407ea40204bf6356f3ea5857c27f2c058a6201c95f0f6a60eb9a41686d4078db547ec8e26ce9053b2ef855ef69f0478af3

  • SSDEEP

    98304:g5xlyyfqzLF63kCcDY/8dUkiF5hWND2vvn4pnlrvmhDNjsx9ncYrSeKEqFkhHiMS:g9y/963ke8d9iFXoDOP4PLoIxBZK7FUi

Score
3/10

Malware Config

Targets

    • Target

      Admin.asp

    • Size

      1KB

    • MD5

      226e59ee952684d7a605f22a2c60f49c

    • SHA1

      79c26b9ebf1708a572946a50e059d316fb4cd75d

    • SHA256

      4be9209a5b88dfda1a309ccd19832648790890d41c6db8d17f16237c17a88478

    • SHA512

      edc6bfb722d85ac1c394906570a64d004de9e571d37663cb1fbe2976fe4b38c74462f1de0f977e10eb9a4aa8a0b8dc19bbcfa7e9e9b61ca5ab466e2b983dc2df

    Score
    3/10
    behavioral1behavioral2

    • Target

      Admin_AD.asp

    • Size

      12KB

    • MD5

      d3a6226c5b9b2107a1ccada7c48ecb3c

    • SHA1

      917d3592d17e52eedff8fac83894e8d1a362a1f1

    • SHA256

      0d0be5fb17f3984a1568200d0caf4a4711599f757770753893cc9a1e693fcc77

    • SHA512

      6c8e5c5740ab91335166b084dbbaff4b87758b0ab2732add53ac6ebb3b3418db1fd8e449cf8eff07dcb4b3a9ae95e55424ac94d258c1420104e8623e3d081f54

    • SSDEEP

      384:pv5IHrT5cYTHcidnHKnd7vgnlBy7vfwYJ:pmHr3Hcidqnxv6Biv4YJ

    Score
    1/10
    behavioral3behavioral4

    • Target

      Admin_Add.asp

    • Size

      7KB

    • MD5

      5574ce99c6a3d735414c3ccd540517d5

    • SHA1

      54f3c7e7bbe31469b35d9a6d18587d0e931b7ead

    • SHA256

      df17552549297929905c0669c9ded952dfa958e144f18fe4865ecd246d5a34cd

    • SHA512

      8727054ed027cbf2a5516907cec9d25b46db8b8c333c62ad5da4083db16faa4a9721590c5dc9838ce1cc67c1581ee530747efd3dd3bf4f630e452cc367502736

    • SSDEEP

      96:jp5kCoP5bypN5jp955pK57mEcmhSxZEGUas6Sku0pJolGU1rddi8cEjaeaddIddp:loIxPUhxSxZEGUcu0pJolGnaP0Yp0y

    Score
    1/10
    behavioral5behavioral6

    • Target

      Admin_Announce.asp

    • Size

      8KB

    • MD5

      3bb68838340e8908ae6bd15056d224d9

    • SHA1

      4b8dc8334e1bd0efdb1f070cedd1ba226deb4b90

    • SHA256

      e06e3aed32047efa12a02cb7a488afe290ffa736eb07c6ede100f09ae40acf87

    • SHA512

      616cc6ed81be6a9757b9e9105922a9611435dce2d608f05c527ac76c8159fba619fca590f1adee83211a427da6654d40c409bd84501ccb9a1fe6fbc7a8a37dee

    • SSDEEP

      192:68JNkkaee6zDqa2ze4iDeHJ9HXQA8bl7PD5M4iya6UdgvabUgnUPZ:lWaAHjHXAlpGlUh

    Score
    1/10
    behavioral7behavioral8

    • Target

      Admin_BackData.asp

    • Size

      3KB

    • MD5

      12569d23ca9443cb0f3f7ba6b6668552

    • SHA1

      46122b3172b9734bdf7e98e29c19c327ce23939c

    • SHA256

      8ad7ff6c83df1fd53a2bd978040107549177e1a326582bb815e072a198ce2fbd

    • SHA512

      8e3e5694fbc27211b704cebcbc57cb99138dfbd7ea186dbb87c51409fa2abc7296260732f17c976d48b6688cfa96e057f5fade156c669ea17fd23537a50121a1

    Score
    1/10
    behavioral10behavioral9

    • Target

      Admin_Default.asp

    • Size

      6KB

    • MD5

      ef987b15b9593d78c12e3d1cb362ff40

    • SHA1

      8e2c22b030a5af45821dfc015496bcabd0ff52ab

    • SHA256

      915aeca004926dcc425868259de8d6aec16683368c5aa0a0adc5d69fcfbdd0e6

    • SHA512

      613fcedb484d16a9225750eb7b8cbe81f2167278ce005518afa7b16b44daf47f10bfd07c5d0529720a85297c8c293e518cafd2557aa52cead3436da933ddf59c

    • SSDEEP

      96:fB0oqDqYDxymYD+KNQyIT1IL0xyLyJIyeGeXbQbddddNWddddO:fB0oqeYZYbQyIT1pP2MB5

    Score
    1/10
    behavioral11behavioral12

    • Target

      Admin_Edit.asp

    • Size

      8KB

    • MD5

      bd28e1eb7ca7f8de32eaae2898d17466

    • SHA1

      f48166e7214660ce79127d2298bc33cd0298e9aa

    • SHA256

      833fc44fd751412be0db346d243d83cdc7a2e8fd58a10934647462fd8c7cc410

    • SHA512

      51736c2d5c823b7dc8985e5e5dc36411112c82034d9fb924d72acee6a025461e466bd99e639679847f663704bd394b99db082132303f03b543ac11780973cd59

    • SSDEEP

      96:jp5kCoP5bypN5jp955pK5NTEH5QQzazAPPUwo9psGU1Vddi8cEGPOUnPUaddN44/:loIxP+wH5QQzDPUwoQGhlPxL3cS8auM

    Score
    1/10
    behavioral13behavioral14

    • Target

      Admin_GaobeiSysInfo.asp

    • Size

      3KB

    • MD5

      9a9f2ea4c7fa7cc64f9a45fb30331e70

    • SHA1

      1d99212c82b3144de7d171092cce10065ccb4ff1

    • SHA256

      5e2f9971a7d428be3d2a62a3989bd70c28bced0221deca57551bebde65099e46

    • SHA512

      271132601e9f72554b060ed3c04f80302dbf71552e73f0719f8df26b7b0dad1770ed183cc2ccf13200050cca5fa86cca9c9a046ac2e9f8d8e7f44cfae4647b25

    Score
    3/10
    behavioral15behavioral16

    • Target

      Admin_Guestbook.asp

    • Size

      27KB

    • MD5

      ba878acac62d73f3bcce2a727208b8a8

    • SHA1

      2306c1ed5f65f5cc44a0f867f1c9623cfcaf4587

    • SHA256

      0ac9364ac6d6b7055b41dec38f28b3cb6d14686cdeb9fffd37630ddcb871ddc0

    • SHA512

      e243ee9698ad8361e6a0816253b0f7304930a54eecca97413061d0a6222fe1601f65ae059b21c6666b8f49c0cf6449d5fa0c2bb1b0c82cf3197b339084f9ac89

    • SSDEEP

      384:n6cJwwNh3IDzZgr9U9IQynPhjKkpfVogFLpgZ4XxWt:n6c11TTFVogFLM8O

    Score
    1/10
    behavioral17behavioral18

    • Target

      Admin_HrDemand.asp

    • Size

      5KB

    • MD5

      8543ac1681156577099b919b9c3e962e

    • SHA1

      356f5a847727111cbe1bffc56cec06f7f295c5a4

    • SHA256

      4fac9983e3b88448490d6acd5740f0a80ce5f9c517ab4d007e477abaf76a5fd4

    • SHA512

      849577e2edab261d16f989a83f09d2a2e9c738405a97991bdeebd6ed39ec5c8ffcb9882f13d185cf1249c2464fe738fd5691f2c2a14044520ff7069000a817e0

    • SSDEEP

      96:cU9VjDaf6OVaha1+8jAoPM/szc7ZLWRJoBtE/IYRQP7VAvdddddddd8lq3SBYQia:bjDafHAhaIfnmXlIVA0o3SBYQizo/F/

    Score
    1/10
    behavioral19behavioral20

    • Target

      Admin_HrDemandAdd.asp

    • Size

      5KB

    • MD5

      cc774a3a3fda36981a2c57374057035a

    • SHA1

      7a652d6a2b683a7aeb27ea5faa1d1156d3e4bcee

    • SHA256

      d31421bd83a037b2e3f6c443174b11f8ff5577bc5b5ca64707d12bbc2fe0def6

    • SHA512

      69ac3353c44d782c3437fbb19da8adf13ecb76fcffb2e28bd823646ca520f4cbd653fb471ec420e1034f3b70153bb8a2f318e6f603285c74b56c2f7c77d58b8b

    • SSDEEP

      96:SIes/qsv6nshZs82shSOoiTkxVca1PuPAoVCIMSFkCL4M4zz46k4b4l3Gzql:D5/1yshq8RPoiQqa1IIS3zoz3ke23Gy

    Score
    1/10
    behavioral21behavioral22

    • Target

      Admin_HrDemandEdit.asp

    • Size

      6KB

    • MD5

      9bb89bdf56a04f53383ab738830487c9

    • SHA1

      2309a6bfd741efc92e66a51e784a47898e4df72d

    • SHA256

      ea862b6e5b090f1bc2fb028ae9709a17bc9cbfa5baeee47b28d2a7050aa98117

    • SHA512

      5a9852ffbc6f173a750e25c4cd28cd7d8113681970961122a15349442ce1bd92bd7f2f83ad1d767ec20e87d5cdfe86536e0b5e51149ad56c1099332d2198ae01

    • SSDEEP

      192:j5Y1PsWq1ROJkQPla1RbwSoz7I7aW3OwMb33B:mJ/WJozcGW3OwMb33B

    Score
    1/10
    behavioral23behavioral24

    • Target

      Admin_HrManage.asp

    • Size

      8KB

    • MD5

      45b695d4bf52d4de5704bbf20e26635d

    • SHA1

      893534a925ef1d5bd1ad22701558e0688060211f

    • SHA256

      bca16905d311f2d2d74cb9aee80c70fe5758129aa1f735c11c32887ec65d905d

    • SHA512

      93024f70572eacfa9f63f1c86585b6f6d78fb1fbd907d12c85448bf74cccedcca2b1c7d2c1cf2d7e524d2e24d401e484346c7138b475e80659b59a5aec7c269b

    • SSDEEP

      96:EzWaDpHa1+XwAobhTaEvlSkJb+5LZ1DtfGpdqw4iG2x/f5fpXnRz4C06XGgXd2c6:QWaDFaIoTaaEkFVdodk9HVYFx8U

    Score
    1/10
    behavioral25behavioral26

    • Target

      Admin_Left.asp

    • Size

      11KB

    • MD5

      0ed575082d6931a7cae5f88f3b021f16

    • SHA1

      fe8d19b779c3f3bdb28daeb01eedc63e17fee400

    • SHA256

      1ab4805d9c3e7140b7f505c54c25876e69789a6fb59a5ad4b18d0f760ca48ad0

    • SHA512

      e6e84ef8af2781a10bf8efd22b8cd65fce011e0d4590d03eaa01cd3bcad17c9d64b71cbbbb3fbe42bb155378e4ba535224a33a974f2c0fb46830211266c259a7

    • SSDEEP

      192:q9j6y0ZdXeS0ifiVaRtpomk+jalm+Rd0pHpQ:s0dZ0ifiJmk+qm+Rd0xC

    Score
    1/10
    behavioral27behavioral28

    • Target

      Admin_List.asp

    • Size

      7KB

    • MD5

      c1436c373b716c387a4cd1db59205232

    • SHA1

      bcb41c5637e517616ce2662b422f3296ecfe901f

    • SHA256

      75ca55a7c68bc055834c38174b1022a83f21d8bac9142afa744b5fd3b5397eab

    • SHA512

      738b42c33141e6ad72d3abc61e95362ffafdff8a4c92a695283f1b958dbbf1a0f8e16cc4d312525e669d16127ee9f610df4096e82d835b4f858428ab3008a8d9

    • SSDEEP

      192:+sytscrGcTuBccKMVy88a+2KHNBE+bQcI076mR5TCpkw:i/3MVeZbe

    Score
    1/10
    behavioral29behavioral30

    • Target

      Admin_Login.asp

    • Size

      9KB

    • MD5

      ac3f59cf0fefbec85bd6ee975d21de08

    • SHA1

      90536bb199419aa3bf256437068cc435d8f8d9dd

    • SHA256

      f2f6aa2d7efe63482715c70e43fa04508832028d8f7ffcb8055469e1dcdbf52f

    • SHA512

      8bfe0cfe716a2333b3acdc871e6e536c28db36775d3981261311b10f838691202cafbb5dc0fa52706ba05f76be581e199d4bad7daf42c858f3c087cf4645dbfc

    • SSDEEP

      192:n3ISk1FJScGPLEflrm2COHRmc3hWLcV9NCIaCAfbzSCAfFCAfT9+P+e:3CJ8PQZm2COHiLcVrCsohoMoT4+e

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks