Overview

overview

6

Static

static

1

blogcms.url

windows7-x64

6

blogcms.url

windows10-2004-x64

3

blogcms3.4...ex.vbs

windows7-x64

1

blogcms3.4...ex.vbs

windows10-2004-x64

1

blogcms3.4...le.vbs

windows7-x64

1

blogcms3.4...le.vbs

windows10-2004-x64

1

blogcms3.4...es.vbs

windows7-x64

1

blogcms3.4...es.vbs

windows10-2004-x64

1

blogcms3.4...ku.vbs

windows7-x64

1

blogcms3.4...ku.vbs

windows10-2004-x64

1

blogcms3.4/admin.vbs

windows7-x64

1

blogcms3.4/admin.vbs

windows10-2004-x64

1

blogcms3.4...ds.vbs

windows7-x64

1

blogcms3.4...ds.vbs

windows10-2004-x64

1

blogcms3.4...le.vbs

windows7-x64

1

blogcms3.4...le.vbs

windows10-2004-x64

1

blogcms3.4...ta.vbs

windows7-x64

1

blogcms3.4...ta.vbs

windows10-2004-x64

1

blogcms3.4...wn.vbs

windows7-x64

1

blogcms3.4...wn.vbs

windows10-2004-x64

1

blogcms3.4...pic.js

windows7-x64

1

blogcms3.4...pic.js

windows10-2004-x64

1

blogcms3.4...um.vbs

windows7-x64

1

blogcms3.4...um.vbs

windows10-2004-x64

1

blogcms3.4...ok.vbs

windows7-x64

1

blogcms3.4...ok.vbs

windows10-2004-x64

1

blogcms3.4...ks.vbs

windows7-x64

1

blogcms3.4...ks.vbs

windows10-2004-x64

1

blogcms3.4...il.vbs

windows7-x64

1

blogcms3.4...il.vbs

windows10-2004-x64

1

blogcms3.4...ws.vbs

windows7-x64

1

blogcms3.4...ws.vbs

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7e1642848f4d28f6176de5e3d1f11fe8

  • Size

    9.5MB

  • Sample

    240128-1nk7tacchm

  • MD5

    7e1642848f4d28f6176de5e3d1f11fe8

  • SHA1

    2d87fca905d2d70650317206658b2297af398f49

  • SHA256

    9560fd6cbf753fb38eb1a88834e9ce5ef10dbd8ba49b3edf8d10fdf551b72439

  • SHA512

    2ba9472662362da7deae6e3fe6cac8e659e4a6758f2f12ab8a75ca52de962905d13c4cd55c2fdf223f69e810e43d531bb571f998f33e3430f25597602b2451c5

  • SSDEEP

    196608:Ra0MO2amjYsgA5l0AF01kv8eVZiMN/UfQxEsFe7svEmzWITIUr:1TmssN5rFSa8eVUQUFsFev9IT1

Score
6/10
evasiontrojan

Malware Config

Targets

    • Target

      blogcms.url

    • Size

      48B

    • MD5

      df2ddc2ee92a858f5c1dcd85f6926503

    • SHA1

      5381d87a677f6782128a4dfcba33bc0d8454a0ba

    • SHA256

      ba0b89922c9dfe6bb1f78c6111c16c52cf9834f146496aca07e1b2b0602c41ac

    • SHA512

      c82909ae984b641de0226bf167294de58d41b305cdc160dc0d638cc00982c4660499e37ad8764811e3898d8673a81d146dba76e995f5ea0a438800961e544387

    Score
    6/10
    evasiontrojan
    behavioral1behavioral2

    • Target

      blogcms3.4/Html_Index.asp

    • Size

      3KB

    • MD5

      a8b945394ab257d63b05c97ef3f70bc8

    • SHA1

      e392139e8be730414ca8f89f7a7f4bed99c76993

    • SHA256

      80c8e276b5cbc62a7b27e2ca784ef849d8160f1d9081c5430a527dc32093366c

    • SHA512

      0149f51412e10e33f527b64325a45f5800537e3497390624ccd19815f6b726066b400b37bbf26b007cc4febe05bd160221acadb55ad92e0d631a92e95fbd32ad

    Score
    1/10
    behavioral3behavioral4

    • Target

      blogcms3.4/add_article.asp

    • Size

      8KB

    • MD5

      4d6124449406cfa07024a0b6d9b08de0

    • SHA1

      0a6ad2820969b778568110da80b84431cc18a08d

    • SHA256

      99d291269796a0bddc1fe16b50a7a2c66a845fce5d567e84843949e03d46e668

    • SHA512

      5e7be4a918bdd593fefc20014e846524f5bef84396421f0ff5ac39c00f66f74d5a1eb60c46db9333af4bab9c400c8f2dc38ca36e9d27a452bf22411f7058c059

    • SSDEEP

      192:4wixyscWVNkYTi+GIQUHi3V4YDPG2O2WnJRJx79NYZu/pH4JHixyF:4wixyg3O+Q3HnWntx79N8+4JHixyF

    Score
    1/10
    behavioral5behavioral6

    • Target

      blogcms3.4/add_notes.asp

    • Size

      6KB

    • MD5

      11625d2e5ac9192edb111f1a87f43111

    • SHA1

      75b87001f02de9d5f7719ff4a71e3078df10dcdf

    • SHA256

      36d4508ed056c2a2e6fc9c6c44ed25bc111f6d0517f16ec6a20098f5e59ae97c

    • SHA512

      f8060464237e9c3d5e3d965f016308ae70ac5fe20a5e028f6470954df859a141db7a034266f10f0a5b5fe7b15e52692782f1aae436245d7aa9586b1ea2e7c908

    • SSDEEP

      192:4wixyJPWzgfATk4YNknTn+HIQURt3uLpV4AeH4mYixyX:4wixyegfok4+4r+TEwVru4mYixyX

    Score
    1/10
    behavioral7behavioral8

    • Target

      blogcms3.4/add_tuku.asp

    • Size

      8KB

    • MD5

      ec4f8a79f3b02e59c6fb35844b11a439

    • SHA1

      95d8771cc96884936e62cfa23500d045df0dcdf0

    • SHA256

      31a90c30621af2f3b09aa65c336edda5f4e2b7068e76b8e4ad429c125d1671cf

    • SHA512

      2ba3136b63211e42cf34a165d4d3b377d50a1cc3d5620db20f5f625bba6e3676f72e10a95597290e8feade33066e0926f160c3fb67f3dd2d827c1a8552d6b20c

    • SSDEEP

      192:4wixyAI6fD8ATk4Pk1poWqtWbfxSoIPtX3ZGFwBSkHBmYixyF:4wixyAIaD8ok4PkUtWbxEJfS0BmYixyF

    Score
    1/10
    behavioral10behavioral9

    • Target

      blogcms3.4/admin.asp

    • Size

      18KB

    • MD5

      d8cc648477b22d155f2567fff0240cb1

    • SHA1

      f392fdeb9c55c87bc66071d10ba82aa61e6cb4c2

    • SHA256

      cbfc8174fb2e814614155b7a9c8192f011e8e7051d2cb5a7c8bae3d6e3212664

    • SHA512

      15b4ed18e33a1ceb3977b7d1a236f00676c6ffbf717a34f3794f71208dee55a4e12b1d6e1563fa61cff0680c999f40496c4bdd891c4d845dbe3f8041535ca6e3

    • SSDEEP

      384:9ixysvz2o5FLh+a8nbKN7hbIj7EoK2uixyF:9yni7GBJ

    Score
    1/10
    behavioral11behavioral12

    • Target

      blogcms3.4/admin_ads.asp

    • Size

      23KB

    • MD5

      8a9b4837d1f87429f4de411660b9a928

    • SHA1

      4cd178c599210ce17090e5be2a5f62525ff5b618

    • SHA256

      942bc9e51bd86c6f2d1b37d257514dfd0ed2e88a1250569be9426f38219c6697

    • SHA512

      14d5c84c2547fe45c90ef0acbb2b2b4e388d0c67c49ffbf99a91f0b3efa680e6a8cf64512df24fd97d2e5f79b87fe6f61c6d832e81b816fd3e5f0ad39aa03d60

    • SSDEEP

      384:NixyiLjYSXUztt+wMMf6MiRzFO/PtD9cMY0yDe3eGT80lQeH3fDgOWZ02ixyF:N5tbMMf6M4U/PtZcMY0yD6eG40lQevhE

    Score
    1/10
    behavioral13behavioral14

    • Target

      blogcms3.4/admin_article.asp

    • Size

      14KB

    • MD5

      3ff967c4b3249ed8effe49a786b6511d

    • SHA1

      15ea9705d291bb0baa9034da6e6813d7dbaaa4ea

    • SHA256

      ee38cc3dfdcf0ff7998ee9a5deb85f98d2a0cd69fc733105f6d9f0c79f53dcf4

    • SHA512

      7780764d0e7078a6312464bd0f93a41199617030ea639a3b9791d78f0918c26596e7b92a7833a61d74a3eaeb16509bbe143f09c91ed03e24897449b0e0be4722

    • SSDEEP

      384:+ixyU+2+ZGjQxwpwuxr+m57rffOPFmixyF:+IgWQxwpwuxr+w7bmPFmJ

    Score
    1/10
    behavioral15behavioral16

    • Target

      blogcms3.4/admin_data.asp

    • Size

      7KB

    • MD5

      60a8139889d6fe7c79bae1e7e78a01b0

    • SHA1

      d8d593a780f27ebfbec2d06178297e9860533e94

    • SHA256

      b9459a94826ff82caf74ec57cafadb984a9eed44b65acdacc1d0b95f7b960712

    • SHA512

      46f2704e7169da3b1321e7d69031b798d041251877296ed3ae39476c89fefbbbc5f7d5cfc0b764f2012bc461b07a9a2b23e7e4c27eb9f83ac13327b7122a193b

    • SSDEEP

      192:+ixyz7LqgeGCtLZ2PcOjhuH3UXBhb184n4qixyF:+ixyPLDdmZ2PcOjQHERhb184n4qixyF

    Score
    1/10
    behavioral17behavioral18

    • Target

      blogcms3.4/admin_down.asp

    • Size

      18KB

    • MD5

      b8e01ffa5e0ceba59421f2ec12141524

    • SHA1

      1613c1e0b5d59a1b04b05e54d19dbd422081cebd

    • SHA256

      4e53ce30d85f00f0d664aee9b488a34b8073ad536fafe76938b2e914c5c04126

    • SHA512

      13add956231f04e7c6059523e14760229cd3a8639dc1e365ca727052a00ac953aa66ca0c0d8b94c4c7cbf8c749758d74b71f6d448aa423cb6dc6444036b2abdb

    • SSDEEP

      384:+ixyps2QKtjQW9v8dKnz/aIW/x8dI31TEy92fTOEmOixyF:+xfRQW9v8dKz/aIW/x8d21Z9IqEmOJ

    Score
    1/10
    behavioral19behavioral20

    • Target

      blogcms3.4/admin_flashpic.asp

    • Size

      5KB

    • MD5

      9f20695487d151747dd50cf411f7946d

    • SHA1

      2317bee71f8478b4af149660c946946d148ad52d

    • SHA256

      baee32ca1b02395381b6341693711f3de388e949f04042e547bbf6b8175cd0a7

    • SHA512

      fe9cb54c18b13554373a4ad509e8e3855ec4eb839a629bb2c67474cacd197a3a882617be1564dd4756920889ad4c452fb286864885faa1032bb0bd3555a86da5

    • SSDEEP

      96:zJod2DbpB9dlCi05Jq4Sj/nU/2YPcDJfBddZXXAdG8c:tz79dF05Jq4gnYExX6c

    Score
    1/10
    behavioral21behavioral22

    • Target

      blogcms3.4/admin_forum.asp

    • Size

      34KB

    • MD5

      1bb44de403731658752b2e4755c3cf58

    • SHA1

      98b21149218debaa3c3a9fb2ab56d9e815e9bc23

    • SHA256

      1a71ac25cf35f43b81df672a01b675ce0cd56977c4e9acc8403b9e6320bd6d3a

    • SHA512

      893dc4ce5dc3d98998721782c381d0a6e67dc4f64d866f74a9fe54443327b318c77582929e82fb8de2d198ce8500d6ec4399a3e73cda5f74d7f06832207f2786

    • SSDEEP

      768:+VcD/HZdCYH0uE5iBYJR0NGcSUa6y+bra4DH1T:+VhyNGBjAhT

    Score
    1/10
    behavioral23behavioral24

    • Target

      blogcms3.4/admin_gbook.asp

    • Size

      5KB

    • MD5

      66e82aa79e7317601424acb8b9d086a8

    • SHA1

      82ccaf071e3d2628c247bffdd5e8af4a45a11b8e

    • SHA256

      c89f03bb086b876e25e20b836d8081d3d33521ae1ef0388d3eb9b5c5e65a48e9

    • SHA512

      8859331d55e113b03b4c44333e48f8e91aec1a276212d57cf0afbd421080251aadc34df1719e770cec20f91bdb439e45e8e277ff3f7f7a50164baee4f9ab3b47

    • SSDEEP

      96:4bixygeTj6l5NtMQQmK2iAs02fFZLQOgP1kwWKyVcOx6gPAKwd0hvTS8vGDxfJik:4bixy1X6/jQmK2iZWTOxKy9QxfJixyF

    Score
    1/10
    behavioral25behavioral26

    • Target

      blogcms3.4/admin_links.asp

    • Size

      13KB

    • MD5

      4bb5ac527df6874e375bf76c55564202

    • SHA1

      d344920f11002675e792d3e5d4eaafafac7ff567

    • SHA256

      e2d43edd6d280c9709a91ff7031f77fb3c478a0110d2e557bf1a8a8458774e9e

    • SHA512

      eaaff12a3cb374bf1ff02af9b7b37c1a04f5990b6628ade776f8980391c9658b989845226c035fe62fb9c0d4876f4630c0dce9561aba93a41bd2d0c53013006d

    • SSDEEP

      384:+ixyanSrHTaCL2JlwEQUQ71VSdebDkaMOEHdRixyF:+7GQ716ebIahERJ

    Score
    1/10
    behavioral27behavioral28

    • Target

      blogcms3.4/admin_mail.asp

    • Size

      5KB

    • MD5

      fe41fb53ecb61e66ccb044646dddc712

    • SHA1

      bfd4f993789b0ee49f911bbc96f8d8bef1220547

    • SHA256

      4f8548090c5498c64fd10d4a1f3ce71f38fb510d5139c70a93a394a9fde5d182

    • SHA512

      a96cce33f12f23ed5b3cca31fbebbde88417ccc98d0b292f8e2a8383d7f358d270c450e8627c1c0c38e8ddba71bb58bb07be6fa026b17545f55fa0a098e2c5c4

    • SSDEEP

      96:cixygxT1m5sX5X9w7X9HFfibaCO4CV32AymxkXYsHeOWjRNzRgwP3U4hixygY:cixyg5m5sJN+NlfGRE32PYsHeOWdNzuA

    Score
    1/10
    behavioral29behavioral30

    • Target

      blogcms3.4/admin_news.asp

    • Size

      14KB

    • MD5

      5d89e370e4cbac8dfc375abb434d46a9

    • SHA1

      8d27484aa4989b6f45549d48fbf84e91fad2f9b9

    • SHA256

      6d99b580a185e41c776aaecbd3d5c56f980deae334a1a3b9ae143c4999f41455

    • SHA512

      d1d7241832e3d6831a13051c1dad1235842d09c2c245fd8fcb777f98361e343e91509b689c869b2a521b07885bacfb62f93289784fef42149793b42be95a235a

    • SSDEEP

      384:+ixy3+2+ljQkwaG6++LsxkfOZO1U8mixyF:+xwQkwaG6++wxuOE1U8mJ

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks