Overview

overview

3

Static

static

3

ASPCODE/BShow.vbs

windows7-x64

1

ASPCODE/BShow.vbs

windows10-2004-x64

1

ASPCODE/Click.vbs

windows7-x64

1

ASPCODE/Click.vbs

windows10-2004-x64

1

ASPCODE/PAY/MD6.vbs

windows7-x64

1

ASPCODE/PAY/MD6.vbs

windows10-2004-x64

1

ASPCODE/Us...ge.vbs

windows7-x64

1

ASPCODE/Us...ge.vbs

windows10-2004-x64

1

ASPCODE/Us...rd.vbs

windows7-x64

1

ASPCODE/Us...rd.vbs

windows10-2004-x64

1

ASPCODE/User/Exit.asp

windows7-x64

3

ASPCODE/User/Exit.asp

windows10-2004-x64

3

ASPCODE/Us...rd.vbs

windows7-x64

1

ASPCODE/Us...rd.vbs

windows10-2004-x64

1

ASPCODE/User/Jsjl.vbs

windows7-x64

1

ASPCODE/User/Jsjl.vbs

windows10-2004-x64

1

ASPCODE/User/Llgz.vbs

windows7-x64

1

ASPCODE/User/Llgz.vbs

windows10-2004-x64

1

ASPCODE/Us...de.vbs

windows7-x64

1

ASPCODE/Us...de.vbs

windows10-2004-x64

1

ASPCODE/Us...de.vbs

windows7-x64

1

ASPCODE/Us...de.vbs

windows10-2004-x64

1

ASPCODE/User/Wycs.vbs

windows7-x64

1

ASPCODE/User/Wycs.vbs

windows10-2004-x64

1

ASPCODE/User/Wygm.vbs

windows7-x64

1

ASPCODE/User/Wygm.vbs

windows10-2004-x64

1

ASPCODE/Us...de.vbs

windows7-x64

1

ASPCODE/Us...de.vbs

windows10-2004-x64

1

ASPCODE/User/djtj.vbs

windows7-x64

1

ASPCODE/User/djtj.vbs

windows10-2004-x64

1

ASPCODE/Us...ex.vbs

windows7-x64

1

ASPCODE/Us...ex.vbs

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    805f379bcd8a74c48f1198ba9431151d

  • Size

    1.2MB

  • Sample

    240129-vgzhzaeed5

  • MD5

    805f379bcd8a74c48f1198ba9431151d

  • SHA1

    51d7b6fb130bb9c994a3927c5535f374b4252d52

  • SHA256

    368b2cd1918f3ce75637def2116f8476262ac0eb85b1ea9bba3dc4ebe4f7e504

  • SHA512

    016618ad1e58135d60b5397b2c0de840a2efc1fb7dc6a02aea8cb2826e097b6ae95216a777d16155f8fb35beb98c29c138725c7275ddd6a57ccc4fa7b461f18f

  • SSDEEP

    24576:nHOUwSlLTq2i4LeR65I6A3TZj7vUSTCqIveC7KHl/BbPHHINZVWju:nHjwSlnq2iYy65I6A3pUtqc7KvgNWju

Score
3/10

Malware Config

Targets

    • Target

      ASPCODE/BShow.asp

    • Size

      6KB

    • MD5

      4055871bd180bebd70ce865f13bae4ce

    • SHA1

      c73d8b0f9004508adbc46f46e1576982fe47b9bb

    • SHA256

      ec5ddb7b197dc30af5a6d4d9e92ba75a735f03c25ee03bb955b9183d348e65e7

    • SHA512

      398c6110fc7d5b6edff10daf9dfe50aa21c7101fb47a97e9888e44260b2bf79c298ba85b55e3cb32848eba9fc9cdefef9223dbb0eefc121c01de98365071b251

    • SSDEEP

      192:eV+60CnxI+Yq8F3H2AqdidxdFdQ5IFTv2ExYxJi4XyqecXv:eVpc56xJi5K

    Score
    1/10
    behavioral1behavioral2

    • Target

      ASPCODE/Click.asp

    • Size

      169B

    • MD5

      a00df88f09f95d8616e197a4e22bb06a

    • SHA1

      de7a6e28358ecbf83fa3c4a5695b3e785792845c

    • SHA256

      703c89d7bde3ddcba2293bd059a2cc34f50109f186bd78c2a4ee1328ee6ccb20

    • SHA512

      1a4e68b569e50ce8b70598fa5e8de706ac646bbab11f4390f0e5da0dfc5618f12abd55c47316a2d1c66ce5a5c6f9371dd5ff5b31471442a8d22df3225977a5e9

    Score
    1/10
    behavioral3behavioral4

    • Target

      ASPCODE/PAY/MD6.ASP

    • Size

      11KB

    • MD5

      56eee6ce17c90ff4cccb3b9060273f56

    • SHA1

      ccf0a9de4f1f3a78475975c4fbeb1f04ac0c6920

    • SHA256

      cc467b2c2f1ec9bc6133fb261ed24b4d250b78f06208e08c0f4243d79adec40a

    • SHA512

      a59f74c9ff4ab592ec76f4181146c1793bd37ec1c2546d1de88cc88a405680cc56713bdd1461c8f79b898ecfc36ed21b466b06c5f6dbdb06986121945a4618f1

    • SSDEEP

      192:fvioOa+9Y7D8MzYn4zVnt0fjj/+jGguhFYv0VjoVM4eaaYxkZD7w:OSFYOgFYvWjoVnF9xKDU

    Score
    1/10
    behavioral5behavioral6

    • Target

      ASPCODE/User/Change.asp

    • Size

      168B

    • MD5

      64f99bb179d3f75d41522b0c79dd6d83

    • SHA1

      fc1cc7adce39c5401637d6d3e71080ad80277ffb

    • SHA256

      79aa26a64f0ac7163af4ca2b7f44174708659dd41ad3e28dfe7baa1d266df921

    • SHA512

      640158daa301df61efdb1996ed84fbeeac4274ab29bfe6454dad705da292a4d25188f5098b6c759a5a73546ae366f0d2243d381fcf27f20d38e1c9b913415044

    Score
    1/10
    behavioral7behavioral8

    • Target

      ASPCODE/User/ClickRecord.asp

    • Size

      168B

    • MD5

      e346fa2080eecedfc28ab1e8a79d4ec1

    • SHA1

      53f497e557d3cdff14f057a6debc8c479acbed89

    • SHA256

      03da2717a4dd44a9d5d7dcbe2257220075a2902e2f98e6c5314a37c5d194a92f

    • SHA512

      271d276bf95955d291a5152823487b3c669b360b3b76e24ea0d5dc9bd416c949a72ee34b6183e44d3d25dc95baa97ebd20219284a16ae8f7a2894fc938eeeab2

    Score
    1/10
    behavioral10behavioral9

    • Target

      ASPCODE/User/Exit.asp

    • Size

      82B

    • MD5

      4d73c3174392ff96e04ee26960587343

    • SHA1

      26f7b4165077c4f8d707bda4c2edd7011247fed9

    • SHA256

      3c8918095a73444f285365cb1c685b17e7fec83c341ff3bd1b60cba11990e67a

    • SHA512

      2d56c8bfe50bc1dbcad3bb45bcae839bc8447a4ec564c24c994fba61f608b9057f80077416373a2a66e70cadd92c2094fadf8988e1dafbf35e03f5123fcb7903

    Score
    3/10
    behavioral11behavioral12

    • Target

      ASPCODE/User/JlRecord.asp

    • Size

      168B

    • MD5

      e42f3c6c113d852c4e836a9624368dab

    • SHA1

      ed378d0cf8a459bc2a3048cff43868df9afad21e

    • SHA256

      ce4ef37ca1090457cf78871963e485c4b01417a1773f24f8b927cc60968fbfdb

    • SHA512

      ee157ce5df27121ed6b7a040dd4ae932007eb818c26be48b57b865fc689fc80b77b29baf217f4d828f217eafbe48b8d5be3a8df395671de1636c9a7452922871

    Score
    1/10
    behavioral13behavioral14

    • Target

      ASPCODE/User/Jsjl.asp

    • Size

      168B

    • MD5

      c412955c8caa55973ca41593787aecad

    • SHA1

      f96f0b25d45d5e1e6fe80c0d80bc15bdbb3bb4fe

    • SHA256

      5f219aa53b5e655aa8862b49eaa528133c7a14e160de19d3194f9cfacddb0d16

    • SHA512

      260a4e2bf1349a8048dcc3546001e0206f372fb2c4f5b08ed01e8ce6c136c0e0f4980ce54eff4c6dee55fb04e706b8298e785167fa67046e3be1ffdf7d1233ec

    Score
    1/10
    behavioral15behavioral16

    • Target

      ASPCODE/User/Llgz.asp

    • Size

      168B

    • MD5

      a67a74405ac9660a8057b0dbd99f77ae

    • SHA1

      7ee3781aac8790f0de204619d8164a8b36945460

    • SHA256

      7459902291a3c868a8c12aa8781d0a535b8b7c9ff84b31e86212aa6ad94b7e02

    • SHA512

      28aa4260c77cf5f910dac973f12c4547f52e11218f5236ee56c3297cc26ebdaacbd5c28584e39e65ee9f9fdbc87fcf0df3167fa20a97d81ce5cf2634f5c8050e

    Score
    1/10
    behavioral17behavioral18

    • Target

      ASPCODE/User/PopCode.asp

    • Size

      168B

    • MD5

      19aee16c645ecac2643151699e6451de

    • SHA1

      6eff6fa5772575afd9436e18d40ff036c5752877

    • SHA256

      c24958129322653efb98be500a5f97249d503aff1061f49f4c4d4617b99d2b86

    • SHA512

      ad9fdbfe22a3a00c2d1b7ee74bcaa5b6a04d8d44a46621867d9bcce4645bfbc4623630be6531a4792b8c0ee7bf6c1618aa043eca988903de47d7b18c83ad866e

    Score
    1/10
    behavioral19behavioral20

    • Target

      ASPCODE/User/SubjectCode.asp

    • Size

      168B

    • MD5

      341396b6247b8cb5419dfc525f281053

    • SHA1

      e88473ce0f31712be703ec52177873e11a8699c7

    • SHA256

      5e09878be08f8c6b0a952eb149c5e4a9e8edb37198fd8ae9e26833b58f848f2f

    • SHA512

      b7fc2a7b8bd6b4b3c955775304d4bd8d0280a474156c65eabdecf54f60ff8d54c73e8b5149f4bcdd53b9c9875771b63e34d308a3fde2fbc2526af7db107a854f

    Score
    1/10
    behavioral21behavioral22

    • Target

      ASPCODE/User/Wycs.asp

    • Size

      168B

    • MD5

      20ee397426f62c78278c6981f1f13c67

    • SHA1

      e6d64fb538cf9baee1a6bf3983ed1fab57f0817b

    • SHA256

      8ac114f91e1e351361fb63ee6a9743daf1f6a7c512f609f1c414bf78d11bf771

    • SHA512

      6826a9f7ceb9163838eb956c2a612557e0c7f2940c00c590ec7e05d38e5f4a2e6823c892f3225562345b4dd835e6d46aa5a7c7e79ef4d1b00c9359c36fcb4fc9

    Score
    1/10
    behavioral23behavioral24

    • Target

      ASPCODE/User/Wygm.asp

    • Size

      168B

    • MD5

      69bb75dc70fd098aefb1284170139c5c

    • SHA1

      fc5458240e6e81a310704125932da04754bc18fe

    • SHA256

      5fa1a1ee7714c8e9b8f218d915655ac4f16567969ae1ede800906cbe847763e9

    • SHA512

      2c07b5628cd4d26874a302bc33f1e21276baaca9fa6868e9b6b4011a09cbd55a8ca629f6791741cd9614e1b7255d20cca0669944f703a26efa7c595d34c3eded

    Score
    1/10
    behavioral25behavioral26

    • Target

      ASPCODE/User/XxCode.asp

    • Size

      168B

    • MD5

      352cd72fb156f11d36c75c4513565e03

    • SHA1

      2ecae14474d42b5b5e2b6d2a51f04a5db8787c5e

    • SHA256

      f02b77fdd463f2952a507c990dc64bbadc255a172c6b25f88812fce9ec6a22f7

    • SHA512

      28923af49c3e0b42fec7f792438ac211e8ba4cd23e3703dceaaf91fad6adb697e5090ff1bb56f6db21a016b70c2a8cb7e0eec374bf25bb51f858f287b8fb993d

    Score
    1/10
    behavioral27behavioral28

    • Target

      ASPCODE/User/djtj.asp

    • Size

      168B

    • MD5

      80bfa9cf8305a4fc3599bfb197fde75c

    • SHA1

      afc35345ccd459a5725bd3472d23d59f441ca601

    • SHA256

      30c9fdf72ee1ccaedd04ddf6901195e4b401cb15df36d450b8cc666b5e53f8f1

    • SHA512

      c5ddd952da32f623236bfdc0f633f09f76379298a82f04ea8e1b130b242c9dbe9728540de638bb8f2109c12938c97019de403bc5666f03f3ac57e57edef7dba6

    Score
    1/10
    behavioral29behavioral30

    • Target

      ASPCODE/User/index.asp

    • Size

      168B

    • MD5

      3204ce21ea77f9f52f4c980ce7dd05e6

    • SHA1

      34050d04870312805430cefd798cd994634c63ca

    • SHA256

      7e0862d11251299d9525148d3de85c067811c637c571b18c3c434b5866ab675c

    • SHA512

      6e0b95f27e69fa3f9b8e88caac7ed07e77b508a1565b312412c5900932e92f8c60fc5b2bdac0595095e3e0082b31d0c7672bcbd1ca026f5cdee913f9bd7fa220

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks