Overview

overview

3

Static

static

3

webweb/1.vbs

windows7-x64

1

webweb/1.vbs

windows10-2004-x64

1

webweb/About.html

windows7-x64

1

webweb/About.html

windows10-2004-x64

1

webweb/Article.html

windows7-x64

1

webweb/Article.html

windows10-2004-x64

1

webweb/Coll.html

windows7-x64

1

webweb/Coll.html

windows10-2004-x64

1

webweb/Contacts.html

windows7-x64

1

webweb/Contacts.html

windows10-2004-x64

1

webweb/Htm...0.html

windows7-x64

1

webweb/Htm...0.html

windows10-2004-x64

1

webweb/Htm...9.html

windows7-x64

1

webweb/Htm...9.html

windows10-2004-x64

1

webweb/Htm...0.html

windows7-x64

1

webweb/Htm...0.html

windows10-2004-x64

1

webweb/Htm...1.html

windows7-x64

1

webweb/Htm...1.html

windows10-2004-x64

1

webweb/Htm...2.html

windows7-x64

1

webweb/Htm...2.html

windows10-2004-x64

1

webweb/Htm...3.html

windows7-x64

1

webweb/Htm...3.html

windows10-2004-x64

1

webweb/Htm...4.html

windows7-x64

1

webweb/Htm...4.html

windows10-2004-x64

1

webweb/Htm...5.html

windows7-x64

1

webweb/Htm...5.html

windows10-2004-x64

1

webweb/Htm...6.html

windows7-x64

1

webweb/Htm...6.html

windows10-2004-x64

1

webweb/Htm...7.html

windows7-x64

1

webweb/Htm...7.html

windows10-2004-x64

1

webweb/Htm...8.html

windows7-x64

1

webweb/Htm...8.html

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8d4a7d6fa18594e9b1d0af357d87f3c4

  • Size

    748KB

  • Sample

    240203-ze2b1acbfl

  • MD5

    8d4a7d6fa18594e9b1d0af357d87f3c4

  • SHA1

    155b4078629884ffe1b6b46f3e1b71680bf3d76e

  • SHA256

    c17c77735e05b1360155db56f772aa7cbf125f420f1b94a3ee81531876b0cba4

  • SHA512

    dbfc1c8e6cd42b04513ad828d82e4a3d2fe0d27963d1fe14979b8d69216101207ed4bc78f8e7e78b2d5f576f386558e45085925e0793074d3de1cb16812ff372

  • SSDEEP

    12288:iy+5AUJlO0nMX7AI8ueVSHJn4r+mJHvb3bGv1r1Bux9DbYV9DC77FYJJOFOHOa:idlO9AIeVSHp4rTP7b+1x0LDcVCPFYJ7

Score
3/10

Malware Config

Targets

    • Target

      webweb/1.asp

    • Size

      8KB

    • MD5

      eda3445196c78a7153ed4d33a2170a34

    • SHA1

      88f8aeb6ae9fda60866870c5936c4ca8bf6c9408

    • SHA256

      de220fe0a1b325fe780a04f27a565b4f3d06c355cb876b8dd98b89f27668ba46

    • SHA512

      c5d92e9e7d5963788b9de9bbbe8a49b677076b31f89931006132d97e8075e60bdc980d39835cdaa3ff7ca537526adc8563ef17328f51ee7a9eae0b1ddf3780e1

    • SSDEEP

      96:3jB4hCqlJe03vVeJdd+jdd6QZNtBkcDDnaQ5cDKnADqlpgeEXSoup8g4smpgo0ch:4C833vTtBk2aQ5n82MXSoup8g4LG3K

    Score
    1/10
    behavioral1behavioral2

    • Target

      webweb/About.html

    • Size

      3KB

    • MD5

      0dad1534235192c6a7be9adf3459ab9d

    • SHA1

      3dee6804b9c13a9cb36a1220f099605d0bcb09c3

    • SHA256

      209af7e2c4d9b5ee9c49cd89d795f89ce61b49ea4981d8846bc529ccc8867423

    • SHA512

      a23222ce1041658eccabdc05e4818359e6171b54432cf59d2159180f97b0130e9b3a1802733b19d7bd2e32ef9da4cbb76ee338cd05c2c5be6bcd4961fe65642f

    Score
    1/10
    behavioral3behavioral4

    • Target

      webweb/Article.html

    • Size

      19KB

    • MD5

      4af49394a230b93d300aa3de1302a695

    • SHA1

      1896b1f4c24142b5d2f2fd7b477b80375afe25bd

    • SHA256

      d5f7928832875f19ff8306cc28489bbdeacd5642d82cd838e90a5ab5c92e6cd5

    • SHA512

      afbf5b1565691b6f04f21f5252622a42410c3a5f0e9420cff5891baa7f003c635628d33a960183398e4be1425529f0c94cc64f912c62b88d4902bc073c37cd63

    • SSDEEP

      384:2nLg/8YhuUT2ZVPXQIn0mlGpK1pdTIz1plGOOdTVPpKInXQInUT0Bvk4YanQTgVL:2nLg/XhuUT2ZVPXQA0mlGpK1pdTIz1pO

    Score
    1/10
    behavioral5behavioral6

    • Target

      webweb/Coll.html

    • Size

      991KB

    • MD5

      4da2d0a90232380ec595bf8b13c4a78c

    • SHA1

      254ccb23493c1120b2fe97acc9930483b6296ae7

    • SHA256

      d12d89b6ae5e574c6a344bf004a7ec283f5a2c37b357a9f7b96c09cdcd5d9c7d

    • SHA512

      af5241120797f9faa1c999bdfe6664d8099c06926f47200f85164abee5b1f4d7b3a76e4787c83be4b12e0fe65c80fe8ae92b962b628459c94d426e40dda30a5a

    • SSDEEP

      6144:3jEjt1ypedrhhMuNTnwhtuauyW1hOGauFGTpxwUCGb0YFtc3m8aBja9:zC1ypGnyjeiIU0YY3mP29

    Score
    1/10
    behavioral7behavioral8

    • Target

      webweb/Contacts.html

    • Size

      2KB

    • MD5

      a7a7f776d4c452f1b3bd521c905fc279

    • SHA1

      46596c2b0ece1707535c317d9712010bdd1e0fe5

    • SHA256

      60db73a8e954a5d70755a6336002080ad431bb14f711b7553ea5eef664a044d8

    • SHA512

      3271031d0b6fc47b51ab362acaea61de43a38cbdc684e1e643a922616d9b9d5c03fd012b74363db28fc9947c29f56a44f1d89ecffe12ca354bd6e5644198389e

    Score
    1/10
    behavioral10behavioral9

    • Target

      webweb/Html/Article/2/20071126/News_100.html

    • Size

      25KB

    • MD5

      8487e888b5a2eabf4dd536a221afb734

    • SHA1

      abe27fc71310f1cfd6c0637b5505407f47b1f497

    • SHA256

      d46f7b5f1ef71fb9c99372889b8e27f615d6b95f238d8f744ac6e9a8c5ed4cfc

    • SHA512

      9e6d2895c158c8621da31117911dda81866ac504aa7623f52bea6bc1d3f98a18f0adf47480bfe0689e3b77d1a341eb5e5308017863b90169fe4f842699dcd273

    • SSDEEP

      768:YnLUrrhQNglGS5TEkbLR4OWZ2yqvLhMFKSdDfbbNU1+OVWAsPswUud0bDRu3uzpJ:aLUrrhQNglGS5TE8LR4OWZ2yqvLhMFKn

    Score
    1/10
    behavioral11behavioral12

    • Target

      webweb/Html/Article/2/20071126/News_79.html

    • Size

      24KB

    • MD5

      d634ee9e36de5c3546592f5e5f9b3252

    • SHA1

      f815344dda9420b52e0e9fd80cad95b47b0717c8

    • SHA256

      829335da86270c8a6161d97635e7a35ba30936d56a683f7e02d6314d082a5a6c

    • SHA512

      54b7cc94c5512b91bce97d5669cbf689b7b36f26e5542e5c9aec1fe390ffdab51ce89c055fee41e2303ba87754ac330467778f7c05f234fa0b2d6ae75c807257

    • SSDEEP

      768:7nLUrrhQNglGS5iALs4PWk2dqSLAMYKxdWfbCRuN11TOwWBs2sxUrd9bO3NzkXbH:7LUrrhQNglGS5iALs4PWk2dqSLAMYKxl

    Score
    1/10
    behavioral13behavioral14

    • Target

      webweb/Html/Article/2/20071126/News_80.html

    • Size

      27KB

    • MD5

      e55ab57bd653ee2e199e574e9116d1ca

    • SHA1

      0d0bcba43f14e9241a1c29a1b6937820104d95fd

    • SHA256

      79fe57864b720bcf1f34e9c846a0333a37028080243df2c60aa0098d7ab7d27f

    • SHA512

      8181f30fd37cfc68b3c33afb008baade1ca8a5428737c5f6b23dd12f627c38bca369b15294b736a7a5b741d3d68116a332208ac6fe50a77f4c0a94d760a290fa

    • SSDEEP

      768:vnLUrrhQNglGS5WEuLs4PWk2dqSLAMYKxdWfbC1+RuN1OwWBs2sxUrd9bO3NzkXz:PLUrrhQNglGS5WEuLs4PWk2dqSLAMYKo

    Score
    1/10
    behavioral15behavioral16

    • Target

      webweb/Html/Article/2/20071126/News_81.html

    • Size

      24KB

    • MD5

      3e9220d0c703511da1f3fe8133050ca8

    • SHA1

      b9a673951e39ffc0bec329fd3311b45f5ad7f380

    • SHA256

      266dc434d2e8fb2e58a0df0bfe90333135ba5e7123e3c4a8483d207cdef5c3af

    • SHA512

      f4fa6574efd76e77728de24394fae91e3ffa47759d80d27207280761dc0f922f148563425b6ec30e90a5ed817bd8e69d1e10d5739413a6094d31e98a3bd168ea

    • SSDEEP

      768:7nLUrrhQNglGS5CILs4PWk2dqSLAMYKxdWfbC1+OVRuN1WBs2sxUrd9bO3NzkXbH:7LUrrhQNglGS5CILs4PWk2dqSLAMYKx5

    Score
    1/10
    behavioral17behavioral18

    • Target

      webweb/Html/Article/2/20071126/News_82.html

    • Size

      26KB

    • MD5

      ee76364d378ace982fe85547378f7590

    • SHA1

      15ddcacb5a43b34c187d105c72e87382030a8b70

    • SHA256

      8b1f718a99fca23f240237b0798d6fac0a5608f22c436eaca14c73a3d1f979cd

    • SHA512

      f70eaf4fada55e922761bcb14bc3fba014bf17c79daf5e22b5e9a9ce38ab0a58a074d7d53b6dd1f6f335fc6433137681a38403fda1f0877b75cba5d5fcccb032

    • SSDEEP

      768:AnLUrrhQNglGS5jNTCLs4PWk2dqSLAMYKxdWfbC1+OVWARuN1s2sxUrd9bO3Nzkj:iLUrrhQNglGS5jBCLs4PWk2dqSLAMYKc

    Score
    1/10
    behavioral19behavioral20

    • Target

      webweb/Html/Article/2/20071126/News_83.html

    • Size

      23KB

    • MD5

      6576066512c555fe2e133d2b52dd5235

    • SHA1

      824d0e318ffa82cfefd6cd48ec0f592802794e42

    • SHA256

      7aab0f3effc5e3e40d97253e7356e887bd590ed15f4f2e7da646475e97b1e7cf

    • SHA512

      ea5343b5b7c019cf3568c157d0d8c92454cc11929b6772747aab3ba12c39c21cc6fe65568f064fbe9793bf69655359311d01425508a55ee23027c2f445b8d184

    • SSDEEP

      384:vHnLUAIo8Lo+lo+Eo+Bo+glGS5mX1Ls4PWk2dqSLAMYKxdibfiUC1+OVWAsPRuNB:fnLUrrhQNglGS5O1Ls4PWk2dqSLAMYKL

    Score
    1/10
    behavioral21behavioral22

    • Target

      webweb/Html/Article/2/20071126/News_84.html

    • Size

      24KB

    • MD5

      daa1c3d0514ee40b87e8a701151594f5

    • SHA1

      2bb61adf1bc61dcbeba9bc91647fc022206da2f0

    • SHA256

      d33b2b1d283b10915f62b9b1ca1c0abea6edb97aadee688e69816ce7c9162bb8

    • SHA512

      9c602d0e4a3b2433156cc1304cbb5546d32347fddac07a2b082af66961115f4c5f9b8652363142faae11249f49440df70aadc59b7143e49b5c2d5e344526819a

    • SSDEEP

      768:UnLUrrhQNglGS5vSvUmLs4PWk2dqSLAMYKxdWfbC1+OVWAsPswRuN1Urd9bO3NzM:WLUrrhQNglGS5vScmLs4PWk2dqSLAMYr

    Score
    1/10
    behavioral23behavioral24

    • Target

      webweb/Html/Article/2/20071126/News_85.html

    • Size

      25KB

    • MD5

      bd02ec5532767667f9ee24fa40f93a5d

    • SHA1

      4d658c5de3c3a0466d6f316d84073c5e91facb62

    • SHA256

      86891163dff066c5dd65da535489819a3f52ca0f8a347a765f43ff23d22343ca

    • SHA512

      a1668e752d909068b62de7706f3b7230515d7c51d39cbf59b664c798bd035902de335315eaa28ea9be3e2addb60fdee0c8307fe0eaac211dfdec32898cdc4438

    • SSDEEP

      768:hnLUrrhQNglGS5coLs4PWk2dqSLAMYKxdWfbC1+OVWAsPswUuRuN1d9bO3NzkXbH:5LUrrhQNglGS5coLs4PWk2dqSLAMYKxR

    Score
    1/10
    behavioral25behavioral26

    • Target

      webweb/Html/Article/2/20071126/News_86.html

    • Size

      23KB

    • MD5

      c3566d8ec842563023b4c6db9cfa7748

    • SHA1

      b602026a7956ca1cb7da9325c88d7b64ad72595e

    • SHA256

      7f433c835f39d72797329bf267da553865e3be83f834dc1fa07806e2ab7f52b1

    • SHA512

      6928db7efd3bda28c66a907ed55183d8ea94e8c90d6fde2c70a32f62f8bcb4bf0e24e0469b626f32b22d6c280f5b7ea1187ef44f7b97a06596729817977bbddf

    • SSDEEP

      384:ZHnLUAIo8Lo+lo+Eo+Bo+glGS5m59iLs4PWk2dqSLAMYKxdibfiUC1+OVWAsPsw7:xnLUrrhQNglGS5soLs4PWk2dqSLAMYK4

    Score
    1/10
    behavioral27behavioral28

    • Target

      webweb/Html/Article/2/20071126/News_87.html

    • Size

      26KB

    • MD5

      b10f5799841e4e7c8a2251c6b0200b33

    • SHA1

      38c2b9330856dbf8372ea7a9c093ae2e6ec48dd2

    • SHA256

      963240e1deeb4f964ec22dd3c05b09cf11793197abbff061f47ad9e39e497052

    • SHA512

      246e9128648b66ace75665144768f676df8118a5d286daa210b8ddca681a1168af998a0bfd6fc4e765ba23ebcbe36837752fddb111c8129a22f195a41ad2dfb6

    • SSDEEP

      768:CnLUrrhQNglGS5ho43bLs4PWk2dqSLAMYKxdWfbC1+OVWAsPswUud0bDRuN13NzM:cLUrrhQNglGS5hoaLs4PWk2dqSLAMYKX

    Score
    1/10
    behavioral29behavioral30

    • Target

      webweb/Html/Article/2/20071126/News_88.html

    • Size

      19KB

    • MD5

      7da111ce3ab550e6cec3b947b36745cf

    • SHA1

      2e8fb306f656026d9e07fb4148b4eaa622d641bc

    • SHA256

      6a044fbb67b83fb7ca4a95c605554c645c54267ec9835c87851638ea9bbbb8a5

    • SHA512

      cd319d6bf62fd2f2c5feeb82794b28cc55ab5bd54d8a84b6430c9c671a25d6071db3377bfd9aa839b93316a15c896443497679f25ed8773b5e0d26fae400eba3

    • SSDEEP

      384:wHnLUAIo8Lo+lo+Eo+Bo+glGS5m8EKLs4PWk2dqSLAMYKxdibfiUCDxea1+OVWAs:4nLUrrhQNglGS5LHLs4PWk2dqSLAMYK8

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks