General
-
Target
AV-2.scr
-
Size
5.9MB
-
Sample
240207-j47x3sfhgj
-
MD5
ca1fb1ad30189110cc225620dc537368
-
SHA1
bfc2de8f0b376a6f1ff1930a4f261709a27e92ec
-
SHA256
3fde84a46aea58ba4ddb5fb0473fc756ff209ba96b1a63a2759d13b8adc01a69
-
SHA512
11737f00ac297040b40cfe6879b695c9900b6b2a691e0b4e12c190ed9918179d0b7a76415d67368d3767f7d357e1c0df202af618964986f72dcbac7bfd5ace17
-
SSDEEP
98304:RLNSThOfTCiFBXmfFs+JhTpCVoR8oMEOJ6Ty3RvX+A0eVObApY:bBfTCiUsBVSLOJgyBG3KTp
Behavioral task
behavioral1
Sample
AV-2.scr
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
AV-2.scr
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
ftpcrack.pyc
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
ftpcrack.pyc
Resource
win10v2004-20231215-en
Malware Config
Extracted
Protocol: ftp- Host:
190.106.78.94 - Port:
21 - Username:
www - Password:
anonymous
Extracted
Protocol: ftp- Host:
190.106.78.94 - Port:
21 - Username:
www - Password:
123456
Extracted
Protocol: ftp- Host:
190.106.78.94 - Port:
21 - Username:
www - Password:
admin
Extracted
Protocol: ftp- Host:
190.106.78.94 - Port:
21 - Username:
www - Password:
password
Extracted
Protocol: ftp- Host:
103.241.170.218 - Port:
21 - Username:
www - Password:
anonymous
Extracted
Protocol: ftp- Host:
91.121.150.198 - Port:
21 - Username:
www - Password:
anonymous
Extracted
Protocol: ftp- Host:
91.121.150.198 - Port:
21 - Username:
www - Password:
123456
Extracted
Protocol: ftp- Host:
91.121.150.198 - Port:
21 - Username:
www - Password:
admin
Extracted
Protocol: ftp- Host:
91.121.150.198 - Port:
21 - Username:
www - Password:
password
Extracted
Protocol: ftp- Host:
91.121.150.198 - Port:
21 - Username:
www - Password:
root
Extracted
Protocol: ftp- Host:
91.121.150.198 - Port:
21 - Username:
www - Password:
123123
Extracted
Protocol: ftp- Host:
190.106.78.94 - Port:
21 - Username:
www - Password:
root
Extracted
Protocol: ftp- Host:
190.106.78.94 - Port:
21 - Username:
www - Password:
123123
Extracted
Protocol: ftp- Host:
195.35.30.13 - Port:
21 - Username:
www - Password:
anonymous
Extracted
Protocol: ftp- Host:
185.236.137.246 - Port:
21 - Username:
www - Password:
anonymous
Extracted
Protocol: ftp- Host:
190.106.78.94 - Port:
21 - Username:
www - Password:
123
Extracted
Protocol: ftp- Host:
190.106.78.94 - Port:
21 - Username:
www - Password:
pass1234
Extracted
Protocol: ftp- Host:
185.236.137.246 - Port:
21 - Username:
www - Password:
123456
Extracted
Protocol: ftp- Host:
190.106.78.94 - Port:
21 - Username:
www - Password:
www
Extracted
Protocol: ftp- Host:
185.236.137.246 - Port:
21 - Username:
www - Password:
admin
Extracted
Protocol: ftp- Host:
190.106.78.94 - Port:
21 - Username:
www - Password:
wwwwww
Extracted
Protocol: ftp- Host:
177.153.36.86 - Port:
21 - Username:
www - Password:
anonymous
Extracted
Protocol: ftp- Host:
185.236.137.246 - Port:
21 - Username:
www - Password:
password
Extracted
Protocol: ftp- Host:
190.106.78.94 - Port:
21 - Username:
www - Password:
www1
Extracted
Protocol: ftp- Host:
190.106.78.94 - Port:
21 - Username:
www - Password:
www123
Extracted
Protocol: ftp- Host:
185.236.137.246 - Port:
21 - Username:
www - Password:
root
Extracted
Protocol: ftp- Host:
177.153.36.86 - Port:
21 - Username:
www - Password:
123456
Extracted
Protocol: ftp- Host:
190.106.78.94 - Port:
21 - Username:
www - Password:
www2016
Extracted
Protocol: ftp- Host:
185.236.137.246 - Port:
21 - Username:
www - Password:
123123
Extracted
Protocol: ftp- Host:
177.153.36.86 - Port:
21 - Username:
www - Password:
admin
Extracted
Protocol: ftp- Host:
190.106.78.94 - Port:
21 - Username:
www - Password:
www2015
Extracted
Protocol: ftp- Host:
185.236.137.246 - Port:
21 - Username:
www - Password:
123
Extracted
Protocol: ftp- Host:
190.106.78.94 - Port:
21 - Username:
www - Password:
www!
Extracted
Protocol: ftp- Host:
177.153.36.86 - Port:
21 - Username:
www - Password:
password
Extracted
Protocol: ftp- Host:
43.135.26.251 - Port:
21 - Username:
www - Password:
anonymous
Extracted
Protocol: ftp- Host:
190.106.78.94 - Port:
21 - Username:
www
Extracted
Protocol: ftp- Host:
185.236.137.246 - Port:
21 - Username:
www - Password:
pass1234
Extracted
Protocol: ftp- Host:
177.153.36.86 - Port:
21 - Username:
www - Password:
root
Extracted
Protocol: ftp- Host:
190.106.78.94 - Port:
21 - Username:
www - Password:
P@ssw0rd!!
Extracted
Protocol: ftp- Host:
43.135.26.251 - Port:
21 - Username:
www - Password:
123456
Extracted
Protocol: ftp- Host:
185.236.137.246 - Port:
21 - Username:
www - Password:
www
Extracted
Protocol: ftp- Host:
177.153.36.86 - Port:
21 - Username:
www - Password:
123123
Extracted
Protocol: ftp- Host:
190.106.78.94 - Port:
21 - Username:
www - Password:
qwa123
Extracted
Protocol: ftp- Host:
185.236.137.246 - Port:
21 - Username:
www - Password:
wwwwww
Extracted
Protocol: ftp- Host:
60.43.227.64 - Port:
21 - Username:
www - Password:
anonymous
Extracted
Protocol: ftp- Host:
43.135.26.251 - Port:
21 - Username:
www - Password:
admin
Extracted
Protocol: ftp- Host:
190.106.78.94 - Port:
21 - Username:
www - Password:
12345678
Extracted
Protocol: ftp- Host:
177.153.36.86 - Port:
21 - Username:
www - Password:
123
Extracted
Protocol: ftp- Host:
190.106.78.94 - Port:
21 - Username:
www - Password:
test
Extracted
Protocol: ftp- Host:
185.236.137.246 - Port:
21 - Username:
www - Password:
www1
Extracted
Protocol: ftp- Host:
60.43.227.64 - Port:
21 - Username:
www - Password:
123456
Extracted
Protocol: ftp- Host:
177.153.36.86 - Port:
21 - Username:
www - Password:
pass1234
Extracted
Protocol: ftp- Host:
190.106.78.94 - Port:
21 - Username:
www - Password:
123qwe!@#
Extracted
Protocol: ftp- Host:
43.135.26.251 - Port:
21 - Username:
www - Password:
password
Extracted
Protocol: ftp- Host:
185.236.137.246 - Port:
21 - Username:
www - Password:
www123
Extracted
Protocol: ftp- Host:
60.43.227.64 - Port:
21 - Username:
www - Password:
admin
Extracted
Protocol: ftp- Host:
190.106.78.94 - Port:
21 - Username:
www - Password:
123456789
Extracted
Protocol: ftp- Host:
177.153.36.86 - Port:
21 - Username:
www - Password:
www
Extracted
Protocol: ftp- Host:
185.236.137.246 - Port:
21 - Username:
www - Password:
www2016
Extracted
Protocol: ftp- Host:
190.106.78.94 - Port:
21 - Username:
www - Password:
123321
Extracted
Protocol: ftp- Host:
60.43.227.64 - Port:
21 - Username:
www - Password:
password
Extracted
Protocol: ftp- Host:
177.153.36.86 - Port:
21 - Username:
www - Password:
wwwwww
Extracted
Protocol: ftp- Host:
190.106.78.94 - Port:
21 - Username:
www - Password:
1314520
Extracted
Protocol: ftp- Host:
185.236.137.246 - Port:
21 - Username:
www - Password:
www2015
Extracted
Protocol: ftp- Host:
60.43.227.64 - Port:
21 - Username:
www - Password:
root
Extracted
Protocol: ftp- Host:
190.106.78.94 - Port:
21 - Username:
www - Password:
159357
Extracted
Protocol: ftp- Host:
177.153.36.86 - Port:
21 - Username:
www - Password:
www1
Extracted
Protocol: ftp- Host:
185.236.137.246 - Port:
21 - Username:
www - Password:
www!
Extracted
Protocol: ftp- Host:
190.106.78.94 - Port:
21 - Username:
www - Password:
www2017
Extracted
Protocol: ftp- Host:
185.17.182.250 - Port:
21 - Username:
www - Password:
anonymous
Extracted
Protocol: ftp- Host:
137.175.86.251 - Port:
21 - Username:
www - Password:
anonymous
Extracted
Protocol: ftp- Host:
185.17.182.250 - Port:
21 - Username:
www - Password:
123456
Extracted
Protocol: ftp- Host:
185.17.182.250 - Port:
21 - Username:
www - Password:
admin
Extracted
Protocol: ftp- Host:
185.17.182.250 - Port:
21 - Username:
www - Password:
password
Extracted
Protocol: ftp- Host:
185.17.182.250 - Port:
21 - Username:
www - Password:
root
Extracted
Protocol: ftp- Host:
185.17.182.250 - Port:
21 - Username:
www - Password:
123123
Extracted
Protocol: ftp- Host:
185.17.182.250 - Port:
21 - Username:
www - Password:
123
Extracted
Protocol: ftp- Host:
60.43.227.64 - Port:
21 - Username:
www - Password:
123123
Extracted
Protocol: ftp- Host:
185.17.182.250 - Port:
21 - Username:
www - Password:
pass1234
Extracted
Protocol: ftp- Host:
185.17.182.250 - Port:
21 - Username:
www - Password:
www
Extracted
Protocol: ftp- Host:
185.17.182.250 - Port:
21 - Username:
www - Password:
wwwwww
Extracted
Protocol: ftp- Host:
185.236.137.246 - Port:
21 - Username:
www
Extracted
Protocol: ftp- Host:
185.17.182.250 - Port:
21 - Username:
www - Password:
www1
Extracted
Protocol: ftp- Host:
185.17.182.250 - Port:
21 - Username:
www
Extracted
Protocol: ftp- Host:
177.153.36.86 - Port:
21 - Username:
www - Password:
www123
Extracted
Protocol: ftp- Host:
190.106.78.94 - Port:
21 - Username:
www - Password:
666666
Extracted
Protocol: ftp- Host:
60.43.227.64 - Port:
21 - Username:
www - Password:
123
Extracted
Protocol: ftp- Host:
185.236.137.246 - Port:
21 - Username:
www - Password:
P@ssw0rd!!
Extracted
Protocol: ftp- Host:
190.106.78.94 - Port:
21 - Username:
www - Password:
woaini
Extracted
Protocol: ftp- Host:
177.153.36.86 - Port:
21 - Username:
www - Password:
www2016
Extracted
Protocol: ftp- Host:
190.106.78.94 - Port:
21 - Username:
www - Password:
fuckyou
Extracted
Protocol: ftp- Host:
60.43.227.64 - Port:
21 - Username:
www - Password:
pass1234
Extracted
Protocol: ftp- Host:
185.236.137.246 - Port:
21 - Username:
www - Password:
qwa123
Extracted
Protocol: ftp- Host:
177.153.36.86 - Port:
21 - Username:
www - Password:
www2015
Extracted
Protocol: ftp- Host:
190.106.78.94 - Port:
21 - Username:
www - Password:
000000
Extracted
Protocol: ftp- Host:
198.54.125.121 - Port:
21 - Username:
www - Password:
anonymous
Extracted
Protocol: ftp- Host:
60.43.227.64 - Port:
21 - Username:
www - Password:
www
Extracted
Protocol: ftp- Host:
185.236.137.246 - Port:
21 - Username:
www - Password:
12345678
Extracted
Protocol: ftp- Host:
190.106.78.94 - Port:
21 - Username:
www - Password:
1234567890
Extracted
Protocol: ftp- Host:
177.153.36.86 - Port:
21 - Username:
www - Password:
www!
Extracted
Protocol: ftp- Host:
198.54.125.121 - Port:
21 - Username:
www - Password:
123456
Extracted
Protocol: ftp- Host:
185.236.137.246 - Port:
21 - Username:
www - Password:
test
Extracted
Protocol: ftp- Host:
190.106.78.94 - Port:
21 - Username:
www - Password:
8888888
Extracted
Protocol: ftp- Host:
60.43.227.64 - Port:
21 - Username:
www - Password:
wwwwww
Extracted
Protocol: ftp- Host:
190.106.78.94 - Port:
21 - Username:
www - Password:
qwerty
Extracted
Protocol: ftp- Host:
185.236.137.246 - Port:
21 - Username:
www - Password:
123qwe!@#
Extracted
Protocol: ftp- Host:
60.43.227.64 - Port:
21 - Username:
www - Password:
www1
Extracted
Protocol: ftp- Host:
190.106.78.94 - Port:
21 - Username:
www - Password:
1qaz2wsx
Extracted
Protocol: ftp- Host:
185.236.137.246 - Port:
21 - Username:
www - Password:
123456789
Extracted
Protocol: ftp- Host:
190.106.78.94 - Port:
21 - Username:
www - Password:
abc123
Extracted
Protocol: ftp- Host:
60.43.227.64 - Port:
21 - Username:
www - Password:
www123
Extracted
Protocol: ftp- Host:
185.236.137.246 - Port:
21 - Username:
www - Password:
123321
Extracted
Protocol: ftp- Host:
190.106.78.94 - Port:
21 - Username:
www - Password:
abc123456
Extracted
Protocol: ftp- Host:
60.43.227.64 - Port:
21 - Username:
www - Password:
www2016
Extracted
Protocol: ftp- Host:
190.106.78.94 - Port:
21 - Username:
www - Password:
1q2w3e4r
Extracted
Protocol: ftp- Host:
185.236.137.246 - Port:
21 - Username:
www - Password:
1314520
Extracted
Protocol: ftp- Host:
190.106.78.94 - Port:
21 - Username:
www - Password:
123qwe
Extracted
Protocol: ftp- Host:
60.43.227.64 - Port:
21 - Username:
www - Password:
www2015
Extracted
Protocol: ftp- Host:
76.191.114.32 - Port:
21 - Username:
www - Password:
anonymous
Extracted
Protocol: ftp- Host:
77.87.197.5 - Port:
21 - Username:
www - Password:
anonymous
Extracted
Protocol: ftp- Host:
38.173.253.221 - Port:
21 - Username:
www - Password:
anonymous
Extracted
Protocol: ftp- Host:
185.236.137.246 - Port:
21 - Username:
www - Password:
159357
Extracted
Protocol: ftp- Host:
77.87.197.5 - Port:
21 - Username:
www - Password:
123456
Extracted
Protocol: ftp- Host:
76.191.114.32 - Port:
21 - Username:
www - Password:
123456
Extracted
Protocol: ftp- Host:
77.87.197.5 - Port:
21 - Username:
www - Password:
admin
Extracted
Protocol: ftp- Host:
77.87.197.5 - Port:
21 - Username:
www - Password:
password
Extracted
Protocol: ftp- Host:
190.106.78.94 - Port:
21 - Username:
www - Password:
www2019
Extracted
Protocol: ftp- Host:
76.191.114.32 - Port:
21 - Username:
www - Password:
admin
Extracted
Protocol: ftp- Host:
77.87.197.5 - Port:
21 - Username:
www - Password:
root
Extracted
Protocol: ftp- Host:
77.87.197.5 - Port:
21 - Username:
www - Password:
123123
Extracted
Protocol: ftp- Host:
190.106.78.94 - Port:
21 - Username:
www - Password:
www2018
Extracted
Protocol: ftp- Host:
185.236.137.246 - Port:
21 - Username:
www - Password:
www2017
Extracted
Protocol: ftp- Host:
77.87.197.5 - Port:
21 - Username:
www - Password:
123
Extracted
Protocol: ftp- Host:
60.43.227.64 - Port:
21 - Username:
www - Password:
www!
Extracted
Protocol: ftp- Host:
77.87.197.5 - Port:
21 - Username:
www - Password:
pass1234
Extracted
Protocol: ftp- Host:
77.87.197.5 - Port:
21 - Username:
www - Password:
www
Extracted
Protocol: ftp- Host:
76.191.114.32 - Port:
21 - Username:
www - Password:
password
Extracted
Protocol: ftp- Host:
77.87.197.5 - Port:
21 - Username:
www - Password:
wwwwww
Extracted
Protocol: ftp- Host:
76.191.114.32 - Port:
21 - Username:
www - Password:
root
Extracted
Protocol: ftp- Host:
77.87.197.5 - Port:
21 - Username:
www - Password:
www1
Extracted
Protocol: ftp- Host:
190.106.78.94 - Port:
21 - Username:
www - Password:
p@ssw0rd
Extracted
Protocol: ftp- Host:
76.191.114.32 - Port:
21 - Username:
www - Password:
123123
Extracted
Protocol: ftp- Host:
77.87.197.5 - Port:
21 - Username:
www - Password:
www123
Extracted
Protocol: ftp- Host:
185.236.137.246 - Port:
21 - Username:
www - Password:
666666
Extracted
Protocol: ftp- Host:
77.87.197.5 - Port:
21 - Username:
www - Password:
www2016
Extracted
Protocol: ftp- Host:
60.43.227.64 - Port:
21 - Username:
www
Extracted
Protocol: ftp- Host:
77.87.197.5 - Port:
21 - Username:
www - Password:
www2015
Extracted
Protocol: ftp- Host:
77.87.197.5 - Port:
21 - Username:
www - Password:
www!
Extracted
Protocol: ftp- Host:
77.87.197.5 - Port:
21 - Username:
www
Extracted
Protocol: ftp- Host:
76.191.114.32 - Port:
21 - Username:
www - Password:
123
Extracted
Protocol: ftp- Host:
77.87.197.5 - Port:
21 - Username:
www - Password:
P@ssw0rd!!
Extracted
Protocol: ftp- Host:
190.106.78.94 - Port:
21 - Username:
www - Password:
p@55w0rd
Extracted
Protocol: ftp- Host:
77.87.197.5 - Port:
21 - Username:
www - Password:
qwa123
Extracted
Protocol: ftp- Host:
76.191.114.32 - Port:
21 - Username:
www - Password:
pass1234
Extracted
Protocol: ftp- Host:
185.236.137.246 - Port:
21 - Username:
www - Password:
woaini
Extracted
Protocol: ftp- Host:
60.43.227.64 - Port:
21 - Username:
www - Password:
P@ssw0rd!!
Extracted
Protocol: ftp- Host:
190.106.78.94 - Port:
21 - Username:
www - Password:
password!
Extracted
Protocol: ftp- Host:
76.191.114.32 - Port:
21 - Username:
www - Password:
www
Extracted
Protocol: ftp- Host:
77.87.197.5 - Port:
21 - Username:
www - Password:
12345678
Extracted
Protocol: ftp- Host:
185.236.137.246 - Port:
21 - Username:
www - Password:
fuckyou
Extracted
Protocol: ftp- Host:
77.87.197.5 - Port:
21 - Username:
www - Password:
test
Extracted
Protocol: ftp- Host:
76.191.114.32 - Port:
21 - Username:
www - Password:
wwwwww
Extracted
Protocol: ftp- Host:
77.87.197.5 - Port:
21 - Username:
www - Password:
123qwe!@#
Extracted
Protocol: ftp- Host:
77.87.197.5 - Port:
21 - Username:
www - Password:
123456789
Extracted
Protocol: ftp- Host:
190.106.78.94 - Port:
21 - Username:
www - Password:
p@ssw0rd!
Extracted
Protocol: ftp- Host:
76.191.114.32 - Port:
21 - Username:
www - Password:
www1
Extracted
Protocol: ftp- Host:
60.43.227.64 - Port:
21 - Username:
www - Password:
qwa123
Extracted
Protocol: ftp- Host:
188.128.197.57 - Port:
21 - Username:
www - Password:
anonymous
Extracted
Protocol: ftp- Host:
188.128.197.57 - Port:
21 - Username:
www - Password:
123456
Extracted
Protocol: ftp- Host:
77.87.197.5 - Port:
21 - Username:
www - Password:
123321
Extracted
Protocol: ftp- Host:
76.191.114.32 - Port:
21 - Username:
www - Password:
www123
Extracted
Protocol: ftp- Host:
188.128.197.57 - Port:
21 - Username:
www - Password:
admin
Extracted
Protocol: ftp- Host:
77.87.197.5 - Port:
21 - Username:
www - Password:
1314520
Extracted
Protocol: ftp- Host:
188.128.197.57 - Port:
21 - Username:
www - Password:
password
Extracted
Protocol: ftp- Host:
77.87.197.5 - Port:
21 - Username:
www - Password:
159357
Extracted
Protocol: ftp- Host:
188.128.197.57 - Port:
21 - Username:
www - Password:
root
Extracted
Protocol: ftp- Host:
77.87.197.5 - Port:
21 - Username:
www - Password:
www2017
Extracted
Protocol: ftp- Host:
188.128.197.57 - Port:
21 - Username:
www - Password:
123123
Extracted
Protocol: ftp- Host:
77.87.197.5 - Port:
21 - Username:
www - Password:
666666
Extracted
Protocol: ftp- Host:
185.236.137.246 - Port:
21 - Username:
www - Password:
000000
Extracted
Protocol: ftp- Host:
76.191.114.32 - Port:
21 - Username:
www - Password:
www2016
Extracted
Protocol: ftp- Host:
188.128.197.57 - Port:
21 - Username:
www - Password:
123
Extracted
Protocol: ftp- Host:
190.106.78.94 - Port:
21 - Username:
www - Password:
password1
Extracted
Protocol: ftp- Host:
77.87.197.5 - Port:
21 - Username:
www - Password:
woaini
Extracted
Protocol: ftp- Host:
188.128.197.57 - Port:
21 - Username:
www - Password:
pass1234
Extracted
Protocol: ftp- Host:
188.128.197.57 - Port:
21 - Username:
www - Password:
www
Extracted
Protocol: ftp- Host:
188.128.197.57 - Port:
21 - Username:
www - Password:
wwwwww
Extracted
Protocol: ftp- Host:
60.43.227.64 - Port:
21 - Username:
www - Password:
12345678
Extracted
Protocol: ftp- Host:
77.87.197.5 - Port:
21 - Username:
www - Password:
fuckyou
Extracted
Protocol: ftp- Host:
77.87.197.5 - Port:
21 - Username:
www - Password:
000000
Extracted
Protocol: ftp- Host:
76.191.114.32 - Port:
21 - Username:
www - Password:
www2015
Extracted
Protocol: ftp- Host:
77.87.197.5 - Port:
21 - Username:
www - Password:
1234567890
Extracted
Protocol: ftp- Host:
190.106.78.94 - Port:
21 - Username:
www - Password:
r00t
Extracted
Protocol: ftp- Host:
77.87.197.5 - Port:
21 - Username:
www - Password:
8888888
Extracted
Protocol: ftp- Host:
76.191.114.32 - Port:
21 - Username:
www - Password:
www!
Extracted
Protocol: ftp- Host:
77.87.197.5 - Port:
21 - Username:
www - Password:
qwerty
Extracted
Protocol: ftp- Host:
185.236.137.246 - Port:
21 - Username:
www - Password:
1234567890
Extracted
Protocol: ftp- Host:
77.87.197.5 - Port:
21 - Username:
www - Password:
1qaz2wsx
Extracted
Protocol: ftp- Host:
76.191.114.32 - Port:
21 - Username:
www
Extracted
Protocol: ftp- Host:
77.87.197.5 - Port:
21 - Username:
www - Password:
abc123
Extracted
Protocol: ftp- Host:
77.87.197.5 - Port:
21 - Username:
www - Password:
abc123456
Extracted
Protocol: ftp- Host:
76.191.114.32 - Port:
21 - Username:
www - Password:
P@ssw0rd!!
Extracted
Protocol: ftp- Host:
77.87.197.5 - Port:
21 - Username:
www - Password:
1q2w3e4r
Extracted
Protocol: ftp- Host:
77.87.197.5 - Port:
21 - Username:
www - Password:
123qwe
Extracted
Protocol: ftp- Host:
60.43.227.64 - Port:
21 - Username:
www - Password:
test
Extracted
Protocol: ftp- Host:
76.191.114.32 - Port:
21 - Username:
www - Password:
qwa123
Extracted
Protocol: ftp- Host:
190.106.78.94 - Port:
21 - Username:
www - Password:
tomcat
Extracted
Protocol: ftp- Host:
77.87.197.5 - Port:
21 - Username:
www - Password:
www2019
Extracted
Protocol: ftp- Host:
77.87.197.5 - Port:
21 - Username:
www - Password:
www2018
Extracted
Protocol: ftp- Host:
76.191.114.32 - Port:
21 - Username:
www - Password:
12345678
Extracted
Protocol: ftp- Host:
77.87.197.5 - Port:
21 - Username:
www - Password:
p@ssw0rd
Extracted
Protocol: ftp- Host:
208.113.155.170 - Port:
21 - Username:
www - Password:
anonymous
Extracted
Protocol: ftp- Host:
208.113.155.170 - Port:
21 - Username:
www - Password:
123456
Extracted
Protocol: ftp- Host:
208.113.155.170 - Port:
21 - Username:
www - Password:
admin
Extracted
Protocol: ftp- Host:
208.113.155.170 - Port:
21 - Username:
www - Password:
password
Extracted
Protocol: ftp- Host:
208.113.155.170 - Port:
21 - Username:
www - Password:
root
Extracted
Protocol: ftp- Host:
208.113.155.170 - Port:
21 - Username:
www - Password:
123123
Extracted
Protocol: ftp- Host:
208.113.155.170 - Port:
21 - Username:
www - Password:
123
Extracted
Protocol: ftp- Host:
208.113.155.170 - Port:
21 - Username:
www - Password:
pass1234
Extracted
Protocol: ftp- Host:
208.113.155.170 - Port:
21 - Username:
www - Password:
www
Extracted
Protocol: ftp- Host:
208.113.155.170 - Port:
21 - Username:
www - Password:
wwwwww
Extracted
Protocol: ftp- Host:
208.113.155.170 - Port:
21 - Username:
www - Password:
www1
Extracted
Protocol: ftp- Host:
208.113.155.170 - Port:
21 - Username:
www - Password:
www123
Extracted
Protocol: ftp- Host:
208.113.155.170 - Port:
21 - Username:
www - Password:
www2016
Extracted
Protocol: ftp- Host:
208.113.155.170 - Port:
21 - Username:
www - Password:
www2015
Extracted
Protocol: ftp- Host:
103.243.131.163 - Port:
21 - Username:
www - Password:
anonymous
Extracted
Protocol: ftp- Host:
208.113.155.170 - Port:
21 - Username:
www - Password:
www!
Extracted
Protocol: ftp- Host:
208.113.155.170 - Port:
21 - Username:
www
Extracted
Protocol: ftp- Host:
208.113.155.170 - Port:
21 - Username:
www - Password:
P@ssw0rd!!
Extracted
Protocol: ftp- Host:
208.113.155.170 - Port:
21 - Username:
www - Password:
qwa123
Extracted
Protocol: ftp- Host:
208.113.155.170 - Port:
21 - Username:
www - Password:
12345678
Extracted
Protocol: ftp- Host:
208.113.155.170 - Port:
21 - Username:
www - Password:
test
Extracted
Protocol: ftp- Host:
208.113.155.170 - Port:
21 - Username:
www - Password:
123qwe!@#
Extracted
Protocol: ftp- Host:
208.113.155.170 - Port:
21 - Username:
www - Password:
123456789
Extracted
Protocol: ftp- Host:
208.113.155.170 - Port:
21 - Username:
www - Password:
123321
Extracted
Protocol: ftp- Host:
208.113.155.170 - Port:
21 - Username:
www - Password:
1314520
Extracted
Protocol: ftp- Host:
208.113.155.170 - Port:
21 - Username:
www - Password:
159357
Extracted
Protocol: ftp- Host:
208.113.155.170 - Port:
21 - Username:
www - Password:
www2017
Extracted
Protocol: ftp- Host:
208.113.155.170 - Port:
21 - Username:
www - Password:
666666
Extracted
Protocol: ftp- Host:
208.113.155.170 - Port:
21 - Username:
www - Password:
woaini
Extracted
Protocol: ftp- Host:
208.113.155.170 - Port:
21 - Username:
www - Password:
fuckyou
Extracted
Protocol: ftp- Host:
208.113.155.170 - Port:
21 - Username:
www - Password:
000000
Extracted
Protocol: ftp- Host:
45.95.12.21 - Port:
21 - Username:
www - Password:
anonymous
Extracted
Protocol: ftp- Host:
208.113.155.170 - Port:
21 - Username:
www - Password:
1234567890
Extracted
Protocol: ftp- Host:
208.113.155.170 - Port:
21 - Username:
www - Password:
8888888
Extracted
Protocol: ftp- Host:
208.113.155.170 - Port:
21 - Username:
www - Password:
qwerty
Extracted
Protocol: ftp- Host:
208.113.155.170 - Port:
21 - Username:
www - Password:
1qaz2wsx
Extracted
Protocol: ftp- Host:
208.113.155.170 - Port:
21 - Username:
www - Password:
abc123
Extracted
Protocol: ftp- Host:
208.113.155.170 - Port:
21 - Username:
www - Password:
abc123456
Extracted
Protocol: ftp- Host:
208.113.155.170 - Port:
21 - Username:
www - Password:
1q2w3e4r
Extracted
Protocol: ftp- Host:
208.113.155.170 - Port:
21 - Username:
www - Password:
123qwe
Extracted
Protocol: ftp- Host:
208.113.155.170 - Port:
21 - Username:
www - Password:
www2019
Extracted
Protocol: ftp- Host:
208.113.155.170 - Port:
21 - Username:
www - Password:
www2018
Extracted
Protocol: ftp- Host:
208.113.155.170 - Port:
21 - Username:
www - Password:
p@ssw0rd
Extracted
Protocol: ftp- Host:
208.113.155.170 - Port:
21 - Username:
www - Password:
p@55w0rd
Extracted
Protocol: ftp- Host:
208.113.155.170 - Port:
21 - Username:
www - Password:
password!
Extracted
Protocol: ftp- Host:
208.113.155.170 - Port:
21 - Username:
www - Password:
p@ssw0rd!
Extracted
Protocol: ftp- Host:
208.113.155.170 - Port:
21 - Username:
www - Password:
password1
Extracted
Protocol: ftp- Host:
154.203.101.196 - Port:
21 - Username:
www - Password:
anonymous
Extracted
Protocol: ftp- Host:
208.113.155.170 - Port:
21 - Username:
www - Password:
r00t
Extracted
Protocol: ftp- Host:
208.113.155.170 - Port:
21 - Username:
www - Password:
tomcat
Extracted
Protocol: ftp- Host:
208.113.155.170 - Port:
21 - Username:
www - Password:
5201314
Extracted
Protocol: ftp- Host:
208.113.155.170 - Port:
21 - Username:
www - Password:
system
Extracted
Protocol: ftp- Host:
208.113.155.170 - Port:
21 - Username:
www - Password:
pass
Extracted
Protocol: ftp- Host:
208.113.155.170 - Port:
21 - Username:
www - Password:
1234
Extracted
Protocol: ftp- Host:
83.223.79.60 - Port:
21 - Username:
www
Extracted
Protocol: ftp- Host:
83.223.79.60 - Port:
21 - Username:
anonymous
Extracted
Protocol: ftp- Host:
156.240.25.139 - Port:
21 - Username:
www - Password:
anonymous
Extracted
Protocol: ftp- Host:
141.164.51.247 - Port:
21 - Username:
www - Password:
anonymous
Extracted
Protocol: ftp- Host:
141.164.51.247 - Port:
21 - Username:
www - Password:
123456
Extracted
Protocol: ftp- Host:
141.164.51.247 - Port:
21 - Username:
www - Password:
admin
Extracted
Protocol: ftp- Host:
141.164.51.247 - Port:
21 - Username:
www - Password:
password
Extracted
Protocol: ftp- Host:
141.164.51.247 - Port:
21 - Username:
www - Password:
root
Extracted
Protocol: ftp- Host:
221.143.48.201 - Port:
21 - Username:
www - Password:
anonymous
Extracted
Protocol: ftp- Host:
216.92.147.207 - Port:
21 - Username:
www - Password:
anonymous
Extracted
Protocol: ftp- Host:
157.25.140.146 - Port:
21 - Username:
www - Password:
anonymous
Extracted
Protocol: ftp- Host:
103.94.240.140 - Port:
21 - Username:
www - Password:
anonymous
Extracted
Protocol: ftp- Host:
83.223.79.60 - Port:
21 - Username:
admin
Extracted
Protocol: ftp- Host:
43.239.249.206 - Port:
21 - Username:
www - Password:
anonymous
Extracted
Protocol: ftp- Host:
83.223.79.60 - Port:
21 - Username:
Admin
Extracted
Protocol: ftp- Host:
43.239.249.206 - Port:
21 - Username:
www - Password:
123456
Extracted
Protocol: ftp- Host:
38.238.215.170 - Port:
21 - Username:
www - Password:
anonymous
Extracted
Protocol: ftp- Host:
43.239.249.206 - Port:
21 - Username:
www - Password:
admin
Extracted
Protocol: ftp- Host:
43.239.249.206 - Port:
21 - Username:
www - Password:
password
Extracted
Protocol: ftp- Host:
209.140.21.136 - Port:
21 - Username:
www - Password:
anonymous
Extracted
Protocol: ftp- Host:
159.223.69.228 - Port:
21 - Username:
www - Password:
anonymous
Extracted
Protocol: ftp- Host:
43.239.249.206 - Port:
21 - Username:
www - Password:
root
Extracted
Protocol: ftp- Host:
43.239.249.206 - Port:
21 - Username:
www - Password:
123123
Extracted
Protocol: ftp- Host:
107.149.104.21 - Port:
21 - Username:
www - Password:
anonymous
Extracted
Protocol: ftp- Host:
89.161.191.125 - Port:
21 - Username:
www - Password:
anonymous
Extracted
Protocol: ftp- Host:
102.134.35.141 - Port:
21 - Username:
www - Password:
anonymous
Extracted
Protocol: ftp- Host:
89.161.191.125 - Port:
21 - Username:
www - Password:
123456
Extracted
Protocol: ftp- Host:
89.161.191.125 - Port:
21 - Username:
www - Password:
admin
Extracted
Protocol: ftp- Host:
107.149.104.21 - Port:
21 - Username:
www - Password:
123456
Extracted
Protocol: ftp- Host:
102.134.35.141 - Port:
21 - Username:
www - Password:
123456
Extracted
Protocol: ftp- Host:
89.161.191.125 - Port:
21 - Username:
www - Password:
password
Extracted
Protocol: ftp- Host:
89.161.191.125 - Port:
21 - Username:
www - Password:
root
Extracted
Protocol: ftp- Host:
107.149.104.21 - Port:
21 - Username:
www - Password:
admin
Extracted
Protocol: ftp- Host:
102.134.35.141 - Port:
21 - Username:
www - Password:
admin
Extracted
Protocol: ftp- Host:
89.161.191.125 - Port:
21 - Username:
www - Password:
123123
Extracted
Protocol: ftp- Host:
89.161.191.125 - Port:
21 - Username:
www - Password:
123
Extracted
Protocol: ftp- Host:
107.149.104.21 - Port:
21 - Username:
www - Password:
password
Extracted
Protocol: ftp- Host:
102.134.35.141 - Port:
21 - Username:
www - Password:
password
Extracted
Protocol: ftp- Host:
89.161.191.125 - Port:
21 - Username:
www - Password:
pass1234
Extracted
Protocol: ftp- Host:
89.161.191.125 - Port:
21 - Username:
www
Targets
-
-
Target
AV-2.scr
-
Size
5.9MB
-
MD5
ca1fb1ad30189110cc225620dc537368
-
SHA1
bfc2de8f0b376a6f1ff1930a4f261709a27e92ec
-
SHA256
3fde84a46aea58ba4ddb5fb0473fc756ff209ba96b1a63a2759d13b8adc01a69
-
SHA512
11737f00ac297040b40cfe6879b695c9900b6b2a691e0b4e12c190ed9918179d0b7a76415d67368d3767f7d357e1c0df202af618964986f72dcbac7bfd5ace17
-
SSDEEP
98304:RLNSThOfTCiFBXmfFs+JhTpCVoR8oMEOJ6Ty3RvX+A0eVObApY:bBfTCiUsBVSLOJgyBG3KTp
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
XMRig Miner payload
-
Contacts a large (1466) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Modifies Windows Firewall
-
Registers new Print Monitor
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Executes dropped EXE
-
Loads dropped DLL
-
-
-
Target
ftpcrack.pyc
-
Size
32KB
-
MD5
1e0549b7106e9085964955099e5efd56
-
SHA1
03b04da2206eb8b101d886a61c0919973e4edd14
-
SHA256
c6b61e1c3eea026b3891661cf1e947bf55bdcc351058dbac36df92c0f541fd2a
-
SHA512
8ff93bc7b31fd7c577acb5300c9f3801b36cb28aa4179bc1af5e5feb17e9a0eb8fd28e005747409611872eca6f282ead9f738dda0934085844aa61d991a0c953
-
SSDEEP
768:tV24RMymk8c+Tga2TgRt1dlbI06UGxLPi2QvYHMTsFocaLbReaDjuP:tV249mPzg9TgpdlbI0OFPrQvYsgFocaE
Score3/10 -
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Defense Evasion
Impair Defenses
1Disable or Modify System Firewall
1Modify Registry
1