Overview

overview

3

Static

static

3

houduan/App.ps1

windows7-x64

1

houduan/App.ps1

windows10-2004-x64

1

SDK/epayapi.html

windows7-x64

1

SDK/epayapi.html

windows10-2004-x64

1

epayapi.html

windows7-x64

1

epayapi.html

windows10-2004-x64

1

houduan/SD...i.html

windows7-x64

1

houduan/SD...i.html

windows10-2004-x64

1

houduan/app/App.ps1

windows7-x64

1

houduan/app/App.ps1

windows10-2004-x64

1

houduan/ap...x.html

windows7-x64

1

houduan/ap...x.html

windows10-2004-x64

1

houduan/ap...tor.js

windows7-x64

1

houduan/ap...tor.js

windows10-2004-x64

1

houduan/ap...dex.js

windows7-x64

1

houduan/ap...dex.js

windows10-2004-x64

1

houduan/ap...orm.js

windows7-x64

1

houduan/ap...orm.js

windows10-2004-x64

1

houduan/ap...int.js

windows7-x64

1

houduan/ap...int.js

windows10-2004-x64

1

houduan/ap...jsv.js

windows7-x64

1

houduan/ap...jsv.js

windows10-2004-x64

1

houduan/as...min.js

windows7-x64

1

houduan/as...min.js

windows10-2004-x64

1

houduan/as...min.js

windows7-x64

1

houduan/as...min.js

windows10-2004-x64

1

houduan/as...2.0.js

windows7-x64

1

houduan/as...2.0.js

windows10-2004-x64

1

houduan/as...log.js

windows7-x64

1

houduan/as...log.js

windows10-2004-x64

1

houduan/as...min.js

windows7-x64

1

houduan/as...min.js

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c55179e27258d8b7e77cdebf32980c4f3a28f66288f3cbd5d0b155ad5251c998

  • Size

    5.5MB

  • Sample

    240222-mlpwbsfg6x

  • MD5

    db76c3b3c5b2f82d9e5b11daab8bf08a

  • SHA1

    4208acdc179cb82a0bee7dc76f381dee509973f2

  • SHA256

    c55179e27258d8b7e77cdebf32980c4f3a28f66288f3cbd5d0b155ad5251c998

  • SHA512

    f3231b22efe4f40302fd2f82633572befadfb438c10d301b3d8ec13076605f6ef9de8b2d7e7878f89df84e63dc6fa6cf9c9dfe48f6616b61da74afe620183891

  • SSDEEP

    98304:tD1Pd+Gg52m3wV9AXPajFxKIp9RW4dO0LmNo4cMoC9TtxHni:xR8Gg52mRyxcu7W4A0LmW4Fni

Score
3/10
linkqr

Malware Config

Targets

    • Target

      houduan/App.php

    • Size

      17KB

    • MD5

      d12aad5e082dda67c1bcdd6eb67561b5

    • SHA1

      bc02bbfda427daccbf43a94baa28c8879bea9e71

    • SHA256

      e53869177b59aa892a947e1a5db909db58d22eb193c0de8fef835a6c57d47a14

    • SHA512

      5a8b16b1197823379563aede4f5e09741dac57bdae65feae57ca9f4061d41e3b4ed4a439f483d3fb8119ab020c8b20758fdaeb60c50300dae1b5fc72bd6df002

    • SSDEEP

      384:Fc5e2DkYdySttksiC1/iZM5EVC/vkMYVh7M:Fc5e5YdyStmLC1/iZ0EVC/vkMYbI

    Score
    1/10
    behavioral1behavioral2

    • Target

      SDK/epayapi.php

    • Size

      1KB

    • MD5

      7b067a685bd2e6c8bebb29aec7804ada

    • SHA1

      ea0ca8e55f6224cbc61dee330318cb62d0d3ec79

    • SHA256

      bd2c7346284fa906979ea0fa0e7e08afdd7b2af4ae7827042320c3fe0ae36411

    • SHA512

      aafdf5b4c7101c1bff199afd13ba7b7aa75d835e8d58c5a4bf64bfa95d91e4a5e37db0510231e72d1cc0c424179bab67f7707419d0f28feb4b9ddd3c0c00b9c6

    Score
    1/10
    behavioral3behavioral4

    • Target

      epayapi.php

    • Size

      1KB

    • MD5

      7b067a685bd2e6c8bebb29aec7804ada

    • SHA1

      ea0ca8e55f6224cbc61dee330318cb62d0d3ec79

    • SHA256

      bd2c7346284fa906979ea0fa0e7e08afdd7b2af4ae7827042320c3fe0ae36411

    • SHA512

      aafdf5b4c7101c1bff199afd13ba7b7aa75d835e8d58c5a4bf64bfa95d91e4a5e37db0510231e72d1cc0c424179bab67f7707419d0f28feb4b9ddd3c0c00b9c6

    Score
    1/10
    behavioral5behavioral6

    • Target

      houduan/SDK/epayapi.php

    • Size

      1KB

    • MD5

      7b067a685bd2e6c8bebb29aec7804ada

    • SHA1

      ea0ca8e55f6224cbc61dee330318cb62d0d3ec79

    • SHA256

      bd2c7346284fa906979ea0fa0e7e08afdd7b2af4ae7827042320c3fe0ae36411

    • SHA512

      aafdf5b4c7101c1bff199afd13ba7b7aa75d835e8d58c5a4bf64bfa95d91e4a5e37db0510231e72d1cc0c424179bab67f7707419d0f28feb4b9ddd3c0c00b9c6

    Score
    1/10
    behavioral7behavioral8

    • Target

      houduan/app/App.php

    • Size

      17KB

    • MD5

      ddb843d67d8fd1f1fe260e3c384d5966

    • SHA1

      0321a04cbc78a20ed9a121706d8329433073e410

    • SHA256

      2aafe6056f37cc5020d9b488f4b0b7c319e8ae8163b98bedc5aa464d382b8746

    • SHA512

      f7cf7f6f128b4996a44642b53250e1f5947659d0e01c306078615c8a68f5d3a9f7af9946b0a543f6c0b30e7701da65671eacd9d8fddc9dd165c631508b3ce54f

    • SSDEEP

      384:8cIRfzVqbLWiH5poto3yOiMJ9d9/yCTNEwr0dOq:8cIRLVqbLW05ato3yOiI9d9/yCTNEwru

    Score
    1/10
    behavioral10behavioral9

    • Target

      houduan/app/index.html

    • Size

      3KB

    • MD5

      6ebd47891799326867ee297d82cdbc45

    • SHA1

      2552eb64ced970460fe76c1e2ddb7cec3b48bcd9

    • SHA256

      c0ae90dd9dd5989081247e8ae295f033f0d34653ac05df1c6617404a51f2a73f

    • SHA512

      6c62ed51ab0172682d4e1d3a57051452e1155c6892e1064fe25ff9796b131d6c1f3a9cd7fddfb82056e660ba25f63ca481ece1ce65961d5a2dc3270690d308cb

    Score
    1/10
    behavioral11behavioral12

    • Target

      houduan/app/static/editor.js

    • Size

      31KB

    • MD5

      9e79871ca04d34ab740560933ff12838

    • SHA1

      648e1e715869511c1ddafad4e11f4cb88a5902ab

    • SHA256

      30cf60081298b312c3aed5b51961e63a399f8f6fd581eb183bc9e6bd2724a97c

    • SHA512

      e74015a3e59ab12a253aa94bb636ada0da64cf839d64983df36b2b4582595625cad7eeac22ed5aa6971e230bb407d492cb07b004b8d7b154591f520d4ed7402f

    • SSDEEP

      768:T+TL396P2jzi4yBSZm+KnKyDDSNlr6OnlJlplElflElilQlClpl+v7mVIBMW0M1Q:o96eHif4VTlr6OnlJlplElflElilQlCT

    Score
    1/10
    behavioral13behavioral14

    • Target

      houduan/app/static/index.js

    • Size

      6KB

    • MD5

      d306e33a20d529c1d68d25457c023cb5

    • SHA1

      28f5a498b943b60603af5c100aa70cdc49f4d277

    • SHA256

      c8c004f8038dbb798e4ec1b5ba754d426f22eee0d0bc8b01c4c23364229ec29b

    • SHA512

      8785fe7c843a4ae8d15a7e6c9bb9f2dd01f7936339ff7fa03a94d7d6d3dca554957ed8757a30e5ed0a999137dd50ed745a46b434f51358b7e139d9ad6b219ec6

    • SSDEEP

      192:rHyf3jydS0/6tbOk4wM0jxi0QxXNEJLVkFUJW0JN1ZqBQOedq99nBv:Gbr5OiM0jxi0+XNEJLVkFUJWshqW09Fp

    Score
    1/10
    behavioral15behavioral16

    • Target

      houduan/app/static/jsonform.js

    • Size

      357KB

    • MD5

      7414fb4b0263a546dcae042db06591a2

    • SHA1

      34b8937934efa8a23cd31ac3b7042fac54f839bf

    • SHA256

      2449d2dd821bdf76d8d5badfcc2a22a2aa0384f9446d92497fd711253673f1a7

    • SHA512

      b1731f64984b8a305190a065d593f0b9ca551914b457e408be4c87db60f338b01a3aef41f9c228fae9834c95531d7440d0dab80916805c9f1281c70b6090a91f

    • SSDEEP

      6144:d4bqCQI+r7PUK3rMyFoXGPrt7nonZ0Y/10/phpIa3JihcqzyCreaLOaCA:6agCFoXGPrt7nonZ0Y/10/phpIa5ihcy

    Score
    1/10
    behavioral17behavioral18

    • Target

      houduan/app/static/jsonlint.js

    • Size

      46KB

    • MD5

      aadc43e2b442f233379e337b265a0bb0

    • SHA1

      9dd53b545da8b0a37e146a58f7a50e03f702716e

    • SHA256

      433043b502d8cf92ef8f0ef2043fdd91b57433878ad2657720b4842cc85b7631

    • SHA512

      3f359eab0b846e02e200da380b322af83d69286a6e967eb28f92cb265bf50ad1e015bd153197906b31ec1b5745968c5da98b51fcdb83710514d061a3be7bb0ea

    • SSDEEP

      768:BwdtuHe6+OCGOtrz1ejQ/mAaxtJXR3MtvAyuvwkfuH9aWl4ThXECEX7CCPBjnuUm:BoXQlOVks+bx4ow93TsrQWtgXzXbobbp

    Score
    1/10
    behavioral19behavioral20

    • Target

      houduan/app/static/jsv.js

    • Size

      282KB

    • MD5

      e6488036c7f78c266115f2d862d87c5e

    • SHA1

      25e224da5ad5af9e92ae255d47602c12c7a4ae5f

    • SHA256

      27b2666f16f1f8bddc0784cd5b77044337a020ee62382da61eb6fc20862c2c0e

    • SHA512

      739cf2010bdba7b1140ca87086aa4f7e44d0632dfb8b966891e4bdfa167650074ae7852c8ba10b439b26bbb224a4a9acc22b7a0f261c9b4a3126cebcd8db2e03

    • SSDEEP

      3072:Jo49TB8iamguiEh2ho9eBuaN4ciZ1Cxz0e/HFrrs6KsRLFSwi0rE21L50qaJzrC6:e4Jh26kN4ciZUxz0eKXkxnaFCigIn+I

    Score
    1/10
    behavioral21behavioral22

    • Target

      houduan/assets/js/app.min.js

    • Size

      410KB

    • MD5

      0ebc381f20bbafcfc0b759c3394e6d1a

    • SHA1

      00189c9638ce9f13b40ffb6157eb427a3c6e6521

    • SHA256

      6017b1b9e975809708f2eaf0e1df955881ff91514d6f61657b2383095915a826

    • SHA512

      03e135f026d887f578866ce49277a2e7cf9444aa9a0696c05ba09b9472c101e005b4af0e4daf9fb15aa8780ee5f6c9fb823e05327a9eb5670ba03d6ed7fb78d2

    • SSDEEP

      6144:/7Em21EnuFsq0YyrO4h6ZQB0kp8FqJsTglmWm3w:wZEnufSO4H8Gyg

    Score
    1/10
    behavioral23behavioral24

    • Target

      houduan/assets/js/eruyi.min.js

    • Size

      56KB

    • MD5

      9b6f5f661b6736c1fbc491ef72635bdd

    • SHA1

      f4ec757b9c3742353ab877c7118f723dfe06d546

    • SHA256

      e23d20929e1341fee7ec6c0cd3aa4da7142144827832b03b7667fb50b9879b08

    • SHA512

      c4e7754c6426842781d19b52f5491bf5abe1d876d779097f7f7ec469a7ac18702a9d6c983e76573f2582836bfd4390320f0435e7ee3846d44b1b410c0b9f6a7c

    • SSDEEP

      768:gYyDyKAmHVaS3m3Dqp0NwCkXDtdFDLmTV+miDNJcJiQMRqyPiYtB6UvcCg8YGj:gTKktDLmTF8yJL45XtHjoGj

    Score
    1/10
    behavioral25behavioral26

    • Target

      houduan/assets/js/inpitassembly-2.0.js

    • Size

      7KB

    • MD5

      f30d78e2cd91760ac179ffc2cb7c8346

    • SHA1

      e668632d0c6e85f38c654af27994adb2007a039c

    • SHA256

      525aeeb7cdb19fa4d9499b10fc9f4e84d96dc7104a3540757ad42ffa3134dafb

    • SHA512

      bf274e9d16a091276c5491151e8aec718adf08e93871cfcababb1d29382447f3c3873c32b6bac5e542aae16649f2c63f95c47b546413847f6545079efbb28e75

    • SSDEEP

      96:DlNFnpZcWGxpLdTkha8V98m3+V9jcO0dnABmFo+tvNvAXRKJBqszxB7h/i2Y0nqb:LFrcJdQHV98a9O2n42BRNvKRK+sjRSH

    Score
    1/10
    behavioral27behavioral28

    • Target

      houduan/assets/js/modal_dialog.js

    • Size

      25KB

    • MD5

      427bab0fab6f0c53f8dbc77c236823fb

    • SHA1

      99f78f32f05403a680eb8d6218572329a224b34e

    • SHA256

      91618e6a5dc680cf131261b0f6f5a2fd9cad921ccef03260017d5f83eaf96145

    • SHA512

      8655087e3387c8ecb0dfd7618d976549e21befc2c9d346675a8d3f08adc795bb52cddafcdc37a2fc2d60687a4c58d6344a2cec362046f579b5f28ade193aed95

    • SSDEEP

      384:uhmFy3PO4SXGjyj7mS1cZamTK7g3lg5i1SWu9CVgPq0yaTaZTt3TX5V:uAF5GjynKZrK7ge5ixu9CVgv0

    Score
    1/10
    behavioral29behavioral30

    • Target

      houduan/assets/js/vendor/Chart.bundle.min.js

    • Size

      204KB

    • MD5

      4e23fc8f69ed173d51c5b9643a84e69e

    • SHA1

      e537f392106cc7de861a2b733fa8f0b3d30f6677

    • SHA256

      51f25399918585022ca28c0a46c83a98fa8a6366f1863a7caa83a97561f04e9f

    • SHA512

      d2819078eefdc49f88021ead7edc73f5ff7ed72c8ea348f47d3f2b754164a3936133f663cae463e15ecfeceb25311e2b99e364f68dd5b5c6c26fda93508f9662

    • SSDEEP

      3072:Ys0dvJYobHHX08JM0BHmgudcHc6+T4Ak0VwVJ:Ys0dvJYobHHX08JM0UpdcH71

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks