Overview

overview

3

Static

static

3

aynews/AyN...er.asp

windows7-x64

3

aynews/AyN...er.asp

windows10-2004-x64

3

aynews/AyN...dd.asp

windows7-x64

3

aynews/AyN...dd.asp

windows10-2004-x64

3

aynews/AyN...wd.asp

windows7-x64

3

aynews/AyN...wd.asp

windows10-2004-x64

3

aynews/AyN...ce.asp

windows7-x64

3

aynews/AyN...ce.asp

windows10-2004-x64

3

aynews/AyN...dd.asp

windows7-x64

3

aynews/AyN...dd.asp

windows10-2004-x64

3

aynews/AyN...le.asp

windows7-x64

3

aynews/AyN...le.asp

windows10-2004-x64

3

aynews/AyN...nt.asp

windows7-x64

3

aynews/AyN...nt.asp

windows10-2004-x64

3

aynews/AyN...ID.asp

windows7-x64

3

aynews/AyN...ID.asp

windows10-2004-x64

3

aynews/AyN...er.asp

windows7-x64

3

aynews/AyN...er.asp

windows10-2004-x64

3

aynews/AyN...dd.asp

windows7-x64

3

aynews/AyN...dd.asp

windows10-2004-x64

3

aynews/AyN...st.asp

windows7-x64

3

aynews/AyN...st.asp

windows10-2004-x64

3

aynews/AyN...le.asp

windows7-x64

3

aynews/AyN...le.asp

windows10-2004-x64

3

aynews/AyN...al.asp

windows7-x64

3

aynews/AyN...al.asp

windows10-2004-x64

3

aynews/AyN...BS.asp

windows7-x64

3

aynews/AyN...BS.asp

windows10-2004-x64

3

aynews/AyN...te.asp

windows7-x64

3

aynews/AyN...te.asp

windows10-2004-x64

3

aynews/AyN...nk.asp

windows7-x64

3

aynews/AyN...nk.asp

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    b766c2cca2a564d71338ddd9bf46f072

  • Size

    1.1MB

  • Sample

    240306-pm5z2sbh33

  • MD5

    b766c2cca2a564d71338ddd9bf46f072

  • SHA1

    dedfaa1a807dd1e8e4ea04bb2bce5bd84a362688

  • SHA256

    9616afe6f4dc49a0b17d5f9dc436b7d03621218280408420d607811bf70a8380

  • SHA512

    2d93a855bfcf4eb56563c4c6e438db47aae36968d267ebc829d63382726a28f8db3f36ae75ba975900e13bca51fedb280f5b4c04c02add863d22d87805c00b9a

  • SSDEEP

    24576:EEUNa9z4YSAuPa2zoyxQ5sM0dXzPnr/7Eo7Ebs9zP:Eyz4xDUyxQXsXLr7JJd

Score
3/10

Malware Config

Targets

    • Target

      aynews/AyNews/Admin/Accounts/User.aspx

    • Size

      3KB

    • MD5

      d92ae02af2dbd1f587bc09863bd333bc

    • SHA1

      709a084ff44e7793e7bf7be03d55c1a317012bcf

    • SHA256

      0073c8dc0e6ec024373a238c0b411ba4f346b2530f84e13ab44781e45af80188

    • SHA512

      78bf99f8fec21c86ecd4dcc04dfcf542c64bf800e77e629e2da9fa77bf17e22634cf7ceb9e22cd6d06105a5e5165042c543bc4315d73b67ac7b7d5e8ddd6d38a

    Score
    3/10
    behavioral1behavioral2

    • Target

      aynews/AyNews/Admin/Accounts/User_Add.aspx

    • Size

      2KB

    • MD5

      709dbe8f824fd21e8778c38c495f1802

    • SHA1

      977d24d25c0fb867b33e12f5261032057e19c3ce

    • SHA256

      72769015744217b731a8cf0aeac49b09bf3ed0cd1f7e443f101771803878c3f6

    • SHA512

      258afe4c7d5f5b21764494c8d27cc7ff475bf1bbf0462da74ed6d72b0aa1dc8a80326205654930b4f0feca4dff93196c2f87f7d34668fa0ad7a4b55518d84f43

    Score
    3/10
    behavioral3behavioral4

    • Target

      aynews/AyNews/Admin/Accounts/User_Pwd.aspx

    • Size

      1KB

    • MD5

      36a023d27f3e486bdb0b793e733484a7

    • SHA1

      fca3ce9e29740d9d5a9a1669d18b4d8be0b9a952

    • SHA256

      3b3f73dbdb5c36b19c7a08b09d1f055994eef98472cfa2e35aea112eb32c0413

    • SHA512

      fb5d09bb8f905b75479b84052a2b0f382555cdaf95308d3a85a950756099b04b74a7b15ce8c5c9d48934ab741f578a6e840478271d8168603dd07e192f1a6ca5

    Score
    3/10
    behavioral5behavioral6

    • Target

      aynews/AyNews/Admin/Admin_Announce.aspx

    • Size

      3KB

    • MD5

      3c96dd8d877290aabe6c5ea9386e2979

    • SHA1

      ae7491a8eae99c323795c61ee3a4712a0a703839

    • SHA256

      9ce87a7d603acd2d672d66c0b9ef73850581c3c1e7c07d16635d99ee520bfb9b

    • SHA512

      a77227258142c563d72667f875247d9e8df221f4046547532df10a2a2bc17d88e73e261492dbbba23af800cc8d23ebe9f044be9da14e9c232ca0fc50faec4cd2

    Score
    3/10
    behavioral7behavioral8

    • Target

      aynews/AyNews/Admin/Admin_Announce_Add.aspx

    • Size

      2KB

    • MD5

      07bfbfdc4acd0e521789b1e5d01d20f1

    • SHA1

      89fa58dfc68796cdfb9d5d7be68aa7523374e881

    • SHA256

      b1e96668e2dde9cd629b8b904ad0e7596351a718e4fd57663399eca6081baa15

    • SHA512

      570ad8c52abd30a8115f4b8f8475abbf10b73ae1e4db8d419af7d1ffe2518ceebb5bb4a915d3b36267ee297b0fd2a91a932a3c72e3db7e8ba45cb32958d562b4

    Score
    3/10
    behavioral10behavioral9

    • Target

      aynews/AyNews/Admin/Admin_Article.aspx

    • Size

      4KB

    • MD5

      8c19b73e43e475b2b50515ede3855ad5

    • SHA1

      d5d4d870377be9eae41ce04182d6224b59b23d84

    • SHA256

      731fb266d4a758dee211d582c1f7192f7dbc742a07e5bf120c6b525bdb947208

    • SHA512

      063926db456daed530658e8d51d08c2ad9612e4ea4d91c2ddb016938cdc8f2cbdddf16fcbbd5edb4746244bb0485ef2241dfbae1055bcf348495f50e81356535

    • SSDEEP

      96:9rm7SXgSWqfYT4mTZye35333X3d1o5Pg+5BL:pm3dmYPQQpHnPoy+j

    Score
    3/10
    behavioral11behavioral12

    • Target

      aynews/AyNews/Admin/Admin_Article_Comment.aspx

    • Size

      2KB

    • MD5

      819b2a87c24cb1e62f7657ec4f300b86

    • SHA1

      7bbd183ea2afe7e06b38abe2cfa64b9fd594b56d

    • SHA256

      ab88704058f6b2aacc02d1906576968f422ee5397e038cad996a98f34e8f60ff

    • SHA512

      56d8d657058104934b6adf3a8fe5aec6f3c8a98d4d0ceb1c92cdfe15e58922ac4d9e928315c282525d167e0ab32ef99139adfcdc7c172146d889e779a37edd93

    Score
    3/10
    behavioral13behavioral14

    • Target

      aynews/AyNews/Admin/Admin_Article_CommentByID.aspx

    • Size

      2KB

    • MD5

      7a7f0229fc8058d9c2220d9e8e34c99b

    • SHA1

      6495f128aeed2bfa90d6bfd152eb8cea195b25b5

    • SHA256

      68729fdc17dfd2f1cea1085f1af3079aba1c04454418f77b13ae27eb17c168a8

    • SHA512

      23020e92a3422168d0479f0491fc1f3d9480b238ad0875a82812c94b2f2e867f5346caf7267f4a5a8701c76c78350d42e712c741f6d9d43128b290823c3e5ea3

    Score
    3/10
    behavioral15behavioral16

    • Target

      aynews/AyNews/Admin/Admin_Article_Gather.aspx

    • Size

      2KB

    • MD5

      e46f1ed8c718571536d1834afae19d14

    • SHA1

      0b9b7ec35410fd0c290014dc827aad127b3b5b9e

    • SHA256

      81795aef121cf3a301317badaf41624454b2ee50d013e46b1e10f752f8c965cb

    • SHA512

      64cdd06a04cf2885e33b09a1b75140d1ef9a32f525bc5d0db96ce3a6e48f3bd94c1d455d64e81e74a1253c82ba1cba304d09a0973d60e8c17079d3dda354a68b

    Score
    3/10
    behavioral17behavioral18

    • Target

      aynews/AyNews/Admin/Admin_Article_Gather_Add.aspx

    • Size

      8KB

    • MD5

      23ed85516e5cf6f72dc7eb7337e373fd

    • SHA1

      7636adda19d53048860a3c83773ed52756a3c234

    • SHA256

      73f1cc8f19627e44c4b2ce8460a5b1e666ca48161a1ad6425059e6bd5f7d0085

    • SHA512

      9270b696e3b5ca513ee5b79dc2fec55457afd8d54a526baeeafe260f252cf32efad5e3a9f1c97a13cabedd0289ef3cfe2286ca5f1e782dc91ccc3103b8fa9808

    • SSDEEP

      192:LG4y3wrg1HS/yTXL2T22D2c2n2Vp2gO2O2+2r2L2x2H2N2/Lciny:LXy3wQHS/wXL2T2m2c2n2Vp2r2O2+2rD

    Score
    3/10
    behavioral19behavioral20

    • Target

      aynews/AyNews/Admin/Admin_Article_Gather_List.aspx

    • Size

      2KB

    • MD5

      09baf8bf1a24e71dad058f18098ac218

    • SHA1

      7559b17eb5144169bf055c21080271b25929ad37

    • SHA256

      c8ef305a331a2d5050bb91cfc415cc069ba83cba63eeef73e5936d63894aa4ab

    • SHA512

      64611dc7e3e7d4120e63d90b552b227c1eb421be62557f3270158ad1c5be70e91a0d51adf3c9109f042f5dd9818837bd6d8ff94184fbc83a686605e48384fa92

    Score
    3/10
    behavioral21behavioral22

    • Target

      aynews/AyNews/Admin/Admin_Article_Recycle.aspx

    • Size

      4KB

    • MD5

      2e03a88884f90f191caee1c704007dbc

    • SHA1

      17f5a221e420cae15d1dc15905e9864bda1f762d

    • SHA256

      95ce1747117449da1e0633a50418d409187e8ee6e837f305a19487ea5676cb19

    • SHA512

      8f410f105f643785b5d80edc14e3487ed303ce82ea55c2cff103b94941527aa5a63e645d23c48edf2b11cae4e4d95bec178366ab0a528a2c262c41a8201e2f7c

    • SSDEEP

      96:9r27SkgSGqs9yomTZyV333X391o5STeVy5IL:p2w1ZUQVHnvoIigI

    Score
    3/10
    behavioral23behavioral24

    • Target

      aynews/AyNews/Admin/Admin_Article_Special.aspx

    • Size

      4KB

    • MD5

      55d2f10ee6e7931954b581eb7142b91c

    • SHA1

      432dad9db11e0f38c031a2ea1b77e71185942b06

    • SHA256

      12e3a4f242911a9021c9747948126094382aaa7154195bcd3140ad52910658a4

    • SHA512

      53e0c0f2f1f9904505ad6dc853ce132ec016126a51379ba62bb6fb9c782c949f286b4a529502efa6682d28f550b7d7591097e8bdd11902f90a53240585f1a3a6

    • SSDEEP

      96:9ru7S3AgS92Qqx2yomLyV333X39+o5E5IL:pu268kVHngoaI

    Score
    3/10
    behavioral25behavioral26

    • Target

      aynews/AyNews/Admin/Admin_BBS.aspx

    • Size

      3KB

    • MD5

      06e3bb91ce92e0b03e6de06d396937aa

    • SHA1

      2947d8367a3f3b8a33848031843ee3db4a3845fa

    • SHA256

      4515101833a41b478819b302a06e57fabdd60c2f5577d930454664e3825eaf23

    • SHA512

      2b3be81107dba6399f86f9a463a23b2866e525b1982ac208a2afb573592aea85fe8d58ff9d51fbca2f7c6ec1b15354c91a26b9456b5b4b113dce879625ea948b

    Score
    3/10
    behavioral27behavioral28

    • Target

      aynews/AyNews/Admin/Admin_BBS_Write.aspx

    • Size

      4KB

    • MD5

      5528da74d3f6b170d21500ec1027b358

    • SHA1

      2900d5c693a316fa2fa0145b16efbaf60f3f5dbe

    • SHA256

      e9b0bee9881cbd9ed2562a38a8e2a3e0e480de06e95fbfcc5327c3cec9bb78ed

    • SHA512

      d2c7d9a735e6cfaabff1365494eea563f9a16067a039de72e3e3af2ddb79009eca716e1433327b7285ef4fc61ab29dd1617e5b7ad508968d50ef502fb57f0b36

    • SSDEEP

      96:drWvgSNzG2TTzgLqiOrNMA8wGrOiKBZ+LwiFIA2s77:JZwTTCqi3ZI6L0A2k

    Score
    3/10
    behavioral29behavioral30

    • Target

      aynews/AyNews/Admin/Admin_FriendLink.aspx

    • Size

      3KB

    • MD5

      35237c94c744d7764e271ba82d9f1965

    • SHA1

      7e24a2912e88663d34537a4fc8303325b06e4ffb

    • SHA256

      c67f292ae33402bbbb4d6e512e9a0a3ad3f512955256b1301203322433e2c081

    • SHA512

      8cd1a3ddc68d2d0f4bde994a6ceb5c5e9305be70d84aa2245c51a1aae421faec6821416ddd133ad292af9a8406c44eb5bc9984b05b08bac264a2f571bf8e21d0

    Score
    3/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks