Overview

overview

3

Static

static

3

xiaof_toup...ass.js

windows7-x64

1

xiaof_toup...ass.js

windows10-2004-x64

1

xiaof_toup...x.html

windows7-x64

1

xiaof_toup...x.html

windows10-2004-x64

1

xiaof_toup...ion.js

windows7-x64

1

xiaof_toup...ion.js

windows10-2004-x64

1

xiaof_toup...x.html

windows7-x64

1

xiaof_toup...x.html

windows10-2004-x64

1

xiaof_toup...ent.js

windows7-x64

1

xiaof_toup...ent.js

windows10-2004-x64

1

xiaof_toup...x.html

windows7-x64

1

xiaof_toup...x.html

windows10-2004-x64

1

xiaof_toup...Var.js

windows7-x64

1

xiaof_toup...Var.js

windows10-2004-x64

1

xiaof_toup...ent.js

windows7-x64

1

xiaof_toup...ent.js

windows10-2004-x64

1

xiaof_toup...x.html

windows7-x64

1

xiaof_toup...x.html

windows10-2004-x64

1

xiaof_toup...er.ps1

windows7-x64

1

xiaof_toup...er.ps1

windows10-2004-x64

1

xiaof_toup...x.html

windows7-x64

1

xiaof_toup...x.html

windows10-2004-x64

1

xiaof_toup...min.js

windows7-x64

1

xiaof_toup...min.js

windows10-2004-x64

1

xiaof_toup...ina.js

windows7-x64

1

xiaof_toup...ina.js

windows10-2004-x64

1

xiaof_toup...min.js

windows7-x64

1

xiaof_toup...min.js

windows10-2004-x64

1

xiaof_toup...min.js

windows7-x64

1

xiaof_toup...min.js

windows10-2004-x64

1

xiaof_toup...min.js

windows7-x64

1

xiaof_toup...min.js

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    57eb96364f74cb20a33552d768c13e0453487d0c96d2acab89171942aa0fd767

  • Size

    12.4MB

  • Sample

    240319-p7tshsdd9t

  • MD5

    138b77bf7b4fde5a1a48fefc2090fe6d

  • SHA1

    4aa04b63c29a59dba44f81369a3567ed61eed382

  • SHA256

    57eb96364f74cb20a33552d768c13e0453487d0c96d2acab89171942aa0fd767

  • SHA512

    2b29e2d270181a30bd997a986d260739d10e1ab6873753ddcc57ab321a31d655f2c895d05e40b7e20bec50117d997920221ef87cb18dcc0fde45b8d022c51d33

  • SSDEEP

    196608:GMm5aGbwq1n4kDBI7bywv/lIG6A3S5+8nhbQhHgkbIftzs7JTYxBCrV2:GMm5L3n4gwHf93XESDbIcJTECR2

Score
3/10
linkqr

Malware Config

Targets

    • Target

      xiaof_toupiao/class/Zip.class.php

    • Size

      23KB

    • MD5

      5c4476b50433cfebab064fed2a9cbb2d

    • SHA1

      4b6c8568fcd55f3760dadf83a626e07e6c911555

    • SHA256

      6cfb1a6cecad86b93bd0a7f07e90fdf9c2ef7382141435d279fe76262e9f9097

    • SHA512

      d3b9413d9ae50d3f24c3aac9f0d4e8ba38bed04197f7eb53db9ecc727bad4ccc9c9d7aceae2384f99c164e1ea6fc3a4b7c298533b96aada3a290e4b2c8f7654f

    • SSDEEP

      384:AyHM1LI6GIWQuamQDGA4lenZyTdfKhqlYbVzgDhjJrDMx:RYLQIduamQDceZyT9iqlizeFrAx

    Score
    1/10
    behavioral1behavioral2

    • Target

      xiaof_toupiao/data/index.html

    • Size

      132B

    • MD5

      3f12ace2ae56bce9e8fd32dd80046e45

    • SHA1

      4a50a0a702f2bc7b41ab9f066ca0a6fc43408fb4

    • SHA256

      3a4910e3ed247925e4fb84f312ad1e1ec0a2e45196e75f13c59138ef6f11ade3

    • SHA512

      654483399c2d263cbd6020b5ca73aa2e73d78e310fcb0b5abe21cadddfe5922af88e97f6743c9c4ce5d2f6e7a0e5344c0b94fa0019f5fe8c55aa09861439ffaf

    Score
    1/10
    behavioral3behavioral4

    • Target

      xiaof_toupiao/inc/function.php

    • Size

      90KB

    • MD5

      63d15c93ad19867dd9512590963bb346

    • SHA1

      c1b04f75e22fd06fa7d8a142af1dad92645456b9

    • SHA256

      b487760ac677c222a1692fdf844689070dca34c88319e9cd588b4ba01e273e27

    • SHA512

      5422d18b6de7041992a677aaee8e8a9779f43a183eaf280b3bd2e21a30597e066023fc12f6886389a442724da8a972e316f70f6035b12cf3a439714678ce2d76

    • SSDEEP

      1536:rbafZqg9l+m7ef8oeGU/IRXRou++0fbm+Z6gA3:rbafZqg9l+mn6BouKfbT6P3

    Score
    1/10
    behavioral5behavioral6

    • Target

      xiaof_toupiao/inc/host/index.html

    • Size

      132B

    • MD5

      3f12ace2ae56bce9e8fd32dd80046e45

    • SHA1

      4a50a0a702f2bc7b41ab9f066ca0a6fc43408fb4

    • SHA256

      3a4910e3ed247925e4fb84f312ad1e1ec0a2e45196e75f13c59138ef6f11ade3

    • SHA512

      654483399c2d263cbd6020b5ca73aa2e73d78e310fcb0b5abe21cadddfe5922af88e97f6743c9c4ce5d2f6e7a0e5344c0b94fa0019f5fe8c55aa09861439ffaf

    Score
    1/10
    behavioral7behavioral8

    • Target

      xiaof_toupiao/library/Alidayu/aliyun/AliyunClient.php

    • Size

      6KB

    • MD5

      44b9a9f72ea112b8ef1e5488b1843eb7

    • SHA1

      fd4f2f6cca2fb9e4cfbfbeff99f45be9ad7776e8

    • SHA256

      6531354e4ca5bf9077d44d833be09c07a55c9ae712f78ccd18375e6b313d8fe2

    • SHA512

      70bb1df4bbfb943291b91d9d33d92383963ef8fd6a1bef72ebf93e4a2fe35a5e62f9cdcfe3183a0769418ca814135f54629e63a84f2ab92198b1a958c9f484a1

    • SSDEEP

      96:nHfwSLKz8rsdNAwo6KTQc+CMYmQXqKiXvkiFKbhov82ozvawH3zyl2alTj:nHLez862Wyi4bho0bzKBTj

    Score
    1/10
    behavioral10behavioral9

    • Target

      xiaof_toupiao/library/Alidayu/logs/index.html

    • Size

      2B

    • MD5

      444bcb3a3fcf8389296c49467f27e1d6

    • SHA1

      7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb

    • SHA256

      2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df

    • SHA512

      9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570

    Score
    1/10
    behavioral11behavioral12

    • Target

      xiaof_toupiao/library/Alidayu/top/ApplicationVar.php

    • Size

      945B

    • MD5

      50afa5e286f87cfb9800ca854edf5bed

    • SHA1

      1fbbf0a0df9153e1d26b14041637eb07b04d3e50

    • SHA256

      73af5b6838eb848ce267eeb411f598d66b4eea5348602e1ddf425819d50b9c2a

    • SHA512

      4dbd09d06eb7eefcf4dd4f6e16a9917b1c64209c8ed561cfd1192cf0e8957bfa8e6346859700d759826a718a22ccfb29faad322c99d08604b067e163a4aadc5a

    Score
    1/10
    behavioral13behavioral14

    • Target

      xiaof_toupiao/library/Alidayu/top/TopClient.php

    • Size

      9KB

    • MD5

      e37e9e8ce139c8cfa17ed2e2899d0d82

    • SHA1

      d58a432e91e191b30d70fc9e6ba527eef4fe9c8b

    • SHA256

      e9aee5d3959bf8b44a4150b9243227f15c84b73039295af0599d6ace99a13386

    • SHA512

      559bdfd5107f9f286af0513239a9b28a7a74912249868a21d0b8799f8787f72ab8c405a6db26448847c6bb1670887be2edea9c0845cb0dd158bbd1515d0f88e0

    • SSDEEP

      192:dPDmPfqsrPK3HVyp3CbRR1TxHQXLjht4n6wDnJ:dPDmPfPPK3HVyp3CbRejhM7J

    Score
    1/10
    behavioral15behavioral16

    • Target

      xiaof_toupiao/log/index.html

    • Size

      132B

    • MD5

      3f12ace2ae56bce9e8fd32dd80046e45

    • SHA1

      4a50a0a702f2bc7b41ab9f066ca0a6fc43408fb4

    • SHA256

      3a4910e3ed247925e4fb84f312ad1e1ec0a2e45196e75f13c59138ef6f11ade3

    • SHA512

      654483399c2d263cbd6020b5ca73aa2e73d78e310fcb0b5abe21cadddfe5922af88e97f6743c9c4ce5d2f6e7a0e5344c0b94fa0019f5fe8c55aa09861439ffaf

    Score
    1/10
    behavioral17behavioral18

    • Target

      xiaof_toupiao/receiver.php

    • Size

      3KB

    • MD5

      9743fb4e4b8a611e29d46b6a6e05c0e4

    • SHA1

      0f27b1967ba6c1acbd852e952cb9cceea3c7d30c

    • SHA256

      e4db9aa2c294123507f4277fa2433df132ebb91142b796f736cfd3ea51b87002

    • SHA512

      2284b1c6938711defae8bc4eee1b2bbb8acb22e985f0843c5d03ec6a3ba25c6d958d9c910ee4819e3d348d327e72dc6c44f1027fd15a1ff246401aa98cb7b2db

    Score
    1/10
    behavioral19behavioral20

    • Target

      xiaof_toupiao/resources/font/index.html

    • Size

      132B

    • MD5

      3f12ace2ae56bce9e8fd32dd80046e45

    • SHA1

      4a50a0a702f2bc7b41ab9f066ca0a6fc43408fb4

    • SHA256

      3a4910e3ed247925e4fb84f312ad1e1ec0a2e45196e75f13c59138ef6f11ade3

    • SHA512

      654483399c2d263cbd6020b5ca73aa2e73d78e310fcb0b5abe21cadddfe5922af88e97f6743c9c4ce5d2f6e7a0e5344c0b94fa0019f5fe8c55aa09861439ffaf

    Score
    1/10
    behavioral21behavioral22

    • Target

      xiaof_toupiao/resources/js/bmap.min.js

    • Size

      5KB

    • MD5

      7717c1eb11571a2496c3ce9cdac13deb

    • SHA1

      d673984fe8c18ba6c6c145cfbecd290a1224e292

    • SHA256

      5c2588dcaa8900079a23d9541e623ed1c6c75a4fbfe6ce9afc1bc39ee28b4142

    • SHA512

      b5c9cc4ef965a20c095aceb4e45ad2538d4e1123fce36f78728a0089089a4033a4b2fe57990250068d3f615391ed3babaf583135626c29441c74d7779df88d6e

    • SSDEEP

      96:xQMpB3H1WJq5UH5Ptsxp6e001C2EXxqMPHGe6ewSPF0UJw7:ZB3HnmH5Puxp6zD2EX1Ph6ewSPF0UJw7

    Score
    1/10
    behavioral23behavioral24

    • Target

      xiaof_toupiao/resources/js/china.js

    • Size

      60KB

    • MD5

      a82a9a1a04fd13388f6594f96003f1c0

    • SHA1

      a3cb469e5b1e61d024d1490c93c6f6906b56b5d1

    • SHA256

      180551290c41e960fd09451e5e7d11e087180b5171e2840af33875e49af3dd6d

    • SHA512

      c74825d323c78e49f1fd69af579dcefaf68979b2aba906269f39528977fcdbfce45f6a9b79298e5839809d55d9d3649fae9f7dcf31a09d6f3e777caa2b588822

    • SSDEEP

      1536:ZgxBqjWWCVwb0ckZb+o7JVLDOSSev5Y4ty:ZgxBfWIe0ckUo7JZOFev5Y4I

    Score
    1/10
    behavioral25behavioral26

    • Target

      xiaof_toupiao/resources/js/dataTool.min.js

    • Size

      3KB

    • MD5

      dff7ad83c68ab3af4396d8d7a26f570a

    • SHA1

      cef4dd9d64c8e71a854c8226f100f9df55fbcc52

    • SHA256

      bc7e6c26529a3c995160bb58186695d1b189a854ff2025850c681e5eb8870eba

    • SHA512

      0ed2d67b37f42b6dce41a5e2338362d5259563510efa80aa430dc94f1d7a95129855c5bb69a3b11b0494703f0e2e1068c11da6d69f892571824dd330bd2a477f

    Score
    1/10
    behavioral27behavioral28

    • Target

      xiaof_toupiao/resources/js/echarts.common.min.js

    • Size

      343KB

    • MD5

      887ee4618c543e09f334cc3eb8a92595

    • SHA1

      c2f7158065c786c0e1f126efc72762ec94ce79fd

    • SHA256

      94cdf15e5649eb11de42f3f64e89f6734638cbfa36b2055a9b7d2197398488ea

    • SHA512

      1100a072c5fb5a04ad46543878db8f00bae32dd833f604f2c91d3529a4493e9d0128d21435095b8b5a4b3021ab59dea4042542dd97b718be0541957c63940830

    • SSDEEP

      3072:EUIx9/DK39OFIbPjtKvEFnRRGS1NvM0k50q0unWYOlQt5HkF7aDI:nIx9eNO2DjlFnnlRM0M0UWYOg5HeMI

    Score
    1/10
    behavioral29behavioral30

    • Target

      xiaof_toupiao/resources/js/echarts.min.js

    • Size

      701KB

    • MD5

      f7493d94b8caf6165ab89abb0d86c298

    • SHA1

      d2a90e08c3bc9282e341ba3e742bae0c1e060b94

    • SHA256

      dcf1be28458fe7fd3475585a6afeac951490f122f491a55ee9c70e670fa0798e

    • SHA512

      6d1aefc03db92e802e3b5acd16d6f6c4b8a76acc9ab08b7c04ca10b433d7af07144254705d9580194e3bf9ce5229ac87a45054b2b5fb1481471cc83f8f5de2e7

    • SSDEEP

      12288:RxQ2Z3VouUV/jzNaYY82kHZA9aunLSJjbDyd8oF:E2Z3VouUdzNVwauneJjbDydP

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

5
T1112

Credential Access

Discovery

Query Registry

5
T1012

System Information Discovery

5
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks