Overview

overview

6

Static

static

1

bin/MobaBox.exe

windows11-21h2-x64

bin/MobaVNC.exe

windows11-21h2-x64

bin/Server...ons.sh

windows11-21h2-x64

3

bin/VNCHooks.dll

windows11-21h2-x64

1

bin/_ssh.exe

windows11-21h2-x64

bin/_ssh1.exe

windows11-21h2-x64

bin/_vim.exe

windows11-21h2-x64

bin/autossh.exe

windows11-21h2-x64

bin/awk.exe

windows11-21h2-x64

bin/bash.exe

windows11-21h2-x64

bin/conin.exe

windows11-21h2-x64

bin/ctris.exe

windows11-21h2-x64

bin/curl.exe

windows11-21h2-x64

bin/cygcom_err-3.dll

windows11-21h2-x64

1

bin/cygcrypto-3.dll

windows11-21h2-x64

1

bin/cygcurl-4.dll

windows11-21h2-x64

1

bin/cygfido2-1.dll

windows11-21h2-x64

1

bin/cyggcc...-1.dll

windows11-21h2-x64

1

bin/cyggss...-2.dll

windows11-21h2-x64

1

bin/cyggssrpc-4.dll

windows11-21h2-x64

1

bin/cygiconv-2.dll

windows11-21h2-x64

1

bin/cygk5crypto-3.dll

windows11-21h2-x64

1

bin/cygkad...11.dll

windows11-21h2-x64

1

bin/cygkdb5-8.dll

windows11-21h2-x64

1

bin/cygkrb5-3.dll

windows11-21h2-x64

1

bin/cygkrb...-0.dll

windows11-21h2-x64

1

bin/cygncu...10.dll

windows11-21h2-x64

1

bin/cygopenssh.dll

windows11-21h2-x64

1

bin/cygssh2-1.dll

windows11-21h2-x64

1

bin/cygssl-3.dll

windows11-21h2-x64

1

bin/cygssp-0.dll

windows11-21h2-x64

1

MobaXterm_....0.msi

windows11-21h2-x64

6

Analysis

  • max time kernel
    201s
  • max time network
    325s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240221-en
  • resource tags

    arch:x64arch:x86image:win11-20240221-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    28/03/2024, 18:36

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    bin/cygcrypto-3.dll

  • Size

    1.2MB

  • MD5

    a0295602ffec0308e3b6a6da0b0ae492

  • SHA1

    7ef08861fb6b11c5c5ec84b2ef26f5ad0dd7fb4d

  • SHA256

    86603a57c00490200c44dacb43fb8e96c7599778634c669661eb05198b21947d

  • SHA512

    c15a21230105b2b2ab3ab2fa25a4aa18057c1af1841caf10d9f73cba2fa2d843a272b0adc548b17a46e0614cab24821a4eed03300216bff13ba1e25683960c89

  • SSDEEP

    24576:rVDE5rDpYOXbDQVt3gVK4I/o1te/m97w0Evg3GfvJ1S+c0lLSw75MQNZ/e:rJCYcs1Ytkm97wS3GfvJ1tkUKQ6

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\bin\cygcrypto-3.dll,#1
    1⤵
      PID:1268

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads