Overview

overview

6

Static

static

1

bin/MobaBox.exe

windows11-21h2-x64

bin/MobaVNC.exe

windows11-21h2-x64

bin/Server...ons.sh

windows11-21h2-x64

3

bin/VNCHooks.dll

windows11-21h2-x64

1

bin/_ssh.exe

windows11-21h2-x64

bin/_ssh1.exe

windows11-21h2-x64

bin/_vim.exe

windows11-21h2-x64

bin/autossh.exe

windows11-21h2-x64

bin/awk.exe

windows11-21h2-x64

bin/bash.exe

windows11-21h2-x64

bin/conin.exe

windows11-21h2-x64

bin/ctris.exe

windows11-21h2-x64

bin/curl.exe

windows11-21h2-x64

bin/cygcom_err-3.dll

windows11-21h2-x64

1

bin/cygcrypto-3.dll

windows11-21h2-x64

1

bin/cygcurl-4.dll

windows11-21h2-x64

1

bin/cygfido2-1.dll

windows11-21h2-x64

1

bin/cyggcc...-1.dll

windows11-21h2-x64

1

bin/cyggss...-2.dll

windows11-21h2-x64

1

bin/cyggssrpc-4.dll

windows11-21h2-x64

1

bin/cygiconv-2.dll

windows11-21h2-x64

1

bin/cygk5crypto-3.dll

windows11-21h2-x64

1

bin/cygkad...11.dll

windows11-21h2-x64

1

bin/cygkdb5-8.dll

windows11-21h2-x64

1

bin/cygkrb5-3.dll

windows11-21h2-x64

1

bin/cygkrb...-0.dll

windows11-21h2-x64

1

bin/cygncu...10.dll

windows11-21h2-x64

1

bin/cygopenssh.dll

windows11-21h2-x64

1

bin/cygssh2-1.dll

windows11-21h2-x64

1

bin/cygssl-3.dll

windows11-21h2-x64

1

bin/cygssp-0.dll

windows11-21h2-x64

1

MobaXterm_....0.msi

windows11-21h2-x64

6

Analysis

  • max time kernel
    210s
  • max time network
    281s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240319-en
  • resource tags

    arch:x64arch:x86image:win11-20240319-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    28-03-2024 18:36

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    bin/cygcurl-4.dll

  • Size

    224KB

  • MD5

    6dbd61e5b4dedb610c6cb5052e5aab0b

  • SHA1

    e0081eab0f2c94b758539910a9876082edcbae11

  • SHA256

    d6d6ad86b8b3e1c3aa7750b73b160c21c86630de4f731abe03e30c2ab8455184

  • SHA512

    b57ebc2a4dcdd600290606690e6fcf70c7b8ef2a8bd9f4254c5ffb3f9449bd51fc88e8672ab3ebcebc0ca0e3b4d7f32206fba5fc89624ccc54bf36f052811c55

  • SSDEEP

    6144:rHppSX7lRxbTrlQuYC0PCXgrMBUw5sk9v:+ZDbTRYC0q1ew5suv

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\bin\cygcurl-4.dll,#1
    1⤵
      PID:4008

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads