Overview
overview
10Static
static
10www/backen...ate.sh
windows7-x64
3www/backen...ate.sh
windows10-2004-x64
3www/backen...ler.js
windows7-x64
1www/backen...ler.js
windows10-2004-x64
1www/backen...ler.js
windows7-x64
1www/backen...ler.js
windows10-2004-x64
1www/backen...ler.js
windows7-x64
1www/backen...ler.js
windows10-2004-x64
1www/backen...ler.js
windows7-x64
1www/backen...ler.js
windows10-2004-x64
1www/backen...rce.js
windows7-x64
1www/backen...rce.js
windows10-2004-x64
1www/backen...der.js
windows7-x64
1www/backen...der.js
windows10-2004-x64
1www/backen...ice.js
windows7-x64
1www/backen...ice.js
windows10-2004-x64
1www/backen...ice.js
windows7-x64
1www/backen...ice.js
windows10-2004-x64
1www/backend/artisan
ubuntu-18.04-amd64
1www/backend/artisan
debian-9-armhf
7www/backend/artisan
debian-9-mips
1www/backend/artisan
debian-9-mipsel
7www/backen...er.ps1
windows7-x64
1www/backen...er.ps1
windows10-2004-x64
1www/backen...l.html
windows7-x64
1www/backen...l.html
windows10-2004-x64
1www/backen...p.html
windows7-x64
1www/backen...p.html
windows10-2004-x64
1www/backen...e.html
windows7-x64
1www/backen...e.html
windows10-2004-x64
1www/backen...d.html
windows7-x64
1www/backen...d.html
windows10-2004-x64
1Analysis
-
max time kernel
2s -
max time network
130s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20240226-en -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20240226-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
06-04-2024 20:54
Behavioral task
behavioral1
Sample
www/backend/23.02.2023-update.sh
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
www/backend/23.02.2023-update.sh
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
www/backend/app/Http/Controllers/Api/v1/AutoCommandsController.js
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
www/backend/app/Http/Controllers/Api/v1/AutoCommandsController.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
www/backend/app/Http/Controllers/Api/v1/Bot/BotInjectionController.js
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
www/backend/app/Http/Controllers/Api/v1/Bot/BotInjectionController.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
www/backend/app/Http/Controllers/Api/v1/LogController.js
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
www/backend/app/Http/Controllers/Api/v1/LogController.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
www/backend/app/Http/Controllers/Api/v1/UserController.js
Resource
win7-20231129-en
Behavioral task
behavioral10
Sample
www/backend/app/Http/Controllers/Api/v1/UserController.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
www/backend/app/Http/Resources/Bot/BotResource.js
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
www/backend/app/Http/Resources/Bot/BotResource.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
www/backend/app/Providers/RouteServiceProvider.js
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
www/backend/app/Providers/RouteServiceProvider.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
www/backend/app/Services/InjectionsService.js
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
www/backend/app/Services/InjectionsService.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
www/backend/app/Services/LogsService/LogsService.js
Resource
win7-20240319-en
Behavioral task
behavioral18
Sample
www/backend/app/Services/LogsService/LogsService.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
www/backend/artisan
Resource
ubuntu1804-amd64-20240226-en
Behavioral task
behavioral20
Sample
www/backend/artisan
Resource
debian9-armhf-20240226-en
Behavioral task
behavioral21
Sample
www/backend/artisan
Resource
debian9-mipsbe-20240226-en
Behavioral task
behavioral22
Sample
www/backend/artisan
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral23
Sample
www/backend/database/seeders/RolesSeeder.ps1
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
www/backend/database/seeders/RolesSeeder.ps1
Resource
win10v2004-20240226-en
Behavioral task
behavioral25
Sample
www/backend/public/injects/html/banks/ae.ahb.digital.html
Resource
win7-20231129-en
Behavioral task
behavioral26
Sample
www/backend/public/injects/html/banks/ae.ahb.digital.html
Resource
win10v2004-20240226-en
Behavioral task
behavioral27
Sample
www/backend/public/injects/html/banks/ae.almasraf.mobileapp.html
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
www/backend/public/injects/html/banks/ae.almasraf.mobileapp.html
Resource
win10v2004-20240226-en
Behavioral task
behavioral29
Sample
www/backend/public/injects/html/banks/ae.hsbc.hsbcuae.html
Resource
win7-20240319-en
Behavioral task
behavioral30
Sample
www/backend/public/injects/html/banks/ae.hsbc.hsbcuae.html
Resource
win10v2004-20240226-en
Behavioral task
behavioral31
Sample
www/backend/public/injects/html/banks/air.app.scb.breeze.android.main.my.prod.html
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
www/backend/public/injects/html/banks/air.app.scb.breeze.android.main.my.prod.html
Resource
win10v2004-20240226-en
General
-
Target
www/backend/artisan
-
Size
1KB
-
MD5
9d88489831f90855deb8783a16c93408
-
SHA1
4e3b044dc634aeeb5133ded57e5e535fc52f2fbc
-
SHA256
f5645be808d32398cd215ef933c793d806ae56796190579dde4ca8888c584c1b
-
SHA512
5245655cd1b921e23224b03bfac1b555dba96400004a4fd8fef55a28a20338b943fda843770484be2f63e0a0eb1b501e658851c9b3cec3bb52cebb6fa0707a8a
Malware Config
Signatures
Processes
-
/tmp/www/backend/artisan/tmp/www/backend/artisan1⤵PID:1556
-
/usr/local/sbin/phpphp /tmp/www/backend/artisan1⤵PID:1556
-
/usr/local/bin/phpphp /tmp/www/backend/artisan1⤵PID:1556
-
/usr/sbin/phpphp /tmp/www/backend/artisan1⤵PID:1556
-
/usr/bin/phpphp /tmp/www/backend/artisan1⤵PID:1556
-
/sbin/phpphp /tmp/www/backend/artisan1⤵PID:1556
-
/bin/phpphp /tmp/www/backend/artisan1⤵PID:1556
-
/snap/bin/phpphp /tmp/www/backend/artisan1⤵PID:1556