Overview

overview

3

Static

static

1

post-install.sh

ubuntu-18.04-amd64

1

post-install.sh

debian-9-armhf

1

post-install.sh

debian-9-mips

post-install.sh

debian-9-mipsel

pre-install.sh

ubuntu-18.04-amd64

1

pre-install.sh

debian-9-armhf

1

pre-install.sh

debian-9-mips

pre-install.sh

debian-9-mipsel

pre-uninstall.sh

ubuntu-18.04-amd64

1

pre-uninstall.sh

debian-9-armhf

1

pre-uninstall.sh

debian-9-mips

pre-uninstall.sh

debian-9-mipsel

start-stop.sh

ubuntu-18.04-amd64

1

start-stop.sh

debian-9-armhf

1

start-stop.sh

debian-9-mips

start-stop.sh

debian-9-mipsel

bin/dropboxctl

ubuntu-18.04-amd64

1

bin/dropboxd

ubuntu-20.04-amd64

1

webman/dat...box.js

windows7-x64

3

webman/dat...box.js

windows10-2004-x64

3

webman/dropbox.cgi

ubuntu-20.04-amd64

1

webman/lan...-cs.js

windows7-x64

3

webman/lan...-cs.js

windows10-2004-x64

3

webman/lan...-da.js

windows7-x64

3

webman/lan...-da.js

windows10-2004-x64

3

webman/lan...-DE.js

windows7-x64

3

webman/lan...-DE.js

windows10-2004-x64

3

webman/lan...-US.js

windows7-x64

3

webman/lan...-US.js

windows10-2004-x64

3

webman/lan...ino.js

windows7-x64

3

webman/lan...ino.js

windows10-2004-x64

3

webman/lan...-es.js

windows7-x64

3

Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21/05/2024, 05:24

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    webman/langs/lang-cs.js

  • Size

    4KB

  • MD5

    183cc7dca95c45e77c2ac9489dc54db5

  • SHA1

    c263c9437fa5ea347c0510865dbd7500e8e1f9d4

  • SHA256

    09ee7d7671eb78491aa087ed8760ae1d4188fc27c8f4e3c443f6c755b9da47dc

  • SHA512

    c73ff46cf3ceee6ab0292b66c69c0f719bc203a46e1393fa3c8ce920337619ece56333a3be0b5ff431a1cc454cfddf46ca42fc7f4c33a4b4aeb379f3064aea74

  • SSDEEP

    96:tt9BTPyHLT1+qBJqoJ2TUpk8AXzqTVsm5xSGSBwAhy3yUNny81F56Sj7wSCNwxx9:VWayzLF0Cz3nUmjz

Score
3/10
execution

Malware Config

Signatures

Processes

  • C:\Windows\system32\wscript.exe
    wscript.exe C:\Users\Admin\AppData\Local\Temp\webman\langs\lang-cs.js
    1⤵
      PID:228

    Network

          MITRE ATT&CK Enterprise v15

          Replay Monitor

          Loading Replay Monitor...

          Downloads