Overview

overview

3

Static

static

1

post-install.sh

ubuntu-18.04-amd64

1

post-install.sh

debian-9-armhf

1

post-install.sh

debian-9-mips

post-install.sh

debian-9-mipsel

pre-install.sh

ubuntu-18.04-amd64

1

pre-install.sh

debian-9-armhf

1

pre-install.sh

debian-9-mips

pre-install.sh

debian-9-mipsel

pre-uninstall.sh

ubuntu-18.04-amd64

1

pre-uninstall.sh

debian-9-armhf

1

pre-uninstall.sh

debian-9-mips

pre-uninstall.sh

debian-9-mipsel

start-stop.sh

ubuntu-18.04-amd64

1

start-stop.sh

debian-9-armhf

1

start-stop.sh

debian-9-mips

start-stop.sh

debian-9-mipsel

bin/dropboxctl

ubuntu-18.04-amd64

1

bin/dropboxd

ubuntu-20.04-amd64

1

webman/dat...box.js

windows7-x64

3

webman/dat...box.js

windows10-2004-x64

3

webman/dropbox.cgi

ubuntu-20.04-amd64

1

webman/lan...-cs.js

windows7-x64

3

webman/lan...-cs.js

windows10-2004-x64

3

webman/lan...-da.js

windows7-x64

3

webman/lan...-da.js

windows10-2004-x64

3

webman/lan...-DE.js

windows7-x64

3

webman/lan...-DE.js

windows10-2004-x64

3

webman/lan...-US.js

windows7-x64

3

webman/lan...-US.js

windows10-2004-x64

3

webman/lan...ino.js

windows7-x64

3

webman/lan...ino.js

windows10-2004-x64

3

webman/lan...-es.js

windows7-x64

3

Analysis

  • max time kernel
    134s
  • max time network
    105s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21/05/2024, 05:24

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    webman/langs/lang-de-DE.js

  • Size

    4KB

  • MD5

    50b9e807a2d67a87a95cac47cba3e825

  • SHA1

    d228d60c51df9ade2c73e05557806dcd57201aa8

  • SHA256

    227ec9dcbdebff61865351f9fa594b5feddabe7ee66bcc380bc0b3bf9a1673a4

  • SHA512

    b2e48f18805f11447b40e84a2d7c9d72b381fa3e67178b4f26f60cba3f95b397ff220ec981bc40d9930908d7b1ef2679bda68b10557c5b983ca2b1066b9130cc

  • SSDEEP

    96:ttc2Ti9/BT8Tw3C6i9kTrvkL/ozrT25j5xSG4wALkUnJFU71i60nZFlF6krxtgk+:8YzxRtUDAVmw

Score
3/10
execution

Malware Config

Signatures

Processes

  • C:\Windows\system32\wscript.exe
    wscript.exe C:\Users\Admin\AppData\Local\Temp\webman\langs\lang-de-DE.js
    1⤵
      PID:4272

    Network

          MITRE ATT&CK Enterprise v15

          Replay Monitor

          Loading Replay Monitor...

          Downloads