Overview

overview

3

Static

static

1

UC50hidrive-backup.sh

ubuntu-18.04-amd64

1

UC50hidrive-backup.sh

debian-9-armhf

1

UC50hidrive-backup.sh

debian-9-mips

UC50hidrive-backup.sh

debian-9-mipsel

post-install.sh

ubuntu-18.04-amd64

1

post-install.sh

debian-9-armhf

1

post-install.sh

debian-9-mips

post-install.sh

debian-9-mipsel

pre-install.sh

ubuntu-18.04-amd64

1

pre-install.sh

debian-9-armhf

1

pre-install.sh

debian-9-mips

pre-install.sh

debian-9-mipsel

pre-uninstall.sh

ubuntu-18.04-amd64

1

pre-uninstall.sh

debian-9-armhf

1

pre-uninstall.sh

debian-9-mips

pre-uninstall.sh

debian-9-mipsel

start-stop.sh

ubuntu-18.04-amd64

1

start-stop.sh

debian-9-armhf

1

start-stop.sh

debian-9-mips

start-stop.sh

debian-9-mipsel

bin/aborter

ubuntu-18.04-amd64

1

bin/cron_manager

ubuntu-18.04-amd64

1

bin/launcher

ubuntu-20.04-amd64

1

bin/lftp

ubuntu-20.04-amd64

1

bin/sshpass

ubuntu-20.04-amd64

1

webman/hid...kup.js

windows7-x64

3

webman/hid...kup.js

windows10-2004-x64

3

webman/lan...-cs.js

windows7-x64

3

webman/lan...-cs.js

windows10-2004-x64

3

webman/lan...-da.js

windows7-x64

3

webman/lan...-da.js

windows10-2004-x64

3

webman/lan...-DE.js

windows7-x64

3

Analysis

  • max time kernel
    133s
  • max time network
    104s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21-05-2024 05:50

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    webman/langs/lang-da.js

  • Size

    1KB

  • MD5

    d65743e2d0763fca0c8db0dae5f2d16d

  • SHA1

    40bf37cae1a358f8496869a3a71f209c89f93dbd

  • SHA256

    b1efb60805b2efb08ba7564bec3fb0c6cb1601e97591ff4834569f2cf21505dc

  • SHA512

    2673c8265df144ff51e38028a535b3522336997dddaea182564561b8edd057b1875c8843f1cd0bce1b7bab9193d5dec3380e4e61902af8ec9728dbd34dda9359

Score
3/10
execution

Malware Config

Signatures

Processes

  • C:\Windows\system32\wscript.exe
    wscript.exe C:\Users\Admin\AppData\Local\Temp\webman\langs\lang-da.js
    1⤵
      PID:4988

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads