Resubmissions

12-06-2024 08:39

240612-kkjltawejn 10

13-04-2024 00:14

240413-ajfhnagf98 10

Analysis

  • max time kernel
    93s
  • max time network
    97s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240611-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12-06-2024 08:39

General

  • Target

    possible malware.zip

  • Size

    682.3MB

  • MD5

    ba06cb72b125a0a353b87008d95e86ca

  • SHA1

    9b4d7e2f1087ccbe73012c8237b0609f10576806

  • SHA256

    ba18ff142bae31457031ca49e772b10792ad3a5bdead90cb2c1d37e2a6c2fd59

  • SHA512

    3270783c7b42014ecfa3be771d675cffe75a0ba65cf7d4e0f5e1d61e65a4cee2c6f2e471c0e95ef23799c6a7b2eb7edbca8393d59353f4d6531099dd4def909e

  • SSDEEP

    12582912:Bo4WyWq2xPQ3JjlAd9hpopjS5j/5i7Pdst6n8+fLOzV0fPWc+afxK6kKuq:BoJqJ5Bs9hpop25bvTGLeVJc3xgdq

Malware Config

Signatures

  • Detected Netwalker Ransomware 4 IoCs

    Detected unpacked Netwalker executable.

  • Detected SUPERNOVA .NET web shell 1 IoCs

    SUPERNOVA is a .NET web shell backdoor masquerading as a legitimate SolarWinds web service handler. SUPERNOVA inspects and reponds to HTTP requests with the appropriate HTTP query strings, Cookies, and/or HTML form values (e.g. named codes, class, method, and args).

  • Netwalker Ransomware

    Ransomware family with multiple versions. Also known as MailTo.

  • Supernova

    Supernova is a .NET web shell backdoor related to the SolarWinds breaches.

  • CryptOne packer 1 IoCs

    Detects CryptOne packer defined in NCC blogpost.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 2 IoCs

    AutoIT scripts compiled to PE executables.

  • Modifies data under HKEY_USERS 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 30 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Windows\Explorer.exe
    C:\Windows\Explorer.exe /idlist,,"C:\Users\Admin\AppData\Local\Temp\possible malware.zip"
    1⤵
      PID:1276
    • C:\Windows\System32\rundll32.exe
      C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
      1⤵
        PID:4992
      • C:\Program Files\7-Zip\7zG.exe
        "C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Desktop\New folder\" -an -ai#7zMap27816:112:7zEvent30240
        1⤵
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of FindShellTrayWindow
        PID:2556
      • C:\Windows\system32\SearchIndexer.exe
        C:\Windows\system32\SearchIndexer.exe /Embedding
        1⤵
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of WriteProcessMemory
        PID:3184
        • C:\Windows\system32\SearchProtocolHost.exe
          "C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
          2⤵
          • Modifies data under HKEY_USERS
          PID:4528
        • C:\Windows\system32\SearchFilterHost.exe
          "C:\Windows\system32\SearchFilterHost.exe" 0 800 804 812 8192 808 784
          2⤵
          • Modifies data under HKEY_USERS
          PID:212

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.06.22_FBI-FLASH-MI-000124-MW\15e029c3834435150c76741e714540fcb799662db8cc2c61ba4ef192a781727b
        Filesize

        420KB

        MD5

        c49856a3df308e8b1739b357832c8e9b

        SHA1

        1b8aec9750e643ce27b82bbf1c2a78dedcbcc212

        SHA256

        15e029c3834435150c76741e714540fcb799662db8cc2c61ba4ef192a781727b

        SHA512

        a764383d7eeed4d94eb39235754304282c59b6ebcdc2272862ee13cf654b6223aeaf46ace487ad58ad268d9d4db10c0f4ffef15d57452f1004561ffda3a45e67

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.06.22_FBI-FLASH-MI-000124-MW\2c464648ff97fd39dab054d0c3e1bd249e244fcc975b697e312796669c7763f1
        Filesize

        368KB

        MD5

        51b7f0213cb2945d42b88996761ce74b

        SHA1

        b951e31564580aabf1bf1030365a8fdcbfcdb23b

        SHA256

        2c464648ff97fd39dab054d0c3e1bd249e244fcc975b697e312796669c7763f1

        SHA512

        fcecfe5152f8a2d3d2f4b4fd417a7b3ca21d261cd0d4511a5f00263ed410df8a9a04cb3c13d2aee6264325bb7572da08b7fc73a791466ffedd8b46a078f65d9a

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.06.22_FBI-FLASH-MI-000124-MW\3e1fb4ff54112a78d8bdccbe596c119201f079010c4f69cdf2c99385e7aee3dc
        Filesize

        974KB

        MD5

        08dd5ee67ee69ddfa11cb55562baef58

        SHA1

        d2743385d48a823d8a464c1d6dd20216395a0a43

        SHA256

        3e1fb4ff54112a78d8bdccbe596c119201f079010c4f69cdf2c99385e7aee3dc

        SHA512

        c2c3596ea7b998579bcadabea49a6d1280be411635c1bbf94b5e408495cc903aa2d76ea5824800b47c476385256c7a345d25e6e2e61f440dc46c78b331500929

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.06.22_FBI-FLASH-MI-000124-MW\43670ae43df9e361fa15f09f611da32db104ee207ed5af3e7e7f098ad82a68e0
        Filesize

        359KB

        MD5

        378bbb172ccae5e28549a003e4e84bce

        SHA1

        c7013dde2a9751e0a527bde97db93ce4b976f39b

        SHA256

        43670ae43df9e361fa15f09f611da32db104ee207ed5af3e7e7f098ad82a68e0

        SHA512

        536244b8b2fedde796c1aea8406256ef35b1529973704de3c31fde77d2d4f7f2c0cc4b02a8dcc47a049ddc96493f1aa4ed55ad6607b366db66739b8c9666b3db

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.06.22_FBI-FLASH-MI-000124-MW\47f1570e770d236836c0d3cb50755b6dd91e1be58a0d3e61507c7baacfd27784
        Filesize

        56KB

        MD5

        5da446b5f22bfa77a51b654762583a28

        SHA1

        1a431c3c0097063bba8df0a5fb66779dbd725998

        SHA256

        47f1570e770d236836c0d3cb50755b6dd91e1be58a0d3e61507c7baacfd27784

        SHA512

        ac6be9dbaa640af4f561cbe4c11ac60ac86b5a0b2c774af869a3eefe4bf22ee59e33f228dfc46a0cb441992bc4d701f29af11528049a09c06c3954c86d6a4d78

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.06.22_FBI-FLASH-MI-000124-MW\5b0ba8d58a64630cb5fcb80e72520bd2ef6f322003fa2588d4d594620e6685ae
        Filesize

        392KB

        MD5

        e8973e617a743a5597b63ce268986761

        SHA1

        a45f057cbf44a70d010ea02e5417e06314b60a0a

        SHA256

        5b0ba8d58a64630cb5fcb80e72520bd2ef6f322003fa2588d4d594620e6685ae

        SHA512

        8d28bfc622ceef532027bf38713c838960e9bb16d1a70b94747340ef44de74055c934f006626d6ee7c40146a84a5ac0616b38f820723e671897294f7647cd3e0

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.06.22_FBI-FLASH-MI-000124-MW\7b98cd3800dede6537cf78e7b61eeeda71d251dc97c70cb7c2135c6aa310ab7f
        Filesize

        1.4MB

        MD5

        e7351df51633435293ddc09de7fdc57c

        SHA1

        08e1c2328773a1040194446d0814fc07673526bf

        SHA256

        7b98cd3800dede6537cf78e7b61eeeda71d251dc97c70cb7c2135c6aa310ab7f

        SHA512

        705420ca8ea83df7dc0e2155a00aef5b0d4c32ac4db3e7332d84e7e16bc52ffc4bc5f80ed76790c163aa2a317edd9d86eb16d062352f3c466ca50db10556eabd

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.06.22_FBI-FLASH-MI-000124-MW\README.md
        Filesize

        49B

        MD5

        634802e09dbfa0c6e76f3574d3a40822

        SHA1

        b1d186db0b9ad925765415da2c8d6afc00857bce

        SHA256

        aa4bc52cbb5e530d3ec2a47f59cbf1435e45f219aaf1a7cecfc05fbbf82229f4

        SHA512

        035d2ff4b224b5adc1ed1633aefecf1392b7c1de3819ff6f0a59d73d11f9565ff6785fcb0140844e0aa45fccfedf357e5386606e6ff8a07bd10836c5a42cff06

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.06.22_FBI-FLASH-MI-000124-MW\d150feb631d6e9050b7fb76db57504e6dcc2715fe03e45db095f50d56a9495a5
        Filesize

        378KB

        MD5

        1179a7989031fc4b6331505b388dcb12

        SHA1

        eb644752ffb7d9b12511a0d10448150c91eb30bd

        SHA256

        d150feb631d6e9050b7fb76db57504e6dcc2715fe03e45db095f50d56a9495a5

        SHA512

        c21193698a03259eb486ebfb281e4c8fb7224814fd81d9d676c3ff8f7c9ebb8f277ef03cf5025b648e88849cca8731d16b7735288e49b0bf04da9336b4279b31

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.06.22_FBI-FLASH-MI-000124-MW\d56bb81d0f8e4de24dc12a7d963ed95eec36291c71a29d6b434e72f098cc1131
        Filesize

        56KB

        MD5

        61d50cbcdc5c52588bd79736ac7dd5e0

        SHA1

        8cd180ab0b51b01ee8e66fd7bdb17cb69620cda0

        SHA256

        d56bb81d0f8e4de24dc12a7d963ed95eec36291c71a29d6b434e72f098cc1131

        SHA512

        240d605c511a33ac5e28c68d56a09858d0156e6d1217655db53af83673c1c48cf4bce728f55ed6907aeacb35d2a4968c8aa3258a5a68653ac7ed90bb3aabb12b

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.06.22_FBI-FLASH-MI-000124-MW\da26ba1e13ce4702bd5154789ce1a699ba206c12021d9823380febd795f5b002
        Filesize

        1.1MB

        MD5

        9498ba71b33e9e9e19c352579e0d1b0a

        SHA1

        39419cf0c4a2aec86db7e87aaecf2972ed7cddb6

        SHA256

        da26ba1e13ce4702bd5154789ce1a699ba206c12021d9823380febd795f5b002

        SHA512

        780d617fc6fd03bd54bfe8fdad3dea57e558a7b06d03304d77fc2cf7c7dac584bea844c15e3afd6416bb3bd1266c7287864571eb3cacf2aa014b0a5a381561e0

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.06.22_FBI-FLASH-MI-000124-MW\e4e5c3a6c15beff4e17117075e2c0bd65f176d81e6885134d2b4d97c20d4773a
        Filesize

        388KB

        MD5

        76fffeef410bd6b633c09c0f6529891d

        SHA1

        774a51b0b07a7c606672a669fca5939b25b53e66

        SHA256

        e4e5c3a6c15beff4e17117075e2c0bd65f176d81e6885134d2b4d97c20d4773a

        SHA512

        1fca78852d9ba98ae4ee2ade1694038e6da6fa2d1e29a82e859f6963d6d86b4247da70c7f9780e0ea36f7f7dff178de9c55a450e528c30a073ebbff94423a3d4

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.06.22_FBI-FLASH-MI-000124-MW\f681c1f8c12956a20c27beb9be1112374fefc7651884d7dd92010b40db1e7bee
        Filesize

        762KB

        MD5

        62f9618752fffbd4ff7d52fdc39ec5fb

        SHA1

        0aca420c79a13982f5ec8499a35684276bca4433

        SHA256

        f681c1f8c12956a20c27beb9be1112374fefc7651884d7dd92010b40db1e7bee

        SHA512

        f87598495b6bba85d77c2cfba2904060bd7031ff3e1a40cd44725e6485bd8c20f935fee360a9a5e7962601344bde64ef407d895346ed3f9c6e2148f0d02d06c9

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.06.22_FBI-FLASH-MI-000124-MW\f7b0d6d95f2644e32c22eb3e681e33387ac27d71dd73eee3ff37ce77985ab177
        Filesize

        669KB

        MD5

        bac2f22d53c6f2b43eba6adbb0f2ea9a

        SHA1

        2073403dc04dd90140135e0cce1b504d5fcc6876

        SHA256

        f7b0d6d95f2644e32c22eb3e681e33387ac27d71dd73eee3ff37ce77985ab177

        SHA512

        df48360c2279fe383bd4412d026b723af64b1e787cf8d15d2b4f632e95fe385563e8a3351c05cd26fe9def991e4f8f56149a658ba437ba858156361d11dd4c40

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.07.16_CISA-WELLMAIL\0c5ad1e8fe43583e279201cdb1046aea742bae59685e6da24e963a41df987494
        Filesize

        6.1MB

        MD5

        01d322dcac438d2bb6bce2bae8d613cb

        SHA1

        8830e9d90c508adf9053e9803c64375bc9b5161a

        SHA256

        0c5ad1e8fe43583e279201cdb1046aea742bae59685e6da24e963a41df987494

        SHA512

        3705b5ceb4ea06370da2a0d73b60e776c9528545704442d0872b75d8593966905eb2ad6a4edddec42bed2115bcd22a37154079c73c26d0a9491a9d349c7e4735

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.07.16_CISA-WELLMAIL\83014ab5b3f63b0253cdab6d715f5988ac9014570fa4ab2b267c7cf9ba237d18
        Filesize

        2.1MB

        MD5

        8777a9796565effa01b03cf1cea9d24d

        SHA1

        53098b025a3f469ebc3e522f7b0999011cafb943

        SHA256

        83014ab5b3f63b0253cdab6d715f5988ac9014570fa4ab2b267c7cf9ba237d18

        SHA512

        e9c2bdcd2b298456726f0fc15ecf3cbfd667a7f0196bd42ecde1058dbfe33aeccb1626a462797cdaf1f32e2515ce08f0fa2d46e34833e0ac098081d9cb89ac41

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.07.16_CISA-WELLMAIL\README.md
        Filesize

        57B

        MD5

        65b2737361bf00fb827d4f32c4abc6cd

        SHA1

        5469e5a90128c7fb53b2b4a5c2f31c315ab8c154

        SHA256

        ec0290a3177910b8fd8e4ac09017e6f5b2dde3e36dff995a22de34d1a09cbdf9

        SHA512

        efc44e8c0e2e98907dfc9c30df35220c79b488a28723cc8c5e0422d6a94b91f024deaa449b5027c935f54ddc01d7bdc4c6b6bc1c9197fd59d14cd584a3c45a1c

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.07.23_FBI-FLASH-AC-000129-TT\1d973d05dee26f74ae352325da741928af4327f7a6be27cdec085a31fbea8100
        Filesize

        104KB

        MD5

        7a7ef986808ebb7781f5d64da9d7900c

        SHA1

        8e4eeac70526a412b0a8bb253d081b273e2b56dd

        SHA256

        1d973d05dee26f74ae352325da741928af4327f7a6be27cdec085a31fbea8100

        SHA512

        9ed64de5bda92df080fe60672c7f25d99603f2cbb28ac9255af5f207d943c0fabf962c3fb4a965a7b0f50c48c7db6253ae8223b2abf49b5d8941dfe152425c63

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.07.23_FBI-FLASH-AC-000129-TT\37aa87d3408dc3e211d63a3bb38c726787c47c06a19e77f6a14861a91c2dcb35
        Filesize

        332KB

        MD5

        26e71f1d387298162c1b19e858d001a1

        SHA1

        ecc74b845278696e41220ea1972e31119a5d0869

        SHA256

        37aa87d3408dc3e211d63a3bb38c726787c47c06a19e77f6a14861a91c2dcb35

        SHA512

        6e919b81b51c3d4f755465219213a6194fbebddff84d3a23377bfac2de7fc2468cceffea95d75ec979d9a706bb8d85aa03579f212879a91d581fe75fdb574421

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.07.23_FBI-FLASH-AC-000129-TT\README.md
        Filesize

        47B

        MD5

        23b84f37bc119ed0893f352cdef653f7

        SHA1

        f7c9b4730b41ce7fbe5575631e6aa7782ec2e5cf

        SHA256

        62609ce10d472698d8839e564b71bf7218fbec149fbd1fd86749e14a753ec776

        SHA512

        5dfcdf549697bd3f3706208520e16cd149bbcd98e542f247bb01ab2dd626aee339f57f453ccd6f0abde1d817f90d6924301a61f94cf527920388214657d3627d

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.07.23_FBI-FLASH-AC-000129-TT\a1aa0684813cfe9d7ed5c491c8ab132e5583b4fd02187fdae8aa4d934d933f29
        Filesize

        123KB

        MD5

        490d17a5b016f3abc14cc57f955b49b3

        SHA1

        a1bb73f6581ab51457eb7160be8ee4fb18916153

        SHA256

        a1aa0684813cfe9d7ed5c491c8ab132e5583b4fd02187fdae8aa4d934d933f29

        SHA512

        a130433a5b2516ced7a14419edbe006c07e9d58a3a416dd9003fb1cb2a0e7c48a93cb7f1fc38f19536413c355ac1d05a78369dcbc6bbe3cfce2e1df3d81480a5

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.07.27_CISA-Legacy_Malware_Targeting_QNAP_NAS\09ab3031796bea1b8b79fcfd2b86dac8f38b1f95f0fce6bd2590361f6dcd6764
        Filesize

        18KB

        MD5

        8cee2a187198648c199c1d135c918a3a

        SHA1

        a9f39f3b832344a79d32d92ac56c50cdaff0b93c

        SHA256

        09ab3031796bea1b8b79fcfd2b86dac8f38b1f95f0fce6bd2590361f6dcd6764

        SHA512

        bb4a8c108c08b4da2ee36f8876c53c2ad28f793cc5ed9999eb81fcead95123adc13d6c718dc3c10e0be75c2b0760251d756a95c61341ff99a84be576d5d00374

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.07.27_CISA-Legacy_Malware_Targeting_QNAP_NAS\13f3ea4783a6c8d5ec0b0d342dcdd0de668694b9c1b533ce640ae4571fdbf63c
        Filesize

        51KB

        MD5

        3d684e681f80dfad9449f2ca2885a7d6

        SHA1

        e191009eeb9df176fff3176407361c97de8ddf4a

        SHA256

        13f3ea4783a6c8d5ec0b0d342dcdd0de668694b9c1b533ce640ae4571fdbf63c

        SHA512

        a2fd0435138ef890ee382d0d6bd7a90beb8700ce14ca314e94d7599b171157c4941f8b494263fe464f70b371ac0cc146fa4bad41caa2e2a014f5a90ecd23d446

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.07.27_CISA-Legacy_Malware_Targeting_QNAP_NAS\15892206207fdef1a60af17684ea18bcaa5434a1c7bdca55f460bb69abec0bdc
        Filesize

        21KB

        MD5

        421240952a097e904df778590caa9668

        SHA1

        58523de660632c6b84ffbd243cc75f4fb576980a

        SHA256

        15892206207fdef1a60af17684ea18bcaa5434a1c7bdca55f460bb69abec0bdc

        SHA512

        4185bf1f640a912e6527480ba87a2f02f05f5aec26f96d8bdc0ad7051b2632a47bb4ddaef9f18c781088e5712af6b612685284ffd414abcb153ced6e5afe7437

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.07.27_CISA-Legacy_Malware_Targeting_QNAP_NAS\18a4f2e7847a2c4e3c9a949cc610044bde319184ef1f4d23a8053e5087ab641b
        Filesize

        15KB

        MD5

        47fe049d212305b41451c06bcf1c2e22

        SHA1

        66d458525b95d5cf387d98db6f0258b838fe4308

        SHA256

        18a4f2e7847a2c4e3c9a949cc610044bde319184ef1f4d23a8053e5087ab641b

        SHA512

        8f3ca8c6e338dd7c6e5f2ec907485e150d0a439fe3b06a0067f4be5bbda32faf21e3199450d33b5c18c1ba6158e0113c05dff27d46c576b4515bbcb95280d499

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.07.27_CISA-Legacy_Malware_Targeting_QNAP_NAS\3615f0019e9a64a78ccb57faa99380db0b36146ec62df768361bca2d9a5c27f2
        Filesize

        60KB

        MD5

        63c93223cdaf3520b357fba6854a6460

        SHA1

        8e75190f25d4577bc677e33fd2c1b2577251321f

        SHA256

        3615f0019e9a64a78ccb57faa99380db0b36146ec62df768361bca2d9a5c27f2

        SHA512

        1659e08dead168292bc6688eea8828339822f70cc21327a983c49fae5cac733fb478ff5af869999677934a8a8f6b085277f96438511b7d5328a22f9900dda5ce

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.07.27_CISA-Legacy_Malware_Targeting_QNAP_NAS\3c38e7bb004b000bd90ad94446437096f46140292a138bfc9f7e44dc136bac8d
        Filesize

        40KB

        MD5

        372140d7c2c68dc2c8dc137d1a471e9f

        SHA1

        986f38a04937ede2000e8f25e59ea438ee265e24

        SHA256

        3c38e7bb004b000bd90ad94446437096f46140292a138bfc9f7e44dc136bac8d

        SHA512

        f86071d71b0838f887c1482f413cc4180aa6f594967455d9f70f2a21d7bc42662062e8e60f4248665f1887771be2491efc71df4870dfe04bc0f661c33099275a

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.07.27_CISA-Legacy_Malware_Targeting_QNAP_NAS\3cb052a7da6cda9609c32b5bafa11b76c2bb0f74b61277fecf464d3c0baeac0e
        Filesize

        6KB

        MD5

        4bc98571bdf2cebf34eac03032f7bcd2

        SHA1

        f7adfab4af32b34dbe41096ef710058ef1a8a08b

        SHA256

        3cb052a7da6cda9609c32b5bafa11b76c2bb0f74b61277fecf464d3c0baeac0e

        SHA512

        cca41e8391fd9d81ebed9b565d16f33a1b6c2a382ecc87f183567e3cc2bc8b99d36be7d57167ef91e58a6e5c8bf0370146dc7509449e9b1a20e1767f86bdcae9

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.07.27_CISA-Legacy_Malware_Targeting_QNAP_NAS\473c5df2617cee5a1f73880c2d66ad9668eeb2e6c0c86a2e9e33757976391d1a
        Filesize

        20KB

        MD5

        41e6304f7a8efe9ca1562b290749b54a

        SHA1

        7a1704cf5cc27067cca5632c7dab683492c616b4

        SHA256

        473c5df2617cee5a1f73880c2d66ad9668eeb2e6c0c86a2e9e33757976391d1a

        SHA512

        63bc24d338a55d4b65cd621cb9f6de53cd37860d7a5066f2e046cfb049f5f068ce746fa5c7ec47a334b4db9ee43f60b561ab9197b4a760fff76394aa6ef00401

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.07.27_CISA-Legacy_Malware_Targeting_QNAP_NAS\4b514278a3ad03f5efb9488f41585458c7d42d0028e48f6e45c944047f3a15e9
        Filesize

        23KB

        MD5

        cdaa3d0597936d9edd5112b855d65545

        SHA1

        a71e75443bf9bff593b8f8ef679eee38e3b4162c

        SHA256

        4b514278a3ad03f5efb9488f41585458c7d42d0028e48f6e45c944047f3a15e9

        SHA512

        337aa74a275174e05c8da00dff97ce8f14bdf5be78d58f4d9a627128b46c60780c27128fc4f320b24d10124ff8365bf815f8a63cb50383e5fa5120c7a6d68677

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.07.27_CISA-Legacy_Malware_Targeting_QNAP_NAS\5130282cdb4e371b5b9257e6c992fb7c11243b2511a6d4185eafc0faa0e0a3a6
        Filesize

        27KB

        MD5

        421f006756f72cabc1ffb796c6cdb5c0

        SHA1

        5ca92d6f02019519de593758583d7ca5a4bf9f23

        SHA256

        5130282cdb4e371b5b9257e6c992fb7c11243b2511a6d4185eafc0faa0e0a3a6

        SHA512

        cc0d967e772f9f81665bf2932561d4030898b1ac9a49a1aed2b9eebc060afac6c9285658b279ff7d4aa559c8573984090bf3caf8d67cadca4a4a3964b487a52b

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.07.27_CISA-Legacy_Malware_Targeting_QNAP_NAS\55b5671876f463f2f75db423b188a1d478a466c5e68e6f9d4f340396f6558b9f
        Filesize

        10KB

        MD5

        dd461a43047de9cc3d85aeba6383e58e

        SHA1

        9d76d3aa7a956ba29772c0f0aea7fe45ab32829e

        SHA256

        55b5671876f463f2f75db423b188a1d478a466c5e68e6f9d4f340396f6558b9f

        SHA512

        fe55d4bb534ba643e72805d6a52ce57656b0fe05e647ce4cb38985394f73ab7afbd7d8df6287fb2d14498240a5813e5f634f6b6334724fbd475eace2e7820cf3

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.07.27_CISA-Legacy_Malware_Targeting_QNAP_NAS\5cb5dce0a1e03fc4d3ffc831e4a356bce80e928423b374fc80ee997e7c62d3f8
        Filesize

        18KB

        MD5

        c49ac8cfe022ff6acb8eb0036e2fc1a1

        SHA1

        e30ce38ff0ce46d8256d06fb3d5e13bf3abb1012

        SHA256

        5cb5dce0a1e03fc4d3ffc831e4a356bce80e928423b374fc80ee997e7c62d3f8

        SHA512

        c9ffb4392c43b1abf33018c673a3ef12166ffe5fcd6085d5c2847f3609a2a039374023c7d50a6e857acae7ed5342017ab61a4a86cfd9b51b155ca1bbc947f1a7

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.07.27_CISA-Legacy_Malware_Targeting_QNAP_NAS\62426146b8fcaeaf6abb24d42543c6374b5f51e06c32206ccb9042350b832ea8
        Filesize

        18KB

        MD5

        ff3ee75347ec9b5ba3ba2e7bcd4b1a0f

        SHA1

        4177af9f67dbe00a79bfff9368c5d2528292d87c

        SHA256

        62426146b8fcaeaf6abb24d42543c6374b5f51e06c32206ccb9042350b832ea8

        SHA512

        8f2b2d54d5fdaaf9da264eefe6726b4c67b1c1743a08fc4406872db04fd71ac2c5dfb263654dccabee2f2a25650de3f0351a6c69f6e22ff25b8d918c3cfa9248

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.07.27_CISA-Legacy_Malware_Targeting_QNAP_NAS\6e0f793025537edf285c5749b3fcd83a689db0f1c697abe70561399938380f89
        Filesize

        136KB

        MD5

        750b9befe44f5c4d5847e57d085e893d

        SHA1

        6c53dc64c7df210a04b30b3b0a908f75ceb9761d

        SHA256

        6e0f793025537edf285c5749b3fcd83a689db0f1c697abe70561399938380f89

        SHA512

        eeb635c73050618f60707b018286a3db684b8d210c59035e7a53ad8cee23692aade9e262b64631a67d55acc8ad3c66cda48b13c2f2b1aae14650df22727617d8

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.07.27_CISA-Legacy_Malware_Targeting_QNAP_NAS\845759bb54b992a6abcbca4af9662e94794b8d7c87063387b05034ce779f7d52
        Filesize

        982KB

        MD5

        b8af55398a30165e01bbe245e67c73bb

        SHA1

        554c1a1f9e21d79a9ab370377f3f729588a090a0

        SHA256

        845759bb54b992a6abcbca4af9662e94794b8d7c87063387b05034ce779f7d52

        SHA512

        50b6562f608aa5d91c6c36ffbfbf0bee2e70d70c605cdaab592439b887c0d115446b29201243c02d28b63613eea9ca21b5c8444e3c5400c52cc1bf703ac2ea7c

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.07.27_CISA-Legacy_Malware_Targeting_QNAP_NAS\8fd16e639f99cdaa7a2b730fc9af34a203c41fb353eaa250a536a09caf78253b
        Filesize

        51KB

        MD5

        4affa116b27f2d977a756e353f77b8f5

        SHA1

        e8bb081056542504b5a69bd5f202cf77fac0a64f

        SHA256

        8fd16e639f99cdaa7a2b730fc9af34a203c41fb353eaa250a536a09caf78253b

        SHA512

        b6dfdfee76073ed1313585ad4c439c90cc7968c65a9845bdbdf550d197c7bf034a5e4cd6aa436be52eecb87afe6e83a775622c72605482b373717fc2712fe88b

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.07.27_CISA-Legacy_Malware_Targeting_QNAP_NAS\9526ccdeb9bf7cfd9b34d290bdb49ab6a6acefc17bff0e85d9ebb46cca8b9dc2
        Filesize

        40KB

        MD5

        60567a1d2b2e02e93ffc162e6a70d60c

        SHA1

        1f1bf0bd2df89029d5267130f014ab5aa133c3ae

        SHA256

        9526ccdeb9bf7cfd9b34d290bdb49ab6a6acefc17bff0e85d9ebb46cca8b9dc2

        SHA512

        1e5d7ba66783d31450b6fede6ef835138ec17ff805bb0193152c177c8365e8001ce49611ad584622ff4a9ce4495e3431add30329c59f16eefb6701cd02891c5c

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.07.27_CISA-Legacy_Malware_Targeting_QNAP_NAS\9791c5f567838f1705bd46e880e38e21e9f3400c353c2bf55a9fa9f130f3f077
        Filesize

        22KB

        MD5

        77a14377175352372c2f1f2b4ce468ae

        SHA1

        2909bfe9d37f40ef9093ef35ef5d8416ade311a5

        SHA256

        9791c5f567838f1705bd46e880e38e21e9f3400c353c2bf55a9fa9f130f3f077

        SHA512

        b85796a065412f72a75e043fa225c92b95f045dbe55ea80d0696562cdf1b914fe4d8ff93ab907175dffe9fdcdce229399618893fa6ec2e25513e75bafe2e71d7

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.07.27_CISA-Legacy_Malware_Targeting_QNAP_NAS\README.md
        Filesize

        47B

        MD5

        1a520aff858573e768ad77c5f61d4c25

        SHA1

        88332c9edbd3561307f79f79a4c22414fdc1f369

        SHA256

        66cd4b7d78465c16e710e3b8720f0700f2bb557d9feebce07033406b77bb942d

        SHA512

        79a15c238b518a9903a8a7c070c9632298f81d2c85898c8f6c637bfabfd44abb513d68e6ba061f9ad102123ff951b85cb44d369723507f9193d02ae6c321fc69

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.07.27_CISA-Legacy_Malware_Targeting_QNAP_NAS\a569332b52d484f40b910f2f0763b13c085c7d93dcdc7fea0aeb3a3e3366ba5d
        Filesize

        18KB

        MD5

        512d654525d2aa85baf6d7aa06a3a768

        SHA1

        4134313f0e6a514efe2b60ab6edb6d5e945e8b85

        SHA256

        a569332b52d484f40b910f2f0763b13c085c7d93dcdc7fea0aeb3a3e3366ba5d

        SHA512

        6372bc8a8fb734aecb6656bd619c34409e587c9bb443a65694cc8f79cd4172edeaf71018d45187b621d8fa4171029dda675678327b1e2c13bb88e73f4818db6f

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.07.27_CISA-Legacy_Malware_Targeting_QNAP_NAS\a9364f3faffa71acb51b7035738cbd5e7438721b9d2be120e46b5fd3b23c6c18
        Filesize

        22KB

        MD5

        a12ca604fd3ce081b09a3af84d3e985b

        SHA1

        b97da9027d3fab23eb1ca8253cc455818b1af653

        SHA256

        a9364f3faffa71acb51b7035738cbd5e7438721b9d2be120e46b5fd3b23c6c18

        SHA512

        804d31cf8649904499385185d06149ad00b76f7964ad0d6600a95011932493751e192fddd61c7606b1e64abdf33541be55a43f97db06a6398f4d319b3097d486

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.07.27_CISA-Legacy_Malware_Targeting_QNAP_NAS\fa3c2f8e3309ee67e7684abc6602eea0d1d18d5d799a266209ce594947269346
        Filesize

        59KB

        MD5

        c01ba0bf9758173915c037b069265dd7

        SHA1

        c9d08a95bc51a94acbfa4f1026db6978fb67ee2d

        SHA256

        fa3c2f8e3309ee67e7684abc6602eea0d1d18d5d799a266209ce594947269346

        SHA512

        550a08340d6e240091b4b86b0db546e6df05b16a10ba6900e988efba8936edc1aa2b41ec687038ec2a8024e9172caba89ddbee1d400a3b24e5296d417bd620a0

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.07.28_FBI-FLASH-MI-000130-MW\3337e3875b05e0bfba69ab926532e3f179e8cfbf162ebb60ce58a0281437a7ef
        Filesize

        331KB

        MD5

        27304b246c7d5b4e149124d5f93c5b01

        SHA1

        e50d9e3bd91908e13a26b3e23edeaf577fb3a095

        SHA256

        3337e3875b05e0bfba69ab926532e3f179e8cfbf162ebb60ce58a0281437a7ef

        SHA512

        bec172a2f92a95796199cfc83f544a78685b52a94061ce0ffb46b265070ee0bcc018c4f548f56018bf3ff1e74952811b2afb6df79ab8d09f1ec73c9477af636b

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.07.28_FBI-FLASH-MI-000130-MW\3ba905e1cda7307163d4c8fe3fd03c2fbce7eda030522084e33d0604c204630e
        Filesize

        69KB

        MD5

        6a64553da499c1d9a64d97f4de3882f5

        SHA1

        6d35e6ae28e9e28ea650cfefd70eff1eaa15296b

        SHA256

        3ba905e1cda7307163d4c8fe3fd03c2fbce7eda030522084e33d0604c204630e

        SHA512

        11ee2422f2199e6cf0d9e7eb0dc92c20d17557877e42b632bd300281886f72564d92878d04f932e883eacb138496d0316e471c3858099a5e823109beb41bbe02

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.07.28_FBI-FLASH-MI-000130-MW\58e923ff158fb5aecd293b7a0e0d305296110b83c6e270786edcc4fea1c8404c
        Filesize

        94KB

        MD5

        73de5babf166f28dc81d6c2faa369379

        SHA1

        e393a9ecf0d0a8babaa5efcc34f10577aff1cad1

        SHA256

        58e923ff158fb5aecd293b7a0e0d305296110b83c6e270786edcc4fea1c8404c

        SHA512

        d1a473ce9af849820b8cc9d777478e2a69293f3471ee3120f9ca96c43af922e0d661048d2d36688a62a63aa185728f83ee32f5a67ddcc0d1633c5bfe46c5ea51

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.07.28_FBI-FLASH-MI-000130-MW\8639825230d5504fd8126ed55b2d7aeb72944ffe17e762801aab8d4f8f880160
        Filesize

        296KB

        MD5

        258ed03a6e4d9012f8102c635a5e3dcd

        SHA1

        a3bc2a30318f9bd2b51cb57e2022996e7f15c69e

        SHA256

        8639825230d5504fd8126ed55b2d7aeb72944ffe17e762801aab8d4f8f880160

        SHA512

        967414274cb8d8fdf0e4dd446332b37060d54a726ab77f4ec704a5afe12162e098183add4342d1710db1e1c3b74035a001cf4c2d7790a27bf6d8381c34a96889

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.07.28_FBI-FLASH-MI-000130-MW\8f834966a06f34682b78e1644c47ab488b394b80109ddea39fc9a29ed0d56a0c
        Filesize

        76KB

        MD5

        3d6203df53fcaa16d71add5f47bdd060

        SHA1

        655352e00c7e478c3fed38bc6f407982dec3768d

        SHA256

        8f834966a06f34682b78e1644c47ab488b394b80109ddea39fc9a29ed0d56a0c

        SHA512

        b8b2863b4152348b94fb69e2061db84197e96904b4e4411a19ff6a82aff71f9177cbeb55dca2eb52d35bdc65ee7f8944361b301b1f28d744bbecaab494410ec2

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.07.28_FBI-FLASH-MI-000130-MW\9f9027b5db5c408ee43ef2a7c7dd1aecbdb244ef6b16d9aafb599e8c40368967
        Filesize

        664KB

        MD5

        7a1288c7be386c99fad964dbd068964f

        SHA1

        c880daabaca11dde198b6340e4430401d0bfef10

        SHA256

        9f9027b5db5c408ee43ef2a7c7dd1aecbdb244ef6b16d9aafb599e8c40368967

        SHA512

        2d52f6e974fad85b9c0cf588ce6a8a62bb37db7a2c8aff8138d9d740f2ae8844267c9052ed3a25c65335e948bed8bf449d0815b0f7e372872d49270dd60ad027

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.07.28_FBI-FLASH-MI-000130-MW\README.md
        Filesize

        72B

        MD5

        0527842fbf758cbe02a4d1417250a3d3

        SHA1

        33ec0d879781a26c800b823d13b6dcd228900be1

        SHA256

        0c8668604e05ae2e1d1d369ae5992f61a0f625e0714730b10b1e13e849f699ca

        SHA512

        b9d49bb1af83ec183eb32e37bad6eafc0726003fff8fa6788a06bf9bbdd16e08e461f90aa063a3e59d08208beedf893750e10fcd1aaa8f77cfacf38a080c53a4

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.07.28_FBI-FLASH-MI-000130-MW\ad8d379a4431cabd079a1c34add903451e11f06652fe28d3f3edb6c469c43893
        Filesize

        517KB

        MD5

        5b80cbbdcb697c0b8ec26e6cf0ff305c

        SHA1

        f26323676b7ed39590ddfedd344b0cf605393598

        SHA256

        ad8d379a4431cabd079a1c34add903451e11f06652fe28d3f3edb6c469c43893

        SHA512

        edd515fc321f7af19241c88860d069d4fb3fe112e39e9752fbfe1a4c90b7deb32d74bfb4d5719f84248bf1932744a59ccda6cea010ff22b5d63c41a9cc292ca9

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.07.28_FBI-FLASH-MI-000130-MW\de04d2402154f676f757cf1380671f396f3fc9f7dbb683d9461edd2718c4e09d
        Filesize

        94KB

        MD5

        993b73d6490bc5a7e23e02210b317247

        SHA1

        6fd314af34409e945504e166eb8cd88127c1070e

        SHA256

        de04d2402154f676f757cf1380671f396f3fc9f7dbb683d9461edd2718c4e09d

        SHA512

        417f55a066896695ce1b8d998767f706005d3d6f1792f2b86261a235034a6c3bb1deae6920857fbc710d22b833479b2cbeafd92735381f1cc357adcc8a74c55d

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.07.28_FBI-FLASH-MI-000130-MW\fd29001b8b635e6c51270788bab7af0bb5adba6917c278b93161cfc2bc7bd6ae
        Filesize

        304KB

        MD5

        8fbc17d634009cb1ce261b5b3b2f2ecb

        SHA1

        d35cbad4163a967f66be460bac029895506917ed

        SHA256

        fd29001b8b635e6c51270788bab7af0bb5adba6917c278b93161cfc2bc7bd6ae

        SHA512

        63ab55d1ceefd1c08f7ded1ccb768b5c842d171fc07e9ff773082cbfeb95e052c76d69666cb230b66b3e38d113a6f4b7101bd9398cffe6b7cdf515111b46fa17

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.08.03_CISA-Chinese_RAT_TAIDOOR\0d0ccfe7cd476e2e2498b854cef2e6f959df817e52924b3a8bcdae7a8faaa686
        Filesize

        179KB

        MD5

        6627918d989bd7d15ef0724362b67edd

        SHA1

        21e29034538bb4e3bc922149ef4312b90b6b4ea3

        SHA256

        0d0ccfe7cd476e2e2498b854cef2e6f959df817e52924b3a8bcdae7a8faaa686

        SHA512

        83ee751b15d8fd8477b8ecf8d33a4faf30b75aceb90c0e58ebf9dbbfc1d354f7e772f126b8462fd5897a4015a6f5e324d34900ff7319e8cc791fb239ca603ddc

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.08.03_CISA-Chinese_RAT_TAIDOOR\363ea096a3f6d06d56dc97ff1618607d462f366139df70c88310bbf77b9f9f90
        Filesize

        154KB

        MD5

        8cf683b7d181591b91e145985f32664c

        SHA1

        f0a20aaf4d2598be043469b69075c00236b7a89a

        SHA256

        363ea096a3f6d06d56dc97ff1618607d462f366139df70c88310bbf77b9f9f90

        SHA512

        b75401d591caee812c5c1a669ce03c47f78f1c40a2fa31cf58a0318ffbfc032b82cb1b6d2a599ce1b3547be5a404f55212156640b095f895a9aac3c58ec4bad8

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.08.03_CISA-Chinese_RAT_TAIDOOR\4a0688baf9661d3737ee82f8992a0a665732c91704f28688f643115648c107d4
        Filesize

        42KB

        MD5

        6aa08fed32263c052006d977a124ed7b

        SHA1

        9a6795333e3352b56a8fd506e463ef634b7636d2

        SHA256

        4a0688baf9661d3737ee82f8992a0a665732c91704f28688f643115648c107d4

        SHA512

        179e9d9ccbc268cc94a7f6d31f29cf0f7a163db829a4557865f3c1f98614f94ceb7b90273d33eb49ef569cfc9013b76c7de32d7511639a7ab2c352f3137d51b6

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.08.03_CISA-Chinese_RAT_TAIDOOR\6e6d3a831c03b09d9e4a54859329fbfd428083f8f5bc5f27abbfdd9c47ec0e57
        Filesize

        49KB

        MD5

        4ec8e16d426a4aaa57c454c58f447c1e

        SHA1

        5c89629e5873072a9ca3956b67cf7b5080312c80

        SHA256

        6e6d3a831c03b09d9e4a54859329fbfd428083f8f5bc5f27abbfdd9c47ec0e57

        SHA512

        284e0dff33f4ffb6d55f2fdb1de81d5644fb2671aa358dfb72b34a50632f708b7b071202202efec0b48bc0f622c6947f8ccf0818ebaff7277eda854cee67eeaa

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.08.03_CISA-Chinese_RAT_TAIDOOR\README.md
        Filesize

        57B

        MD5

        df252a327feefa31802dc9f84a688bf0

        SHA1

        b093b9b797144a73472fb76604207f184211f487

        SHA256

        664146b80800229b268722d618ac4ddcef9bd4a29715e3b7ddd36a21a0012500

        SHA512

        5e09a77ba50edfd011fe2a9a274393bccebc878342b3cb0ccf00526146394695f674cca37a966777b053e6f47854d4178cc762f80a846ede631dbef424158811

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.08.19_CISA-North_Korean_RAT_BLINDINGCAN\58027c80c6502327863ddca28c31d352e5707f5903340b9e6ccc0997fcb9631d
        Filesize

        209KB

        MD5

        6c2d15114ebdd910a336b6b147512a74

        SHA1

        9feef1eed2a8a5cbfe1c6478f2740d8fe63305e2

        SHA256

        58027c80c6502327863ddca28c31d352e5707f5903340b9e6ccc0997fcb9631d

        SHA512

        77fd1d56a0f0cf143286fb78519b69eb8ef30f383c117d353ab16d0be5f2bfdbdb847d717dbc8b70b5d806a46fa4a1dc29a8304b8349bc1097075f50557c5da8

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.08.19_CISA-North_Korean_RAT_BLINDINGCAN\6a3446b8a47f0ab4f536015218b22653fff8b18c595fbc5b0c09d857eba7c7a1
        Filesize

        180KB

        MD5

        e7aa0237fc3db67a96ebd877806a2c88

        SHA1

        0ecc687d741c7b009c648ef0de0a5d47213f37ff

        SHA256

        6a3446b8a47f0ab4f536015218b22653fff8b18c595fbc5b0c09d857eba7c7a1

        SHA512

        771f7e5f68a48e38361f7b1b3c8cc5181a456582515d9b694f98cacd7c33e06dfb994d082c3d009b432fb9f9ecd1f3b194e92b998c203e4e4fa7b93bf6711820

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.08.19_CISA-North_Korean_RAT_BLINDINGCAN\7933716892e0d6053057f5f2df0ccadf5b06dc739fea79ee533dd0cec98ca971
        Filesize

        509KB

        MD5

        56470e113479eacda081c2eeead153bf

        SHA1

        c70edfaf2c33647d531f7df76cd4e5bb4e79ea2e

        SHA256

        7933716892e0d6053057f5f2df0ccadf5b06dc739fea79ee533dd0cec98ca971

        SHA512

        0111578f53189915a7f39f755087a283b60196283393d7979bc7a65f462c8af646579a57b0d4693bffdca0ceb92e2bad26720c4418b1cbb21ee2b216e7f763a5

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.08.19_CISA-North_Korean_RAT_BLINDINGCAN\8b53b519623b56ab746fdaf14d3eb402e6fa515cde2113a07f5a3b4050e98050
        Filesize

        168KB

        MD5

        63d155f889e09272d85cfd9dfc266131

        SHA1

        3f6ef29b86bf1687013ae7638f66502bcf883bfd

        SHA256

        8b53b519623b56ab746fdaf14d3eb402e6fa515cde2113a07f5a3b4050e98050

        SHA512

        1f5464c9cb2786174d953666a287d5a681abe627e9caddf45986cd73290e6d73db9ddf2ccd589a0c09e4fe10cdf42b1d8d31dbfc5759505866f516769fea1727

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.08.19_CISA-North_Korean_RAT_BLINDINGCAN\README.md
        Filesize

        57B

        MD5

        0272f462b25073e0228d87c39ed15eb3

        SHA1

        8c3de1da5c8660f872dff926a8784f2fa651eda4

        SHA256

        80eaf28ff86838e322a4413f90c055151615a42fd0ad4d665201271684b9c06c

        SHA512

        2a12b4fc21ad5eb65c75df83918b30f5028f10bd688a36a850b67a1cef76de3dac65177124e920ed8085f930173dfc414c773332dead677dda98e64efe33cb9d

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.08.19_CISA-North_Korean_RAT_BLINDINGCAN\bdfd16dc53f5c63da0b68df71c6e61bad300e59fd5748991a6b6a3650f01f9a1
        Filesize

        160KB

        MD5

        e7718609577c6e34221b03de7e959a8c

        SHA1

        97d24ac0d773f6260ab512fa496099b3289210db

        SHA256

        bdfd16dc53f5c63da0b68df71c6e61bad300e59fd5748991a6b6a3650f01f9a1

        SHA512

        95aab6ef454c364b63002df7949c33602964d0905b4a23511bd9462aa5037c71a933f8bf3a3d650be76926e92bcf39e362a047c2da3da727096d16c1187e0308

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.09.18_Checkpoint-Rampant_Kitten\1b8cd7c93dce63878dadae0cf77482ae367477841a4604c6a842158466790737
        Filesize

        1.9MB

        MD5

        326843b42fca324e9fd023058a6c6b7a

        SHA1

        8c59a117faed95777e15fefe0a2ed34d492e3205

        SHA256

        1b8cd7c93dce63878dadae0cf77482ae367477841a4604c6a842158466790737

        SHA512

        4887b4384f4e40dab8083b95a67b8a10b40bde37729c8c6bb51192d62d3fb4e44be471b206569a1d07cf7d7312a2a9a57d34312d93e8dd4935352be4829d0f08

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.10.05_Kaspersky_mosaicregressor\adb8bfa6e227847c2ffa6e1c97d08280081426480ed9b2ce6af26a23fbd1334c
        Filesize

        93KB

        MD5

        74db88b890054259d2f16ff22c79144d

        SHA1

        fdcd48cd0e094c5ae50665d506707d0658ce97be

        SHA256

        adb8bfa6e227847c2ffa6e1c97d08280081426480ed9b2ce6af26a23fbd1334c

        SHA512

        ac40b94c9344a2baad669ad1ade19a18f101dbb428b499df5854c3136d25d766b34a5a19a61e83e2cc32a7ee319e2908c476df394b29922eaf1cce404b572a62

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.10.05_Kaspersky_mosaicregressor\b8425a5c05c01c1294ce75719049e1b4eab32c34cabe456c281f110976cf2ade
        Filesize

        204KB

        MD5

        61b4e0b1f14d93d7b176981964388291

        SHA1

        aab1a8e78ed4e9b79edb5cff6b6df6dd6b24fe65

        SHA256

        b8425a5c05c01c1294ce75719049e1b4eab32c34cabe456c281f110976cf2ade

        SHA512

        ea5ff175ca863cec6faa043ee304300b5585288f8ce3cd88cab904240b6bd65080236845035504cdfe491f8bc91ece073be1eadad360044e7e5fb1168ae6b054

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.10.05_Kaspersky_mosaicregressor\fc189b913bfd5995a7ed5c4e8a811ad237f7b973e120a25baccffbf4ea1d3838
        Filesize

        61KB

        MD5

        88750b4a3c5e80fd82cf0dd534903fc0

        SHA1

        3f1712aa819a8a96fa8389768cc603a019c1458f

        SHA256

        fc189b913bfd5995a7ed5c4e8a811ad237f7b973e120a25baccffbf4ea1d3838

        SHA512

        5b6da530ee2ac3680a08bc5af5cef54df0026db9528463a19e0c9f7ce636f0c5c02b29a7a61bde2e5c13592ed5f1e94903bbcf5e6b74f44ae04ae72cbd0077c2

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.11.12_Cisco-CRAT_Lazarus\11c266c1b0f0428585d40fc95d1a7d3eedb3d0f304cf7ebc692c4487e18c9afb
        Filesize

        660KB

        MD5

        f17cd8f733e8b40e94d986bdfe7d95aa

        SHA1

        853dcbe20b80780c24f51a60169562b89e9e0d52

        SHA256

        11c266c1b0f0428585d40fc95d1a7d3eedb3d0f304cf7ebc692c4487e18c9afb

        SHA512

        dbb4b6cf6888cb24a9407389f09d15defa946b44b1457e38a9c46c22efc4e43bc1bb62959ab01b57759a1c875eadf1b31832438ffa0ca127f37bc273c3366689

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.11.12_Cisco-CRAT_Lazarus\3c2e708989193b3497c2c97c3957d4abd2d5989c82832ce5c4a3b5a4c9ecd3f8
        Filesize

        260KB

        MD5

        bfea10eaf1645fc0847156c1ee2d8240

        SHA1

        7b92d9eb16700cd1153288b6da7cb25ff5a88ebc

        SHA256

        3c2e708989193b3497c2c97c3957d4abd2d5989c82832ce5c4a3b5a4c9ecd3f8

        SHA512

        e0c523814ce2cb371457bb74d80af35080cb9c76e02786b5f85cc5f16ce9764b824c2af8101eda5b0e99b474c89f7fa0d8cb3eaa4fbe47c5d97a05159c6b4b03

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.11.12_Cisco-CRAT_Lazarus\3f47d73a9d6597da1bdbf36f804b0b69a9958225ace088747098d3a24f5a5957
        Filesize

        249KB

        MD5

        24c80b9f34a7bb7260426d6329251718

        SHA1

        a829763d1f271bcec087d9f871e57aed40f567d2

        SHA256

        3f47d73a9d6597da1bdbf36f804b0b69a9958225ace088747098d3a24f5a5957

        SHA512

        0628909b3e297e89c9696b3dd078405539bbed8b128c6c8a552c3d28c8c51afc9611de86b732f42714fb99572d374a902ace478b65afc7332339b73ce628bf42

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.11.12_Cisco-CRAT_Lazarus\4dccd9861da3b47bef43c72546044c1d136a5cb020aaa65a1ea494aec35e4910
        Filesize

        257KB

        MD5

        6325b972647412688b44fa80de31b715

        SHA1

        ebb156b1ab6f689ef0ea467be272807f183dc973

        SHA256

        4dccd9861da3b47bef43c72546044c1d136a5cb020aaa65a1ea494aec35e4910

        SHA512

        c02eb20025a2a04897cdc8804434f9bd6878d5b339440f15653e852fd822c3cfba815b490886a5a4b5a316f8252d11902300a2f3a708575004b0243ee566b408

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.11.12_Cisco-CRAT_Lazarus\6d57df368c3e58be61bc36ee35123dcc5ce6d7a04cd6acfe7e10588038589ad4
        Filesize

        259KB

        MD5

        c900b23d5f9259d9743181ff4bf2db8a

        SHA1

        64dc9e37336c4b9ca720408a8a8ef73aba692e0a

        SHA256

        6d57df368c3e58be61bc36ee35123dcc5ce6d7a04cd6acfe7e10588038589ad4

        SHA512

        1dbce29c710b9bb593489b01174fdaa2e5982ece7c29a81070ef59c44d3dfc0f98daeef39c52dffd2f0c7b48909d22a79e639b56b678d2c33d7677795121ca21

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.11.12_Cisco-CRAT_Lazarus\8ae6f663bf40036379857d65521ce1c78c11cd9b5b4848cec0e7f1ad56e65743
        Filesize

        277KB

        MD5

        294923130fb9b5b2d55db799e5df5450

        SHA1

        fb0e9217c7a6b0f78af65c4d9c9b411c37b2036c

        SHA256

        8ae6f663bf40036379857d65521ce1c78c11cd9b5b4848cec0e7f1ad56e65743

        SHA512

        a9292b6b4b2eb75d558a2b8361b081a3c53d0d144966cfc2d64db903246901215837b1399952d806e2972debdfec7c191746bb8ccbc044d141bbdb70c9d7d4ff

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.11.12_Cisco-CRAT_Lazarus\bb1af121502e40a549135b72f34ad49d11cfbfa49b5cbcf549777549087fe751
        Filesize

        258KB

        MD5

        9070256c0531a143da6ee6697b5aa352

        SHA1

        54f313419abe2dd153b7d2e66f8270b2a459cd13

        SHA256

        bb1af121502e40a549135b72f34ad49d11cfbfa49b5cbcf549777549087fe751

        SHA512

        f9e22d2f730a699c4cde38b6bb35b16733864e17d3de109a667ebc3e8e057f6778ae5a62f597ffbde936cc8fc8b075814012890058364ee4a86ebb8649eeac40

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.11.26_Checkpoint-Bandook\8cb1f713761a6b31c9c25dd2c7ae11e575a634c9f052cfd598ada35a61783230
        Filesize

        1.0MB

        MD5

        0475771b8bc3efc28b1834f3add608f3

        SHA1

        9087c24b181d58bb57d02a1ce19f8d17d63476b4

        SHA256

        8cb1f713761a6b31c9c25dd2c7ae11e575a634c9f052cfd598ada35a61783230

        SHA512

        4d866a067d212c22286abfb6cdf86f72ef1d25f0dfb3760e6d1b1d518def9bc79a0bb6016eed0da6f537d8a6e1e5808204caf0592edaf9ed8cb2d9cece89d2f2

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2020.12.19_VinCSS-China_Panda\f659b269fbe4128588f7a2fa4d6022cc74e508d28eee05c5aff26cc23b7bd1a5
        Filesize

        171KB

        MD5

        c11e25278417f985cc968c1e361a0fb0

        SHA1

        989334094ec5ba8e0e8f2238cdf34d5c57c283f2

        SHA256

        f659b269fbe4128588f7a2fa4d6022cc74e508d28eee05c5aff26cc23b7bd1a5

        SHA512

        958d5f17add4fd7a8bc3f98b016712faf6fc14697b183b785027f53e971b6c5ae5b8fa260192777f68f7027f3eda4defaf4987a81fb9f697dcec898bdc1c649b

      • C:\Users\Admin\Desktop\New folder\Malware-Feed-master\2021.01.27_CISA-Supernova\c15abaf51e78ca56c0376522d699c978217bf041a3bd3c71d09193efa5717c71
        Filesize

        7KB

        MD5

        56ceb6d0011d87b6e4d7023d7ef85676

        SHA1

        75af292f34789a1c782ea36c7127bf6106f595e8

        SHA256

        c15abaf51e78ca56c0376522d699c978217bf041a3bd3c71d09193efa5717c71

        SHA512

        f7eac6ab99fe45ca46417cdca36ba27560d5f8a2f37f378ba97636662595d55fa34f749716971aa96a862e37e0199eb6cb905636e6ab0123cfa089adba450629

      • memory/212-1394-0x000001F82DC20000-0x000001F82DC30000-memory.dmp
        Filesize

        64KB

      • memory/212-1396-0x000001F82DC20000-0x000001F82DC30000-memory.dmp
        Filesize

        64KB

      • memory/212-1386-0x000001F82DC20000-0x000001F82DC30000-memory.dmp
        Filesize

        64KB

      • memory/212-1387-0x000001F82DC20000-0x000001F82DC30000-memory.dmp
        Filesize

        64KB

      • memory/212-1388-0x000001F82DC20000-0x000001F82DC30000-memory.dmp
        Filesize

        64KB

      • memory/212-1389-0x000001F82DC20000-0x000001F82DC30000-memory.dmp
        Filesize

        64KB

      • memory/212-1390-0x000001F82DC20000-0x000001F82DC30000-memory.dmp
        Filesize

        64KB

      • memory/212-1391-0x000001F82DC20000-0x000001F82DC30000-memory.dmp
        Filesize

        64KB

      • memory/212-1383-0x000001F82DC20000-0x000001F82DC30000-memory.dmp
        Filesize

        64KB

      • memory/212-1382-0x000001F82DC20000-0x000001F82DC30000-memory.dmp
        Filesize

        64KB

      • memory/212-1379-0x000001F82DC20000-0x000001F82DC30000-memory.dmp
        Filesize

        64KB

      • memory/212-1380-0x000001F82DC20000-0x000001F82DC30000-memory.dmp
        Filesize

        64KB

      • memory/212-1381-0x000001F82DC20000-0x000001F82DC30000-memory.dmp
        Filesize

        64KB

      • memory/212-1378-0x000001F82DC20000-0x000001F82DC30000-memory.dmp
        Filesize

        64KB

      • memory/212-1377-0x000001F82DC20000-0x000001F82DC30000-memory.dmp
        Filesize

        64KB

      • memory/212-1376-0x000001F82DC20000-0x000001F82DC30000-memory.dmp
        Filesize

        64KB

      • memory/212-1400-0x000001F82DC20000-0x000001F82DC30000-memory.dmp
        Filesize

        64KB

      • memory/212-1401-0x000001F82DC20000-0x000001F82DC30000-memory.dmp
        Filesize

        64KB

      • memory/212-1402-0x000001F82DC20000-0x000001F82DC30000-memory.dmp
        Filesize

        64KB

      • memory/212-1403-0x000001F82DC20000-0x000001F82DC30000-memory.dmp
        Filesize

        64KB

      • memory/212-1384-0x000001F82DC20000-0x000001F82DC30000-memory.dmp
        Filesize

        64KB

      • memory/212-1392-0x000001F82DC20000-0x000001F82DC30000-memory.dmp
        Filesize

        64KB

      • memory/212-1393-0x000001F82DC20000-0x000001F82DC30000-memory.dmp
        Filesize

        64KB

      • memory/212-1395-0x000001F82DC20000-0x000001F82DC30000-memory.dmp
        Filesize

        64KB

      • memory/212-1397-0x000001F82DC20000-0x000001F82DC30000-memory.dmp
        Filesize

        64KB

      • memory/212-1385-0x000001F82DC20000-0x000001F82DC30000-memory.dmp
        Filesize

        64KB

      • memory/212-1398-0x000001F82DC20000-0x000001F82DC30000-memory.dmp
        Filesize

        64KB

      • memory/212-1399-0x000001F82DC20000-0x000001F82DC30000-memory.dmp
        Filesize

        64KB

      • memory/212-1405-0x000001F82DC20000-0x000001F82DC30000-memory.dmp
        Filesize

        64KB

      • memory/212-1404-0x000001F82DC20000-0x000001F82DC30000-memory.dmp
        Filesize

        64KB

      • memory/3184-1354-0x0000021441960000-0x0000021441970000-memory.dmp
        Filesize

        64KB

      • memory/3184-1338-0x0000021441860000-0x0000021441870000-memory.dmp
        Filesize

        64KB

      • memory/3184-1370-0x0000021445E50000-0x0000021445E58000-memory.dmp
        Filesize

        32KB

      • memory/3184-1374-0x0000021447070000-0x0000021447078000-memory.dmp
        Filesize

        32KB