Overview

overview

3

Static

static

3

Debug/Axon...UI.exe

windows7-x64

3

Debug/Axon...UI.exe

windows10-2004-x64

3

Debug/mona...x.html

windows7-x64

3

Debug/mona...x.html

windows10-2004-x64

3

Debug/mona...ain.js

windows7-x64

3

Debug/mona...ain.js

windows10-2004-x64

3

Debug/mona...lua.js

windows7-x64

3

Debug/mona...lua.js

windows10-2004-x64

3

Debug/mona...ain.js

windows7-x64

3

Debug/mona...ain.js

windows10-2004-x64

3

Debug/mona...nls.js

windows7-x64

3

Debug/mona...nls.js

windows10-2004-x64

3

Debug/mona...dex.js

windows7-x64

3

Debug/mona...dex.js

windows10-2004-x64

3

Debug/mona...min.js

windows7-x64

3

Debug/mona...min.js

windows10-2004-x64

3

Debug/mona...der.js

windows7-x64

3

Debug/mona...der.js

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Debug.rar

  • Size

    551KB

  • Sample

    240723-sxgxrazdng

  • MD5

    5e7db3678c2671c445b39a46d717e773

  • SHA1

    5c7dc309d7dd22a55039939d0c24b8d777f3a208

  • SHA256

    5895286337726c72ea6478db683e7ace43bf1f6d87f995b0a8126ab85c527a75

  • SHA512

    4f71d106105a4e882f9635a167b595f39aaa1711712afd7a29705d3d2b38356f87d83f635429ddb13596aeef82c64d72461f29c1240e228fb72bf5d23dc68380

  • SSDEEP

    12288:cu4e58BEiBfow3RaZR2/4MMC72VU9uUzlQiASWutjzj+Zy8:Z8BE+ogaRG4Tako7AtupT8

Score
3/10
discoveryexecution

Malware Config

Targets

    • Target

      Debug/AxonSimpleUI.exe

    • Size

      18KB

    • MD5

      c8457d9d71002cdff4db8eb68b25399b

    • SHA1

      17cab41244f9ab394c5f1ff07e488895c44fbb52

    • SHA256

      23aa122d614f63a51ac20202a1b2965fc401808ba3034c30c921c36a4429820c

    • SHA512

      b7e7b2a02bf5020a40f33abbc9762c53bf2dbd1dc57fd14785ed318e557730adcc012f53775f0b632377beda2ed11cc4931ff4d4f8c1160b7683089f898a8e19

    • SSDEEP

      192:u0AG62iFb1+gr+CUWRmw9EdBPpN//spJ7QOgDwx7b00VxLiP+llv5fanobnNCq4m:uV1UhHx8JgDwx7w0Vx+P+lzRoWfc

    Score
    3/10
    discovery
    behavioral1behavioral2

    • Target

      Debug/monaco-editor/index.html

    • Size

      986B

    • MD5

      078fb691917e14ba84655dba574c5854

    • SHA1

      38c18db0157436ed71aec55605663a7a33301a6a

    • SHA256

      ef442ca60d435c6b9893e478a0544b9696aec21003f7b414a56a6902c6ee47b0

    • SHA512

      f9dca44c6e4efb972eb5999a7d2de1232365b8d5f721a74efb33c2fe6cd687a577df663d339dbc07c75efb9342910dda4b7d0b21d582a025fb30da163553ad97

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      Debug/monaco-editor/js/base/worker/workerMain.js

    • Size

      129KB

    • MD5

      01604b50a7cf03aac505d1dd037cc916

    • SHA1

      c5b27ba0cb13d4e7c4d6adfc170224622ccf8096

    • SHA256

      2f402d4e2fbd3928612675137a5747f9fb99142beeaf782e0494c47149684f77

    • SHA512

      bfa664c69b474a7dd89ef42548577848847a078b918c7368a4cd2f2525373c5d510aa774805eb585e5834cc67d46856c2ca2906a10912a7dbe42722aa5b17656

    • SSDEEP

      1536:0FiXSa5wKAbxLnH4YkHQK5luIVQNIgyUIzYJj2WEQ+ILmrJARWb8ors4ovRVe2f+:0PPTUzYJj2Wh+ILkJARWPItvi/HLQ+

    Score
    3/10
    execution
    behavioral5behavioral6

    • Target

      Debug/monaco-editor/js/basic-languages/lua/lua.js

    • Size

      2KB

    • MD5

      c8b58ebd7c85658b4b71f0c793bfb594

    • SHA1

      24f67fd8721cd7c37d27bf23471179e6b1c6b394

    • SHA256

      15183924f7b79e081e9bc13fd066566ba5e4407938cfe5d906d6758fe110ad28

    • SHA512

      2ce28a14ff5ef805a89855ef0f0c36c9c4257a341da931d150be00a8beb39a2ad0ad2b3992d4c2a767678752fc94dc4574409b403411d8fee8ac7569ade3d1a7

    Score
    3/10
    execution
    behavioral7behavioral8

    • Target

      Debug/monaco-editor/js/editor/editor.main.js

    • Size

      2.0MB

    • MD5

      c24a6ca956a8a6e6c40f0ab7d08bb167

    • SHA1

      c7bd7000ceacca66bb2857f3bd4e663a12a6f64f

    • SHA256

      f15c0ab2a01a72b252c70ff1cc7c38705c6eed2e45e1b1192a2a84c8742dbdd7

    • SHA512

      c15cc917c9f36dd9c034647b478b98935e32db448751876368e92a1a808bd2091cc440ab7522cdb91a47bd0876a43f11240b1ace8b3128c0400a0c39437c1845

    • SSDEEP

      12288:zC+QZuLAJ2C1S4mvXt9tulvzCXy3KX3P0UYR3Hg4nkobLggRJl1ql+KUaWwMky4n:zhd9tudzCXyaHnYR3Hg4ns+KUhwFrvNx

    Score
    3/10
    execution
    behavioral10behavioral9

    • Target

      Debug/monaco-editor/js/editor/editor.main.nls.js

    • Size

      37KB

    • MD5

      823d4d4379cc9b045b6f213929e50a2c

    • SHA1

      89af48591491dbecc00a68fccef002538afbcd4d

    • SHA256

      38f54a88267269d32f5329306ebede18e1f07b6e30e02184068530618522f335

    • SHA512

      e0ad4a8ffe064bc7753b704e44e27d96bfac89b9da6215ff51278471de756edbd6efabf9a09e0909c154a8ec3f305e8c18f7b04bc17928ebc3b8e5c53fb70ef7

    • SSDEEP

      384:hI8FJmvQkKEQq4ulX7lr0IJUeY44jj87XfVGZ3H6Sq6B4wCJjocj06G7J9FK2UsR:+8FmfQq4u6b7pjBs3xYKqk1Ve/eu

    Score
    3/10
    execution
    behavioral11behavioral12

    • Target

      Debug/monaco-editor/js/index.js

    • Size

      733B

    • MD5

      e82ed9664e8b078997199649c2f842fa

    • SHA1

      ecbf99c9ad01e4b7efc973acfa99f2ef2dd3dc93

    • SHA256

      0c367bb07a809cbcb6fe5f619524e8e2ad5cd4d1c7a8a76822cd95bdba93a580

    • SHA512

      504d6ebbb480828d1cbbc480250b42a59e72b8aa2c01fb33f46eb643073acfc75406e73f0dbc20303b839d288bc65d1172ea5ff98e8dff4708eb287e7d82c2af

    Score
    3/10
    execution
    behavioral13behavioral14

    • Target

      Debug/monaco-editor/js/jquery-1.9.1.min.js

    • Size

      90KB

    • MD5

      397754ba49e9e0cf4e7c190da78dda05

    • SHA1

      ae49e56999d82802727455f0ba83b63acd90a22b

    • SHA256

      c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4

    • SHA512

      8c64754f77507ab2c24a6fc818419b9dd3f0ceccc9065290e41afdbee0743f0da2cb13b2fbb00afa525c082f1e697cb3ffd76ef9b902cb81d7c41ca1c641dffb

    • SSDEEP

      1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUx:ddkWgoBhcZRQgmW42qe

    Score
    3/10
    execution
    behavioral15behavioral16

    • Target

      Debug/monaco-editor/js/loader.js

    • Size

      28KB

    • MD5

      e188e4a17027eb98b7b6bf79edf9e401

    • SHA1

      449a89e9f04a488449bcbdd9f625afab9df80a9c

    • SHA256

      26b50d9dac30a104b11e5fabfc0b3c3747cf9d97066fe4c6b5ae5f244482de84

    • SHA512

      adac366ba5f2671491e9f5248e6a2fb233bd6e1fc7290bbd1f26e4e9945cb579466dca15e10fe011ed33854302dcb61d2a890e93e4b3fba50a6903cbf558b6bd

    • SSDEEP

      768:H3CaU2ySSUgIMthjJJMDJEpvrCf708jQHqmy:XdwSnesFwlQ

    Score
    3/10
    execution
    behavioral17behavioral18

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Command and Scripting Interpreter

7
T1059

JavaScript

7
T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

System Location Discovery

2
T1614

System Language Discovery

2
T1614.001

Browser Information Discovery

1
T1217

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks