0ebf2c65d39c6b60fac44e742eaf4888f27598a9c81283c8aff4a290997907e1 | Triage

Sharing

General

Target

0ebf2c65d39c6b60fac44e742eaf4888f27598a9c81283c8aff4a290997907e1
Size

3.6MB
Sample

240802-xknxra1bja
MD5

d9445b504b8650ac8e374c629935b409
SHA1

644c46e90f969a7f05c79c6b16e0edea9dbc25ff
SHA256

0ebf2c65d39c6b60fac44e742eaf4888f27598a9c81283c8aff4a290997907e1
SHA512

2fd63b287cacaba464ffbdf81519e4d5a63fec5ea9376f470ae9f7038fa6f75a5b094985d6eb7bf3d9b2d96425b3a9c4170de140712988183d5c6bc3ae8af905
SSDEEP

98304:lehJ1X9Cio+X9CicyHd/D8aFh2yO82gfC/LXJFC/BEwa:lI15n5cQ/YQO8TgXbua

Score

6^/10

execution

Malware Config

Targets

- Target
  
  seosaserveradmin/classes/ServerAdminFS.php
- Size
  
  8KB
- MD5
  
  c811fcc9cd8d16891125eb03de36d8d9
- SHA1
  
  d082bbd46ea4525d5741027926ea8c5470c8e265
- SHA256
  
  acb8a9f8d0c84b8f644255d3beb86f0f89067c69f15d00552de5446db44d0173
- SHA512
  
  3edc5a3d75146e93048819ee48bfa527b908c417c519c198b4804c7351651b346b9409736546533c1ddd2bfa4c921863fec7b66d0930e18ef059570a884ea809
- SSDEEP
  
  96:7z/wr7irACg9/WDjMYyckz+mw97Qz+lTFM6q2S2T8Gai2z5:q7hCg9/Ajfmz+lTFMYDT8Gaj
Score

3^/10

execution
behavioral1 behavioral2
- Target
  
  seosaserveradmin/classes/tools/ConfSA.php
- Size
  
  4KB
- MD5
  
  fc1faa0ff34c8a121ab16641bfc28753
- SHA1
  
  b0062d05fbc8567b644dcd406200d134d3dc1b9a
- SHA256
  
  8b8a974ae7fdc0c76e0108a9d913e011a05bb1290d29ec1d0ce9cae8e6623379
- SHA512
  
  5826d9dfa867373cd063098f72757229605f8c46f3c161f1f70615650bdfefdef4517227704609377ee79c979b5fe6a1bcade524f860f36692fc3e9cf12a27a2
- SSDEEP
  
  96:zBz/wrbz+AATOQVlZ6Zl6Q1qv8sDq0efqX9p:oZATtvZ6ZlR1y+fuH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  
  seosaserveradmin/classes/tools/FixtureSA.php
- Size
  
  10KB
- MD5
  
  df150c75d5b59d00e9a132c3e03c7ca6
- SHA1
  
  c002c66433f3c0eeec7c279e0e75f49ed78cfcf5
- SHA256
  
  4a6518474fe7ab9467946239812c9b5cc645969c2b580a5e9863d9f0da4ffc82
- SHA512
  
  55f332ab4fe5fe2cd96c9b79b9325955ca935b68b90e38e5c3ed26f884f6bd6a32cc3fc0be5341a831a7800ed85f0d7b8b1e73ba71d7b09dc5b6886ab4da35b8
- SSDEEP
  
  192:o61s2FMdcFWksrPPhZqQcOpuFN7FI5ntHw8hgBJ:RssvIHBuFdFuHgBJ
Score

3^/10

execution
behavioral5 behavioral6
- Target
  
  seosaserveradmin/classes/tools/Helpers/FormatConfSA.php
- Size
  
  3KB
- MD5
  
  7dd4f53696e0027c2301002e476dd18a
- SHA1
  
  4d9a268dff929da15c913348536389a027c60ca3
- SHA256
  
  893da66d1ccf76017128b1833087f49814913d0576b2662faff3eff674f3fd8d
- SHA512
  
  3ce54cd9e46e328b34e599a261bd2e79198473a489a7dd8cc828b7772456328eb94bd3dd20118e0a06cc123dc87c46e1b53f50dcbcf90caff57daa5b2a497c20
Score

3^/10

execution
behavioral7 behavioral8
- Target
  
  seosaserveradmin/classes/tools/Helpers/HelperDbSA.php
- Size
  
  25KB
- MD5
  
  db84c88aba67c0d9444eb76d21e4c358
- SHA1
  
  a5679950f5baa08a0d43d2f3dccf06bc34300048
- SHA256
  
  155c830ce3dbc85652acd7e20cb7df618abd95d34a36e0a09ec774bafc3652f6
- SHA512
  
  03215c2f293cffbbaa6305e93ddffff7bdad004f6a0667f8a9fe8e708847b38b4a0265f3f22c177cb1b2d78bbbacaf61779a0c32d4e259785e1b0dae6a7d1e01
- SSDEEP
  
  192:o62hfLct1HM4qamQk2OuCJ0WItuvA5dsbZHJ4zhMu6OYEL+gq8Qwfwh:+fLQHM4QzSWqsZlu6OYEL+gqR7
Score

3^/10

execution
behavioral10 behavioral9
- Target
  
  seosaserveradmin/classes/tools/Helpers/HelperModuleSA.php
- Size
  
  3KB
- MD5
  
  8500c0d931343fd35daa3d926a31c70e
- SHA1
  
  453e41edf138eb2871c031e36bf9174a8cdc3e3c
- SHA256
  
  634b69be7c9a8e7948bccbc3c50120d8ae562238e19252cc7a21e2d9f33d9bfc
- SHA512
  
  12fe7836d7cabafeff87b1796e9154e314b664357a633835e91753844688d9c4c7088ce30da02782d8f00d300424ed177d00d70209414368092dc715c082a423
Score

3^/10

execution
behavioral11 behavioral12
- Target
  
  seosaserveradmin/classes/tools/Helpers/HelperObjectSA.php
- Size
  
  7KB
- MD5
  
  fee003ea5f590a2f5fe164c805510d57
- SHA1
  
  e190dad95f3cb78ee6ad5de2e9dd619afdb2ae49
- SHA256
  
  f6db306de248a77aa03e6afad34101adec9c99d02343fbecb51b97b9672e521b
- SHA512
  
  7c15bfb240bf34afaa7233d5fb4d725c412a60b0e3e6bf0b386358e34dc2161f5a7fe71c7c656e34c752f0d2d98abdb660eecd3870ea9248a6aa7c6ba089d156
- SSDEEP
  
  96:zBz/wrbFAmU269rLL/Ey3oWHouvopwPN/lSvo2NoX8pSV3X82D:o67MVFyz9d2S982D
Score

3^/10

execution
behavioral13 behavioral14
- Target
  
  seosaserveradmin/classes/tools/Module/ModuleAdminControllerSA.php
- Size
  
  9KB
- MD5
  
  ff2a912c4e947485add65eecd839f799
- SHA1
  
  368a6ac06a947ea9edf2a76cf08e66d5e0e9707a
- SHA256
  
  8afc3cbc559526c8067c896ba6a20c7e1f1934112d79d97f6a78cdc5bddeb115
- SHA512
  
  3282856d5719dae6ab629c1cba4180f0b904e682acd8aa5b307f35ca7dcfbc8d2ae8e699fabe61bdb9d650f93dcf23751fd60ac8bed7ab92d4ed655b66d512d0
- SSDEEP
  
  96:zBz/wrbFApd0pNtstktSyQoAW60FN5tbaZr731uoxeno3N7oKdEFKJ735UEVNGFJ:o6Ad7AYJbae8KKdTJ75k6Ykqzyq
Score

3^/10

execution
behavioral15 behavioral16
- Target
  
  seosaserveradmin/classes/tools/Module/ModuleContainerSA.php
- Size
  
  10KB
- MD5
  
  3d6bf4824b3dbfc6005685bc30e31d2f
- SHA1
  
  1366aa9cf7840756da9c1d3530ad4a9e8522c195
- SHA256
  
  935da815278d985a9d335a23f9e683dd5043d5a193ddc51a7231e8726a276f86
- SHA512
  
  57fc17d900e9c33e76a45bcad97c9f337d1302eb523ae5dfe2f1552a1c6794545ca499ff2a5f05118bfb2792e0ede45a0e2b29fad4fc377ffaba3704907a69a1
- SSDEEP
  
  192:o6IPuxgAsBkB4U34JdcdakOFvCIWt4U1z2kS0vsdm:8AmUIJeQkOFvHnU1z2fwsc
Score

3^/10

execution
behavioral17 behavioral18
- Target
  
  seosaserveradmin/classes/tools/Module/ModuleSA.php
- Size
  
  6KB
- MD5
  
  60748536d48aa50af2e3d790d545689a
- SHA1
  
  bd62eede70932a665d06ba04978dc464911628cb
- SHA256
  
  cbe3466b3207af2504e3e99548cc47d501df01eeba09c4f467b3d2c940bad338
- SHA512
  
  39e5797c4e42d082a5b53919a5f3e8fe4e2ab578d5e32fd6b3d073122bdfce62cdbf833f8d7da712e61df9b0517765cae5ee62247a589ed4addddb8d2446c49f
- SSDEEP
  
  96:zBz/wrbFALM64Gb4Uu4VLd1Sd+x7kr11LrC2WP4Uu4zuz/H0hUn:o6LM64M4Uu4Jdcda7ODvC2WP4U1zsUhK
Score

3^/10

execution
behavioral19 behavioral20
- Target
  
  seosaserveradmin/classes/tools/ObjectModelSA.php
- Size
  
  10KB
- MD5
  
  5ac49fdce1ce9901d57e11421e9e5101
- SHA1
  
  59002faa5056a2b564d8e3782b87f144db664544
- SHA256
  
  12bfa3598f9df025b378072ece01b24a8fb8e7883702d2835a32f8c120628759
- SHA512
  
  51b86e76a0589e4f4a1efb82e6d331bd91506fb89606a33b8977b5bb8dabe3b231fda9f17be2ad67e69dbf38b2901035b992fd1ef14308eef4721f8f68652f15
- SSDEEP
  
  192:o6y9drNLvN6kuT61gCEMsnUF4W7oMRMTvBbxijRfbQSyG5L6:mjZiTG7EIF4WNM
Score

3^/10

execution
behavioral21 behavioral22
- Target
  
  seosaserveradmin/classes/tools/ToolsModuleSA.php
- Size
  
  22KB
- MD5
  
  718e6c3bf76ed0e94d74fe157a91c99c
- SHA1
  
  424f5add2c9070cf0da4eef5f1d2950caa114381
- SHA256
  
  48954d0e2a4e16034397cced0bdde5e3731c07ba773a2b955d35e7febfea13f1
- SHA512
  
  c4d077cd96819e127b98b75eba7ba1c7443a9477da38c2be22f71a2c37c3f8a54c743a42c1f3eb1909648bf4cbb82038cc9612687f64798ca30992d31abb03e6
- SSDEEP
  
  384:puHemcDIHG0eeyYMi67rRHmp35KXov1hxU:YcDh0JmGp35yo9hxU
Score

3^/10

execution
behavioral23 behavioral24
- Target
  
  seosaserveradmin/controllers/admin/AbstractServerAdminController.php
- Size
  
  8KB
- MD5
  
  ab2ee5f4fc93cde1bba4be73ce1dfde7
- SHA1
  
  027ac132e7a7a38197e0da8e15fa6aa23ba84465
- SHA256
  
  4c453410cc1f99ed354e84731ff9a2bfec756da8393120899690b79d2dc3a173
- SHA512
  
  498adbfc4a15f87fff42dcf69ee145409954eb1cf37948c6234511686a7a31762b6dfa236fa087bc2919e5f1f5b09280d073fc80cfb656e1fde07af9d33ecdef
- SSDEEP
  
  96:7z/wr7DW6Aw92KKGT3dcb4oX/fXp+LF4JBTlMEIxj7AsaXcmJIcpVdlru:q746KhUaR+j48
Score

3^/10

execution
behavioral25 behavioral26
- Target
  
  seosaserveradmin/controllers/admin/AdminSettingsEmployeeController.php
- Size
  
  5KB
- MD5
  
  1e1248d84f2b2d42edfe0a8e84ad4dad
- SHA1
  
  6d5835e363875e91c85dcf13ff5eac5c8411187e
- SHA256
  
  74e26bb9be827454df915f9f8a02dffb1ae570d0b3dcb3b8c2fb4003b1a785e9
- SHA512
  
  0766caf8d65211b0a5a695db54678864e30cf8a674fa2544cabad4a3c22d8927182fa7fe0b9c87a7be72fec6a106653ebb720b190fb6fcf2ac8ef93ccd4feeed
- SSDEEP
  
  96:8z/wr7DW6AZhIAwiG+kki7a6pvjjdTBdyWqwQ/iuNEY7HLCAEVNGJR7z3E:X74Z6iBYjdLzQ/EJIJR8
Score

6^/10

execution
- Command and Scripting Interpreter: PowerShell
  Using powershell.exe command.
  execution
behavioral27 behavioral28
- Target
  
  seosaserveradmin/views/js/app/app.js
- Size
  
  1KB
- MD5
  
  ef1dcc84196a8a6bafe6b9932546d155
- SHA1
  
  d24f6c8920a73f96dc8d11cdd06fb81ca14819dc
- SHA256
  
  215e5e803e9eb197d0c234f7ea091866548858b10b6ac2eca97cd0af2af6fca3
- SHA512
  
  d346176d95eb6df30f6c9484746a24225d073c3f70330123ece8b0bb6d9c15c65152813978cc317c30432ce5690e32844f7b516250796c81e1900ede78a71387
Score

3^/10

execution
behavioral29 behavioral30
- Target
  
  seosaserveradmin/views/js/app/directives/drag-drop.js
- Size
  
  3KB
- MD5
  
  c90a12fb6a5cfc822c87def419d4616d
- SHA1
  
  836404cdbe65202ee90cfd238822373c7b27c388
- SHA256
  
  0d1e0d2db88d6930a9d1ee5d6f76011154d8ac97abbf6cee836c6afaaa5e9d8e
- SHA512
  
  6acd20e6fb4fb73a8a3eeb58692b321b8f637f74cf9b42b943b27b26fdfbc7b369c2dd0e555559f754e0c054d7a81597c5eb2eeefd375556b35e5fef05b570d4
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32