0687bec069f39a2799ef70d06d42cee8e336ef7ed1cb896a42f8366b69a6ff54

Sharing

Copy URL Twitter E-mail

General

Target
cfc2c0dec2440fd5a21887f561cc0e2a_JaffaCakes118
Size 541KB
Sample240906-rx8vss1fpp
SHA256 0687bec069f39a2799ef70d06d42cee8e336ef7ed1cb896a42f8366b69a6ff54
MD5 cfc2c0dec2440fd5a21887f561cc0e2a
SHA1 15270f500198f7f3cb917c6ec443c5aba83b9c12
SHA512 16f4151fa32da6c2a504e439c2448e2c633c6608da0e729431f8a0f9de1b73b8d55e22bbbb0475a867f6f932557f59d221a7faedbd33a7cbed28432d04342c76
SSDEEP 12288:Vfmsf/gsSNj/uSFRVTvZAOXTCQcCp/CgxXZ4gHP492QORYUFa5Ip:QsXgsSNFFTvLXuQcCdRLa23RYNqp
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

execution

Malware Config

Targets

- Target
  淘特留言板 v2.1/GetCode.asp
- Size 1KB
- SHA256 c2245a81c5f42c74f9fd99138900744f8f49cfa9c4ba8d34ebfb12f4bd5dc6a7
- MD5 d75f3e2efb15ed62d1f52ecb8536ef8c
- SHA1 af2209d91e062750899539c7d95f837fbd77559f
- SHA512 34f608486a11459004c28e814842259b57208579b24744c0d2cc9cdc48d01b8ae2a1909588c828a6a845cff03c1144bca42130ea473f25185e796c0d5e395de6
- MD5 SHA1 SHA512
Score

1^/10
behavioral1 behavioral2
- Target
  淘特留言板 v2.1/admin_login.asp
- Size 6KB
- SHA256 e08f57aaa2422d1b48cc6875cca8f3f71b6e8f3b9565f763e0190795c1511e43
- MD5 a255a864e70e8de55633fd248dfff572
- SHA1 8799d43d21294938c843c663fc1dcee614ad4bc7
- SHA512 dfffe841d29fe30b9f5f1f9aae9b42e803d8f8b380526504871bb7514409da3ee3c130d535be303d904fde725c16dc6dde9de383edb8787f076fba6676e1d74b
- SSDEEP 192:86U9/664rBGX1irxWytZpam0X1srcx+t5yK:8or5MYZDx5l
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral3 behavioral4
- Target
  淘特留言板 v2.1/data/#@)_+&#%.asp
- Size 436KB
- SHA256 63a84cdf2820dce8a4d01bcfac9407f288556a6dd761e0b296e5c1d61b96ec97
- MD5 409fe384a3a1dbe7196d9d02bb472530
- SHA1 d486a0ce839e15985ec63243a49feb5ac0e7dcb9
- SHA512 ddf4d927bcbfdaa304a99dfb388cf74b77ca86608f2bf7dae58ec0afcf8f23e3c416d387191cc8e5024b60f5b3d6feb47c09ff98c2be8b05b329d5001e356013
- SSDEEP 3072:vsAHKSBDDGljEeChyUSq1CM5ZD55X241jkoJH9VmI7++aw:DDdCM5ZD55X2ojkK9VmI7++aw
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral5 behavioral6
- Target
  淘特留言板 v2.1/edit.asp
- Size 14KB
- SHA256 7b3e888a0f09eed93273a067b82e55a71a532741d47da391554fc8720d4e8669
- MD5 8dc6fb05572691409f89e0361a971545
- SHA1 da5f192d5b5126da0caf7b2389d21da5a9e7135c
- SHA512 c319a9ad3f8dc83937845793af1fe02fc2b3f48e432d89f240f68ffe964134860f8a0881a426af5880fbf0f9f2048a3390eca2f1b6eb5ffbe316bd9b46b12a4c
- SSDEEP 192:8LU9/664rBGJ1irxWyCHkoreAy1Vr96ypyd1mrt+4Y6yOXi1lrJb6yN:8Vr7MKP96gDt+4Y6zXyJb6U
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral7 behavioral8
- Target
  淘特留言板 v2.1/guest_add.asp
- Size 32KB
- SHA256 523597cfb549346aabe12d3c649d028b31cdb51bee442c6fd2ec3082c8b07559
- MD5 955fdc9acb4d17d5f55fbcce6e4d892d
- SHA1 7d25065a59cd03745984835f0ca3f607e34de46b
- SHA512 391a3198dff8942bd4c0148fb7fc042e29b5b3707ee94bf1e6e0f85fdc87f5161a38c7768b39b20ba11f2052e5a4dcdd3952b17c8cf588d586e9c66a15b8c080
- SSDEEP 192:8LU9/664rBGJ1irxWya3pQUQT1orcSX07KFZcZVJktBHTFgOzXkZ3uSjH8FkCm5h:8Vr7MZ3vQ48D/oXkUeX4WC25l
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral10 behavioral9
- Target
  淘特留言板 v2.1/index.asp
- Size 13KB
- SHA256 8db6d05a7b39d871d4eae22e0c621710083407835ab8a0f85535424cf8036a41
- MD5 d967d606cbe246f0b4285bfb73aaf30b
- SHA1 c6ef25cc1f9cc0cc62d12dce9bb54010ac15c8d9
- SHA512 6cb7278bc55753b031ed325458cc7dd72ae2bce40d0d38a58f30bf00faa6ff4bbfa9571ee84dcb43d668f0e338ef97fa4c6832fb408a811afd44d4543a21cb73
- SSDEEP 384:ntD8lOwd7utRubesBTQdItBR8Z6Qr8B8J3tuN0M6QJz8/jPJfC+fAd+Jf8+2j624:tAlOwdYRoesBTQdItBR8Z6Qr8+JduN0h
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral11 behavioral12
- Target
  淘特留言板 v2.1/js/inc.js
- Size 12KB
- SHA256 f36658b8511ed714722b86f755f343d17d1d5ce49b8d709f94364d1dbbe50213
- MD5 e9e3efb77d731228c9360e236bd9eabd
- SHA1 d3950ebd850bab95637a8f1d073d5008375ddaf3
- SHA512 4eac3262a385e37a0282b90f04a1805bb4fa5c8fce35b1b026a649cd78ae4c70935feada740bca20bfbccedbcba6743367214067da9ad0070c30b910a19b2b53
- SSDEEP 384:NbCBfjTmgLUGpYAVX3vVto5xr8/O4jOn5gFEgr6z4h:QFd
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral13 behavioral14
- Target
  淘特留言板 v2.1/md5.asp
- Size 11KB
- SHA256 3e307e9ddb1bf6e5c0d8354705c88da0d9c9a80f2b8afee7b118933895c1fd5d
- MD5 ae29ce4b5c373ce4aa57a4ba058aa061
- SHA1 61093c8c0dc5e79bc2d9d7f47151db76179a1339
- SHA512 58f69f2c448cde9ddadc3e032d8486842b9975adca28e7e7eac14e5cbcefaec72399e4ea2d0b25f9c5ea5a7ad2525b40606d43f2cbec0db7b28d105b19bc57c4
- SSDEEP 192:fvioOa+9Y7D8MzYn4zVnt0y7jj/+jGguhFYv0VjoVM4eaaYxkZDMq:OSFh7OgFYvWjoVnF9xKDF
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral15 behavioral16
- Target
  淘特留言板 v2.1/tot_conn.asp
- Size 2KB
- SHA256 e980dce382c70a9039ce31e52ec8e9298c2940e87055750e3ebaa42d10d2dd05
- MD5 a8b86d67354f920607bd24719027496d
- SHA1 f6f84a1cb378a8b4bbae51e1b09de310e7112fa6
- SHA512 ae1616ac6e23fa88d3e164e6949169188ef6193b192d7eda7a914d9e706a147dacc99725874a92faa101b10e703696d7a7832129d2de983200bc22b48221ab8c
- MD5 SHA1 SHA512
Score

1^/10
behavioral17 behavioral18
- Target
  淘特留言板 v2.1/ubbcode.asp
- Size 11KB
- SHA256 dfd93c9d2c11a8306224cd80562b9c73480d98b421a75d68820b33e77c6fb1a6
- MD5 10b542fb783703a6c3c971fa4bda50a8
- SHA1 ba5eb7ac78880dc2e56aee63956564fd3833a60e
- SHA512 e05da9e52ccb2e8c64cc3ca63e209dfbb27b99aee2f475c0dbe93da0d70943f819f9be671740710d2f8e151f791eec62ebba226bd4c230bd1e945d9e201240f0
- SSDEEP 192:V061m5p0e/z2HC2HgaAJQ09458jF8jczy2/yskBz:3mb0eaBy8jF
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral19 behavioral20

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20