Overview
overview
5Static
static
5Unix/KPMG-...pt.txt
ubuntu-18.04-amd64
Unix/KPMG-...pt.txt
debian-9-armhf
Unix/KPMG-...pt.txt
debian-9-mips
Unix/KPMG-...pt.txt
debian-9-mipsel
Unix/KPMG-...on.pdf
windows7-x64
3Unix/KPMG-...on.pdf
windows10-2004-x64
3VmWare/VM ...al.pdf
windows7-x64
3VmWare/VM ...al.pdf
windows10-2004-x64
3VmWare/vmware.ps1
windows7-x64
3VmWare/vmware.ps1
windows10-2004-x64
3Windows/ch...pt.pdf
windows7-x64
3Windows/ch...pt.pdf
windows10-2004-x64
3Windows/ch...rv.vbs
windows7-x64
1Windows/ch...rv.vbs
windows10-2004-x64
1Windows/cp...te.vbs
windows7-x64
1Windows/cp...te.vbs
windows10-2004-x64
1Windows/cp...ry.vbs
windows7-x64
1Windows/cp...ry.vbs
windows10-2004-x64
1Windows/cp...nt.pdf
windows7-x64
3Windows/cp...nt.pdf
windows10-2004-x64
3Behavioral task
behavioral1
Sample
Unix/KPMG-Audit_UNIX Script.txt
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral2
Sample
Unix/KPMG-Audit_UNIX Script.txt
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral3
Sample
Unix/KPMG-Audit_UNIX Script.txt
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral4
Sample
Unix/KPMG-Audit_UNIX Script.txt
Resource
debian9-mipsel-20240611-en
Behavioral task
behavioral5
Sample
Unix/KPMG-UNIX Discovery Documentation.pdf
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
Unix/KPMG-UNIX Discovery Documentation.pdf
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
VmWare/VM Script Manual.pdf
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
VmWare/VM Script Manual.pdf
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
VmWare/vmware.ps1
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
VmWare/vmware.ps1
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
Windows/checksrv/Software Inventory Script.pdf
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
Windows/checksrv/Software Inventory Script.pdf
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
Windows/checksrv/checksrv.vbs
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
Windows/checksrv/checksrv.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
Windows/cpucount/Cpucount remote.vbs
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
Windows/cpucount/Cpucount remote.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
Windows/cpucount/RunInventory.vbs
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
Windows/cpucount/RunInventory.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
Windows/cpucount/cpucount.pdf
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
Windows/cpucount/cpucount.pdf
Resource
win10v2004-20240802-en
General
-
Target
Scripts.zip
-
Size
430KB
-
MD5
f0d1fd5b8ef4ac607c2af2ffa289a930
-
SHA1
6b45a5b45d5f93f91c055e16250d372fc419447a
-
SHA256
814f836df0b9350218ed54bf1b003d61abf825debf0009c45d0a8d11f8e8ecf3
-
SHA512
da67507893310a77dbe8cb2ef66c825964c27d2538e7ecb5185bfa3fe459f9b69c6ac17ea44c5747f299e647e8eec6954e0db4a942806dbbec77bf7ffc1a8521
-
SSDEEP
12288:mciFQTPmAmEKx/ItWdK3WwTHj6e7lIVRTkolGN:LiFQTeAWmWwL7lIVPlGN
Malware Config
Signatures
Files
-
Scripts.zip.zip
-
Unix/KPMG-Audit_UNIX Script.txt.sh linux
-
Unix/KPMG-UNIX Discovery Documentation.pdf.pdf
-
http://KPMG-Audit_UNIX_v1.6-remote.sh
-
http://KPMG-Audit_UNIX_v1.6.sh
-
http://remoteScript.sh
-
-
VmWare/VM Script Manual.pdf.pdf
-
http://Vmware.5.19.ps
-
http://communities.vmware.com/community/vmtn/server/vsphere/automationtools/powercli
-
http://communities.vmware.com/community/vmtn/server/vsphere/automationtools/powercli�
-
http://support.microsoft.com/kb/968929
-
http://support.microsoft.com/kb/968929�
-
http://vmware.5.23.ps
-
-
VmWare/vmware.txt.ps1
-
Windows/checksrv/Software Inventory Script.pdf.pdf
-
Windows/checksrv/checksrv.txt.vbs
-
Windows/cpucount/Cpucount remote.txt.vbs
-
Windows/cpucount/RunInventory.txt.vbs
-
Windows/cpucount/cpucount.pdf.pdf
-
http://kpmg.dk
-
http://softwarecommunity.intel.com/articles/eng/2728.htm
-