Overview

overview

4

Static

static

1

custom/about.html

windows7-x64

3

custom/about.html

windows10-2004-x64

3

custom/header.html

windows7-x64

3

custom/header.html

windows10-2004-x64

3

custom/help.html

windows7-x64

3

custom/help.html

windows10-2004-x64

3

dialog/dialog.html

windows7-x64

3

dialog/dialog.html

windows10-2004-x64

3

dialog/js/dialog.js

windows7-x64

3

dialog/js/dialog.js

windows10-2004-x64

3

node_modul...mkdirp

ubuntu-18.04-amd64

3

node_modul...mkdirp

debian-9-armhf

4

node_modul...mkdirp

debian-9-mips

3

node_modul...mkdirp

debian-9-mipsel

3

node_modul...rp.cmd

windows7-x64

1

node_modul...rp.cmd

windows10-2004-x64

1

node_modul...rp.ps1

ubuntu-18.04-amd64

1

node_modul...rp.ps1

debian-9-armhf

1

node_modul...rp.ps1

debian-9-mips

1

node_modul...rp.ps1

debian-9-mipsel

1

node_modul...rimraf

ubuntu-18.04-amd64

3

node_modul...rimraf

debian-9-armhf

4

node_modul...rimraf

debian-9-mips

3

node_modul...rimraf

debian-9-mipsel

3

node_modul...af.cmd

windows7-x64

1

node_modul...af.cmd

windows10-2004-x64

1

node_modul...af.ps1

ubuntu-18.04-amd64

1

node_modul...af.ps1

debian-9-armhf

1

node_modul...af.ps1

debian-9-mips

1

node_modul...af.ps1

debian-9-mipsel

1

node_modul...DME.js

windows7-x64

3

node_modul...DME.js

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    keystone-2_v2.0.4.zip

  • Size

    4.1MB

  • Sample

    241121-kjhywszdqh

  • MD5

    9954676c242949754185ba69a2ea4b26

  • SHA1

    e4ee5f9e93ae19e83c3afe4075c1ce808b382050

  • SHA256

    933f41c4bedba7e39a2dba6bc25fe3eaedafd9e01e800381fed0d111a24b050e

  • SHA512

    67f22b8c981e679698b4d3e1b5070d307d33485d009c0295367179af26ec2697bb271a871c18537c4b7bee8a2e0810c6bf51566d5ee6c72d29397cd1518ec3ab

  • SSDEEP

    98304:mivWXyjL6qZxeZ6InQ1LjI1fY5E1oEGAptlokHqGy:xWgneZjQ5afYFaGIqGy

Score
4/10
antivmdiscoveryexecutionlinux

Malware Config

Targets

    • Target

      custom/about.html

    • Size

      301B

    • MD5

      f2be96d2e3fcc168c9f7ab7165b4e70d

    • SHA1

      9f966d1493ad812b3f38b0c6cca69f924b24371a

    • SHA256

      2ee5ad47f76efd1f35489ffa56f6e5aa4f75bbdad174e46920b548c5cacf51db

    • SHA512

      623bd99bd9ae5ea4da2fbacb8d14948bfc4ebe5cdf917b163f98bc921a8a4572dbc581afa150c4d7b5ca004db5c6d4c0bb04a311cab1c01b21f17f1b7cb706a6

    Score
    3/10
    discovery
    behavioral1behavioral2

    • Target

      custom/header.html

    • Size

      814B

    • MD5

      224dc6ec231801e3f95c3192c24f67fc

    • SHA1

      14a85bf57af9396f3812006dcd63b6f07dbe189d

    • SHA256

      98e887b5c9ad4a527f442fb086d69035e60512e4ab2e80890a4fd98924edbd52

    • SHA512

      36cc993203c15abf9d0928f86dbdab474cdd4c560348eec348598589ad97e9e2ff14385e7449294524a604d034952189e15ce087e9c9223740cfd36440863d6b

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      custom/help.html

    • Size

      87B

    • MD5

      81b539baf34c1c9a739322d713ae0ca3

    • SHA1

      333fa26a460e5247e51e56dd2eab64526a16ab4e

    • SHA256

      a6a4f9d919b3fa814476cafd73ddeab572c659074e7e559fc4a43ba48dd9aa01

    • SHA512

      d14d22e661ab7fbd3673369f1071b10a4fde752a464c0ae0c3118fe989ba3b70fa209e23d10d564785edf2e261a73f7b64f57f4d80a1685da4b7bd32984158c6

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      dialog/dialog.html

    • Size

      8KB

    • MD5

      5852b3a026b8f7448bbfe8ee2bec8932

    • SHA1

      308240a6726e6ec0422e160db815ea7740819b95

    • SHA256

      41427cf4f2f73e2b24ff66f8b3130a9bf360f6415a6319e182daf63b864d8314

    • SHA512

      bb49383a4b4503268072b0f371706a2fc8e5e4e0ad5999abb1fc7f352dce0d660e447fdc17d7c9d0ac307630442a31ce494fbc6d32a492c131ac22c2431bb59b

    • SSDEEP

      96:UUzWUtoFiuKFL5QEosFpwuZjp42o0VVagzWj9kAlY0c9pXZ0aQXrU12zuZnC80JA:f6UwEHXwuZjpNlf6j9V1apXyXiI4iw

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      dialog/js/dialog.js

    • Size

      1.9MB

    • MD5

      56debd01033c5c93d6a1da6a9be47828

    • SHA1

      f71ced094a6c26bb1551f5cb90ecc9ebbd2808cd

    • SHA256

      692160e990f99b55fbabee9b9dbec118b2ff64d0a274514fd46520ac158b36bd

    • SHA512

      67a5e0614f54d05c7251a1d05d036b234f5db7eed046dfe37a638241af653b9295b5f31d249848bf855f7dc093bd0afe9ffa719706454e6032d20552347b872f

    • SSDEEP

      24576:fBRh4Lvvzp/QkKZ6HnkyTx0cqhDfHF3vwN6/PshWkEPaQtxkC:fBRh4Lvvzp/QknkyTLq1ZTwEN3

    Score
    3/10
    execution
    behavioral10behavioral9

    • Target

      node_modules/.bin/mkdirp

    • Size

      302B

    • MD5

      fe36f6b08a0e9fe46d884d38118d8b32

    • SHA1

      d6825ffe20b7460d0a52184ab33fc23ebe397ad4

    • SHA256

      8ff23a1eecc18c8bb5e5849483978f6499e36bc13665fffd5c7f69c3e265e707

    • SHA512

      a61ac387a35a47eb538d005aa5f5d21765deed25e09c6184bc103f39d492550751b249c3ea21dcdb1c9894d8f15947e5d2abb83ce162248dc0eed6aa7915a348

    Score
    4/10
    discoveryexecutionantivm
    behavioral11behavioral12behavioral13behavioral14

    • Target

      node_modules/.bin/mkdirp.cmd

    • Size

      322B

    • MD5

      be6c0d478931589ee54a01fdb2efcf4f

    • SHA1

      0b5882e940c009eec35783cc9cf272661ff23159

    • SHA256

      373083e436d985be1d1ad725dcabef0f13e048aa1f519c34da3e8aa4ad4feeb9

    • SHA512

      634a8b8da4dba93d8e84106556cdd5927e53ac785413d1c5c3c0876fc651d830cd5839e4dc57336bdbec6f361313e538dfcaf0fa1b7ec209e2fb20bef93c7a12

    Score
    1/10
    behavioral15behavioral16

    • Target

      node_modules/.bin/mkdirp.ps1

    • Size

      793B

    • MD5

      94e2bf1d4dcebce14ea4977f09be45fd

    • SHA1

      ed40c9a37f511581176e10b75e8cc3bc737d7918

    • SHA256

      a6340c3df00db2324cf2ebd8f8cfbb46dfdbddba829e7af251b9f6fd0a48b6ce

    • SHA512

      f479375131058247b82d50822d9f1679176b70cff8a7d1ac1df6f6316044d9fc4e8a83e92fb79932ee90db3c1ed2827e59bd4c58704d69d4cb794785e61c19d4

    Score
    1/10
    behavioral17behavioral18behavioral19behavioral20

    • Target

      node_modules/.bin/rimraf

    • Size

      294B

    • MD5

      f178e4d9d266237c4747eb33eed35684

    • SHA1

      678d46ca0b1f43811604f8b6aaa0237acf4faedb

    • SHA256

      64ce06348f2c2e12fbf0f5db3d2943e00147a8ec47147702685a13acc7b908f5

    • SHA512

      264383c581c4ec8d1aca3f07b89d43b148db2061a360a17bce7a5457edae13a62271fdf519f4a238ff6ac714e79150a8c8ca6a55e64d819cc56f4bc5ce789c87

    Score
    4/10
    discoveryexecutionantivm
    behavioral21behavioral22behavioral23behavioral24

    • Target

      node_modules/.bin/rimraf.cmd

    • Size

      318B

    • MD5

      a2c0d3e96178a7e9f7662ed01a20ca8a

    • SHA1

      a9e5303580a9d898f467fab476a94223ea812ec4

    • SHA256

      bb7927899fad6f6e313cfa4dab3edaaf59a95fdfce4d2134c2f29dbe11e4186b

    • SHA512

      6e0b6771251e0a92e4c7b8a6ef1c62931ad04b65ea7f26957a70c314b4adcbe7b7655efb80229ccb4fe346c396e9949bdf50d550fa760f60d76b925daed1276a

    Score
    1/10
    behavioral25behavioral26

    • Target

      node_modules/.bin/rimraf.ps1

    • Size

      777B

    • MD5

      6c1cc5f44e75ede7ae01660d1eb08cab

    • SHA1

      bb33904123bf75577ec43bcb1ea4c590bd4dec66

    • SHA256

      514979cd146ad41d9017e98b4b633d08130c9dad37b40654fed9a093df5bca04

    • SHA512

      df69ff82435c6f1533b4c075774a27a32f03d014a1c12951d982044127f7374fd9c548648e2621dfdaecb42672e21a98cfe1b16c49550b41a952158d3a1c9b6d

    Score
    1/10
    behavioral27behavioral28behavioral29behavioral30

    • Target

      node_modules/balanced-match/README.md

    • Size

      3KB

    • MD5

      542c17f304c9e7e2dbcb23506d9ab583

    • SHA1

      d9b686c9f82dba6de3bee402c29af7d354151582

    • SHA256

      428832d502fb64fc3a5c1b58e55d7aae4cceb97418f6e3813b2a923e4905b07e

    • SHA512

      d5a2ee0300706850ee2a02137b4f5bd2a2c6ee6ddaa4a39ab69f76e7b340ad37c742c47be7981229985a7012b1a1759812fa28b642453b3bdb1294b7af78a5f0

    Score
    3/10
    execution
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

Score
1/10

behavioral1

discovery
Score
3/10

behavioral2

discovery
Score
3/10

behavioral3

discovery
Score
3/10

behavioral4

discovery
Score
3/10

behavioral5

discovery
Score
3/10

behavioral6

discovery
Score
3/10

behavioral7

discovery
Score
3/10

behavioral8

discovery
Score
3/10

behavioral9

execution
Score
3/10

behavioral10

execution
Score
3/10

behavioral11

discoveryexecution
Score
3/10

behavioral12

antivmdiscoveryexecution
Score
4/10

behavioral13

discoveryexecution
Score
3/10

behavioral14

discoveryexecution
Score
3/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

discoveryexecution
Score
3/10

behavioral22

antivmdiscoveryexecution
Score
4/10

behavioral23

discoveryexecution
Score
3/10

behavioral24

discoveryexecution
Score
3/10

behavioral25

Score
1/10

behavioral26

Score
1/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

Score
1/10

behavioral30

Score
1/10

behavioral31

execution
Score
3/10

behavioral32

execution
Score
3/10