aad7bf75d669ece7671688bfdf35f1093d6a30d2e62469405f4d55d8d82d5fd3

Sharing

Copy URL Twitter E-mail

General

Target
nginx-1.28.3.zip
Size 2.6MB
Sample260416-ppnhsaat21
SHA256 aad7bf75d669ece7671688bfdf35f1093d6a30d2e62469405f4d55d8d82d5fd3
MD5 ea640d6509e42b32dd4464377b6e8794
SHA1 94caa5e2af3287d6b263efff9f52f2008b68602f
SHA512 864c457c8c484b269b2f1920f43440a96298bb81dfdb72984e0cf437c73c758a1b416247e8bd2c600f1b2d82a045aed7ed91f393516af8268f1cb6be4078b4a7
SSDEEP 49152:GWI4QVz5XWBl8gbiuxtvkkXpU/G9q7zpuGOZIWDnnn0N5EnB5jhjX:G1cljseSmE4GEI4n0N5EnB59jX
TLSH
T1A7C5336FB54E637CC80E55B239D3F9B541E13F80239BA31A13D816A47B173A80E7661E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery linux

Malware Config

Targets

- Target
  nginx-1.28.3/contrib/geo2nginx.pl
- Size 1KB
- SHA256 710cc6ea2fefe73c908addf6cb84c08f1da1310ddd9fba87f3bd8c87e3d4a350
- MD5 35670709be7fc98fb47013f565f55730
- SHA1 f5b8473781ef13c55f9e9d4df3c615cb1fd58d05
- SHA512 d33685d39c6cd521d6e9fa6d0ab39cee125d9c7484d32afaef1832ac78bef35fc2a7b1908761198e547cd5bd61cdf5cda1e6bcebbf04e928dd13dc73a7a4cac9
- TLSH
  T11E2162DE27C6325C7BB072E42BFFE4A4DC84718206B26760B944A5DD1170E690978A6F
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral1 behavioral2 behavioral3 behavioral4
- Target
  nginx-1.28.3/contrib/unicode2nginx/unicode-to-nginx.pl
- Size 1KB
- SHA256 1cc5bfd4262ea8db2fc575459d1e3b3fd2a4a5a8b2697f1080d7514f5a4d7910
- MD5 140f9cde0e1c5a65dec1099df664e2ce
- SHA1 ef268a90eb276c39978296ea16f7129ca7d2528b
- SHA512 0e4996f3de525c35effc10e32281224406c8b06c3b0e81f9452d28e64531413fd8b00ee906e792661e5f36557dcd5f35f1ceb8428a431e39bf247abf4adf19a7
- TLSH
  T1B7115485C3AEAC50DB92E56C0AE2B205467D5396FCCF7E004D4C039C40CD1B443552AF
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral5 behavioral6 behavioral7 behavioral8
- Target
  nginx-1.28.3/html/50x.html
- Size 497B
- SHA256 876766b4e80133fd490603e073d3567425b88794828a9292104244c9e40875ed
- MD5 5a719a793405561b1a13e6cb1f403d88
- SHA1 835b9dec419c01420e78602527a9fba8c463521c
- SHA512 81a2bb82a89a8e698a267fd925367ffa4bb4ee02e482d670835ae8621751605ce856fab051c9770e8e3cb94f63fb6dd03284affe4e1161f57c1bf9178b3da472
- TLSH
  T194F09E8EB210136B94210310AC86A6527206270812B7857479CAC9B2FAA6E12F9376E8
- MD5 SHA1 SHA512 TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral10 behavioral9
- Target
  nginx-1.28.3/html/index.html
- Size 615B
- SHA256 fb47468a2cd3953c7131431991afcc6a2703f14640520102eea0a685a7e8d6de
- MD5 7df3d7cf3358af3f470ac7229387ef94
- SHA1 c51a3f0e6de4eb802d5630941c3fd9e1d0efae4b
- SHA512 098db3badb76a319c211d685b869e15bbc51e2658a912514b253d2a5ef3a61981dad1726f1ccb494f21b7869e655b88446c5c5c91fd76d4e33885a0b5aef3bad
- TLSH
  T152F0029BE3002227B48343013CB35A21775503E40354CB5578C74DD3EF2A913F4175B8
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral11 behavioral12
- Target
  nginx-1.28.3/nginx.exe
- Size 6.3MB
- SHA256 398aee6abe32386a8f710df93e2f08d8b5e2d23f656e0fab18c3f8bc1a9d9a06
- MD5 323bb40e1c725c031a11655f7a774176
- SHA1 6d44b417a0690917320ba6cca8060410849fb2e6
- SHA512 8da32f13d024d9148ad6ad7604f0fca8d2622693c044cedd507243c7ec9a42cbb4d8581392a291a1297aac84e8f15620c43a0c25b4829d96111a613f43bab1d9
- SSDEEP 49152:iBl1OMZlLiP2Dc64L24PDnzSgbiBe8hNYK5QyaqiKmFcZM5PxmzMaifnYI+cALi:oTYlV+BpNPWFc65PxmzMhfxAeD4gvC
- TLSH
  T15666AE02FBC35590E9C741BE12EF637F0E3D6624872598D3CA9425E9C8316E16B3E7A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14