Overview

overview

8

Static

static

1

EdgewarePl...up.bat

windows10-2004-x64

8

EdgewarePl...up.bat

windows11-21h2-x64

8

EdgewarePl...nel.py

windows10-2004-x64

3

EdgewarePl...nel.py

windows11-21h2-x64

3

EdgewarePl...s.html

windows10-2004-x64

3

EdgewarePl...s.html

windows11-21h2-x64

4

EdgewarePl...n.html

windows10-2004-x64

4

EdgewarePl...n.html

windows11-21h2-x64

4

EdgewarePl...d.html

windows10-2004-x64

4

EdgewarePl...d.html

windows11-21h2-x64

4

EdgewarePl...o.html

windows10-2004-x64

4

EdgewarePl...o.html

windows11-21h2-x64

4

EdgewarePl...t.html

windows10-2004-x64

4

EdgewarePl...t.html

windows11-21h2-x64

4

EdgewarePl...e.html

windows10-2004-x64

4

EdgewarePl...e.html

windows11-21h2-x64

4

EdgewarePl...bug.py

windows10-2004-x64

3

EdgewarePl...bug.py

windows11-21h2-x64

3

EdgewarePl...tup.sh

ubuntu-18.04-amd64

3

EdgewarePl...tup.sh

debian-9-armhf

3

EdgewarePl...tup.sh

debian-9-mips

3

EdgewarePl...tup.sh

debian-9-mipsel

3

EdgewarePl...t__.py

windows10-2004-x64

3

EdgewarePl...t__.py

windows11-21h2-x64

3

EdgewarePl...ems.py

windows10-2004-x64

3

EdgewarePl...ems.py

windows11-21h2-x64

3

EdgewarePl...ngs.py

windows10-2004-x64

3

EdgewarePl...ngs.py

windows11-21h2-x64

3

EdgewarePl...mes.py

windows10-2004-x64

3

EdgewarePl...mes.py

windows11-21h2-x64

3

EdgewarePl...ars.py

windows10-2004-x64

3

EdgewarePl...ars.py

windows11-21h2-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    EdgewarePlusPlus-20.zip
  • Size 5.6MB
  • Sample260529-e3wffac121
  • SHA256 4025d22ac443b8f8162cc0154b7849557bb336170e5a4a06ee97881bb50f7a00
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoveryexecutionlinux

Malware Config

Targets

    • Target
      EdgewarePlusPlus-20/edgeware/EdgewareSetup.bat
    • Size 3KB
    • SHA256 070a15cad3562150c99b4a915d3383dfd557b146c86f1c9cd9809b1066301056
    • MD5 SHA1 SHA512 TLSH
    Score
    8/10
    discoveryexecution

    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

      execution

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2
    • Target
      EdgewarePlusPlus-20/edgeware/assets/shaders/precompute_gaussian_kernel.py
    • Size 1011B
    • SHA256 a16e2ba140fe3e23b000239896cae6b8ee5d1db1c9d84e49b23b9b56da0c50a1
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    behavioral3behavioral4
    • Target
      EdgewarePlusPlus-20/edgeware/assets/tutorial/basicsettings.html
    • Size 8KB
    • SHA256 c0839e97271485a23d8409b454bfb6397bca4fdddc8893cacc463d05f3196039
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    4/10
    discovery
    behavioral5behavioral6
    • Target
      EdgewarePlusPlus-20/edgeware/assets/tutorial/construction.html
    • Size 720B
    • SHA256 23209fb144f929767025ecf08841ad47c14ebe461df5edee800be567ae3b60c3
    • MD5 SHA1 SHA512 TLSH
    Score
    4/10
    discovery
    behavioral7behavioral8
    • Target
      EdgewarePlusPlus-20/edgeware/assets/tutorial/gettingstarted.html
    • Size 7KB
    • SHA256 b84583fd4c5c3500a463746d729a4dcf64c8cab59376e228954a6a397d7aab45
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    4/10
    discovery
    behavioral10behavioral9
    • Target
      EdgewarePlusPlus-20/edgeware/assets/tutorial/intro.html
    • Size 2KB
    • SHA256 f53277d9920e18eb70d49dd3487b833e061bec8307d3b4944609e29046570d15
    • MD5 SHA1 SHA512 TLSH
    Score
    4/10
    discovery
    behavioral11behavioral12
    • Target
      EdgewarePlusPlus-20/edgeware/assets/tutorial/quickstart.html
    • Size 3KB
    • SHA256 7805d74afc9a65327b2eef64a092d281f031f212768b58b94e6cb0280baeb129
    • MD5 SHA1 SHA512 TLSH
    Score
    4/10
    discovery
    behavioral13behavioral14
    • Target
      EdgewarePlusPlus-20/edgeware/assets/tutorial/template.html
    • Size 621B
    • SHA256 880874feaeb6efcda0d4539ffba6dbe93289b87dc5bbd53bedcf4372cc4c86a2
    • MD5 SHA1 SHA512 TLSH
    Score
    4/10
    discovery
    behavioral15behavioral16
    • Target
      EdgewarePlusPlus-20/edgeware/debug.py
    • Size 667B
    • SHA256 8227a84d96fc008b18a40f52ba9b1740fbabe465c69b09eb82efbfb286f7124e
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    behavioral17behavioral18
    • Target
      EdgewarePlusPlus-20/edgeware/setup.sh
    • Size 1KB
    • SHA256 15a29d071356cc6cdd190c3bfe7c477ed2c0841c0eed1577244c6c986eac6702
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    behavioral19behavioral20behavioral21behavioral22
    • Target
      EdgewarePlusPlus-20/edgeware/src/config/__init__.py
    • Size 1KB
    • SHA256 d22568e88bd07c4e4293fd64dfbbb30081ef4df4acd0ea4baecebff1b77e9c2a
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    behavioral23behavioral24
    • Target
      EdgewarePlusPlus-20/edgeware/src/config/items.py
    • Size 12KB
    • SHA256 4529973d81b9433fb7da3928f97e63744ddc753a7f0fe3bbf48da03398119ec9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    behavioral25behavioral26
    • Target
      EdgewarePlusPlus-20/edgeware/src/config/settings.py
    • Size 1KB
    • SHA256 b1a8f4b04a281b11fe5c1e397582765a0e4562d53dce3d7f0a49f0a096d736f8
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    behavioral27behavioral28
    • Target
      EdgewarePlusPlus-20/edgeware/src/config/themes.py
    • Size 6KB
    • SHA256 7edb44e28957cea32e0c967c71ffebb630093feae217c0459122c39b7403eabf
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    behavioral29behavioral30
    • Target
      EdgewarePlusPlus-20/edgeware/src/config/vars.py
    • Size 2KB
    • SHA256 d024753aeefd4cf5006dbbea97e38e690a2f142ce41d6c376ba4bd6297cdc1ca
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v16

Tasks

static1

Score
1/10

behavioral1

discoveryexecution
Score
8/10

behavioral2

discoveryexecution
Score
8/10

behavioral3

Score
3/10

behavioral4

Score
3/10

behavioral5

discovery
Score
3/10

behavioral6

discovery
Score
4/10

behavioral7

discovery
Score
4/10

behavioral8

discovery
Score
4/10

behavioral9

discovery
Score
4/10

behavioral10

discovery
Score
4/10

behavioral11

discovery
Score
4/10

behavioral12

discovery
Score
4/10

behavioral13

discovery
Score
4/10

behavioral14

discovery
Score
4/10

behavioral15

discovery
Score
4/10

behavioral16

discovery
Score
4/10

behavioral17

Score
3/10

behavioral18

Score
3/10

behavioral19

Score
3/10

behavioral20

Score
3/10

behavioral21

Score
3/10

behavioral22

Score
3/10

behavioral23

Score
3/10

behavioral24

Score
3/10

behavioral25

Score
3/10

behavioral26

Score
3/10

behavioral27

Score
3/10

behavioral28

Score
3/10

behavioral29

Score
3/10

behavioral30

Score
3/10

behavioral31

Score
3/10

behavioral32

Score
3/10