General

  • Target
    v0.0.0-20240226094324-415b1017abdc.zip
  • Size 487KB
  • Sample260602-wvbvhadt6l
  • SHA256 3bd6a5bf4c932ed5645f5e69ef13e89e229973a959213af3979fbb2d72f6b722
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10

Malware Config

Targets

    • Target
      github.com/corazawaf/[email protected]/rules/@owasp_crs/REQUEST-905-COMMON-EXCEPTIONS.conf
    • Size 1KB
    • SHA256 17cfb4e4ece3054f379057d5d8d7180d6f313e1ead50cf06628acb41fac4231c
    • MD5 SHA1 SHA512 TLSH
    Score
    6/10
    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

    • Target
      github.com/corazawaf/[email protected]/rules/@owasp_crs/REQUEST-941-APPLICATION-ATTACK-XSS.conf
    • Size 36KB
    • SHA256 49b7adae9d626bd04e5d1026f0e3402658da833fa5c446b7a464615e6ae0c462
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      github.com/corazawaf/[email protected]/rules/@owasp_crs/REQUEST-942-APPLICATION-ATTACK-SQLI.conf
    • Size 67KB
    • SHA256 3b776b90eb5686ae0f90a4ac230e73bba2bffddff36a4679975737192e5ffdcc
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

    • Target
      github.com/corazawaf/[email protected]/rules/@owasp_crs/java-code-leakages.data
    • Size 264B
    • SHA256 cef3ac262bd5aff61eff1ed783ced149041bd44667cfd68a224d765b91a4660a
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      github.com/corazawaf/[email protected]/rules/@owasp_crs/windows-powershell-commands.data
    • Size 7KB
    • SHA256 5055ffeb4ce22869dee0f611045991e64365e980bba68649f4468aea86476d93
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

    • Target
      github.com/corazawaf/[email protected]/tests/REQUEST-920-PROTOCOL-ENFORCEMENT/920100.yaml
    • Size 9KB
    • SHA256 ef07728d90d7dcef823d30d6ed12a3a5937705da94ffd569bb548c6bb19d2ab0
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      github.com/corazawaf/[email protected]/tests/REQUEST-932-APPLICATION-ATTACK-RCE/932237.yaml
    • Size 6KB
    • SHA256 333020a3682aeedd79845c5b674a95267efdda48a4fa51dd7e1224218541a8c6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      github.com/corazawaf/[email protected]/tests/REQUEST-934-APPLICATION-ATTACK-GENERIC/934100.yaml
    • Size 16KB
    • SHA256 d017fdaefdcd7a0526b0428081dacced6720a5b0f467969178e22148f84f0b80
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      github.com/corazawaf/[email protected]/tests/REQUEST-941-APPLICATION-ATTACK-XSS/941100.yaml
    • Size 3KB
    • SHA256 e2f55166a6dc4e07e609b1deb20d21d692970543358573df8f5f0f7cbc3b2ea1
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      github.com/corazawaf/[email protected]/tests/REQUEST-941-APPLICATION-ATTACK-XSS/941160.yaml
    • Size 8KB
    • SHA256 103bbe25769e0ba798a1d426242809a67c268c18b3968c497935c24f419085d8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      github.com/corazawaf/[email protected]/tests/REQUEST-941-APPLICATION-ATTACK-XSS/941370.yaml
    • Size 6KB
    • SHA256 02d46fc0a7680ce7b1f3969ffa8ec4c4c77bdef3bb32ec38c59a783f73e6a07b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      github.com/corazawaf/[email protected]/tests/REQUEST-941-APPLICATION-ATTACK-XSS/941390.yaml
    • Size 3KB
    • SHA256 8740a206772e344fdb39349eb017d4f79a44e966f3b264cec8db3adcf1eb355c
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      github.com/corazawaf/[email protected]/tests/REQUEST-942-APPLICATION-ATTACK-SQLI/942150.yaml
    • Size 11KB
    • SHA256 4bdfdf0278905f10659953c11ce7aed5de6ef41dc2be65927270797729d87753
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      github.com/corazawaf/[email protected]/tests/REQUEST-942-APPLICATION-ATTACK-SQLI/942320.yaml
    • Size 7KB
    • SHA256 9982c22e0785746bd9438c95a6a1a6a2060ee121002864b3adb19c17fb329f48
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      github.com/corazawaf/[email protected]/tests/REQUEST-949-BLOCKING-EVALUATION/949110.yaml
    • Size 4KB
    • SHA256 6528a1deb9ff5c1dc2bc446871fac1d12d18d9d9d9ad14a0f4f0a909532262dc
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks

static1

Score
1/10

behavioral1

execution
Score
6/10

behavioral2

execution
Score
6/10

behavioral3

execution
Score
3/10

behavioral4

execution
Score
3/10

behavioral5

execution
Score
6/10

behavioral6

execution
Score
6/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

execution
Score
6/10

behavioral10

execution
Score
6/10

behavioral11

execution
Score
3/10

behavioral12

execution
Score
3/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

execution
Score
3/10

behavioral16

execution
Score
3/10

behavioral17

execution
Score
3/10

behavioral18

execution
Score
3/10

behavioral19

execution
Score
3/10

behavioral20

execution
Score
3/10

behavioral21

execution
Score
3/10

behavioral22

execution
Score
3/10

behavioral23

execution
Score
3/10

behavioral24

execution
Score
3/10

behavioral25

execution
Score
3/10

behavioral26

execution
Score
3/10

behavioral27

execution
Score
3/10

behavioral28

execution
Score
3/10

behavioral29

execution
Score
3/10

behavioral30

execution
Score
3/10