Overview
overview
6Static
static
1github.com...NS.ps1
windows10-2004-x64
6github.com...NS.ps1
windows11-21h2-x64
6github.com...ST-.js
windows10-2004-x64
3github.com...ST-.js
windows11-21h2-x64
3github.com...T-.ps1
windows10-2004-x64
6github.com...T-.ps1
windows11-21h2-x64
6github.com...es.vbs
windows10-2004-x64
1github.com...es.vbs
windows11-21h2-x64
1github.com...ds.ps1
windows10-2004-x64
6github.com...ds.ps1
windows11-21h2-x64
6github.com...100.js
windows10-2004-x64
3github.com...100.js
windows11-21h2-x64
3github.com...37.vbs
windows10-2004-x64
1github.com...37.vbs
windows11-21h2-x64
1github.com...ICA.js
windows10-2004-x64
3github.com...ICA.js
windows11-21h2-x64
3github.com...100.js
windows10-2004-x64
3github.com...100.js
windows11-21h2-x64
3github.com...160.js
windows10-2004-x64
3github.com...160.js
windows11-21h2-x64
3github.com...370.js
windows10-2004-x64
3github.com...370.js
windows11-21h2-x64
3github.com...390.js
windows10-2004-x64
3github.com...390.js
windows11-21h2-x64
3github.com...150.js
windows10-2004-x64
3github.com...150.js
windows11-21h2-x64
3github.com...320.js
windows10-2004-x64
3github.com...320.js
windows11-21h2-x64
3github.com...110.js
windows10-2004-x64
3github.com...110.js
windows11-21h2-x64
3General
- Target v0.0.0-20240226094324-415b1017abdc.zip
- Size 487KB
- Sample260602-wvbvhadt6l
- SHA256 3bd6a5bf4c932ed5645f5e69ef13e89e229973a959213af3979fbb2d72f6b722
- MD5 8d6fd2f454201ca08adb7e5a54be8dac
- SHA1 3945ea22cd699f83233d54466b6260cce6a84344
- SHA512 89ea4cfa1700eeb2c32bf33b7d56cb0d0dbdcda66383a323f16ed3f836583ef58f7e4f2e66d24f2be49829a000daadbdac2740edd7a8aafb45ee26d284721b1f
- SSDEEP 12288:6+Riq+ZeM9Cvas8ojYLL3VD7jlUgTtUFa2Ryo:6+0q+YM9IaLjZpUoT2Ryo
- TLSH T127B47C03352649F0CF73E8B074CC5862763B86A79491D4FB59EA70808919FE92B8F5DE
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
github.com/corazawaf/[email protected]/rules/@owasp_crs/REQUEST-905-COMMON-EXCEPTIONS.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
github.com/corazawaf/[email protected]/rules/@owasp_crs/REQUEST-905-COMMON-EXCEPTIONS.ps1
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
github.com/corazawaf/[email protected]/rules/@owasp_crs/REQUEST-.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
github.com/corazawaf/[email protected]/rules/@owasp_crs/REQUEST-.js
Resource
win11-20260513-en
Behavioral task
behavioral5
Sample
github.com/corazawaf/[email protected]/rules/@owasp_crs/REQUEST-.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
github.com/corazawaf/[email protected]/rules/@owasp_crs/REQUEST-.ps1
Resource
win11-20260513-en
Behavioral task
behavioral7
Sample
github.com/corazawaf/[email protected]/rules/@owasp_crs/java-code-leakages.vbs
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
github.com/corazawaf/[email protected]/rules/@owasp_crs/java-code-leakages.vbs
Resource
win11-20260513-en
Behavioral task
behavioral9
Sample
github.com/corazawaf/[email protected]/rules/@owasp_crs/windows-powershell-commands.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
github.com/corazawaf/[email protected]/rules/@owasp_crs/windows-powershell-commands.ps1
Resource
win11-20260513-en
Behavioral task
behavioral11
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-920-PROTOCOL-ENFORCEMENT/920100.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-920-PROTOCOL-ENFORCEMENT/920100.js
Resource
win11-20260513-en
Behavioral task
behavioral13
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-932-APPLICATION-ATTACK-RCE/932237.vbs
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-932-APPLICATION-ATTACK-RCE/932237.vbs
Resource
win11-20260513-en
Behavioral task
behavioral15
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-934-APPLICA.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-934-APPLICA.js
Resource
win11-20260513-en
Behavioral task
behavioral17
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-941-APPLICATION-ATTACK-XSS/941100.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-941-APPLICATION-ATTACK-XSS/941100.js
Resource
win11-20260513-en
Behavioral task
behavioral19
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-941-APPLICATION-ATTACK-XSS/941160.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-941-APPLICATION-ATTACK-XSS/941160.js
Resource
win11-20260513-en
Behavioral task
behavioral21
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-941-APPLICATION-ATTACK-XSS/941370.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-941-APPLICATION-ATTACK-XSS/941370.js
Resource
win11-20260513-en
Behavioral task
behavioral23
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-941-APPLICATION-ATTACK-XSS/941390.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-941-APPLICATION-ATTACK-XSS/941390.js
Resource
win11-20260513-en
Behavioral task
behavioral25
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-942-APPLICATION-ATTACK-SQLI/942150.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-942-APPLICATION-ATTACK-SQLI/942150.js
Resource
win11-20260513-en
Behavioral task
behavioral27
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-942-APPLICATION-ATTACK-SQLI/942320.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-942-APPLICATION-ATTACK-SQLI/942320.js
Resource
win11-20260513-en
Behavioral task
behavioral29
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-949-BLOCKING-EVALUATION/949110.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
github.com/corazawaf/[email protected]/tests/REQUEST-949-BLOCKING-EVALUATION/949110.js
Resource
win11-20260513-en
Malware Config
Targets
-
- Target github.com/corazawaf/[email protected]/rules/@owasp_crs/REQUEST-905-COMMON-EXCEPTIONS.conf
- Size 1KB
- SHA256 17cfb4e4ece3054f379057d5d8d7180d6f313e1ead50cf06628acb41fac4231c
- MD5 4c5a02ffd37c668574c66fc5675c0dba
- SHA1 64dd40b8243a5d3a4e72fa2feade89443fd8d665
- SHA512 e219e665a7a91c78be61e073ea9873d34cd0514a02c97ee1ece197b38ecce606edb3e34d247406cc6f86b2d33c947630afbfabdad5413774bdc839ec77c3e049
- TLSH T1CC310FA19D2926D18202D15958F36416F026822F8E32BD4FF0BCAD03BF0A58FB15E06A
- MD5 SHA1 SHA512 TLSH
Score6/10 -
- Target github.com/corazawaf/[email protected]/rules/@owasp_crs/REQUEST-941-APPLICATION-ATTACK-XSS.conf
- Size 36KB
- SHA256 49b7adae9d626bd04e5d1026f0e3402658da833fa5c446b7a464615e6ae0c462
- MD5 1116d84b6d847de80c49e36b4dc35826
- SHA1 6a28c18b180d01f52f0bac608c7bc0b6849b9dab
- SHA512 73b47f43e0bd7ebcf0e7f108fd5dc44b03152878f4e1f197ff5dd73d862a984853103396a320766402ec9f174b2382e390941279f11e8706d7a7ee85f064840a
- SSDEEP 768:ADR6PWR6P0R6PiR6PLL22+VR6PjR6PKR6PmR6PmR6PRR6PmR6PiR6P3R6PQGR6Pw:ADR6PWR6P0R6PiR6PLL22+VR6PjR6PK0
- TLSH T11BF285981F5FABE0939AD269209F6881493A80A78E34772FFE755C8B5F1453F82340F4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target github.com/corazawaf/[email protected]/rules/@owasp_crs/REQUEST-942-APPLICATION-ATTACK-SQLI.conf
- Size 67KB
- SHA256 3b776b90eb5686ae0f90a4ac230e73bba2bffddff36a4679975737192e5ffdcc
- MD5 27e799bc7f89d3ee229be054bc06727e
- SHA1 a41dd6532afc840964738475f048f9b906eb5a8c
- SHA512 c30350a9c2c17e1b1b51525a27588d2120406971c55b80d171fe96045b45ec875e6f1e647c40f750c9aa9f5f5cf8f1964471b2223c3b8790f529718caec2b014
- SSDEEP 1536:raR6H2q3R6H1yX1R6HNfR6HhKOR6H1/R6H1nR6H1+VR6H1aR6H1sR6H1h3R6H1ZF:rU7PAKM0zLZhkCJ0xjmdUhZdMJpqEoVb
- TLSH T1026394501F5FA6E083AFD16E106A64C2883AC4675D30BA6FB9749C4F5F7083E97B10E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10 -
- Target github.com/corazawaf/[email protected]/rules/@owasp_crs/java-code-leakages.data
- Size 264B
- SHA256 cef3ac262bd5aff61eff1ed783ced149041bd44667cfd68a224d765b91a4660a
- MD5 600e22c0b8ae14332997afb6c9df9adf
- SHA1 db24d13f28023a7f35774fee23da66656642a532
- SHA512 838dbe695738abc3c51a4c2bcff1ba6292a01dc4cf2a25fcaaa8fb6a91c1ba351fe95199ec53fb5cb4356aaf633661525f0782c92c9ffde5ab0cef18a205fd89
- TLSH T177D05E034D16D00F828A87F65A728F4CE75D9F60830FD6694BE0D687D8943D57E58832
- MD5 SHA1 SHA512 TLSH
Score1/10 -
- Target github.com/corazawaf/[email protected]/rules/@owasp_crs/windows-powershell-commands.data
- Size 7KB
- SHA256 5055ffeb4ce22869dee0f611045991e64365e980bba68649f4468aea86476d93
- MD5 12bd689ca81db06c30f9339096129895
- SHA1 351ae9b232f3cc99a86f1433c0d39bc8d377f85f
- SHA512 ea1fafe78fd075e57803804ab7d516be0e168501fc0091fc98faf11d74b523a18f47d9460a0220be568a54912b831ed17b064aff6adb5cb135fbba61e008ffb3
- SSDEEP 192:lmodN90ph9hH4UEEQRXeQBE2v+l1OhY3qI6WWTz5zj7mwGvgkCwDSTs8nStlxsP9:M4UEXBP+ll3qnxTlfHYGCiP9
- TLSH T1B0E19722DA193DB5EAC6C19B9EA10CC34BD1D5C9F431D99497CCC4AD0283B6B65321EF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10 -
- Target github.com/corazawaf/[email protected]/tests/REQUEST-920-PROTOCOL-ENFORCEMENT/920100.yaml
- Size 9KB
- SHA256 ef07728d90d7dcef823d30d6ed12a3a5937705da94ffd569bb548c6bb19d2ab0
- MD5 e8eea7b812460547290f6fe58ae0e624
- SHA1 b038afabaa14b96939f140db86de7afc52987678
- SHA512 37e1923c3e856c0609ec6bf450b52780e93b0501b8eea6e2dd1f624518cb1284875680b9321b1815ea4ea878b296cb49f97376c2e101488f997beecb32628280
- SSDEEP 96:vieDvQ4iQeaQ1QfJF641tn+ZI+Q+epzSpjQmwyV3uehg2qBN8mcC:qYYeAe5dL+ewUmPVVhgjN8mB
- TLSH T18C2231538C1723D9A64E869ED9E4E5166137E00FD0C5A938B2ED83085F4F74CA3E6CB5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target github.com/corazawaf/[email protected]/tests/REQUEST-932-APPLICATION-ATTACK-RCE/932237.yaml
- Size 6KB
- SHA256 333020a3682aeedd79845c5b674a95267efdda48a4fa51dd7e1224218541a8c6
- MD5 69545e045c99de70181c5c031c5fb092
- SHA1 e27ec6cc87f348bc770338119a679066e914a012
- SHA512 adc16d168822fcedb55d5dcba444e7eda0f41be7e217defc0041dcbfdd280aaef1e8eb5c1bd3c30c1d7ae43d980c777991b863a1df41e3aabe5aeeed9c922507
- SSDEEP 48:OcrxOHxvcYSXf7FpF7Fs9XxTLxcgYNT7FHh7FE8Fa1NF8F/1T:OQEHS5dsvRAfrFFa1cF/1T
- TLSH T145D18C43881B12DD955D81AFD5E9D91EA057E80FD181BD38B7BC83091F0E74CA2E6CB9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target github.com/corazawaf/[email protected]/tests/REQUEST-934-APPLICATION-ATTACK-GENERIC/934100.yaml
- Size 16KB
- SHA256 d017fdaefdcd7a0526b0428081dacced6720a5b0f467969178e22148f84f0b80
- MD5 60d74fa07e04660999df6a54834ddb88
- SHA1 dc7585db1332640cd807ad795d22463d0ec73b72
- SHA512 32a6cc623e201c347502f65c9c37f1357dce4d6a4d2399b5dc08fed0597049b94ca87411018615c2d65d6617e3fed4c877986850c1845c5ee3bc0c0a1c594bba
- SSDEEP 96:Z0zZ7eZlq5ZVUZ+ZZ3cZgq4ZRZaZRLZa+wZDZJ+urZhL++kdZDyZK1YZZCZdYZuf:it1BpTTq8gcCtHKyAdk
- TLSH T1DE72C113ED1F6396924DC2AAF9D5D61A6137E90F9046AD38F6AC47244F0B10CE3D14FA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target github.com/corazawaf/[email protected]/tests/REQUEST-941-APPLICATION-ATTACK-XSS/941100.yaml
- Size 3KB
- SHA256 e2f55166a6dc4e07e609b1deb20d21d692970543358573df8f5f0f7cbc3b2ea1
- MD5 409c3091a850aa7f9b48fb665dd9204c
- SHA1 f4522ad3c11cc159a5ca5978c235464619449460
- SHA512 6130e4a3e2ce3ddb9a34467732d9da19c14e838380386be85dc2f0241adebd3e7077a7051d9a0c5eb80b9422f0392a85950dc1dc420f71e663cce2f3a8bd1f55
- TLSH T1F5715066DC2B9351824A876EB4F8D6199067F88FD441A838F1FC461C2F1A74CB2A78F5
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target github.com/corazawaf/[email protected]/tests/REQUEST-941-APPLICATION-ATTACK-XSS/941160.yaml
- Size 8KB
- SHA256 103bbe25769e0ba798a1d426242809a67c268c18b3968c497935c24f419085d8
- MD5 88d72182384894d657852013dc39199f
- SHA1 a368768bcb9f446f45882c9d298b66c55c7d31b6
- SHA512 237856468ca1f41fdc1e22fd455e119be55a0bd0d13d193ec318c8a9e815e4b3ef03ec116bffee467cd973b5ba2a32e12a18ae45ea1a15ff670ee45adfef5297
- SSDEEP 96:enpmXoPYlEsl7cmgDfFKRVlaeqnLCT+tgh8vS:MpmXoPIE87Gr4RLaeqnLCTiih
- TLSH T1290201629D2B6396864D83AFF5E8D62A1123E55FD0559938F2DC07181F0B30CF2E78B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target github.com/corazawaf/[email protected]/tests/REQUEST-941-APPLICATION-ATTACK-XSS/941370.yaml
- Size 6KB
- SHA256 02d46fc0a7680ce7b1f3969ffa8ec4c4c77bdef3bb32ec38c59a783f73e6a07b
- MD5 9464b974658b28b9e04e1c5e36c503d6
- SHA1 eaf3ed2d2d6f663bbaa5518f10d8ab6ac0fd5110
- SHA512 dd7fa401b60e132a96eec662468b6d983a0c7be2facb9b6601af2646555c93bf496ee08db14fe85e837913fdf737b31b2bcad866bd05d26a1d3daf8a603c0633
- SSDEEP 48:nzpLrEQoMIQoEDARQoZuT/RQoSuS/RQoHuTqQoYu1IaUQotuwXTFQomLA3yLFQo6:nKdteVbu0uxMa8FILlFkLmFM
- TLSH T13CD1F2135A3B6396A55D87AAF2E5D31B1263EC0FE007AD38B66C07151F2660C63E18F5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target github.com/corazawaf/[email protected]/tests/REQUEST-941-APPLICATION-ATTACK-XSS/941390.yaml
- Size 3KB
- SHA256 8740a206772e344fdb39349eb017d4f79a44e966f3b264cec8db3adcf1eb355c
- MD5 725dd1d7b623483619440d05fac478a3
- SHA1 429d080b8b1004f9600b971d9b26de4662623567
- SHA512 8e594ae42e353c539d100cdf2e68a7518af501d58397cda05fe98f7e095aaf42c1faad9c1713e5ad9ff226a7500d99c9c762fe4f3338d33550521955d45c9256
- TLSH T1BF81DE239E1BA2D6950EC76FE5D6DA2A1163E80BD096D83CB69D0B141F5B20CF2D18F1
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target github.com/corazawaf/[email protected]/tests/REQUEST-942-APPLICATION-ATTACK-SQLI/942150.yaml
- Size 11KB
- SHA256 4bdfdf0278905f10659953c11ce7aed5de6ef41dc2be65927270797729d87753
- MD5 6b4f66ce636d0d6cf9ef30e9dcade104
- SHA1 500a520baf4114888bc6dd3faeb8fb055070cf8f
- SHA512 ff0db9c784db1f5705a044f839cf84e3cd1bc560ec99fd0b42d27c62407b7d52b2d72e1bdb3c48dcaed72f15580d29756c9ad2ef587a2d00a4b0adf8b39f1fcf
- SSDEEP 96:flvL3GdoEHduXbzUM5hnoDGlGTsKzOXtD+qLqCLb6:fV2dI7puS99qH
- TLSH T1BF321053BD1763E9960D47FBE5D4D5152223E54FE047AA39FABC03044F5A20CA3D18B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target github.com/corazawaf/[email protected]/tests/REQUEST-942-APPLICATION-ATTACK-SQLI/942320.yaml
- Size 7KB
- SHA256 9982c22e0785746bd9438c95a6a1a6a2060ee121002864b3adb19c17fb329f48
- MD5 2dd04b1148d2904de04821d53b94b5ff
- SHA1 dccf2b8f2644a77bf4f399ab5b1359ba7671c0ca
- SHA512 b498a69afe82467dd3ed3c7dcc5ed1ed0bc94c2aaa0768d624ca12dcb72e5ce21c5abb32d16e8d8809969bb748f19bc33b1264cae4d973724e6a417011ba6c51
- SSDEEP 48:cMuUFYNXz5DKYNXS5D7YNXM5DIYNXd5DplS5D+gXn5Dfn4g5D83475DtygS9vHBL:cBVZEy2D7oBn3zq59vBcI/0cywA9GT1
- TLSH T179F1F143AC176396850E83AFE5D9C9156273E60FD043AA39F5AC03140F5F24CE3EA9B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target github.com/corazawaf/[email protected]/tests/REQUEST-949-BLOCKING-EVALUATION/949110.yaml
- Size 4KB
- SHA256 6528a1deb9ff5c1dc2bc446871fac1d12d18d9d9d9ad14a0f4f0a909532262dc
- MD5 80de45b90d97c834ad0ab50038503125
- SHA1 a784469b86e93aeea25a96024eb5f8e8ea83c985
- SHA512 bd5bfa9825a1cddd7efa7ac5c71a2c553a1e32f5d28415fe2c047ba9f0939fe196a1c1881531a5924a477743961e94829614cb5e5e2be453ef1b680ebb79f4be
- SSDEEP 48:KTeITJcTyU6JWXOz/w5Qv72F7KQyEDHMw6bh5QM3/rHnNHv3krYCY5l2F7KQyC:KzlJ8Al/E7WHZEGK
- TLSH T1FC913213DF0B2369514D91B9A8E9E95CA236E1EFC045E539F1EC530C5F4A34CA2A28F6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10