Overview
overview
8Static
static
1school/Pas...set.js
windows10-2004-x64
3school/Pas...set.js
windows11-ltsc_2024-x64
3school/adm...set.js
windows10-2004-x64
3school/adm...set.js
windows11-ltsc_2024-x64
3school/adm...cle.js
windows10-2004-x64
3school/adm...cle.js
windows11-ltsc_2024-x64
8school/adm...ses.js
windows10-2004-x64
3school/adm...ses.js
windows11-ltsc_2024-x64
3school/adm...act.js
windows10-2004-x64
3school/adm...act.js
windows11-ltsc_2024-x64
3school/adm...rol.js
windows10-2004-x64
3school/adm...rol.js
windows11-ltsc_2024-x64
3school/adm...dit.js
windows10-2004-x64
3school/adm...dit.js
windows11-ltsc_2024-x64
3school/adm...gin.js
windows10-2004-x64
3school/adm...gin.js
windows11-ltsc_2024-x64
3school/adm...nts.js
windows10-2004-x64
3school/adm...nts.js
windows11-ltsc_2024-x64
3school/adm...nts.js
windows10-2004-x64
3school/adm...nts.js
windows11-ltsc_2024-x64
3school/adm...cts.js
windows10-2004-x64
3school/adm...cts.js
windows11-ltsc_2024-x64
8school/adm...ers.js
windows10-2004-x64
3school/adm...ers.js
windows11-ltsc_2024-x64
8school/adm...ort.js
windows10-2004-x64
3school/adm...ort.js
windows11-ltsc_2024-x64
3school/adm...cle.js
windows10-2004-x64
3school/adm...cle.js
windows11-ltsc_2024-x64
3school/css...nt.svg
windows10-2004-x64
3school/css...nt.svg
windows11-ltsc_2024-x64
4school/fon...um.svg
windows10-2004-x64
3school/fon...um.svg
windows11-ltsc_2024-x64
4General
- Target school.rar
- Size 2.3MB
- Sample260619-wwlfbsbw2s
- SHA256 ff5977be8f70112c42b6b7dce507cdbebce5dee69beb6a11b099f03a00cc4523
- MD5 861caa467bf652615916e0979c9d9611
- SHA1 162bbdf61456a9dd5fc3f67974380d634398f40b
- SHA512 680acac2c8412800839854a399db730c48c4e71a467bd7e131459fa1ab526707ec76da3828b21f8451c1c727547846ff89ad7d8c8a9ea112e2257643dfb22af4
- SSDEEP 49152:kr7sBQSNXxHQ1WJm//exsYIkNfuPeag65BLUJEPM12l+buGM:oQQSfle/exLI6s7P5Bw+M1k+iv
- TLSH T110B523B7C3E08B25F7953C7994E4A0465E5891C9B6E7F118335F91F2E0AA98BB8334C1
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
school/PasswordReset.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
school/PasswordReset.js
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral3
Sample
school/administrator/PasswordReset.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
school/administrator/PasswordReset.js
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral5
Sample
school/administrator/add_article.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
school/administrator/add_article.js
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral7
Sample
school/administrator/classes.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
school/administrator/classes.js
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral9
Sample
school/administrator/contact.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
school/administrator/contact.js
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral11
Sample
school/administrator/control.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
school/administrator/control.js
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral13
Sample
school/administrator/edit.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
school/administrator/edit.js
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral15
Sample
school/administrator/login.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
school/administrator/login.js
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral17
Sample
school/administrator/parents.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
school/administrator/parents.js
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral19
Sample
school/administrator/students.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
school/administrator/students.js
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral21
Sample
school/administrator/subjects.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
school/administrator/subjects.js
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral23
Sample
school/administrator/teachers.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
school/administrator/teachers.js
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral25
Sample
school/administrator/transport.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
school/administrator/transport.js
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral27
Sample
school/administrator/view_article.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
school/administrator/view_article.js
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral29
Sample
school/css/font-awesome/fonts/fontawesome-webfont.svg
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
school/css/font-awesome/fonts/fontawesome-webfont.svg
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral31
Sample
school/fonts/JF-Flat-medium/JF-Flat-medium.svg
Resource
win10v2004-20260513-en
Malware Config
Targets
-
- Target school/PasswordReset.php
- Size 9KB
- SHA256 696ee22f14852cf6d142b959dd7fb3857001138b17e24034d9bfb493adfaad31
- MD5 a92a110a0f5bf25a79e2739931c31391
- SHA1 b42606f33fb0f157e78f5428f407300ad3f1eea9
- SHA512 9a3daadcf91b2de7adfa23b5d9d52db79802ba57fa3f7799ce111baf8d7a23e8634d75acde1952abd312684f2dbfe7b56db2b462374efd8130b24d8a275c1869
- SSDEEP 192:LWWJK8x7YhGJJ7vGzh0rO6tgZ5vxf42N+uzzzjzi4PYRAFYQANy9QWoI8b:LWW7JYvAHXYj8b
- TLSH T1B82250023CA28D623773C8B926D65015E4E5C6176E07DC4279FC42EC5FE9F999CAFA80
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target school/administrator/PasswordReset.php
- Size 8KB
- SHA256 de42b5608999066a19ecbb30a66fadfc65b64e38d9e5db774c3ae5206285a2e2
- MD5 d8539ac58cb2309b97fa3fc55e7cbf78
- SHA1 408dfad0bdb49b4add9fed1b404baaaf825313c7
- SHA512 7659bd31af64f94a7ea0a0f24a3c6a0c23bcdc73534fa22eb0d1710c57413b6ed1550e5530affa0c14401e7cd9ec561609a6c83a49e20616be68dfe20945639f
- SSDEEP 192:LWWFHBAYxxAnC1YQJh7vGzh0rOxtgZ5Q64oN+pzzCWLYYAIYQANbT8e:LWWTxxAAJrLgWXB8e
- TLSH T1E0127306ADE18C913763C8BA25D6A00AE4D9D50B5E07EC4679FC42EC5FD5FC94CAFA80
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target school/administrator/add_article.php
- Size 9KB
- SHA256 084a2517a3d3c48cd8ba4fe9be1763c755c582205d0ca741bc2d7bf68904b524
- MD5 99959d0be4889343fa0916faaebaa12d
- SHA1 225936eb74cb01a0a5d033f9b186ca35b8638764
- SHA512 441d436e5162fb16af4897f16097d5d5be9d91990e72709be4fdcaad0f4ccc63a06d35a3ac0979d0765dc61a18e87bd1c86135ed36aaf2f996326a9539bd3e4a
- SSDEEP 192:LWWUcBAYxxABM9YPJShGYYdWTi8OGwidl:LWWUuxxAfJ6Ygdl
- TLSH T1E212941AACD44D617363C8E668DAB509FCD1910B6E87AC4034DC62F85FDCF9C88AF954
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target school/administrator/classes.php
- Size 9KB
- SHA256 2bfdccbfdb5591398840d8baa566afeadf22e67f2e71af0fbe02eb1caab0614e
- MD5 7570f1468534443435fe83f05d21f736
- SHA1 f0afa3fa73943e9f0c3d455f3055d455c61b7647
- SHA512 1d81d09ab4c41fc52956c405cec615443145342bf09ed5b5e4f5b6b85307bb947bf9362b502545b563d8ee18a16071d4a928a0b50ca12aed2d2210348d9c6208
- SSDEEP 96:LWJxq1TjEorq1Tq3voNZBMBAYBzxAtEdY+JbhrWqcx8YIZiQ3+lSSWdgyBUXc61I:LWWUKBAYxxAtEdY+JFQalyte
- TLSH T14012731A6DA144353363C8EA55D5B00AF8C18A0FDE47AC4074FD62F8AFD5FD888AF942
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target school/administrator/contact.php
- Size 8KB
- SHA256 34d8aaac162b302746555911346aea857ea08a9e62fae686e843632d2aedf8f8
- MD5 fdcc1c4063d4f93f0a432d3e152733b8
- SHA1 59707e468302b67e55b7b8ac493a22ec8de01a36
- SHA512 223c3478a7f08e6071259e064d104cf2c68966128b18cda3e5ec70dd6ec37b980738401b1b198613a185ded69180bb693de23c39844118a2b97d7f495c9ef389
- SSDEEP 192:LWWUUHBAYxxAnCQYOJZSeeiLOygPeUHKe:LWWUYxxAnJ/eiLOyIeUqe
- TLSH T126027216ADD085247323C8EA70DAB50AE9D5D20B6E47BC4075ED42E49FE8FDC887F640
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target school/administrator/control.php
- Size 19KB
- SHA256 2efac1b838b7690139c34022f6a5879a704d2f53234f08d2ded6f1bb4ba1f834
- MD5 31a208e4183a85656f1aa62b61253ca7
- SHA1 2c454719abc60ff78ec961ffd182f7770855cbf7
- SHA512 0214e7852cb59cce3b94e95d37e4e57a90e9084e5a3b60769102cc78b5b3439ee0aa2047ecf23b196692b2092c95805a3e6976443cefe94e89254e9c6a751028
- SSDEEP 384:LWWUlxxAnJxEBZuv6YiAMP6go+y+HK83pe:KWUlXSJxEav6YtfL+Hhe
- TLSH T12692C515ACE189322373C4F566CAA505F886C10B8E079C10B5EDA3E45FD5FAC99BF684
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target school/administrator/edit.php
- Size 31KB
- SHA256 0213c42e611654417eb0b7f852a489432d72deb42c664f530439bc01b24a3e71
- MD5 46f0badb41f64fb9128ae92238cb65f9
- SHA1 9c19dd509ef3325c7eb354fd840b99f29052b20f
- SHA512 736cd6991646ae99ebd46dd0e805afb446d269dfb3e92ad6bc09e70a59dcc30339349a71c6b03db953c69e7f656dc9d8d01d15fb0bd40eef13604d40e24ddd17
- SSDEEP 384:LWWUsxxAOJfN07LKAprj0nbJdDXUheMeNti8utxptWxpne:KWUsXpJfC7LKOruyIXcsHe
- TLSH T115E29311BCA2C1327173CDEA75D29912FDCAC40B8E466C50B6ECA3E80FF9E14596FA54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target school/administrator/login.php
- Size 6KB
- SHA256 87b55b4ee02ece4d98cc85e26c3fd961a9be80e1a8419bbb6e9feab988479e5d
- MD5 3dc9dda701eef19947d667e65e7f83c3
- SHA1 d6ee37e4d6ebf8faf77ec48fa033bb5aae29f612
- SHA512 dadf2d44cb9ce0c4c51dd248cf2c35b222889184b481977644b2d6078d21ba38b600754ae26ef24bba411185d9fce6527008f1be4d1a908b7002514141f11056
- SSDEEP 96:LWJxq1TjEorq1Tq3vkZBt2BAYBzxAnC1Y+JRo5YQU5OciY9Wn9LrQkp2RE4e:LWWO2BAYxxAnC1Y+JNQUgct9q9Ykwe
- TLSH T107E17316ADD488513323C8B654E9B40AE9E8D51B2E07EC4834FC53E8AFE5FDD886F580
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target school/administrator/parents.php
- Size 15KB
- SHA256 556e54ed43e34cc3edee51463133383e11632cdf58ba1eed4020cd488a8142be
- MD5 c0c8c57e78fbad4574cc1b25e3ffed0f
- SHA1 3c6003612179df678e29bec046566121d5849215
- SHA512 37fc9278014a508de76d355d01c75f249f49131b16eb03d5997491ccc9dfd3e25948dc2d4062802afe22e90a9af49cbaaeb069e94453c2ff48793be00a5098c9
- SSDEEP 192:LWWU/BAYxxA9M1Y+J6ZIo43lo6R7EC32KzcXRHnX2D9ZZe:LWWUpxxAwJcPso6RJDVe
- TLSH T1376254157CE580317223CDEA65E2AD06FDC6C90B8E479C807AED53E84FE6F98881F944
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target school/administrator/students.php
- Size 21KB
- SHA256 5d7e2788072d5f21c53e560bbd67725ad5a98d70d89aeca27e94136140f212da
- MD5 3fd7dea23ff02f615982950bde8ed782
- SHA1 78b3787965a64a8715c5d808b33e6d2fb82fab84
- SHA512 46754291d220bba11af99c14265df15cb50408fc495bac641eb1115872a43211a7ee1982e047e4759201f13f84f8f2336d823c5942c2721b3f8536c82c2c4585
- SSDEEP 192:LWG0uBAYxxABM9Y+J1cIoTyoyh3y9fcV/cZ7jCnS9l4fjlBEsw90D96gTXe:LWG0cxxAOJaPvyhNcZLsSswexje
- TLSH T125A272157CE1A4373173C8DB79E7EA06F8C5C80B8A425C8079ED62E84FE6E584A5FD24
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target school/administrator/subjects.php
- Size 10KB
- SHA256 bc805321f3ab060f8adb016832dd5fe211ed85dc8aaed492b1e982e9108677cc
- MD5 c26bae18d6821d9ff3a23e82482de161
- SHA1 7413002873e8601554727887adea234e218b6744
- SHA512 3788f3789772119de48121e904acc2508be29ea6a10b1430c63d51d170aecd70592e4557177a9aea0c81f111d39f0c57c3fc7015e6da2396e8196e4bd18c3be9
- SSDEEP 192:LWWUeYBAYxxAtEdYOJFXXPKtgv7Z6O90G93Hr62ilyD7p3UNlye:LWWUeqxxAYJVXPJvd6O7lrNDhUNlye
- TLSH T18F323F25BCE0C1212363D8FB65A5A106F9C5890B8D57BD4070AD92F85FEDFEC886F942
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target school/administrator/teachers.php
- Size 17KB
- SHA256 69174e21256f2f05696aa9f07903dacd0f44127501073c782880f37748fe8597
- MD5 e8014c5b6ab20973591b603144d89ce4
- SHA1 501fe46973538a2135fe7c0c6e39fb47984a3b71
- SHA512 1b458c5707fa28f9e1686f4b0d62e76b05e625713f83e03a99f12d5841aed5d0943ce084b29438cee521adf365bb039803a529f72fa0f1ee1bdcfad869b3229d
- SSDEEP 192:LWWUlBAYxxABMfYSJ65Iok9L/a4h19AYkc17t7cCl12A9QgiQe:LWWUjxxAOJaPmja4hr7kc15xYAH1e
- TLSH T1AB825375BC9584337233C9EE35C2AA06F8C5C91B5E079C80B5EC92E85FEAF58482F941
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target school/administrator/transport.php
- Size 14KB
- SHA256 f5b7cfd989ab28ed1e58dfa9e5633bf3eb5ea62000fa2168af58e91df2652fbe
- MD5 c99926b1d66e854b5beabfcaa827df9a
- SHA1 8eccfc897c4048e50d529eb25df190bdf0c95fb8
- SHA512 ad605a1bfeb65b94fe0b4d8d9dec392d5be49566d13da96008c95dc6314d74c864e8b5628b0b7d17810f6501809924032aabd6b5ae19d06f5725dd1449850180
- SSDEEP 192:LWWUbHBAYxxAtEdYKJFESlanCV9d90S8I9Uzyne:LWWUVxxAwJgn2Dl7Uke
- TLSH T1596251A2BCE080313263CCDB65D6A515FAC9C90B89479C50F6ED53F84FD5FA8896F502
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target school/administrator/view_article.php
- Size 11KB
- SHA256 dde752b79fa8f1ca5c2dbccaafcbbcbe33ef115c25ffee795816c267294f1fe4
- MD5 3c4ec760be8648e768edf235ea4c58b4
- SHA1 61a6e7f9126b81918dd1637d40d6a42a031ae1ed
- SHA512 6a836b59620d835971d3b90b7dbd11de3fc857b63fe306a83ebf92910efac0fb6179650b6421a2735e5ef25c7764e6e4077e8ea6c361a27792f2eb1f9134b259
- SSDEEP 192:LWmhy7BtJBAYxxAnC0YOJC5eJfaVna/U3e:LWmhqHxxAnJL2na/ue
- TLSH T16E42720A6CE186627373E8B95CD9501BE9C0970B2E97A858759D51E80FC0FB8C8BF748
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target school/css/font-awesome/fonts/fontawesome-webfont.svg
- Size 382KB
- SHA256 8e3586389bb4cd01b3f85bb3b622739bde6627f28bba63a020c223ca9cf1b9ae
- MD5 d7c639084f684d66a1bc66855d193ed8
- SHA1 c0522272bbaef2acb3d341912754d6ea2d0ecfc0
- SHA512 cd4c1d6756aa4d8e98ef4f7549ef2d73cc407bbba17a22ba31ddefbf74cd51de8a5c51a200db7f99e408f38988444a44156e7dc1136775b5cf6376972770ed29
- SSDEEP 3072:pnw+ubvqC7OzAIvK+jRwXxSbs3xErNKyOAXzr3tmq2OEsunSGwoyH2BODH4qjvl+:AMlFykUBj
- TLSH T198849568F95107B9CBDC42C09A7E0E94532D916E18753E68067E98F05D0AB2E4FCFEC9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target school/fonts/JF-Flat-medium/JF-Flat-medium.svg
- Size 128KB
- SHA256 673b9819b619ed758be7ee97a0a5233bc993965d684cd03e8f9e6de01cb8b566
- MD5 2333e33e17c4fdee95806f1283dac3ae
- SHA1 63b7dc886b61c4e9c76577bd21edcf762a540e36
- SHA512 32decbf72c690ebf8053075954699be0a1e52210c19c8479e2a440969f4e04c62850ad7edb778f7c717a87d2d81ab239df8f501c80889401b94ed84ac624aae4
- SSDEEP 1536:qOPqfHzWZ5CU0Kw/UFC2q3gbmVQ9npA/sC3m4CyqvcMdQ6WWwXPUDDh2IM2czdzh:X0nkArih2R2axu/sl
- TLSH T1ECD372F5D485C5C94EAFD3C0E6C1E9AE485E913B510B68BD488EFAB50E0FB66E907C04
- MD5 SHA1 SHA512 SSDEEP TLSH