General

  • Target
    school.rar
  • Size 2.3MB
  • Sample260619-wwlfbsbw2s
  • SHA256 ff5977be8f70112c42b6b7dce507cdbebce5dee69beb6a11b099f03a00cc4523
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      school/PasswordReset.php
    • Size 9KB
    • SHA256 696ee22f14852cf6d142b959dd7fb3857001138b17e24034d9bfb493adfaad31
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      school/administrator/PasswordReset.php
    • Size 8KB
    • SHA256 de42b5608999066a19ecbb30a66fadfc65b64e38d9e5db774c3ae5206285a2e2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      school/administrator/add_article.php
    • Size 9KB
    • SHA256 084a2517a3d3c48cd8ba4fe9be1763c755c582205d0ca741bc2d7bf68904b524
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      school/administrator/classes.php
    • Size 9KB
    • SHA256 2bfdccbfdb5591398840d8baa566afeadf22e67f2e71af0fbe02eb1caab0614e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      school/administrator/contact.php
    • Size 8KB
    • SHA256 34d8aaac162b302746555911346aea857ea08a9e62fae686e843632d2aedf8f8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      school/administrator/control.php
    • Size 19KB
    • SHA256 2efac1b838b7690139c34022f6a5879a704d2f53234f08d2ded6f1bb4ba1f834
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      school/administrator/edit.php
    • Size 31KB
    • SHA256 0213c42e611654417eb0b7f852a489432d72deb42c664f530439bc01b24a3e71
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      school/administrator/login.php
    • Size 6KB
    • SHA256 87b55b4ee02ece4d98cc85e26c3fd961a9be80e1a8419bbb6e9feab988479e5d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      school/administrator/parents.php
    • Size 15KB
    • SHA256 556e54ed43e34cc3edee51463133383e11632cdf58ba1eed4020cd488a8142be
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      school/administrator/students.php
    • Size 21KB
    • SHA256 5d7e2788072d5f21c53e560bbd67725ad5a98d70d89aeca27e94136140f212da
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      school/administrator/subjects.php
    • Size 10KB
    • SHA256 bc805321f3ab060f8adb016832dd5fe211ed85dc8aaed492b1e982e9108677cc
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      school/administrator/teachers.php
    • Size 17KB
    • SHA256 69174e21256f2f05696aa9f07903dacd0f44127501073c782880f37748fe8597
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      school/administrator/transport.php
    • Size 14KB
    • SHA256 f5b7cfd989ab28ed1e58dfa9e5633bf3eb5ea62000fa2168af58e91df2652fbe
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      school/administrator/view_article.php
    • Size 11KB
    • SHA256 dde752b79fa8f1ca5c2dbccaafcbbcbe33ef115c25ffee795816c267294f1fe4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      school/css/font-awesome/fonts/fontawesome-webfont.svg
    • Size 382KB
    • SHA256 8e3586389bb4cd01b3f85bb3b622739bde6627f28bba63a020c223ca9cf1b9ae
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Target
      school/fonts/JF-Flat-medium/JF-Flat-medium.svg
    • Size 128KB
    • SHA256 673b9819b619ed758be7ee97a0a5233bc993965d684cd03e8f9e6de01cb8b566
    • MD5 SHA1 SHA512 SSDEEP TLSH

MITRE ATT&CK Enterprise v16

Tasks

static1

Score
1/10

behavioral1

execution
Score
3/10

behavioral2

execution
Score
3/10

behavioral3

execution
Score
3/10

behavioral4

execution
Score
3/10

behavioral5

execution
Score
3/10

behavioral6

adwareexecutionpersistencespyware
Score
8/10

behavioral7

execution
Score
3/10

behavioral8

execution
Score
3/10

behavioral9

execution
Score
3/10

behavioral10

execution
Score
3/10

behavioral11

execution
Score
3/10

behavioral12

execution
Score
3/10

behavioral13

execution
Score
3/10

behavioral14

execution
Score
3/10

behavioral15

execution
Score
3/10

behavioral16

execution
Score
3/10

behavioral17

execution
Score
3/10

behavioral18

execution
Score
3/10

behavioral19

execution
Score
3/10

behavioral20

execution
Score
3/10

behavioral21

execution
Score
3/10

behavioral22

adwareexecutionpersistencespyware
Score
8/10

behavioral23

execution
Score
3/10

behavioral24

adwareexecutionpersistenceransomwarespyware
Score
8/10

behavioral25

execution
Score
3/10

behavioral26

execution
Score
3/10

behavioral27

execution
Score
3/10

behavioral28

execution
Score
3/10

behavioral29

adwarediscoveryspyware
Score
3/10

behavioral30

adwarediscoveryspyware
Score
4/10

behavioral31

adwarediscoveryspyware
Score
3/10

behavioral32

adwarediscoveryspyware
Score
4/10