5286c727fa64bb3218c6cf39f84cc6420d29642089fdb9dd27e08acfb288e6b9

General

Target
wx-dnf-server.zip
Size 79KB
Sample260703-g6zclscv21
SHA256 5286c727fa64bb3218c6cf39f84cc6420d29642089fdb9dd27e08acfb288e6b9
MD5 30ee4c4e4d88ff6cb3593fb1ab50220c
SHA1 58af2ac154af8abd2aefe935733c7d20d2c16ac4
SHA512 6f7012e1a2f491f031a82842cc4a5e9f32aed0c0a7e6b2a570686f962a21f9e4b8503fc5af4f7a9c8dedfa017f6913aa55e181c6e37a34b863febcc20489e21b
SSDEEP 1536:NV1I/e6dOp0vrWjhujpwurK0FtH7MNTKl1kXP/PUQtdtQQdmlwFOU:NV1meTp0vrWluzr74Kl1kXcQ3tQQdmlm
TLSH
T1888302206C1F5C06FE6CAABB68E61CA39210EF4B1A770A5B8EC15D6B41411B6F4D15CF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Targets

- Target
  app.js
- Size 642B
- SHA256 ba618e06c77282367b988bb0be33ea7e6d04b7102ff452ba5adff3a33ff19864
- MD5 87d8d64c1c208575fad4b521438ea301
- SHA1 ace823ae45c63f29fcec16ad74b61cb08bd6421c
- SHA512 97164fca170558dad411db42df51eea7bda0ee2313e16bf1fd57d2a1b930e5222550bd75b568a30df9c2a8fa6e73b17a0ade5babd85f7e143fdfd998b2bed934
- TLSH
  T18EF0AC92264B3CE600710A5F149F09C78598B15435FE8940AB4DF0FA7D8CC9575505DC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  routes/dnf.js
- Size 381B
- SHA256 71e0d89f6e2ec35ffc9448555822542e9741faa0178430eb327be145170681f3
- MD5 5dcae7e2e49ad7f53b0a4eda9cbf0704
- SHA1 651a3fa65b3c66f912d390bfdcb7fa577441336e
- SHA512 39b3cd971d7b9cf8ec50ab575cdbf91f43493df0800c064a12c74dbfcffa3f9c1823fcc37bba45793600ae38c4c80071fdb5aeb6e6dd1bda45c6e3338769a190
- TLSH
  T160E0DF6A326340E8FAFA83CAF245216AA413C636B3169444F36D92B086F7C0AA58447D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  utils/db.js
- Size 2KB
- SHA256 77d8a1b518a8539097a77d8d1b536324763155b6fdbcf92161659cad7e93fa2d
- MD5 e83c5a1c02fbd0bde48e6d72541c9f2e
- SHA1 b86ab7ef022351685fccadabdc2cf29d0323a75c
- SHA512 a482564eaa9f2904f6aad036cbd900dd85a56451743ae1022e741a78d6478ced6e11899404bd683cf64a5d21111f4933c4129de2a871e05f9653e5bc38608a1f
- TLSH
  T1775171D158B267341AFF70F2A5A381A6E8245138366B5492FB9C7700BF9B522E01EF47
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

1

T1059

JavaScript

1

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6