Extracted

• • Target
    uptime-kuma-master.zip
  • Size 2.3MB
  • SHA256 0fc14f1984c06432a51b6e365a129fbdb1e25f1e485e32407838e558f59e1a38
  • MD5 84da334112d00c6a2a8b0422e411e854
  • SHA1 d749cec4cd2b42907835542cca7f4a1d11ed8112
  • SHA512 a8a1d598af69aa71b71aa28e585a489f44f719aa69063235c95d5effdc50698f3f136f6dfe70f27d2541e9fb5f5fb160f9c32a9278d2cc21cd2077f1cfec30c3
  • SSDEEP 49152:bkgUAEC7UHSbb5KEyykI0+JuogkPahLVEqd8fAKLYBtKXwYTgHGExpyqi:bkgUshK/I7uogS0LuhHEL0gmqi
  • TLSH
    T180B5F13AC9456D25DC7232BEE56213C6D33DE9A84D897A0186D750B09C7F3A83F352AC
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  1^/10
  behavioral1behavioral2
• • Target
    uptime-kuma-master/.eslintrc.js
  • Size 3KB
  • SHA256 90d1c801205adca656d5ec4afcaa61dc5f33be682dd0a43fc29a432945ee7992
  • MD5 1bef24b53093db94a6d2dd8cb31ceb7c
  • SHA1 330bea4912d9ec5df70f59a9bd23233d1526516f
  • SHA512 14a483c53e656d3e912deab52b2b398f441a6cdcc6a6132ac662acd025894835b03271637b4dac7f07ccbbfedc2192c86b29b11b0f017dd489e5bc878c9ce00a
  • TLSH
    T1B771DD18D9E91C73026A11208D6E1292EA24E2D74D7C7E30F34D138C1F5C29FAB7B69C
  • MD5 SHA1 SHA512 TLSH

  Score

  3^/10

  execution
  behavioral3behavioral4
• • Target
    uptime-kuma-master/.prettierrc.js
  • Size 1KB
  • SHA256 682a186a7bc2ea5253016fdbde403f44ad615e3651e0feccc3aed4dc133f416a
  • MD5 ae90ff7c8d75693cd2e8e179904fc234
  • SHA1 53e94da1c6b14aacef93b4648bb72efa04cbdabb
  • SHA512 1697137d9758ba18362e429d46f0fff4b735a16f0b64016e690c5cc980b73a8d782c12aac19fecd29254d097c4e4557bbda2d59695cb419ea1ff12a2eb18128a
  • TLSH
    T1FD31BB090C70192A41222138EB7D5A893766509B1E3ABE317F4D16000F0D53E70F5FED
  • MD5 SHA1 SHA512 TLSH

  Score

  8^/10

  executionadwarepersistencespyware

  • Boot or Logon Autostart Execution: Active Setup

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral5behavioral6
• • Target
    uptime-kuma-master/CONTRIBUTING.md
  • Size 21KB
  • SHA256 7b48c7324e295850cfadefde9215e980311f402eac8da5fac30db0d9842f8ba2
  • MD5 98b9bda133b934965415161332554955
  • SHA1 f1dc4bbd532e648f669ceb224e4534f9bf3aff87
  • SHA512 71f5c703c775a64698693625ea6364b8af068795b5f43d23654317d591c3dcca567b0f4141e09b7f14b917beb46bb05606390948e8ca93d232802482c5a7593e
  • SSDEEP 384:CpXXRswYXuDwqYOJLWgBKrhqGrCJamynXHZ2OfhLFSgHbdqC:Eq7oLWqKrhqGrCEH8OZLBL
  • TLSH
    T1E8A2193BEA4113771B9351A6B68676D9EF27D0EC93B1406AB0AD8068134A37E437F5CC
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  3^/10

  execution
  behavioral7behavioral8
• • Target
    uptime-kuma-master/config/playwright.config.js
  • Size 1KB
  • SHA256 b25ad0994274c2e3733cb0d3777bf3d99c5901ccb6ac2e3830468916133d3a28
  • MD5 4f9053ed7d5f578bbc150d87396caa6d
  • SHA1 4d9abac394fb46329e1782bcf7fb45f04e6649f0
  • SHA512 7206e20d1e9382c87fb95bcea209208ad0273c8d9ee598e69140a9a2ecdce87e174a131bc8238b5c6487596abd796fad831baf8c582b80b8756e05960f482d96
  • TLSH
    T1AD31110E588B1142181196F5D75EA1B2BA30824F8D18BC62736F93082F0F1BE50E97EB
  • MD5 SHA1 SHA512 TLSH

  Score

  3^/10

  execution
  behavioral10behavioral9
• • Target
    uptime-kuma-master/config/vite.config.js
  • Size 1KB
  • SHA256 d319e34c4751729d14f8745d33aa1ce066afe2bd9c7cac79f02ce99dc2423f97
  • MD5 c97b9d8ae45b45357d747f304b280bfb
  • SHA1 a8a5e5d3e60580517a3aa12ef63ddfd680e535dd
  • SHA512 5b6d9c19ae524f69c9475ddc0ceedd30c0373ee6a425d1ac6f9b02c59e1a205472a378b54896ef6521ac75edf137b18340296c82368baa5d71bb75817fcf258a
  • TLSH
    T1E821872A04FD011214A372A46F3E506AA7F661ABBC29BC643E0C51101F0D0BCD13A7D5
  • MD5 SHA1 SHA512 TLSH

  Score

  3^/10

  execution
  behavioral11behavioral12
• • Target
    uptime-kuma-master/db/knex_init_db.js
  • Size 21KB
  • SHA256 01632f9203eb2f2bdb451a3f0af30aca62b91aeb5ad5dbe9977aa5b8e76ad78a
  • MD5 3543d79dd1bf6af8d1157e873c960313
  • SHA1 4c063c47bc6c90652e3d2f4dd773b654c86eebd9
  • SHA512 7a9dfb56c996603a1a7dc97f2f34bdb6b6a1aa25e5e666f11b4938055a609d0c92930296b66fc7799e4a9342db31832b84bd6094bf3ff5557f473e0bfdf5e047
  • SSDEEP 384:PYKjHT15oT94Q5q4jqlpcKOdDW7KmtmJbFBCv/qfBBdbF:1p5oTs0gtm9L
  • TLSH
    T133A2EB456B67BC21E9BBE244077F35F1412609271D75F9B0B6ACE7D00F5CCB282AAE18
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  8^/10

  executionadwarepersistencespyware

  • Boot or Logon Autostart Execution: Active Setup

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral13behavioral14
• • Target
    uptime-kuma-master/db/knex_migrations/2023-08-16-0000-create-uptime.js
  • Size 1KB
  • SHA256 cf42d705b12d48bd671160843fb2dde319d1ae2766a4bdf33181996fa3ab1819
  • MD5 27f0512defe44175d2fbab41d198718a
  • SHA1 537feb6007b72d508404fcb4b3e3d2f9acfbcb34
  • SHA512 3360d4e41721d836b69ce2b94cc64743f79c61062bbea298decd930fd3f6b8ec32b7ea7c755ac0d8d453cff69f89d79c0182c814d42e8da95fe96ab386360ad6
  • TLSH
    T11B317CCA17823510BAB3F1081A2F75F4116656239C15D6B0341CCBE84F18E36526EE3C
  • MD5 SHA1 SHA512 TLSH

  Score

  3^/10

  execution
  behavioral15behavioral16
• • Target
    uptime-kuma-master/db/knex_migrations/2023-08-18-0301-heartbeat.js
  • Size 414B
  • SHA256 16bda99c6304af4000165cfacf71f2a206f2e9cbf0c7cfd42d55c62547eec923
  • MD5 90d2e8b13bd82076848d24eeaa027a29
  • SHA1 3b954394ea87efd858738624647fe2fc15c7cb9d
  • SHA512 f15f54ef77a3e021c0a0c581573f4582e6f63430399a035f8310bdeefb20db42d91f495ac96ac6ef13af86d75eb915c2b87b4e08563770a1a35d36f41bce5336
  • TLSH
    T19EE0E59E29E3B408D6B3B058454B66D47A128A07150CDF717C58CF415F9883B901ADA8
  • MD5 SHA1 SHA512 TLSH

  Score

  8^/10

  executionadwarepersistencespyware

  • Boot or Logon Autostart Execution: Active Setup

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral17behavioral18
• • Target
    uptime-kuma-master/db/knex_migrations/2023-09-29-0000-heartbeat-retires.js
  • Size 357B
  • SHA256 33fac1c7d8b245e5b628bc7c2dfcf7c347829ef30a1ae877a9aef0c159410e25
  • MD5 174c0dcc2922c32e01685798925e48e1
  • SHA1 42c2fbc38075c52bfada774f0a9565fe671f51af
  • SHA512 f500177ed6943fd341f240daa113b188600d58ba0050e3e7b3f970b73c83fc899adca297a6dbfca425aa84bd3f8857d75206dd88866c0cc69e8853d3b9694e66
  • TLSH
    T14FE0D88D29E2B808D273B094865FB46568099C16141DDFB07D58CB514F59C39846DD6C
  • MD5 SHA1 SHA512 TLSH

  Score

  3^/10

  execution
  behavioral19behavioral20
• • Target
    uptime-kuma-master/db/knex_migrations/2023-10-08-0000-mqtt-query.js
  • Size 430B
  • SHA256 93a50a9091f0461d97084e50617af49d7f38a61009470be182bcfe60853810b7
  • MD5 a118ace615eac1359868e1c6d85fedf5
  • SHA1 e6fecb55d1a19c43dd24dd405e8d0feed4f0b71e
  • SHA512 b34f90863beb2852076059bab29fcb5bea383d89e21ac016970380f754b7124e6707c7ca47ced2fce5f3a46af122b9871fc03a90b87fc2b2714e8c5db8611680
  • TLSH
    T105E0A08D39E27A018663B058429BB0187420C8233C28DFB27E5DC7704F5EC62E22BA6C
  • MD5 SHA1 SHA512 TLSH

  Score

  3^/10

  execution
  behavioral21behavioral22
• • Target
    uptime-kuma-master/db/knex_migrations/2023-10-11-1915-push-token-to-32.js
  • Size 357B
  • SHA256 81ba28ee46e4e082d551d3ce8619dcc0bb980fdb4d38c02dbb37a0c64f42c5cc
  • MD5 30d62fdad3a3b624c6b18f0b3c9b07fe
  • SHA1 2ca52eee36e7b4763a7de01e47b7c7180de3bc36
  • SHA512 7547ff8a0527e9013fe27355aad726e5b441027c1767c3ce0f26307da92319c7f59964e31ab335e57d6c976f44feba3ceef8a43013b421f89deebfeb0a35ef57
  • TLSH
    T12BE0D88E25E2BC20D673B4D8A55FE058580048A638289BB0BD19D3D05F2AC30464BCAD
  • MD5 SHA1 SHA512 TLSH

  Score

  8^/10

  executionadwarepersistencespyware

  • Boot or Logon Autostart Execution: Active Setup

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral23behavioral24
• • Target
    uptime-kuma-master/db/knex_migrations/2023-10-16-0000-create-remote-browsers.js
  • Size 865B
  • SHA256 0bc21003158de1d2072e5444fa375d790d28ca2dbacdf7b55a6796fa856c5554
  • MD5 5505435474f7043945d7475c6fdfeb97
  • SHA1 c810b6b3bdb62acab410e39830b556c8cca981a4
  • SHA512 23961ec4760370290ded1c04b985903c5279f89fe46e2d9df3f0f5d0f68be9fd6e7b7decbebf63ed7c9bdb3e2187b2dfaabd65bbd15c440796f0e417496248e9
  • TLSH
    T1F011478E27923C00DF3BF098915F682420A948173C9EDEB0791FC6900F1DC76829ED1C
  • MD5 SHA1 SHA512 TLSH

  Score

  8^/10

  executionadwarepersistencespyware

  • Boot or Logon Autostart Execution: Active Setup

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral25behavioral26
• • Target
    uptime-kuma-master/db/knex_migrations/2023-12-20-0000-alter-status-page.js
  • Size 348B
  • SHA256 77db98e705c365e24e278dee2675b959449224a627b5527f599bdd74f5687651
  • MD5 8dcb1f1d45df4c8146465a5b674594f4
  • SHA1 7c4c740dee65009208b9d36dbd7d62343d542901
  • SHA512 ee488afd96db8d3b5d9251e83e457a55ae6fb1aa94d6c3a48bd4b866b71418e5b61761264fffaf40926d6cb7ffe2cb2d8b7458a75ab0581f09ddc79dba09a406
  • TLSH
    T1AEE0D88DABF67800C637B698AC8FB82824464806242EAF70BD8CC2B44F5DC71C58DD4C
  • MD5 SHA1 SHA512 TLSH

  Score

  3^/10

  execution
  behavioral27behavioral28
• • Target
    uptime-kuma-master/db/knex_migrations/2023-12-21-0000-stat-ping-min-max.js
  • Size 1KB
  • SHA256 e9f1a0f1df70964c16176c026b8cbb0f1bb24da4b6ca8741e013503bf79c8e87
  • MD5 2167f03bf11fb5f21025161b04546b87
  • SHA1 39fc0435bec45f01524d914e0ba2ead0a5c61016
  • SHA512 c2bbf82d02cdb4cbb041277ce035819b0d723302b096b3c3cbf9bdc674b1588565691fb070169cb8c5b45cc7661f912baae58e0440585a668125e8e0bb9288ed
  • TLSH
    T16621E98F23E636019FA7B1585DBF24A4309059578D08FE783D4DC2D44F18476617ED0C
  • MD5 SHA1 SHA512 TLSH

  Score

  8^/10

  discoveryexecutionadwarepersistencespyware

  • Boot or Logon Autostart Execution: Active Setup

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral29behavioral30
• • Target
    uptime-kuma-master/src/modules/dayjs/plugin/timezone/index.d.ts
  • Size 553B
  • SHA256 e218630802648ea53b33d50a23c88d145badbf1d3e59f91594fb7e15395d2f9b
  • MD5 c98d8aee611941465ea2fedee1fe51f4
  • SHA1 4b374113428595b303144a37b1760165eab06ae8
  • SHA512 24a1bd1d8db19d360cb5397859e9dc675ec848bcafeb25fb791fbf428189bac4bfb9120c6e29aa8c867a18323b92ee98d487df3547f13d4fbfcc366bcaff5c85
  • TLSH
    T158F02B5B683621DE0E252190C68EC5A42D18873715A9F4B4F5BC7E018F6641CC057B84
  • MD5 SHA1 SHA512 TLSH

  Score

  8^/10

  discoveryadwarepersistencespyware

  • Boot or Logon Autostart Execution: Active Setup

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence

  • Drops desktop.ini file(s)

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral31behavioral32