General
- Target FOSSBilling.zip
- Size 27.8MB
- Sample260709-ajqcvsay2n
- SHA256 801a6ae42cb31a2f80fc98a908ba36e74b9758ef692c5ebfd300f5ca46189348
Score
8/10
Malware Config
Targets
-
- Target cron.php
- Size 992B
- SHA256 46c0556559260b5bd452c898536e48f307da3691a7e416354b3fdea53e74806b
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target data/index.html
- Size 1B
- SHA256 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
Score4/10 -
- Target data/log/index.html
- Size 1B
- SHA256 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
Score4/10 -
- Target data/uploads/index.html
- Size 1B
- SHA256 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
Score4/10 -
- Target di.php
- Size 22KB
- SHA256 96575b6d704e873dd81ea3344600d09fffa71ba4559563ff6875b1175e20fdf1
Score3/10 -
- Target install/assets/install.html.twig
- Size 16KB
- SHA256 6b6c0e8f53f1f1ffb6cc4bf3c9bbd3c2d0bf4b625c6b48c48923ca891562374f
Score3/10 -
- Target install/assets/js/modal.js
- Size 2KB
- SHA256 5542ae7998a3d2a9ca72ff22131e8db756a66c8db5cb5df5ed5150b1bfe09f1b
Score3/10 -
- Target install/assets/layout.html.twig
- Size 2KB
- SHA256 f8bee914b6869b99662587d0910187e71302d5209c821f7ba043aaeb1d5b1705
Score4/10 -
- Target install/install.php
- Size 19KB
- SHA256 5fb9fe42ae72e966ad9bd11f8d66ad118c71f93ac6dc303e40fd194cf07a9113
Score3/10 -
- Target ipn.php
- Size 1KB
- SHA256 4649508dea5aa0210fbb626d28540409264bed7493afe034e68f96bf5ffe56c4
Score3/10 -
- Target library/Api/API.js
- Size 11KB
- SHA256 76d7f881203290ea0092c340ba99524e33a7381b948e71d74682883141c93b82
Score3/10 -
- Target library/Box/App.php
- Size 11KB
- SHA256 99eec066757b5919fa8545d317633ae42f5ef2ad52f9be6a2aa95f1ab8063ffb
Score3/10 -
- Target library/Box/AppClient.php
- Size 4KB
- SHA256 8b309714a309639b59c2765ec06beb5a4b6b01f4e3456aae27af5582f91c32da
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target library/Box/Database.php
- Size 5KB
- SHA256 ca65857f3d2614d2bacad1ece748458eaaadca757706166e95c6b6f6e2721b55
Score3/10 -
- Target library/Box/EventDispatcher.php
- Size 2KB
- SHA256 d5a3a270472636394ba4ef194aeeac8c82e0c492a5daa15f9d7c5515c6f58004
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target library/Box/EventManager.php
- Size 2KB
- SHA256 098e004bcee6a3296667fc32a707426f6f7d73d4803c0ce6b82a677b4d98f831
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Tasks
static1
Score
3/10
behavioral1
Score
3/10
behavioral2
Score
8/10
behavioral3
Score
3/10
behavioral4
Score
4/10
behavioral5
Score
3/10
behavioral6
Score
4/10
behavioral7
Score
3/10
behavioral8
Score
4/10
behavioral9
Score
3/10
behavioral10
Score
3/10
behavioral11
Score
3/10
behavioral12
Score
3/10
behavioral13
Score
3/10
behavioral14
Score
3/10
behavioral15
Score
3/10
behavioral16
Score
4/10
behavioral17
Score
3/10
behavioral18
Score
3/10
behavioral19
Score
3/10
behavioral20
Score
3/10
behavioral21
Score
3/10
behavioral22
Score
3/10
behavioral23
Score
3/10
behavioral24
Score
3/10
behavioral25
Score
3/10
behavioral26
Score
8/10
behavioral27
Score
3/10
behavioral28
Score
3/10
behavioral29
Score
3/10
behavioral30
Score
8/10
behavioral31
Score
3/10
behavioral32
Score
8/10