General

  • Target
    coreruleset-4.25.1.tar.gz
  • Size 586KB
  • Sample260731-m96trahc64
  • SHA256 0539e66e7627fe71c160a644d8fb7ab6e450d53c9de208be5f95a35c70e1a154
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10

Malware Config

Targets

    • Target
      coreruleset-4.25.1/regex-assembly/921120.ra
    • Size 472B
    • SHA256 eec703120da25c92e77a52ad993923d97b646c6cdb44c071bd8ca4c6fcd9bacb
    • MD5 SHA1 SHA512 TLSH
    Score
    5/10
    • Executes a VBScript file via the Windows Script Host.

    • Target
      coreruleset-4.25.1/regex-assembly/921160.ra
    • Size 772B
    • SHA256 76d5ff13ee0cb7d7cb3c6e5d15724a30dd7411db9c9588b97f79b54356e66d8c
    • MD5 SHA1 SHA512 TLSH
    Score
    5/10
    • Executes a VBScript file via the Windows Script Host.

    • Target
      coreruleset-4.25.1/regex-assembly/934100.ra
    • Size 3KB
    • SHA256 215f308c672ce58162b9feb48f51484bdb08bead9dac078c69d7fa23e1aa80e1
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      coreruleset-4.25.1/regex-assembly/941390.ra
    • Size 246B
    • SHA256 7f036f9927a5bc50deac1069e4a78e19e3a708624cc0e96adf29c4366747c47d
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      coreruleset-4.25.1/regex-assembly/942290.ra
    • Size 2KB
    • SHA256 3a2242d921bfa1d2229910c57c0652f675d4bc291987bbd9cb94d40c03fd4843
    • MD5 SHA1 SHA512 TLSH
    Score
    5/10
    • Executes a VBScript file via the Windows Script Host.

    • Target
      coreruleset-4.25.1/regex-assembly/943100.ra
    • Size 587B
    • SHA256 aa1313050fd716e84e414f8468b86cb0e8a37c0207f3c78402404fe60ce6c14d
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      coreruleset-4.25.1/regex-assembly/exclude/unix-shell-fps-pl1.ra
    • Size 6KB
    • SHA256 f3a4fee4c45ff6411ba9009e079a97693b41d662849e1e44271d98ee83d09efe
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

    • Target
      coreruleset-4.25.1/regex-assembly/include/unix-shell-noarguments.ra
    • Size 364B
    • SHA256 3edec7a750270097da98543859ef4f850e2225f2eab80a2aaadf38a5559cea79
    • MD5 SHA1 SHA512 TLSH
    Score
    5/10
    • Executes a VBScript file via the Windows Script Host.

    • Target
      coreruleset-4.25.1/rules/REQUEST-905-COMMON-EXCEPTIONS.conf
    • Size 1KB
    • SHA256 8d713fcc9e6390f5aae145309ae24cb12fdcae744af0ab60586846f4a3fdd7a9
    • MD5 SHA1 SHA512 TLSH
    Score
    6/10
    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

    • Target
      coreruleset-4.25.1/rules/REQUEST-934-APPLICATION-ATTACK-GENERIC.conf
    • Size 21KB
    • SHA256 fe2ed54b65bfbff1cdb503a38839961eddbb6ac4b5b55870f6426801a34fda50
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      coreruleset-4.25.1/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf
    • Size 53KB
    • SHA256 e86b8167000c51e6298a59ef6ee6ae07b5cd413d24d7c13785c4074199b73726
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      coreruleset-4.25.1/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf
    • Size 96KB
    • SHA256 8c5c6502dd588f354ecb37dc178785892a827a8000a360b2e36a7825c80a0266
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

    • Target
      coreruleset-4.25.1/rules/unix-shell-builtins.data
    • Size 138B
    • SHA256 7c7b600b457b06940a440095cf594f0e28de1891020de9840fc9ea7cf1e00e57
    • MD5 SHA1 SHA512 TLSH
    Score
    5/10
    • Executes a VBScript file via the Windows Script Host.

    • Target
      coreruleset-4.25.1/rules/windows-powershell-commands.data
    • Size 7KB
    • SHA256 5055ffeb4ce22869dee0f611045991e64365e980bba68649f4468aea86476d93
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

    • Target
      coreruleset-4.25.1/tests/regression/CRS_Tests.py
    • Size 4KB
    • SHA256 c497edc764cb6e2613724d34b1b61b2325b0acb77b7af436095884ec0cc60fe6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      coreruleset-4.25.1/tests/regression/conftest.py
    • Size 447B
    • SHA256 fc70d79bba162232ec58a7e788db22813c411768d14fd693f2e0fa681f081720
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks

static1

Score
1/10

behavioral1

execution
Score
5/10

behavioral2

execution
Score
5/10

behavioral3

execution
Score
5/10

behavioral4

execution
Score
5/10

behavioral5

execution
Score
3/10

behavioral6

execution
Score
3/10

behavioral7

execution
Score
3/10

behavioral8

execution
Score
3/10

behavioral9

execution
Score
5/10

behavioral10

execution
Score
5/10

behavioral11

execution
Score
3/10

behavioral12

execution
Score
3/10

behavioral13

execution
Score
6/10

behavioral14

execution
Score
6/10

behavioral15

execution
Score
5/10

behavioral16

execution
Score
5/10

behavioral17

execution
Score
6/10

behavioral18

execution
Score
6/10

behavioral19

execution
Score
3/10

behavioral20

execution
Score
3/10

behavioral21

execution
Score
3/10

behavioral22

execution
Score
3/10

behavioral23

execution
Score
6/10

behavioral24

execution
Score
6/10

behavioral25

execution
Score
5/10

behavioral26

execution
Score
5/10

behavioral27

execution
Score
6/10

behavioral28

execution
Score
6/10

behavioral29

execution
Score
3/10

behavioral30

execution
Score
3/10

behavioral31

execution
Score
3/10

behavioral32

execution
Score
3/10