General
- Target 7c05f2c20151754158d35a2793ee461b1f5f89739d5c4fd85437f9ef928a06b9.zip
- Size 5.2MB
- Sample260822-grb9ja1fra
- SHA256 efcdfe433b97e5d123064ab83ccb83dee988a0ff8ebfb98a04d6d9fb0d42ec85
Malware Config
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user6803
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9407
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user7979
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user4322
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user6816
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user7246
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2564
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user3643
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user1505
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user6477
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2862
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user4161
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user7073
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2032
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user1990
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2700
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2697
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user6504
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2941
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user6698
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user1654
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2023
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2752
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2819
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user5183
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user7170
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user5150
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user4249
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user3595
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user4559
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user7990
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user7055
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user7024
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2271
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user1405
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user7543
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user4490
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user1097
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user5049
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9138
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user7595
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user7135
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9255
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2482
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user5830
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user3838
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user5841
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user5418
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user8642
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user1353
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user6935
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user3386
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user3049
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user1186
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user8454
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user1160
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user1242
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user7612
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9530
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9907
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user4855
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9753
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user6939
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user5136
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user8919
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user1829
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user6466
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user5135
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user1064
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user7711
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user4805
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user3955
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2109
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user1222
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user1824
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9785
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9597
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user7820
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user8240
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user8691
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user5066
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user1061
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user5370
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user3818
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user3095
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user4366
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user7914
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user6025
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9645
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9834
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user7403
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user7638
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9635
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user8439
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2096
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user1696
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user8415
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user6991
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user8650
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user4407
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user6813
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user1644
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2556
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user8534
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user6651
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user3416
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user6131
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9671
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user4692
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9902
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user6344
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2421
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user5405
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user7667
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user4983
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user6680
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user3801
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user8152
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user6077
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user1454
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user3724
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9037
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9750
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user8602
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user7665
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user7828
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user1668
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2451
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2956
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user6274
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user8854
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user3949
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user5274
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user4452
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user6163
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user5734
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2600
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user4826
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user7325
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9883
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9336
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user3191
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user4974
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user4533
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user6230
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user8651
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9280
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user3170
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9395
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user8729
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user1230
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user6391
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user5118
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user4753
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9012
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user5796
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user7386
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user7262
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user7010
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user1591
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user6961
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user5327
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9277
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user3311
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user5398
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user4970
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9193
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9481
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2341
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user3348
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2944
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user7826
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user7750
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user4471
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user1025
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user8638
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user6625
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2754
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user8019
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user5607
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user4435
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user7327
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user7230
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user3989
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2978
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user4302
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user3694
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user7652
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user6624
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user5372
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user6600
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2156
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user8497
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user6534
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user5860
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2391
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2741
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user4465
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9808
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user7693
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user4285
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user8393
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user3411
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9950
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user4761
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user6238
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user4638
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user7634
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user3113
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user8384
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9844
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user4816
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user6183
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user8941
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user1953
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user5655
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user4296
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user7920
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9525
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user1873
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user3675
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user5335
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user8369
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user5374
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user3103
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2916
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user6446
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9846
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user1439
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9308
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user4801
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user5127
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user7851
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2576
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user8211
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2622
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user4874
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user8435
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user3184
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user6741
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user4330
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user3471
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user7664
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user7038
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user7079
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9484
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user3259
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user8481
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2882
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user3767
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user1297
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user5932
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user3124
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user4842
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user6875
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user8865
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user1225
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2299
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user1095
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user3136
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9824
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user4221
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user7629
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user6301
-
Password
password123
Targets
-
- Target 7c05f2c20151754158d35a2793ee461b1f5f89739d5c4fd85437f9ef928a06b9.exe
- Size 5.4MB
- SHA256 7c05f2c20151754158d35a2793ee461b1f5f89739d5c4fd85437f9ef928a06b9
Score10/10-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Executes dropped EXE
-
Loads dropped DLL
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Adds Run key to start application
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Hide Artifacts: Hidden Files and Directories
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Defense Evasion
Hide Artifacts
2Hidden Files and Directories
2Modify Registry
1