General
- Target 21f92a54742ec9c70ee9e9d6a34901afe87dfce2b29cd25d9e86314cf70a88e9.zip
- Size 5.2MB
- Sample260827-1qa5madn71
- SHA256 912e10095ffd561769902ecb339f286ed302e36185d56c51c46b33c41d357c2a
Malware Config
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user1483
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user7270
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user5872
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user3490
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user5683
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2608
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2503
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user4800
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9249
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user8967
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2935
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user6632
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user7447
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user8009
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user3447
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user5709
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user4930
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user1032
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user3933
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9880
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user6921
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user7795
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user8567
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2798
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user5251
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9285
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user1577
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2664
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user3557
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user3125
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user8562
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user6871
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9667
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2098
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user8495
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user5004
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9024
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user5603
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user3872
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user6251
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user7548
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user1570
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user6863
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user7980
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user6209
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user5084
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user8424
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user3453
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user8989
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user6446
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2017
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9409
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user3772
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user6441
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user6456
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9105
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user4492
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user1790
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user4666
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user3678
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user8384
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user7033
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user4035
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user6424
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user5149
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user7797
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user5355
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user6718
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9232
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user1165
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user3759
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user3577
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user5529
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user4228
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user8462
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user6514
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2171
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user7416
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2191
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user5082
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user1221
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user3269
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user7943
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user3256
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user3629
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user4365
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9883
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9899
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9001
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user7080
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2075
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user8176
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user8692
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2827
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9463
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user3239
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user4314
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2040
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user6662
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9566
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user4224
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user6082
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user3925
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9164
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user5193
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user5720
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user5479
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user5081
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user1959
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user1900
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user4821
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user3200
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user5450
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2285
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user8415
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9252
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9425
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user4407
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user4388
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user7853
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user5462
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user3750
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user8966
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user3746
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2118
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user7413
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user4959
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user3606
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user7829
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user5123
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user3976
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user3088
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user4660
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user1384
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user7495
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user8587
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user3142
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user6927
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user6300
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user8110
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user8878
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2820
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user8514
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2456
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9942
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user1281
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user7745
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user4523
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9692
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user5898
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9551
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user1694
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user1348
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2008
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user4414
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user8721
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user3559
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user6880
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user4602
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user4637
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user7781
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user7517
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9106
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2469
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user4635
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user4419
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user6890
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user3425
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user1157
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user8453
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user6039
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user5735
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user6798
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9061
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user8778
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2920
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user6397
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user3190
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user4255
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2703
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2890
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2892
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user3851
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user8526
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user5694
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2599
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2901
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user1979
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user7961
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user6138
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user5552
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2028
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user6230
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2662
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user5499
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2373
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user8167
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user1188
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2817
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user8530
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9078
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user1624
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user3874
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user8270
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user6312
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2290
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9256
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user8905
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2767
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user8118
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user7816
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user8445
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user7533
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user3377
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9835
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user6352
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user5145
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user1553
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9156
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user5657
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user5678
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user3337
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user5275
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user4567
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user2673
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9717
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user3679
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9966
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user8776
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user5715
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user5382
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user1294
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user8109
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user1557
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user8006
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9479
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9014
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user8754
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user4551
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user9152
-
Password
password123
Extracted
-
Protocol
ftp
-
Host
138.201.132.148
-
Port
21
-
Username
user3842
-
Password
password123
Targets
-
- Target 21f92a54742ec9c70ee9e9d6a34901afe87dfce2b29cd25d9e86314cf70a88e9.exe
- Size 5.4MB
- SHA256 21f92a54742ec9c70ee9e9d6a34901afe87dfce2b29cd25d9e86314cf70a88e9
Score10/10-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Executes dropped EXE
-
Loads dropped DLL
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Adds Run key to start application
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Hide Artifacts: Hidden Files and Directories
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Defense Evasion
Hide Artifacts
2Hidden Files and Directories
2Modify Registry
1