Overview
overview
5Static
static
1nextcloud/...der.js
windows10-2004-x64
3nextcloud/...der.js
windows11-ltsc_2024-x64
3nextcloud/...ser.js
windows10-2004-x64
3nextcloud/...ser.js
windows11-ltsc_2024-x64
3nextcloud/...ait.js
windows10-2004-x64
3nextcloud/...ait.js
windows11-ltsc_2024-x64
3nextcloud/...er.ps1
windows10-2004-x64
3nextcloud/...er.ps1
windows11-ltsc_2024-x64
3nextcloud/...er.ps1
windows10-2004-x64
3nextcloud/...er.ps1
windows11-ltsc_2024-x64
3nextcloud/...er.ps1
windows10-2004-x64
3nextcloud/...er.ps1
windows11-ltsc_2024-x64
3nextcloud/...dy.ps1
windows10-2004-x64
3nextcloud/...dy.ps1
windows11-ltsc_2024-x64
3nextcloud/...or.ps1
windows10-2004-x64
3nextcloud/...or.ps1
windows11-ltsc_2024-x64
3nextcloud/...ace.js
windows10-2004-x64
3nextcloud/...ace.js
windows11-ltsc_2024-x64
3nextcloud/...nt.vbs
windows10-2004-x64
5nextcloud/...nt.vbs
windows11-ltsc_2024-x64
5nextcloud/...ent.js
windows10-2004-x64
3nextcloud/...ent.js
windows11-ltsc_2024-x64
3nextcloud/...tor.js
windows10-2004-x64
3nextcloud/...tor.js
windows11-ltsc_2024-x64
3nextcloud/...der.js
windows10-2004-x64
3nextcloud/...der.js
windows11-ltsc_2024-x64
3nextcloud/...ool.js
windows10-2004-x64
3nextcloud/...ool.js
windows11-ltsc_2024-x64
3nextcloud/...der.js
windows10-2004-x64
3nextcloud/...der.js
windows11-ltsc_2024-x64
3nextcloud/...der.js
windows10-2004-x64
3nextcloud/...der.js
windows11-ltsc_2024-x64
3General
- Target nextcloud-14.0.6.zip
- Size 48.8MB
- Sample260924-pkwctstdla
- SHA256 6b3e60faf3a73c3a72365305912144a073ecbcc95f0a8cad0689c7f0d82179e6
- MD5 f547ab953a70a923b0f5d60dc5352925
- SHA1 4e43a57340f04c2da306c8eea98e30040399ae5a
- SHA512 fd4122237b5b11463b3b3270fa4dcf4fde72f044a95c18b486b7c9926bb9150c98b7e68030cb8b93d637fe36c487ed8b80dd9cdc33daf98227dfc7ab527bb58d
- SSDEEP 1572864:1nGqf9YzmLlSXWH+gUyJcFKez6B+8/CTh:1nAmLsOzu8ZFCF
- TLSH T1CEB702349284CBD7EB0FDEB9C78D3202D0A655A9481A98DF2F21074B76FC7462B70799
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
nextcloud/3rdparty/aws/aws-sdk-php/src/Api/ApiProvider.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
nextcloud/3rdparty/aws/aws-sdk-php/src/Api/ApiProvider.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
nextcloud/3rdparty/aws/aws-sdk-php/src/Api/Parser/AbstractRestParser.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
nextcloud/3rdparty/aws/aws-sdk-php/src/Api/Parser/AbstractRestParser.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
nextcloud/3rdparty/aws/aws-sdk-php/src/Api/Parser/PayloadParserTrait.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
nextcloud/3rdparty/aws/aws-sdk-php/src/Api/Parser/PayloadParserTrait.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
nextcloud/3rdparty/aws/aws-sdk-php/src/Api/Parser/XmlParser.ps1
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
nextcloud/3rdparty/aws/aws-sdk-php/src/Api/Parser/XmlParser.ps1
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
nextcloud/3rdparty/aws/aws-sdk-php/src/Api/Serializer/QueryParamBuilder.ps1
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
nextcloud/3rdparty/aws/aws-sdk-php/src/Api/Serializer/QueryParamBuilder.ps1
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
nextcloud/3rdparty/aws/aws-sdk-php/src/Api/Serializer/RestSerializer.ps1
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
nextcloud/3rdparty/aws/aws-sdk-php/src/Api/Serializer/RestSerializer.ps1
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
nextcloud/3rdparty/aws/aws-sdk-php/src/Api/Serializer/XmlBody.ps1
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
nextcloud/3rdparty/aws/aws-sdk-php/src/Api/Serializer/XmlBody.ps1
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
nextcloud/3rdparty/aws/aws-sdk-php/src/Api/Validator.ps1
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
nextcloud/3rdparty/aws/aws-sdk-php/src/Api/Validator.ps1
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
nextcloud/3rdparty/aws/aws-sdk-php/src/AwsClientInterface.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral18
Sample
nextcloud/3rdparty/aws/aws-sdk-php/src/AwsClientInterface.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral19
Sample
nextcloud/3rdparty/aws/aws-sdk-php/src/CloudDirectory/CloudDirectoryClient.vbs
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
nextcloud/3rdparty/aws/aws-sdk-php/src/CloudDirectory/CloudDirectoryClient.vbs
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral21
Sample
nextcloud/3rdparty/aws/aws-sdk-php/src/CloudSearchDomain/CloudSearchDomainClient.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral22
Sample
nextcloud/3rdparty/aws/aws-sdk-php/src/CloudSearchDomain/CloudSearchDomainClient.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral23
Sample
nextcloud/3rdparty/aws/aws-sdk-php/src/CloudTrail/LogFileIterator.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral24
Sample
nextcloud/3rdparty/aws/aws-sdk-php/src/CloudTrail/LogFileIterator.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral25
Sample
nextcloud/3rdparty/aws/aws-sdk-php/src/CognitoIdentity/CognitoIdentityProvider.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral26
Sample
nextcloud/3rdparty/aws/aws-sdk-php/src/CognitoIdentity/CognitoIdentityProvider.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral27
Sample
nextcloud/3rdparty/aws/aws-sdk-php/src/CommandPool.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral28
Sample
nextcloud/3rdparty/aws/aws-sdk-php/src/CommandPool.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral29
Sample
nextcloud/3rdparty/aws/aws-sdk-php/src/Credentials/CredentialProvider.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral30
Sample
nextcloud/3rdparty/aws/aws-sdk-php/src/Credentials/CredentialProvider.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral31
Sample
nextcloud/3rdparty/aws/aws-sdk-php/src/Credentials/InstanceProfileProvider.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral32
Sample
nextcloud/3rdparty/aws/aws-sdk-php/src/Credentials/InstanceProfileProvider.js
Resource
win11ltsc2024-20260911-en
Malware Config
Targets
-
- Target nextcloud/3rdparty/aws/aws-sdk-php/src/Api/ApiProvider.php
- Size 7KB
- SHA256 7a0709f39d1819656221401abbbc07ea63238ce455ba2a5d3dbb33b71bdbb940
- MD5 47a57263a9fd53a95af587b591890435
- SHA1 cfce8f697ef18c216bda5fa956e2e84dca89eaca
- SHA512 919ba7a986eaa775b4f50bf9d70911984bd7e5da17c6c4a5d70d2238a96b917925f930712153cda3ea3906a72ab18168b892e8dd8ff4ad585307c5998f84c538
- SSDEEP 192:/MQHJ88hMxA2SaAwUGRuSS4oUxUwPAepDx+cepGNrGj7wzI4O85T16vDM/a20L:a8CrSaA1QUv2e
- TLSH T188F124183CDB5576015329B97F6B1081E32CA01F221A69417AFF16F4AFD3F3D9A30AA4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target nextcloud/3rdparty/aws/aws-sdk-php/src/Api/Parser/AbstractRestParser.php
- Size 4KB
- SHA256 1711473d90e0a7060790a2c5d53436215ee8fd385a1c64e1e597acbc8edbda35
- MD5 81835f775f1eaf893077bc598ac5d909
- SHA1 abf6f7ec3dd3149729c39abd760c4a291c7680a1
- SHA512 aa318c5b7efb10fe08345e2dc186e2b3b25ee5438215b3c37f11983a2cb7d9e4330434abd4fc66fd7a2610b25f01ef8735fdc4e81b33a9dc20868fb8963f55aa
- SSDEEP 96:5woGZJ9xntP93ibDBMpCx0HiQ1NczLGzQJQPhSoykpj:5wo6Jbd9SbDBPdQofGUePhSoykpj
- TLSH T152A13356ACEBC2410B5350795F0FCC957E1070033A5AC441BE1C06D5AFC9BBCF9962A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target nextcloud/3rdparty/aws/aws-sdk-php/src/Api/Parser/PayloadParserTrait.php
- Size 1KB
- SHA256 3163f006eda52a959faacd01470eeec1d0fe7560fb6acb24b4115f4a6a227b09
- MD5 b71d8ad744191d851bfba45e0e75b534
- SHA1 26214586e30ff5e952cb5d96cd8de53098b67475
- SHA512 5e763af64d2f05deb8f871ee2c71e8cab81089b01d4d11cd2ce3acfb71868c79a81257c29e9b6a765a914b52f652b1f92dd12349800c49a0756ed38e38d8c6a6
- TLSH T13B21A2654CD24213416B347CAD4A9944E1F2DE0B7958CC21BD7E1A713F90EAEEE62A0C
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target nextcloud/3rdparty/aws/aws-sdk-php/src/Api/Parser/XmlParser.php
- Size 3KB
- SHA256 82b18db9f5973af38b5494c867825d8b143294abf84087afd3c67e647b3aa9b2
- MD5 8c1b5d80d77735148e22b30c5d3be55f
- SHA1 925a0035df4d1657f530a596e44c77f7935e0fa2
- SHA512 92acca1d5310e812afd270e312c3dd3a437f6569d28f1413d7ab2d11eb95ae33b0ca3540e51897bd66114455ce890aebd563302c4e26eb3abe8375417b6c25f7
- TLSH T11E61F36638F701509A53A02E4F9B941A7FBC544B2A6AACA2F85C21712F00DBCDD7F718
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target nextcloud/3rdparty/aws/aws-sdk-php/src/Api/Serializer/QueryParamBuilder.php
- Size 3KB
- SHA256 0cae3a454a896a25ef1d2843f587117ce979d6299d080d09df96ba6c1f533e96
- MD5 48d4b6a6e1bde218f4035163d004a060
- SHA1 3e4d033668df0e4befc3fdf02b71a16dfadec474
- SHA512 aa8120727106efa58778b75e68599364cb68569515c38041b6e55de0390327939508b5150ad11759046f21fdd5f7de397ee820a56ea78a870062d1f9529f9138
- TLSH T1EE81CF9E68FB441459B3B0298FDBC1467F75A02332172D66FC9C42992F10B7CE92175D
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target nextcloud/3rdparty/aws/aws-sdk-php/src/Api/Serializer/RestSerializer.php
- Size 6KB
- SHA256 f24c77718c28551248dafdeb3d71a29c143cc9eb8cf2d2bdef213ad60393fbeb
- MD5 21dec63e9591050de993bd8916d67bc6
- SHA1 26f1fedf9e7f5a3af76b12b6403acbba82ca2d31
- SHA512 8e4123db7f1e17385740132fd2f9be4dd9d2308e77cd68ffc315e1b73113fadc2640e523c9437ea04667178a2f22b9f54e520a1b2409c71dde64e08ac958f6cc
- SSDEEP 192:41jf1xp2q3joFf6uayJ00nrh0CltqYt2K6AdLtdBOvDM:41jXy500nrhrtPJtDOvY
- TLSH T1F4D1514428EB13A1867320389FEBC91C7FB5841F250949457DAC07D97F84A2CEB73A5C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target nextcloud/3rdparty/aws/aws-sdk-php/src/Api/Serializer/XmlBody.php
- Size 5KB
- SHA256 8662351b12185f8327059dc9dfe5fb4c58403cc57b864e03a2e8ba148de20ddd
- MD5 a579de44b27f8dc442c431d329579ff1
- SHA1 f906cab61adf5e6c89f54125e5f2983c54208da0
- SHA512 5e5d2daa25653f1f9eda401adc0986d8b5b12472b1bf954d3f1bae23be8c535ca6c73093488653505ecb1ea9234a5e0a4bd66f3f8447333047d6c87f840b64d0
- SSDEEP 96:41BB5y4G3C5n4I6NypnBx5tlzNSXU6CsPHXFBXCusNuMPBItlL:41BLy4G3C14Z47lkCsP3FBBnlL
- TLSH T17CC1BC0A78E789A5A9A354794FDBC2476E30941B2F162C72384D05901F25F7CF63E7B8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target nextcloud/3rdparty/aws/aws-sdk-php/src/Api/Validator.php
- Size 7KB
- SHA256 9530f3cf93c896a83dfc396993d493aab2400343e2714a40292f65d912af8159
- MD5 4c3e83e23fbdd2275bcb32f8ecac6cdf
- SHA1 76aa6b937f7898e248d725e53d39c7c585d861b7
- SHA512 d5748af4608405ba45f89a5a7da9b02a10933f89f1eeb6870bae8683bddc5989e2ee5a8b282db06d6cb40d22daad6277adfba4ff984e7358ff102fb8a3c2d29c
- SSDEEP 192:y2xy3iarfWBK5uplEtF5C5yp7zEyKZ8i9yC6wy45:y2xgiEWBKuKhird
- TLSH T1DCF1121678EB1D2558A360BE1FCF900A9E6650271A68ACDA7EDC01605FC4F7CCF76B24
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target nextcloud/3rdparty/aws/aws-sdk-php/src/AwsClientInterface.php
- Size 5KB
- SHA256 b0c28d1b6cde70dffc2f06fd15d28410591e55c3f95b5408036279da540f9c02
- MD5 8b2e3c0ff737474c3d771c196ab0c160
- SHA1 0a1c7a4dade4cd2289a10d0efbdd39a483411445
- SHA512 acc45ffb0aa4796700316003b5170c598ac6e59407dc5aa055152a1d5b439f9598d8191b25e19b80ee1b31771f9b37ff98f14fa63aa0b14060923573ad47fbc0
- SSDEEP 96:F8YgPNZsM+zoJN6V2DHYV/A5H/9fc8P0B+nnKBkOd/+vZvQ5oqycjxj:F8YgP5fJN/7EAN/O00B+nnKBTdGvZvD6
- TLSH T177B1515B16ED273301472434A25BE1D1C8A7931F322A0649747EAEBC7F5BF79871289C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target nextcloud/3rdparty/aws/aws-sdk-php/src/CloudDirectory/CloudDirectoryClient.php
- Size 9KB
- SHA256 6a4f4c4d6eca866b8602725455c4156c895ea278e46b20b017e3a869ebfbf395
- MD5 31875e204a29f0d65da5ea5b1b76cee3
- SHA1 f379fcbffa668e2c03b885cae38d84d9b2cf58d6
- SHA512 d186250851be93ab85f8c6b8548e0599e8088c74d296822d7b3a096f3844615b2ef2b10e23b5c79e17169a9fe69b02a984b0bdac49df669656db6405ffd11af9
- SSDEEP 192:sNl5BNZFVfsA93opubooA35+PLndYOnjwrlQVst2YzpIJS1T9D9j9t9J9d9e9R9C:aQsB9hkx
- TLSH T1CE125227ABDABAE763C5F116B1E4EC2BF984D2701117CD121D8EC6DD2D8EC382A44C56
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Executes a VBScript file via the Windows Script Host.
-
- Target nextcloud/3rdparty/aws/aws-sdk-php/src/CloudSearchDomain/CloudSearchDomainClient.php
- Size 2KB
- SHA256 0420433aa5eb93541576741cfc7801d82230028c4ac85dd41828dd4c2f629b5d
- MD5 17a96cf3cb810d102f27061ed92700dd
- SHA1 44b9cb487109843309c5f4ad40fb39dd8297de83
- SHA512 b0b1c03bce9f73f582bfec6f686365e77cd9648045d4664f4e3cb08e93c54f9a19c2f4d437a3aefb69aa53d2d4613290bff3f0b42f1c456bcaf5eeeefa72fbdc
- TLSH T15E51404A79EBB596C3F3B03CA3DBF265F6688113200795127DEE03E85F45C684A60E8C
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target nextcloud/3rdparty/aws/aws-sdk-php/src/CloudTrail/LogFileIterator.php
- Size 11KB
- SHA256 b743666c099ce6ca804856f629dd8cf9b052f4163e867328090b6c53fbbf4989
- MD5 3130d3d5d2624f48b21529a5e007d810
- SHA1 c20d004baa3c540f777613a546309cfab9abe1db
- SHA512 d1971e43fe0749a36f081883b7292e2c184be1132a12a214c075855c9c25bb551d4b12f051ac10f58650438bd17ebd2b8cd30015285dd8d6dbf218ef011d7fa6
- SSDEEP 192:TbPvs3iQOsPlJRT0LF3VP+3B+ZId2gxXT8HCckQCKoiPQqTt:TbPvsSQO4qVPIJFAIQCK0Y
- TLSH T1F232A72239DA5331055731A8978E6181DA2FC41BB7DAB800B96D83F46F05B35CB3E3E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target nextcloud/3rdparty/aws/aws-sdk-php/src/CognitoIdentity/CognitoIdentityProvider.php
- Size 1KB
- SHA256 ce0e88d4f03d3784bb081b7d816cb3f455ae28f2e0f346890198f6b0d5a45b2e
- MD5 b6e60d15d0a7b0b6504386d206ab49fc
- SHA1 cbe33f5b6fba08f98c58218a8a1332dc9593f677
- SHA512 783f6396c03d7f11cc7d7482da727656d7ad2ddecffcc6edfdbe91eb1beff7fdbb675dfa94842557bcdc7f0512960f434c198ba24cc3314b9cda2d1e9dfe052e
- TLSH T18031C2A83CDB4CA3214360ADFB0BD104475438176DCADA7A7CCC55855FA553CD6F8E24
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target nextcloud/3rdparty/aws/aws-sdk-php/src/CommandPool.php
- Size 5KB
- SHA256 8eb09f7c414a4ccd0d7aaff6ed919018c2976f26f271cc1cf0952d88a4c15466
- MD5 88f3620f5eaf1b7f68a483c968df217b
- SHA1 461d3cad66c5205e92db70792d9d92084d86696d
- SHA512 21cfbfeaf90f6a8e102cf5613a6d0c19eb34cb97749e343fe8359990059030c9e66a0b836634759dbca2eec4dd246add1467d9d577b4aa21c208e3b6bde98e77
- SSDEEP 96:Y00S+dUVrzt5xXj9lU3jZIphnfnFtCVAuZ5yfUxTuPrwXoCgAL:Y09+dUVXt5Bj9y3jSFnFtCVAufysxTuG
- TLSH T12AB1325729ED36334013B8B0E20FA256D921132F212D4943746EAE7CAF59F38D795A9C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target nextcloud/3rdparty/aws/aws-sdk-php/src/Credentials/CredentialProvider.php
- Size 13KB
- SHA256 c06e4b859faf3e6464a8843e9f1d9c58ccd5f69a8c341271c64b4ac1c59426ea
- MD5 f70328030802757a0ad2e83a20c68815
- SHA1 7a11edf0f4468b53d52d4743ca62dd4da0f2d078
- SHA512 e5290b5eeb378ff71dd824261be88fe2db0f8b11a0dac131614161f4fc9cf35de9e06f66acb7e2bb35747de0aa2d87aea81dbf9a92cacc5d09e1a967c13e0709
- SSDEEP 192:yWJkqUuLw5e2HdFWhooeA9pqFoaicUxGDbSOmC1rYHciXQKtwOXQTZX+dOUxXA5h:s6L2UxIWOmC9KSngifvL
- TLSH T12F527357B8E71103054B6C7DFB4F9040D81D652F1A9C4980F86E4279CF46FA8FEA5ACA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target nextcloud/3rdparty/aws/aws-sdk-php/src/Credentials/InstanceProfileProvider.php
- Size 3KB
- SHA256 bdfda0d1c6bdd9779fab566651f88e04a6d04afe46ba99360ff51c1403782d0c
- MD5 10a8e9de40e743fc58ef1ca5ccb86c6b
- SHA1 01459f054065749d3ba56ec752d0c9dbcbd2ee2b
- SHA512 8f3ed325ad9355f64012aa2ccca33c0f923875f44f167b01d542ebec11f4ce9796091fe37f51634205134c64d23638f08eb0d115374572c5773f794880030309
- TLSH T130618587ACDA5D63420B28FCFB87E0016D68720B364DD811FD5C41D98F82620FE95EAA
- MD5 SHA1 SHA512 TLSH
Score3/10