Overview
overview
5Static
static
5lighttpd/NEWS.ps1
windows10-2004-x64
3lighttpd/NEWS.ps1
windows11-ltsc_2024-x64
3lighttpd/c...-1.dll
windows10-2004-x64
5lighttpd/c...-1.dll
windows11-ltsc_2024-x64
5lighttpd/cygbz2-1.dll
windows10-2004-x64
5lighttpd/cygbz2-1.dll
windows11-ltsc_2024-x64
5lighttpd/c...-2.dll
windows10-2004-x64
5lighttpd/c...-2.dll
windows11-ltsc_2024-x64
5lighttpd/c...-0.dll
windows10-2004-x64
5lighttpd/c...-0.dll
windows11-ltsc_2024-x64
5lighttpd/c....0.dll
windows10-2004-x64
5lighttpd/c....0.dll
windows11-ltsc_2024-x64
5lighttpd/cygdbi-1.dll
windows10-2004-x64
5lighttpd/cygdbi-1.dll
windows11-ltsc_2024-x64
5lighttpd/cygev-4.dll
windows10-2004-x64
5lighttpd/cygev-4.dll
windows11-ltsc_2024-x64
5lighttpd/cygfam-0.dll
windows10-2004-x64
5lighttpd/cygfam-0.dll
windows11-ltsc_2024-x64
5lighttpd/c...-1.dll
windows10-2004-x64
5lighttpd/c...-1.dll
windows11-ltsc_2024-x64
5lighttpd/c...-4.dll
windows10-2004-x64
5lighttpd/c...-4.dll
windows11-ltsc_2024-x64
5lighttpd/c...-1.dll
windows10-2004-x64
5lighttpd/c...-1.dll
windows11-ltsc_2024-x64
5lighttpd/c...-2.dll
windows10-2004-x64
5lighttpd/c...-2.dll
windows11-ltsc_2024-x64
5lighttpd/c...-2.dll
windows10-2004-x64
5lighttpd/c...-2.dll
windows11-ltsc_2024-x64
5lighttpd/c...-8.dll
windows10-2004-x64
5lighttpd/c...-8.dll
windows11-ltsc_2024-x64
5lighttpd/c...-3.dll
windows10-2004-x64
5lighttpd/c...-3.dll
windows11-ltsc_2024-x64
5General
- Target lighttpd-1.4.49-1-win64-ssl-upx.zip
- Size 9.5MB
- Sample260925-pmlleaea92
- SHA256 6283f525e0cbdd0d54e1175509813347a30a22827f4756045eeacc38ea0a2c4a
- MD5 fa7e456a02b7b0ea781d83bece909e85
- SHA1 166660d5a446fb403bc2bb09c5b1d80041ba31c6
- SHA512 9836973e5928e373b1720e85cf52c0d7b6b5e4f5f4eed1060989735ddeba4a07e002758ef3031c7530c987563609f17c0a77e78c8e0d774ca0291c81c2e4418f
- SSDEEP 196608:DZtkm7M9+AFNuTAolmMnD8Vlkc/khNaTiaFdfJrnMX/afINjYM0N6C:DnksMTWTKMUw7cx82INd0
- TLSH T1EFA633EAD5A613EAE4DED9757820AEC7CE1BB1E783814242D97E12F6485F99310730C3
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
lighttpd/NEWS.ps1
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
lighttpd/NEWS.ps1
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
lighttpd/cygattr-1.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
lighttpd/cygattr-1.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
lighttpd/cygbz2-1.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
lighttpd/cygbz2-1.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
lighttpd/cygcom_err-2.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
lighttpd/cygcom_err-2.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
lighttpd/cygcrypt-0.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
lighttpd/cygcrypt-0.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
lighttpd/cygcrypto-1.0.0.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
lighttpd/cygcrypto-1.0.0.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
lighttpd/cygdbi-1.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
lighttpd/cygdbi-1.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
lighttpd/cygev-4.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
lighttpd/cygev-4.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
lighttpd/cygfam-0.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral18
Sample
lighttpd/cygfam-0.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral19
Sample
lighttpd/cyggcc_s-seh-1.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
lighttpd/cyggcc_s-seh-1.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral21
Sample
lighttpd/cyggdbm-4.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral22
Sample
lighttpd/cyggdbm-4.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral23
Sample
lighttpd/cyggeoip-1.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral24
Sample
lighttpd/cyggeoip-1.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral25
Sample
lighttpd/cyggssapi_krb5-2.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral26
Sample
lighttpd/cyggssapi_krb5-2.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral27
Sample
lighttpd/cygiconv-2.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral28
Sample
lighttpd/cygiconv-2.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral29
Sample
lighttpd/cygintl-8.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral30
Sample
lighttpd/cygintl-8.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral31
Sample
lighttpd/cygk5crypto-3.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral32
Sample
lighttpd/cygk5crypto-3.dll
Resource
win11ltsc2024-20260911-en
Malware Config
Targets
-
- Target lighttpd/NEWS.txt
- Size 101KB
- SHA256 a4ef7de9f2575856624b8f8f754e217ff778597110e1072595e22bbb16df4445
- MD5 790dc6222f6506aea61e276348c65fd3
- SHA1 523ef4bc5ac3fe80d3c5bcb66c9dc33a512c81e4
- SHA512 d864681c766f35bf02ccddd68bf1f8039847987042eb53eb0d01ef994f69191248128d56942929de9b4f5942c4aa7c3146960f79049e098a4d6068b364aa02e3
- SSDEEP 1536:i3H3Of0FUxPQxG3c2fycM3ntKAfrEAHgt80YJ1QE0xw8pM4iVKpxM1CnG37pf:iXo0FUlQMIEAHY8Ywd4hE37F
- TLSH T18BA3932E7D2A711256B702C2B2F77463E35F902D2B2D14647CC9910C33615EEA2BB67E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target lighttpd/cygattr-1.dll
- Size 8KB
- SHA256 12c46b04b4f799f2d5f0990230247e479c145415d128fb51f14da6a3b350da19
- MD5 834d62e80c34c0df4e72d773f5e64dc7
- SHA1 6e142599bc2fd4e25e79ff95c25e551c93fcb066
- SHA512 f342cc18f767abb7bfa603b070c97caf0876466f9b89bd1c19c9f108e72cc936465d27d0311ba14ede75adb16bbd783806f2bf0e6975a418abc8b9997637f88c
- SSDEEP 192:pOaFWyj+MsV2HHl78Iv8NzuUtjKncAtheX:jWyj+Msgl78Fi+jRQhE
- TLSH T1B5028C9FD839189DCAB1647648A3104A23A038503FCC6F0E57AB34A718A1CC21CBE32B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10 -
- Target lighttpd/cygbz2-1.dll
- Size 28KB
- SHA256 b5897a490464e555b3bfe9a7f0323bd3b09020af9bcc9d1ebf90ee4e92417072
- MD5 a5a0e1d5f5c917277a380004afb88791
- SHA1 4036edabb7d40a0da75bff72e84c096af5b6d247
- SHA512 054b319608313651ff9ff98eafa1692f56b93a803c415fcda3d96efe68a0d75bbfa4978137d8afb0a6cfaa6b49a25f55f48e20f5c82753df5cdea188a39eca42
- SSDEEP 768:iUoA/bLZfQhbmjn5uxAs1pHgz4hOGD+SE:RoEnZQJ45uxt+ytD+B
- TLSH T108D2E116FBDA324FC84858756B160D9E1E7A70A30990530CD94CD4EE23B8F5F84A8DED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10 -
- Target lighttpd/cygcom_err-2.dll
- Size 6KB
- SHA256 14be545f459d8625d91600bb102b706959afef51f1d4d7effb886130fe5c38de
- MD5 9a634127ecd90a410b1b296ea4b8dbdd
- SHA1 8a104b5f1c8ca1f3e36bcc36b9fac09c392ccfd0
- SHA512 1e629a8273bda61037187ab45dc9c1be1baa1fe9b6b1a4ace8de53e3c93d7c8486fdf76c971e6ce1da5c82cf3b34dbd83f871b9eb7b6dd5ab7728ccd195bfd38
- SSDEEP 192:cCb7RIGw5sS3WfgOA/T7yiANXltuGebwvICL3v/DOQz:PWGwD3bOMAVuNwvI43v/qC
- TLSH T169D17E8F7B38D57BC88B023169A7431307A572A0EBEDC7174E905DDE268D8949F22E64
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10 -
- Target lighttpd/cygcrypt-0.dll
- Size 20KB
- SHA256 32ddcbc66dc01ad691bc30b1702be0295372869ba6342cf3a6e68a95f90aff22
- MD5 19fe4d9e6be790e90bcfbc25b8da79ab
- SHA1 878ee6c289fb2f49ea4f0a1efd3bcfd4f1347117
- SHA512 0faac4b492d86f7673e1c7686887f18a96274895457b3c07de03db274adf32fb201942aca63bdc657530adb7b7cb0eea48c055f744d9050583f46de5d6a85e01
- SSDEEP 384:RYc3Nm0nhvmbBdKCzuEPft8bPxdIt9UaCe81dfZSZiZlghVp8cAlOiDn2Mlfi:RZNm0nh+NBqEPabPIBCt1dfr7ghAcAIh
- TLSH T1CE92D08FFE50476DE08D1D7815E79288BB2870828FE5EF10A558198ABD628D30F25D56
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10 -
- Target lighttpd/cygcrypto-1.0.0.dll
- Size 2.2MB
- SHA256 9443e1493f82f9f18fa3d710ecbae0a6937b6524cc17ea9c42326dead8dc6d7e
- MD5 97d2984915313e19397412bf4b8dc1eb
- SHA1 da09e56b6077cfaecd65e527251cb0960cfa0d76
- SHA512 3889bde40f4309e41275d7260c758d944693d74b919132ee53580e02364d10cbbca5d800fb9dd42d6b6a31d254dab81c1a20d1d836b7abcefe1b73af11e8b79a
- SSDEEP 49152:fGtlqGaVwAsOQPFeK8gsX9x8tFiD7h0MzHvs+67HiI17nJVGmh6sIU6i/fEhod:C58gq8tczHvNWhnGmhq+Ehod
- TLSH T1C4B57C27F2A234ECCE7BC1F0879BD232A971F86816B0FD6B3554D6301E56D50272EA58
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10 -
- Target lighttpd/cygdbi-1.dll
- Size 21KB
- SHA256 16df94ec6fbd417d8f50cf346f9aa0657a5704b23f5b005c851510c81dd05058
- MD5 903cb90470fb649cb247b95c1a408580
- SHA1 e935557444f46234d427bdf57726fbf21b53d2b2
- SHA512 972e8528aaa020808f247430e2b8c5c7e183d4d3fc4ba114180bd7fa1bc7b14c0e45813e2b969eae4840f201db6e0d4992d1687c79c79ce5d303cd9d488f3e54
- SSDEEP 384:VoBUPLjSnwzyHqkRwZ/c2RE/lG+PzCKWR/Jmfu+jH:QhfaZU2wlzzLWR0f5jH
- TLSH T127A25CB77D671826C4A7CA718A43F2529215769D8BAF0E028F0C8B87D6213DDF14D86F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10 -
- Target lighttpd/cygev-4.dll
- Size 20KB
- SHA256 996fe3d0c999cd6c316cd9fa5df33bd6096811bca72ac6908da2b5b628274dcd
- MD5 0bfffca3639cf906fba4dae4607cd7de
- SHA1 1ad1a10d7b7d9b54b4aa996ab70505247f890b63
- SHA512 4c36099da33f22e3a3e610028a3e0cd806e89c230fd6fc77d9b527f514c627fd36e65d3b62e4ad4616f49b5bcda03aeb7f39c5354880adab16970eccde2e8259
- SSDEEP 384:qdxjKSuDWlhTM/2i45c4KYvMtVD1EwuWkfbvTe94fWwZ2UUrJ:qdxjKSualhTM+iec4KY0fxuWwTdewZ2r
- TLSH T1BD92CFAE35A80425E4566CBC94CE713621173B7F49B3AF5A6300DD98324CE8A3F0BE5D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10 -
- Target lighttpd/cygfam-0.dll
- Size 13KB
- SHA256 6ba4c83281d5b966e46bb2eb2287748d552ef2685c5506cdab6612cedab0164b
- MD5 2659d4b0ecb740a742afec72d697097d
- SHA1 2f4d545d01998bf0cbc7d69edaca33197b6c55f6
- SHA512 ed345635ca4f377ee39949d1991b55d557d2bac819b9ecbf120fe761717841103d3e03d16cda9556de69caf0d105fb00d8adf5422a2622e819c828b53b56ad72
- SSDEEP 192:g/8hlno8e+v9MsdISyMfTupRH2HBHCBMO3UeJr6oRD9Yr3r/zkimVYCDNLt/:8EayFMEfylpMoGQBU/z3mVYCX/
- TLSH T11252AFBEF2144167E1D722F58DA24D4572BC949F837FFF21850A18986C84EA7C72E1E4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10 -
- Target lighttpd/cyggcc_s-seh-1.dll
- Size 31KB
- SHA256 83299b13e09ba6ffd0cd1c509e29bc8aa1bfde4cb9f3ed631bb09cf92ab038ad
- MD5 fa3efd41affa9540e2e2b48c50afffb4
- SHA1 f0e4007195d92d58262ee5c7bba7cf9708c8f9d2
- SHA512 b2a4eecb78dabd7a2dd5b1efa4b18f51006592529266df72cba091ca8cc062d6ad4c0aa13c1eab18b99d76bb5b459e050e1e379e6066ad6716e7e2e427356645
- SSDEEP 768:r+kSqgvPM5536fw4pThcsusgHXqEd+myAt+A530MT3LNlxi:r+kSRvy5qf/NDusg6Ed+myAGMrLNlxi
- TLSH T167E2E0F17468B05DD8D907B1AA210378687B5CA5127C6F238908A19B0BD0FB1CE99FF6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10 -
- Target lighttpd/cyggdbm-4.dll
- Size 19KB
- SHA256 36459c68cb27ce6e415d2b0fa4d0e6c546f668f6a1f565027d627c5039c8fd09
- MD5 e91d86c69093fc2b5ba0d51ba2e2d67c
- SHA1 e3c492a859a1db5155de38abed8a5126e81b6aa7
- SHA512 c3bae64e9e04ae42f923e20d943e9415eaf02c5e5f6f32fb74347711f3e1f6e9f9a518f5aad1bd1ce3a309b7c02a5d8735c7751d3ae5a2ae0914ca2ea4ca4828
- SSDEEP 384:29Ayp/sB/0rKrZHCno4jEF5VxVf3SHVBEEDm/MtP3M3KQduxKQK9:ApaDao4jC3xNSry/MtP3M3KVKQK9
- TLSH T1F692BE4B7164A96BCD63193CC22B5C6426762C316BC503D80B3817ABBD8DAFDCF46B24
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10 -
- Target lighttpd/cyggeoip-1.dll
- Size 71KB
- SHA256 0e0bc6beca9055c0efb6cbd1b36ac41dd87ad373e20322d3c3516a67db3ba016
- MD5 4183835551de4137ad86eac71ef5caa8
- SHA1 1e442404c8967061bfc77f63f50be95a76c62774
- SHA512 fbef4628e7cb4706561d91e7f553ec34cf0c60a2823dc8f60e1430fe078c29229d02b95d04edc92c1431393e155524abeea201acc1394d9de230e2c64f364d82
- SSDEEP 1536:fnT8qhbTA7zn2BZYkIUWRyd9WVNYxrMEoMVyek2SdJlhtIpuhtZzIUIf:fT9cD2XYkW0INYxrMEoMIrPJtcuhtZlm
- TLSH T1A963E1E80EAC9E81C472537D2C359903F176CDE08BE98561AB406297FAD9FC850C5F39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10 -
- Target lighttpd/cyggssapi_krb5-2.dll
- Size 114KB
- SHA256 3ca31336b251b7f0eb3f93554f9ce295e3fb1e2b059fda8b4a3a9acd800fabea
- MD5 59c10a0719904320ac44501462f9c478
- SHA1 2ea1896fa4cb1ce1f8fa0acc850bd5164200ce47
- SHA512 2fe6d0c9fb021bdc044721020240a19e510e9a0f7c6ff4d28a95faddf466985882edb159100aa527de016e9081cbc617cb3b27c3ced8d7d627a95d9d804da135
- SSDEEP 3072:TaN7P2V2t3QqKvtzqkUloEAb/P0hBEGDAcWAm2c7iE2tX:TaNz2V+3QdnEwP8AcWAmhP2tX
- TLSH T161B3F12BF505EBA7C4871DF55FB760022F94E714E3DAD7638F166AAE0BF48206200A5D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10 -
- Target lighttpd/cygiconv-2.dll
- Size 698KB
- SHA256 09ed7266a55320016a353a90b11878bc80902d4228072f7f1015c86e7b091a84
- MD5 00450bd787dc134838ee1caf94b2fe04
- SHA1 957448bb445480a71ccf40b2779392d4052688cd
- SHA512 1be3ab703e154e816d47a882c696a5316e205c9ca22ca43e696404d4e86dd4599b35dc0ed8ff529b42b00e5c0f1ca528cdc46247d1f49b62878ac50f9a41743f
- SSDEEP 12288:8MDrPDqUdykoZpFcL2/5QPZwh+oSLXI/eOY5mykR0KTYPg6xU:8QrPu4q/cC6Kv55Yox
- TLSH T1B2E423ACD47DE80BE337D638C1F8E890EA37541EE9C122F8947D999291347F059882B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10 -
- Target lighttpd/cygintl-8.dll
- Size 21KB
- SHA256 38b589bc139230e2802ef9a7b3b5b96e3ee18f06a7cfac37bf3666c70fb7e5d9
- MD5 4bf299ecebebe329370140d00840da4f
- SHA1 fa853a88b0ebf418cf3ff774c10407d99d52c944
- SHA512 d27f74bec5a5df137dfb40a1ba6289548e95d363dc42a41b3458ec7c9ebbac6c8ccbb528c8c76c7b81eb03587fecb8832e7cd4a95fbbf26639d958a256922d40
- SSDEEP 384:k9yDVWPCm9vW00fP0SmvAwDuyZhyUnwtmC4DVjxmqp1nVoClCwuPUUTnCC:k94WPZpyzhryZ7wkt/NVTCwOVTnp
- TLSH T1DBA2AE4AB667575BF4F70F79BDB2110A92763CA20CB5EB2C1CA8014C3C605E8E825F69
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10 -
- Target lighttpd/cygk5crypto-3.dll
- Size 85KB
- SHA256 f457d2d798bf81e56875fa0762541ccf0096e3532e97ca9fec8a7390432acfda
- MD5 78e70d517e2c3a143d63d3a98e656a3a
- SHA1 e1a58084c13aa58748218a3545b9f540b5d34410
- SHA512 0f9f91a5c333a96c06ea52e38513871a23c0788bf726877449e867a8c82dcbb5e4c637a59488caed94acc1b1a4f499f0c7cf994b867b2efebc02440af4a6be68
- SSDEEP 1536:UOldpPe1GMQifuczW9OyPCLyixgwbp9eXLaeXGtwNNzfO9y4ju22RDQpW7:hrpzwfjKPCLyixzvZsGtczfO9npa7
- TLSH T16183F18CFCA0DE46DACA3C78C7649464CA10F076B5D0CA66436F88BEEF650683E51D1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10