Overview
overview
7Static
static
7lighttpd/NEWS.ps1
windows10-2004-x64
3lighttpd/NEWS.ps1
windows11-ltsc_2024-x64
3lighttpd/c...-1.dll
windows10-2004-x64
5lighttpd/c...-1.dll
windows11-ltsc_2024-x64
5lighttpd/cygbz2-1.dll
windows10-2004-x64
5lighttpd/cygbz2-1.dll
windows11-ltsc_2024-x64
5lighttpd/c...-2.dll
windows10-2004-x64
5lighttpd/c...-2.dll
windows11-ltsc_2024-x64
5lighttpd/c...-0.dll
windows10-2004-x64
5lighttpd/c...-0.dll
windows11-ltsc_2024-x64
5lighttpd/c....0.dll
windows10-2004-x64
5lighttpd/c....0.dll
windows11-ltsc_2024-x64
5lighttpd/cygdbi-1.dll
windows10-2004-x64
5lighttpd/cygdbi-1.dll
windows11-ltsc_2024-x64
5lighttpd/cygev-4.dll
windows10-2004-x64
5lighttpd/cygev-4.dll
windows11-ltsc_2024-x64
5lighttpd/cygfam-0.dll
windows10-2004-x64
5lighttpd/cygfam-0.dll
windows11-ltsc_2024-x64
5lighttpd/c...-1.dll
windows10-2004-x64
5lighttpd/c...-1.dll
windows11-ltsc_2024-x64
5lighttpd/c...-4.dll
windows10-2004-x64
5lighttpd/c...-4.dll
windows11-ltsc_2024-x64
5lighttpd/c...-1.dll
windows10-2004-x64
5lighttpd/c...-1.dll
windows11-ltsc_2024-x64
5lighttpd/c...-2.dll
windows10-2004-x64
5lighttpd/c...-2.dll
windows11-ltsc_2024-x64
5lighttpd/c...-2.dll
windows10-2004-x64
5lighttpd/c...-2.dll
windows11-ltsc_2024-x64
5lighttpd/c...-8.dll
windows10-2004-x64
5lighttpd/c...-8.dll
windows11-ltsc_2024-x64
5lighttpd/c...-3.dll
windows10-2004-x64
5lighttpd/c...-3.dll
windows11-ltsc_2024-x64
5General
- Target lighttpd-1.4.49-1-win32-ssl-upx.zip
- Size 9.1MB
- Sample260925-pmlleaea93
- SHA256 644489dfdd7ac26fd8195454df33aa2c5e72ed2392ad9beb6b236ab1f2342176
- MD5 dae8388893c3f3f089a65a4685996f9b
- SHA1 c6730feaf6450c44d1fd7e5c99c4c9dceef96e69
- SHA512 156fb1e4deddbea0d42fc7b68b553c668661f6a5c11d6ad8aa625b859d534fb9241c0fb4828ccb5e64517ad63d21dec4330424ea76a466bd82ba4305fb1f0e27
- SSDEEP 196608:0Rupxe/g4r2TMfMlknLGxIoYUpf0ZLKlal80b9747Up5MJAm/Sdcy61:UeeY4iTMPnLoIo5O4a572Up5MJAmKayU
- TLSH T149A633EAB907C544D98CCB77F9257093C8E2F0E8840DA41E54A477E6D5EE34A0C87A6F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
lighttpd/NEWS.ps1
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
lighttpd/NEWS.ps1
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
lighttpd/cygattr-1.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
lighttpd/cygattr-1.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
lighttpd/cygbz2-1.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
lighttpd/cygbz2-1.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
lighttpd/cygcom_err-2.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
lighttpd/cygcom_err-2.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
lighttpd/cygcrypt-0.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
lighttpd/cygcrypt-0.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
lighttpd/cygcrypto-1.0.0.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
lighttpd/cygcrypto-1.0.0.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
lighttpd/cygdbi-1.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
lighttpd/cygdbi-1.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
lighttpd/cygev-4.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
lighttpd/cygev-4.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
lighttpd/cygfam-0.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral18
Sample
lighttpd/cygfam-0.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral19
Sample
lighttpd/cyggcc_s-1.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
lighttpd/cyggcc_s-1.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral21
Sample
lighttpd/cyggdbm-4.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral22
Sample
lighttpd/cyggdbm-4.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral23
Sample
lighttpd/cyggeoip-1.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral24
Sample
lighttpd/cyggeoip-1.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral25
Sample
lighttpd/cyggssapi_krb5-2.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral26
Sample
lighttpd/cyggssapi_krb5-2.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral27
Sample
lighttpd/cygiconv-2.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral28
Sample
lighttpd/cygiconv-2.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral29
Sample
lighttpd/cygintl-8.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral30
Sample
lighttpd/cygintl-8.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral31
Sample
lighttpd/cygk5crypto-3.dll
Resource
win10v2004-20260911-en
Malware Config
Targets
-
- Target lighttpd/NEWS.txt
- Size 101KB
- SHA256 a4ef7de9f2575856624b8f8f754e217ff778597110e1072595e22bbb16df4445
- MD5 790dc6222f6506aea61e276348c65fd3
- SHA1 523ef4bc5ac3fe80d3c5bcb66c9dc33a512c81e4
- SHA512 d864681c766f35bf02ccddd68bf1f8039847987042eb53eb0d01ef994f69191248128d56942929de9b4f5942c4aa7c3146960f79049e098a4d6068b364aa02e3
- SSDEEP 1536:i3H3Of0FUxPQxG3c2fycM3ntKAfrEAHgt80YJ1QE0xw8pM4iVKpxM1CnG37pf:iXo0FUlQMIEAHY8Ywd4hE37F
- TLSH T18BA3932E7D2A711256B702C2B2F77463E35F902D2B2D14647CC9910C33615EEA2BB67E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target lighttpd/cygattr-1.dll
- Size 6KB
- SHA256 b60a6f99cda83197785c35ae59952de9a0f067ee5059d4b2694de801285cee12
- MD5 99ee0e74d9e7957f64cae6d92b7d36c1
- SHA1 d0787ac7a815125c0338e45fc1fa9f9ccaed8aac
- SHA512 16048edc6b8edcd7ff4a1f0b63921dec6c373cc580707f9ff44d2941438983967fbb925f66ff3cf4cc2c2857735918218ac54fab5101eaf376b9999ae5362fe4
- SSDEEP 96:DVAjVtcUDzws0ULXr0bBKdNS9J8NteDR3LA6b4aiHC0yi:arYCTlu8NteD5LNb4a8B
- TLSH T1CBD17C87BD3B09E8C6A28A7543E9F96443203A01B2FDC95C8F3960A628E1D54D50DF5F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target lighttpd/cygbz2-1.dll
- Size 28KB
- SHA256 efcb152576f53702e4d34e8932dc4c0320a98ac4df674e79f7de936b9c513cda
- MD5 6b64079c09087daa53c0d282800be2d8
- SHA1 8da206f86fd4d6af21f84fac24d863a1d39c1c9c
- SHA512 822a1af34d5f1300e2ac4728cf54b375a4d29df1f547280bb2da4c0cc11de6c39672932f79cc1a5c62a16570f93e3049c19f63589654e291d23668d16bdb55cc
- SSDEEP 768:n839pFUyAdmwbI15HFuUCKmvstBPgyGyaKm4:n839QyHF15l3CGS1K9
- TLSH T16BD2E13C29345862E43690B30E47CC1EC7B9426825728F42F215DC9FEB9761D6E19BBC
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target lighttpd/cygcom_err-2.dll
- Size 6KB
- SHA256 9f70d01f2f69107e8f575b5749340cb4e93dc882c6f17bbe7e6cf54a8ce28596
- MD5 6723ac5e46c618c56e194b51343e1a7e
- SHA1 5621b2f62707e937baa342ded1b5ae61051f0a5d
- SHA512 7e4c332401cfca8eba405465eadaa8c9f6d9503b9a12984f31e1a5721d1d5acb6bc16ffafaf0865967b23c3519091cde89a42b547a2fdd8294b323ebd91fc3be
- SSDEEP 192:EQOL+kkcmUhiYN9BCZx4GebwvICL3v/DOQa/L:EQOLPk99O9BYMwvI43v/qD
- TLSH T170D14CCFB31CBB63C6950A3A07464545114672C06BA749FBDF9D8D6B32F38A4C811B5B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target lighttpd/cygcrypt-0.dll
- Size 21KB
- SHA256 0228a4b71ed58efd669ccdda990b2ed01ca1d3129e622b04c5ab8813b16e3c3b
- MD5 abfcb831bf325923fede7f97ceb5a2fa
- SHA1 9397ab230b8e69a4c04b6c67d086ee61f7beece0
- SHA512 7cd142b2c7d11d2e260c00038c41d2e75a239846ff937b891512dc3882226913d60cda598d658edb3d4a85878edb0f2a11db2410f336cdc9531c3cdd9c113008
- SSDEEP 384:wIm4i7ERjlSU5Fq5gyTDnOn0DkAa+vVieCh1YDJmvXDw7VqYmc7QJ:Rm4i7EBgCFqaIDnO0DNDiX1TfDw7sY5s
- TLSH T1AFA2D0266EA18DF6C9CA103F11FB5306BA09A4544EEDFB285B857D8274F34025F2C60D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target lighttpd/cygcrypto-1.0.0.dll
- Size 792KB
- SHA256 74dabcd9c970410bb0810e2bf5b3355f63fe314e5a54553a5b18209d415db053
- MD5 f292ec86e0f773807b2eb0d2ed08db1f
- SHA1 be956752310f390479dcca041987ac2383222b92
- SHA512 eb999841ebd4953e503d4dd28dc2ad1b9ed7b2f92e198b3cc6831c47ca54a913dcbf6ef85acfb67341d546c82e7330e2d3681568ca94067d5dd26c47248df2cf
- SSDEEP 24576:tKlEoM7exA84+PQk0f711F8JAnF/6P2QD7QM:cAMAc0R1F8SZkyM
- TLSH T1D605125074BBCE4BCB895978CE31583D098A120193E8DF901F7ECB4D1D25D2E4A7F6AA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target lighttpd/cygdbi-1.dll
- Size 22KB
- SHA256 3962e7fb0bf2ccb29371efa10537bb2a73f5ac3eda86050179cd7773d5e0f125
- MD5 2177ce75eb1e7689b3c5a7b3652176f7
- SHA1 37218f697f99004be36be3331d10342d1bd9ee27
- SHA512 4d1ea609ab326f7a5c876a90115079b66845d899e0601bf472c0b900334d91746f5fc1a252c7e8d7a4f28b425c1e3ab256261085ac1f7ed7f5197dd19e46cf64
- SSDEEP 384:j1OnLb0vMjmgejGRk6NLjguiOjXK+3RwGGePgZFUeA1iwVjC:j1oNMjGRNLjkqhtVIbGLjC
- TLSH T12AA26BBB7E165862C466CA704A17F752A1283298CFAD8E438F0C874BD0643D7F10D86F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target lighttpd/cygev-4.dll
- Size 20KB
- SHA256 baaecb7c18164958d5152ba56fcd37dd7702f9537230b706f87ab50df31bd219
- MD5 0e87308b5917b1b461ea49fa283c09f9
- SHA1 48b47fe8f09b19811ba1b3441c4992ca1b927840
- SHA512 dd6a0fa552c3ad90fb1756f946f2a7f0a9394f32b0024d1d55d049b72684b591c104b43e48649793121779eade38bb996b7872a9f8c64db6ddbe7b810b604760
- SSDEEP 384:TmZI+PlGBWohP2/ypinP1hZS7nYjJI688aFtEPPtr4:GGBWg1inrZ8Yj38IW
- TLSH T1FB92AFCE3947D3E2D8C42E78A78FD3B5B1F517FBAD296A92106D0F1A64548815F0AF04
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target lighttpd/cygfam-0.dll
- Size 13KB
- SHA256 14cca5b0e95a5d2cbd59ad641f735bb8205434442b7f4be2c01caaa06121914c
- MD5 a3b7d4dbe9f3c75c99cec97b412f3e7e
- SHA1 5bb0ed7a5f5e1b4a25c1f832539420876649ba71
- SHA512 599ce1c02a26db6b7247cbd7e0257354265faeec8e2a2e787427436152f8048674a1a6fafe49820fe710c8603ddc799f7ea9f3926ed0a53a1fb835ab3a67ac5d
- SSDEEP 384:hY7RRQNFPyQw/K8OJxoLZIpTLsa89gA0l:7FabK8O35T4aAa
- TLSH T16752B057FF0C01ABD88EB57741CFCF3DA11CA221F39E6A114C241927382925FDE9A295
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target lighttpd/cyggcc_s-1.dll
- Size 45KB
- SHA256 42eddc79779c28b9374085d3689219f8b729cd5b677ee6e971cdd27d49fba686
- MD5 7136822bc997dd223ba98017b35ae753
- SHA1 366022a0ecb0c4e82a1bc10fbbd76f4190cc9e9d
- SHA512 03a8a03c50b93ff2b6b42c833ed1b7890482b0b64430a9677966940922a424466faeddd2618ba80329a5bbc662be4bc526740e013851da98363cc8c7f5fbfb74
- SSDEEP 768:4dHjAr3DyUcxCld3JWc6BrzaQnRnKjjIn0xkHpmoD89xiH:MAr3Dy1CldBNuxKm0SJmoDOxi
- TLSH T12A23F19161E7FCB5C4AB0AB14E36DF1A9123A1724F195E902B3DF1260F8E0B1F49685B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target lighttpd/cyggdbm-4.dll
- Size 20KB
- SHA256 6c0b6ef8387fd3caeafa20e6a9431ee89fe0219f691ba366ec2fc329fafcb3f2
- MD5 04fa31ab0f917566ecc81c0c00ffa777
- SHA1 5e1acb75ace4cf58f9bd09e6718e1947bf7e7456
- SHA512 ab95410653fbfce97a003ba022450390e5ea65ab71548099bbd609aceabb79e27bf1a441f0c4073b6debc36fcaa25b339376bf146441499db6793a96e2b614fa
- SSDEEP 384:qDhgRc78GqmOg8kd8T21tQnjMTAQRyQ/tCXE8Mqytbx:qDvsmOgnuWkjMTAQRyYjqGbx
- TLSH T1A292D0AFB70688A5C9CF0E718A41EEA7FB7765F8075B43C885BD414E49482FCC45A609
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target lighttpd/cyggeoip-1.dll
- Size 65KB
- SHA256 e2314b03ab9acb9036020e3061341e9566351579c17e0ee84fed087ff31b56b2
- MD5 860ee9cd290d8043e9ce67be8ee1ec2f
- SHA1 4459869c4ec6fc9035c373aab4779093ffe49d0f
- SHA512 dfa4e4403b70ca634834be06b0be5496c425c267e0a6fecd70b70534b439166d524eef50201eaef3b1acb34c7c1b87cdba9bcf351ebfa3545512690decb80890
- SSDEEP 1536:m38C0b2/y4LHWfSNiHAaok4B8HUXJS/HeQZWKg5aLL:m38b21IgaokO8HKKG+
- TLSH T14163D09C25BC9E90C83287B58BB3A1237529CDA296B5477767912AC6CCF4FC094C1D3E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target lighttpd/cyggssapi_krb5-2.dll
- Size 116KB
- SHA256 e4b2602bf2dfd5d688892cc7b052f1d4e97946d21c45a94714f7680d6104ccf9
- MD5 551632bbc2a5e19b9f1d7dae1d258d67
- SHA1 f98afd7f3d0f45f43330edcdf82f8e8a210f8041
- SHA512 4e5aab48707cd3674547b01b3e58878721f75331fe12994cc01787fa67b429aac66bb8f053748c4eb869416f47618c4f69869a77351db96149e9262470ffc4a0
- SSDEEP 1536:HYNxqOH+YGK+ATEM62wu/hOIptKvF0F23u3rVTwB+AhWKA88itX1jTWo6NydNswS:okY8bu/hOVNolfij3WoLdNHHTtqt+Uj
- TLSH T139C3F01AEC5AEDABC95315F63DA161200F54D798E38DC765CF2B856E0AFC8386081A4E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target lighttpd/cygiconv-2.dll
- Size 699KB
- SHA256 29784dd306f141e4cc0fa20fac612b6547d47be8b1947b984456df1f5ca66357
- MD5 f76034cecad2d1c2362c3b4415609c78
- SHA1 1331e8bd2edb3d5a65c4220bcfee844b422333b6
- SHA512 f8319cadc7f2da50f31b4fd91abb77f3dc10b9f0ad6b09a3ef0aa1a7d5225048e8d2e754487fe486ac6a3a54934e58eb33fc1ef69556d044286f194d60e802ef
- SSDEEP 12288:VvwrcjYUFXYYtOMUtxLXpisOvva99uA1B1ytdXLMiLPTRDbFJl//GbH065j2Nn+U:Zic1htHT/yG3bMiL9VJl2bB5ygkbPmU
- TLSH T175E4235DD9ACCA96D127C53883FC7A09DAE7F12B985A013E7C7EC20540B6BD098C598F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target lighttpd/cygintl-8.dll
- Size 20KB
- SHA256 d4851840a1f903652b7d1730c1aff263ec2e36395c4e697575ad4be3ed39280a
- MD5 ef0138855c87e3941c1bd0c470e7d78f
- SHA1 94bda555c9dc02b453527c1968452c64dc7e6673
- SHA512 810e1844957ea7e9219a017fa71023c2ab2ec1a84a6e45f2fc474516024b3cbfa538544064ac555a56b421448c08fe6fdf29ad46a9a9f7ad6f41bcee506bd311
- SSDEEP 384:0tDvG7OeNGSNEzm6aQzBeGQ8wuvn5P4zW1Z8wu+DVA3KIiuPUUEG:krG7bIicmZAeGR+i8wuKgKxOVn
- TLSH T1DC929F137B3B8B82FDE78E356DF541581776BC218DBEDAA8187C83481D25BC8580D72A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
- Target lighttpd/cygk5crypto-3.dll
- Size 85KB
- SHA256 1e32215ddf8f038bb9164d043c75546dbdd285ff01e928b48f7da16bcf3ed084
- MD5 af0a910096868eb147356978a225a743
- SHA1 d23b7397ab0f8f3ab522e958aeee55eca707f773
- SHA512 63ece5a444d9b199c5c166db3694a57deaf348903bfaf3b230b21927f9d94ade4a5d360690edb5bd1a54c03c618491ee902a828627bd3b7070107f26370999bc
- SSDEEP 1536:cR3I8RKf02EEGVGZ0DiLJAnxxaXkJ5sLHOS3Y2pjax457RRDQpWK:boUL26kzuHphxax4571K
- TLSH T10F83E14DBD109DF2E9CA183E646001A1964CD871ABF8D761C6D7983DEF75CA83C8709E
- MD5 SHA1 SHA512 SSDEEP TLSH