General

  • Target
    justknit-0.0.1-beta1.transport.zip
  • Size 7.4MB
  • Sample260925-xtrd8sxya1
  • SHA256 4b15f0dbb9d8397b6f3d926d3aafeb7faf2ff47cbde0f6addf61be73248b4c03
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      justknit-0.0.1-beta1/MODX/Revolution/modCategory/0bfb11e2aebe11ed6b4d68853d01c6dd.vehicle
    • Size 118KB
    • SHA256 5bdcafcda705513474700fcd3b0c7d51061eb9352e3c77d3dfa5db22211e6a00
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      justknit-0.0.1-beta1/MODX/Revolution/modNamespace/40abc5ed409927cbe2d02cc97f2e08d4/0/justknit/bootstrap.php
    • Size 709B
    • SHA256 ed01753740588eae22284c3eabd94f60947a9c764ad04656a16ac58fe31ca0d4
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      justknit-0.0.1-beta1/MODX/Revolution/modNamespace/40abc5ed409927cbe2d02cc97f2e08d4/0/justknit/bootstrap.php~
    • Size 707B
    • SHA256 41dabad4fb38d1b72b8ea9bcfc550b167c957b1b688ffaaefbb4bca65b8e374d
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      justknit-0.0.1-beta1/MODX/Revolution/modNamespace/40abc5ed409927cbe2d02cc97f2e08d4/0/justknit/elements/chunks/JustKnitDS24TrackingPixel.html~
    • Size 494B
    • SHA256 daecd3d5d573e7fef8c8c1fbc791c2cba695c15a7f45b035ec6786f82086a368
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      justknit-0.0.1-beta1/MODX/Revolution/modNamespace/40abc5ed409927cbe2d02cc97f2e08d4/0/justknit/elements/resources/401.html
    • Size 1KB
    • SHA256 75fe630e00aad55926f45c572a920daf75010d3231fdd3caf86744dddc360f72
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      justknit-0.0.1-beta1/MODX/Revolution/modNamespace/40abc5ed409927cbe2d02cc97f2e08d4/0/justknit/elements/resources/403.html
    • Size 798B
    • SHA256 539ded8631259035cb7c03db68ce2a9c87a7ef3d18ee0ebcc32536cdfc208f4c
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      justknit-0.0.1-beta1/MODX/Revolution/modNamespace/40abc5ed409927cbe2d02cc97f2e08d4/0/justknit/elements/resources/404.html
    • Size 772B
    • SHA256 79ce878a23e5985388a17d2948a49b2e211cd6498912dd094661c3b343e15188
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      justknit-0.0.1-beta1/MODX/Revolution/modNamespace/40abc5ed409927cbe2d02cc97f2e08d4/0/justknit/elements/resources/503.html
    • Size 875B
    • SHA256 663d541cb6d2a1033afae8374c1ed1ea5de77463fd84a2e9f2034a2dbf6a1eab
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      justknit-0.0.1-beta1/MODX/Revolution/modNamespace/40abc5ed409927cbe2d02cc97f2e08d4/0/justknit/elements/snippets/goback.snippet.php
    • Size 776B
    • SHA256 2c46b0c021e769149f42a8dd5c6d4551428819e459609203ddd7bdd108ec8b1f
    • MD5 SHA1 SHA512 TLSH
    Score
    6/10
    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      justknit-0.0.1-beta1/MODX/Revolution/modNamespace/40abc5ed409927cbe2d02cc97f2e08d4/0/justknit/elements/snippets/goback.snippet.php~
    • Size 863B
    • SHA256 32b62694e3c2d0cb9b10457e0ff1c96fb98d345894506198366f1fc5b0386ed8
    • MD5 SHA1 SHA512 TLSH
    Score
    6/10
    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      justknit-0.0.1-beta1/MODX/Revolution/modNamespace/40abc5ed409927cbe2d02cc97f2e08d4/0/justknit/elements/templates/justknit-basis.template.tpl~
    • Size 9KB
    • SHA256 b655106c309208a90823fe8291d743aab52286231d79601ac392891f93968059
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      justknit-0.0.1-beta1/MODX/Revolution/modNamespace/40abc5ed409927cbe2d02cc97f2e08d4/0/justknit/elements/templates/justknitcalc.template.tpl
    • Size 6KB
    • SHA256 195cbc177074e935c8019ca28a9f4b366c33677a1c6a062944efdef9423a5ac2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      justknit-0.0.1-beta1/MODX/Revolution/modNamespace/40abc5ed409927cbe2d02cc97f2e08d4/0/justknit/elements/templates/justknitcalc.template.tpl~
    • Size 6KB
    • SHA256 39170f5848dee74b03b8bfa0c2faa73ce2e6ae1fe9fa52010bef2f4ffa087b46
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      justknit-0.0.1-beta1/MODX/Revolution/modNamespace/40abc5ed409927cbe2d02cc97f2e08d4/0/justknit/src/Controllers/Calculate/Base.php
    • Size 10KB
    • SHA256 23b2a3ac30b9c4bb72d1ddd88b729c000a02092eaedcc0ce8a58456a96dfb246
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      justknit-0.0.1-beta1/MODX/Revolution/modNamespace/40abc5ed409927cbe2d02cc97f2e08d4/0/justknit/src/Controllers/Calculate/Base.php~
    • Size 11KB
    • SHA256 2af5f89dd0851b8468766c3a3bd623d0743c8afa13ebdf30e859dc49c2cd64bd
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      justknit-0.0.1-beta1/MODX/Revolution/modNamespace/40abc5ed409927cbe2d02cc97f2e08d4/0/justknit/src/Controllers/Calculate/Calculate.php
    • Size 8KB
    • SHA256 515183f59a2c9f43bbc16f5778ebe13a9974f6585dc1acaee052aca464ad9bb7
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v16

Tasks

static1

svgjavascript
Score
5/10

behavioral1

execution
Score
6/10

behavioral2

execution
Score
6/10

behavioral3

execution
Score
3/10

behavioral4

execution
Score
3/10

behavioral5

execution
Score
3/10

behavioral6

execution
Score
3/10

behavioral7

execution
Score
3/10

behavioral8

execution
Score
3/10

behavioral9

discovery
Score
3/10

behavioral10

discovery
Score
3/10

behavioral11

discovery
Score
3/10

behavioral12

discovery
Score
3/10

behavioral13

discovery
Score
3/10

behavioral14

discovery
Score
3/10

behavioral15

discovery
Score
3/10

behavioral16

discovery
Score
3/10

behavioral17

execution
Score
6/10

behavioral18

execution
Score
6/10

behavioral19

execution
Score
6/10

behavioral20

execution
Score
6/10

behavioral21

execution
Score
3/10

behavioral22

execution
Score
3/10

behavioral23

execution
Score
3/10

behavioral24

execution
Score
3/10

behavioral25

execution
Score
3/10

behavioral26

execution
Score
3/10

behavioral27

execution
Score
3/10

behavioral28

execution
Score
3/10

behavioral29

execution
Score
6/10

behavioral30

execution
Score
6/10

behavioral31

execution
Score
6/10

behavioral32

execution
Score
6/10