b7175e21615dccd3c8ec16ae0c406ce0359e31668294086e761d587ca16cb1ed

Sharing

Copy URL Twitter E-mail

General

Target
cgi-bin.zip
Size 18.1MB
Sample260930-w9n4dayfpb
SHA256 b7175e21615dccd3c8ec16ae0c406ce0359e31668294086e761d587ca16cb1ed
MD5 47dc82331e8e5e8039449179186c41d2
SHA1 f7e080e2f2850eaeb0cf66f0137dffb6e30f0d20
SHA512 5ad134c12428819d63289e4418fb1203e2b60e44269b3fbb58f54fb2ed03bdc5fa0331e9b890a7ef223657279b8646c7604e0ec6d84f6c3d21372405e394e900
SSDEEP 393216:x+z66htkE4Qk6SQj1gT+TWf55tr+C7dZNvntIvXlH/bKy1yRNK9exBRZ:x+z6ytfk6/JBa39+CxZJnmPlf2Wk0sBn
TLSH
T1AA1733D1487114EDC00E177E2E99356D1653C35BEB4E6CA92F3B03AB76C60F823A51AB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Targets

- Target
  Microsoft.AspNetCore.Authentication.JwtBearer.dll
- Size 40KB
- SHA256 6f4eb6e75a3e592b969a54d926d25dcb4b7be4397c44b8c77634ec34839ce0fc
- MD5 70d46d779c1097a19842d22324f12755
- SHA1 020da35be4b4116a25c54d8500bd90f704d20cdb
- SHA512 03b0d1e67bf2c30f955681fa7333245372e072664aff3623712fe88081841c52926e1b0eff509394a39ef6bf0debc9fafbbbb415ce0081c158e6dd6d1b2d4aab
- SSDEEP 768:ZjKuzRb5I/9o6pUwxN/6hWAm2m+/Cjmkfjon289zeu:tKuzPI/y6CgNihdkLuFzx
- TLSH
  T1DC136C4293BCC317E6AB2B74F174C94619BA634B2410FD9E4EC8B4CE1DE778182117A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Microsoft.AspNetCore.Cryptography.Internal.dll
- Size 42KB
- SHA256 6bbeaf1ff9071464a9b35c921ba028502c24190909c9d4240d58a67cc956f9c4
- MD5 fade1516750a71c890fed1a0b9e61e9a
- SHA1 633cb4f9172d9d7199f0be0bddb33286abecc7f1
- SHA512 9dfa44a9f9ffc1d93dc2dd45ce77e6b2300eb2779e93548f5cdee6d88187de9e97c8b6be8b4dbec18d71b78e7544754dcd82352120b17034cb803e7e49edd146
- SSDEEP 768:nE9ciScOFzMZlsSw7F1TQ6dBuqPkrJ7qAV2tt6iVD0djAb8G2tC9zmy:X0ORMwlDTQ6XPs0tMiF01i1zmy
- TLSH
  T1F7136D0567F80403F9E62AB5A5B2F9565A34F283BA52EF6D1181E2C82CE77C64F1036D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Microsoft.AspNetCore.Cryptography.KeyDerivation.dll
- Size 22KB
- SHA256 eb03a209a1f80aee99dc886fd3097dec4d682d5280888e268658a3905937f8f7
- MD5 86c7ad4881ffb09e4103586afba47fda
- SHA1 70a9659002cd51c27f323ad621f5a556a60155a3
- SHA512 ff9397c38278fb384baad57429636a2beebca80276d9394a39799beae06e1fdfeaebc17b02db7cde331f7a3027fec70b5b0bdca5f35ae9b241b76ac7a18d5ba1
- SSDEEP 384:AoGHQLrZe+ZZ8EVVygWs+7WJsBlHRN7jOG2teR9zmXtQe:AoGcZjZhghjjOG2tC9zm6e
- TLSH
  T16BA26C499B6C9107ECBA3D7066B1D9873D3DE3876853EF2E1988E20918537C4D72172E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Microsoft.AspNetCore.Identity.EntityFrameworkCore.dll
- Size 96KB
- SHA256 b210b13e26c4a860fc47d1cd8ba932f63b2d8b51444aea5095ac286f215df892
- MD5 de5e4066281b098a974b615b7d6d7225
- SHA1 5ac72809a8ff643f6ddc1edcd391ec99f54d4328
- SHA512 babfa0c09faff88fe14fdb5c74baaf41ec23d2ac757bf31f8652289d4d916fdcec169fcb5fdc4b40a062d54f677d9339f084619d2e75bf224a3a4d2413c58275
- SSDEEP 1536:Lkof5RrHIdn0mFdfBGW9EfHx7wen3uOU6eosAV7xgzbm:7jIZ0OkWWCO3ZU6ecV7Ce
- TLSH
  T1B8A34BC2A3DCD125C76EDE7AF47562268676CF83E1B1F25C4DCC94E92066B2468CC1E8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Microsoft.Data.SqlClient.dll
- Size 349KB
- SHA256 ab8685a8e86bd7636f6b06ef84771e247793fdcc93777080dc109a83e12d854f
- MD5 815e9670bbb1ba54fd998aa2e7cf854e
- SHA1 e85bd33a95914b6a7ac0ce707d58aff8ed8829f9
- SHA512 a92d13d9108e86fe69117e2b594adf70158b0cd0fa47e51d48d1d3eb36241a90faa392d9b6a1c037eea5e1d8310c05ad3adbd3710721ef2a9c2a60651838ab7d
- SSDEEP 6144:6Ot34C0EGIyUEDk7kA7zsD0Bg7g5eeGlYeRCEEuaVvp7gvJLo0jgrgK6rp7Abo21:6Ot7QYBg7g5eeGlYeRCEEuaVvp7gvJLS
- TLSH
  T1AB74D61633E0729DF9FB2672797A10196779B6D62611C5AE3D8D000F8632E2053B3F7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Microsoft.EntityFrameworkCore.Abstractions.dll
- Size 30KB
- SHA256 34d801c577e295d66cda21f622ec0e2dfb1cf8ecc7087544e3f376ed8a234432
- MD5 a50b36fafdf7223c785b63609f389a53
- SHA1 8fad19f91518af562716f1a4fba6bc8ddcd27d2f
- SHA512 15c24e327aee416d331058acdae4a64898a1bb87752a0dfcdd9a55d360687b253b4fa636f75484de9d7115c8d04241534598ef084a5f8016f0da608dc0540198
- SSDEEP 768:6rZV/0khzoQxnvkT/kQbllBMil0Nm8uFC19zrO:0b1vkTF3M+wm8uFmzrO
- TLSH
  T112E23C92B3EC9323CDFF0934A5B1E4422936E7CE7921EE7D0A45B5490C67B81867077A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Microsoft.EntityFrameworkCore.Relational.dll
- Size 1.4MB
- SHA256 9b18ff5e121055c643dc21d7b7cdcfce8298147e7d67296cb697e06513de29eb
- MD5 9c6b3702c80a8a5c046bf74ae43c8dd3
- SHA1 9dfecd1ffec471e9b166513f09ce41cbab0298d7
- SHA512 4bca454b06d32adba6d60876794d1c266df475949934c0e8540d4e80c51b064cb4fed0f4965351dd1a54e80939ed68e824635d91f272826c18b7a6c2811e7f13
- SSDEEP 24576:EaggSSgPzXWFDiqCjNaKngIIuUF1pUOczSIwe0tU7E+1iOGGX41nqPODZ47m45l1:EaggSSgPzXWFDiqCjNaKngIIuUF1pUO4
- TLSH
  T1C9655B4A33EC9733C1EFF679A131108883F5D869635AE75A26046EF95CA73844F8127B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Microsoft.EntityFrameworkCore.SqlServer.dll
- Size 442KB
- SHA256 9503e48b4b0c36e3baf305151fc28f9c787c36fbf732e5a0d1b4f2b2d5504a83
- MD5 1f33d6489fb83189475876f913e129ce
- SHA1 e3aae2c29f1866f7159925f5f4090b5cedd3161e
- SHA512 d73c7437d8bc3b8e776f0b68b30a64ebe6eaa1d2a6a37b92f56b5b58050b26faf560f70c6918ba23929da103aae44d498ad4ecb198a7ebceef5dd64c68bd4579
- SSDEEP 6144:GLGCNdPUaQOqoEb2RQJLqUgZ3EqwwBo+HJOw6YEc+Frb4wwURWDqaxjSwjkM980S:GLGCNdcaQbgZ3+lYkw0rw7Ja
- TLSH
  T180A44A0463FC9709D8BF9735B5F4811C973AF967806AD78E084866ED0AB2F449F90B72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Microsoft.EntityFrameworkCore.dll
- Size 2.0MB
- SHA256 fd3e47ba81e397f264427588edbbb137e3022dafadae83715750c2720ef5041e
- MD5 5ae90873ae5b968b11c8c4166a16fabd
- SHA1 6bbfdc0e7cfe6a1f332b7a5332c0f3724b82bc69
- SHA512 5cb2ebac9625bafd491530cabda87e8dc1d13faa250f1dfa15d0eadd5cf115a51e2496ad06923641b0df575454d2d0ecafa8e043edccdd47c49af91b860bb100
- SSDEEP 24576:0n/TSg+5ipTYUPvvJAG3XI7LUUgviwvKRDWPq7fsj8Lhz5B06lOWsl75/F83lhZd:iTzpPy1hM4+CKC3Ju0+w
- TLSH
  T139A51B92739C5A77C1EF42766030562A9BF6E49E9321D3B7291867FD3CA27800EC1277
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Microsoft.Extensions.Caching.Memory.dll
- Size 37KB
- SHA256 68e25eb71dab3eea401ac5e0d8d0912f9a7eff17733325126e69f6e2dc567d0c
- MD5 4b05e228ce48e5aa53361feb8d30398a
- SHA1 d71b874fee66d6f8bf003b97869050f466c28db7
- SHA512 6c3c81231b833d37eaa091b7df85f62162f2257e4d5f0a1f2014f8f41dcde57e1c100000ae3abf59e8380448b1b5f815f662cc176d1a76436ed775c73cbf83db
- SSDEEP 384:E/TKk21j+q2nnacFEUelwVc7q68RkCxvewcrUeH33BBIG2GCqEAptXuXWwQWWfJ/:E/TKGq2nnGUejN23neHUCKjq
- TLSH
  T1D5035B0197AC9323DAFF1A7587F0E6121F7CDB875521EB591C4CF19A1C93BC09A2263A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Microsoft.Extensions.Identity.Core.dll
- Size 165KB
- SHA256 d0d0231e9416fd71f532836118ee5fd5b756f7b28df8c59be4666e6023066576
- MD5 2ef8caf814dec74f6f20f684d628cc93
- SHA1 5a3b8858f79384149ca1ca77640f9ab06006414f
- SHA512 8b116bc99bc20d72a5483b26bf55420d21ebe48b3542a8be5b9e068285e69f2cd04712b434c22ed9402adb5cfb94d6c2d5f08a3f8367d072df9ef756339e7953
- SSDEEP 3072:ww52HmjImcFfiZLocZZblm2+5EXRqO1sK9NaW:5ocN7b
- TLSH
  T1DAF32B4293D4E656F6AF1E7FF6709059CFB2A247E9E2F38E888C96FC24133805D50256
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Microsoft.Extensions.Identity.Stores.dll
- Size 41KB
- SHA256 880346d4f22f96210aff8cb03b4529b09e6a7cf13876c648bd7fad629230e2bd
- MD5 a4ea03999b8671b95fa560e6aa90ffa2
- SHA1 b23a8dfe302fe420e0f6a3a37a7e713a26771509
- SHA512 b8d3c4b8cf8d64b6d275d6b9ccf5af04b666719de4a4a8782cc8bc363825f6fa4b67468721ad3dbc9e264c071f4369127501fb35de2a7f56512e3d2eeb52e141
- SSDEEP 768:xmEOCFkBi2LmRc8sjMkwtgUVR4CMLHwVju/BG2tC9zm1l+:wEOCFB2LmRrsMoM93zm1w
- TLSH
  T1B3133C01A398C033CBDE6F76717181822576D2D2B801D3955AACFCEC397774B7BA06A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  Microsoft.Identity.Client.dll
- Size 1.2MB
- SHA256 0e5adde176c616b5d95c0cd2e7b302a182f9a31db4567b48402b4a9f557da140
- MD5 d4fab3d6d4ecbd270b9eaf733e6beeb1
- SHA1 2799ed06bfe1374fe8e6fe5d25715acf16d5cbdb
- SHA512 6b5ec0ec15ba96ac25bad0342f87034ccdfdb533798b9fa80f9258b6e55aa599c6969f45e34a4e0d0fbddee4d8276b9ab3f93e0de7f8457aedaca436eae91f90
- SSDEEP 24576:45yLcmb8Wg6n/OvBSPVXh91IBujMFFbLn:4ELcW8vY/IBuj4
- TLSH
  T16B553B5273F89A36E1FF3734A4B016105BF6F882AB7AE71E1714A9AD1C627808D44377
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  Microsoft.IdentityModel.JsonWebTokens.dll
- Size 61KB
- SHA256 a250dca2e960fff1df8ad3a50b4bb7e7c1907acbd6f38522ef96a4389d7d88a7
- MD5 d1c90e9b006050217a08eabb6f894677
- SHA1 380f0f971cb5d04cfe9da70046d3ee58aa6cc769
- SHA512 09f69e5bb4d1cb07827782d53438e4a98f069d1f9f395c2223ef8959ac4b67f53f5fcaea22317ca3927b97688773fbcff8fe453409e8eabfa1e1a808141e6bca
- SSDEEP 768:/ox/OHHI7dlEpNmWvTdm/X7J7dWjjkEZmCDuttJ6g4xgnk1mFVDvgd:/vHHXNmWvTOJejkMDuttJ6gagnksFvG
- TLSH
  T19A53E6446BFC8398F1FF3B306AB1A102597ABE8AA835D74D1D41D29F2D73B409A10776
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  Microsoft.IdentityModel.Logging.dll
- Size 24KB
- SHA256 eff342bd7842e4d9d00d00dd0ba00a74787acf6869bde2eb483bf84d5adb3074
- MD5 c58cef9f638e35603ac7ff15ba89c14e
- SHA1 ed1d1df5f9f5a4b43d78398ce9ea8abd71a2eadf
- SHA512 f029428102d4584938d89a8c7c83125518471175a53d2cdbc6b43cfd0c2d4e160d4acdb0bb359c989fb298889e62b8e85511099a763638da60601d193e0473b9
- SSDEEP 384:McsdCQ+/L/JKUA5wKGkKczWiP4WDD/HRN7jPAQ3JllRKxPe:MndCQg/kUAAp0RDvjPoxPe
- TLSH
  T12EB24A659BFC874AEABB2F3069B4D1021636FBD75830DB6F2448E59D1C03BC68A1136D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  Microsoft.IdentityModel.Protocols.OpenIdConnect.dll
- Size 106KB
- SHA256 b2df04680ace444416b01964474905373d941b7ef5d3e760ac9b736c57cd46aa
- MD5 ab12a0ce21d3730ec7ea182768bb2409
- SHA1 ee9583a42b18271a689db29ceeb490a320bd1f25
- SHA512 bd8643975777cad13eca91a463695879a4b01db96d31c4c09ce662dd3289ef8727250687e7d2416afbacf421f1805efe3ba9226aebef2348612f85c84dd7f9f4
- SSDEEP 768:1UnjJ9KWBVtSFScUjVVD6455uQ6/G9X8pc4NpsqvSgF46qjfzXRskOhkVDk2fk6c:Ym+aJ4VVD6UNX8pc4wgFqRi+v2
- TLSH
  T1DAB38320A6F89109F5FB7B31B878192185B77E8FAE38CB8D5564814D0C26BC3D66137B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32