General

  • Target
    Huawei-HG630-Hotspot-v1.0.zip
  • Size 636KB
  • Sample261102-s8x34svvhs
  • SHA256 03349d9f980709b7a24bb20d7d330b103c73da58ef4f2da340fb4d6176de7122
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Huawei-HG630-Hotspot\Apply_Upgraded_Config.ps1
    • Size 5KB
    • SHA256 4f216b0971778e9d565acc977cac8bef77200d53fa4ff29a06bc191cf1e0de97
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      Huawei-HG630-Hotspot\Fix_Internet_Conflict.bat
    • Size 911B
    • SHA256 4312c48306a018cc18c36f7d92b51a30a830f2423c6203d83f478a5ccf58c47c
    • MD5 SHA1 SHA512 TLSH
    Score
    6/10
    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

    • Target
      Huawei-HG630-Hotspot\Huawei_Arabic_System\index.html
    • Size 417KB
    • SHA256 c8889265fd8922dc4354a918f3bc3b8a10e13e05f2346cf677a754b36b2e1944
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      Huawei-HG630-Hotspot\Huawei_Arabic_System\portal.html
    • Size 294KB
    • SHA256 b6c7a17124a854b735355d358b1a5984516fb334450ee02a9e5b434d9f94e844
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      Huawei-HG630-Hotspot\Huawei_Config_Engine.ps1
    • Size 19KB
    • SHA256 14b165409997497dd8d0318f9d347501934187c80208bd7ccee14bb1b5f6862d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      Huawei-HG630-Hotspot\Install.bat
    • Size 3KB
    • SHA256 46bf8e3b532e9fc062f3a77c8de9a6a7c0120f04475da667a73301f815655688
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      Huawei-HG630-Hotspot\Install_Engine_Task.ps1
    • Size 2KB
    • SHA256 b46d5888e4f76458cbf07aa64fe16ad142609740980a8fb785fb78274bacab83
    • MD5 SHA1 SHA512 TLSH
    Score
    8/10
    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

    • Target
      Huawei-HG630-Hotspot\Live_Router_Server.ps1
    • Size 27KB
    • SHA256 a30b869e77d0b1eed7ac3b8f138f435ca8fefb3fd6cb55dabc60260903e37063
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      Huawei-HG630-Hotspot\Monthly_Storage_Wipe.ps1
    • Size 1KB
    • SHA256 b5d0b1cc3301431f2749eccd2e3d3694d05dabf4a3e31cc6fd2c7a54b5ae1996
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      Huawei-HG630-Hotspot\Setup_Gateway_Nat.ps1
    • Size 3KB
    • SHA256 a434bee1b993d468b7a30be6ad8093d5d46119954101c6e784b8e420abf51216
    • MD5 SHA1 SHA512 TLSH
    Score
    6/10
    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

    • Target
      Huawei-HG630-Hotspot\Start_Hotspot.bat
    • Size 447B
    • SHA256 21b32853bf7f10badb0d2784ae8ce54b4307ca697eb77ea1e7f984a5699b1cae
    • MD5 SHA1 SHA512 TLSH
    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

    • Loads dropped DLL

    • Target
      Huawei-HG630-Hotspot\engine\Gateway_Engine.ps1
    • Size 28KB
    • SHA256 e708aeea5ea3989f8104146230e8d1d105f5cd8a59ffdc097464cf180211f868
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      Huawei-HG630-Hotspot\engine\wd\WinDivert.dll
    • Size 46KB
    • SHA256 c1e060ee19444a259b2162f8af0f3fe8c4428a1c6f694dce20de194ac8d7d9a2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Huawei-HG630-Hotspot\engine\wd\WinDivert32.sys
    • Size 77KB
    • SHA256 2f43f4251be4d72dd56c91bf6cce475d379eb9ba6c4dda2be3022ea633d5e807
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      Huawei-HG630-Hotspot\engine\wd\WinDivert64.sys
    • Size 91KB
    • SHA256 8da085332782708d8767bcace5327a6ec7283c17cfb85e40b03cd2323a90ddc2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks

static1

Score
3/10

behavioral1

execution
Score
3/10

behavioral2

execution
Score
3/10

behavioral3

execution
Score
6/10

behavioral4

execution
Score
6/10

behavioral5

discovery
Score
3/10

behavioral6

discovery
Score
3/10

behavioral7

discovery
Score
3/10

behavioral8

discovery
Score
3/10

behavioral9

execution
Score
3/10

behavioral10

execution
Score
3/10

behavioral11

execution
Score
3/10

behavioral12

execution
Score
3/10

behavioral13

execution
Score
8/10

behavioral14

execution
Score
8/10

behavioral15

execution
Score
3/10

behavioral16

execution
Score
3/10

behavioral17

execution
Score
3/10

behavioral18

execution
Score
3/10

behavioral19

execution
Score
6/10

behavioral20

execution
Score
6/10

behavioral21

defense_evasiondiscoveryexecution
Score
8/10

behavioral22

defense_evasiondiscoveryexecution
Score
8/10

behavioral23

execution
Score
3/10

behavioral24

execution
Score
3/10

behavioral25

Score
1/10

behavioral26

Score
1/10

behavioral27

execution
Score
3/10

behavioral28

execution
Score
3/10