Overview

overview

1

Static

static

mxstatic/f...im.xml

windows7-x64

1

mxstatic/f...im.xml

windows10-2004-x64

1

mxstatic/i...me.xml

windows7-x64

1

mxstatic/i...me.xml

windows10-2004-x64

1

mxstatic/i...ad.xml

windows7-x64

1

mxstatic/i...ad.xml

windows10-2004-x64

1

mxstatic/i...nd.xml

windows7-x64

1

mxstatic/i...nd.xml

windows10-2004-x64

1

mxstatic/js/desc.js

windows7-x64

1

mxstatic/js/desc.js

windows10-2004-x64

1

mxstatic/j...ory.js

windows7-x64

1

mxstatic/j...ory.js

windows10-2004-x64

1

mxstatic/js/home.js

windows7-x64

1

mxstatic/js/home.js

windows10-2004-x64

1

mxstatic/j...ete.js

windows7-x64

1

mxstatic/j...ete.js

windows10-2004-x64

1

mxstatic/j...ard.js

windows7-x64

1

mxstatic/j...ard.js

windows10-2004-x64

1

mxstatic/j...kie.js

windows7-x64

1

mxstatic/j...kie.js

windows10-2004-x64

1

mxstatic/js/jquery.js

windows7-x64

1

mxstatic/js/jquery.js

windows10-2004-x64

1

mxstatic/j...oad.js

windows7-x64

1

mxstatic/j...oad.js

windows10-2004-x64

1

mxstatic/j...min.js

windows7-x64

1

mxstatic/j...min.js

windows10-2004-x64

1

mxstatic/js/mxhtml.js

windows7-x64

1

mxstatic/js/mxhtml.js

windows10-2004-x64

1

mxstatic/js/mxui.js

windows7-x64

1

mxstatic/js/mxui.js

windows10-2004-x64

1

mxstatic/js/script.js

windows7-x64

1

mxstatic/js/script.js

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1eefe1d3d0bb12f8ccdfbdaf08b15ea020fa97303927e5d366315db32a3ae7a1

  • Size

    905KB

  • Sample

    220904-q5nn6agfgn

  • MD5

    25766f3cb1fbcbaf6cf66d111a3176ac

  • SHA1

    961be0e780961c92da7fe70397d3a8f47796fccf

  • SHA256

    1eefe1d3d0bb12f8ccdfbdaf08b15ea020fa97303927e5d366315db32a3ae7a1

  • SHA512

    3374711b715ee1d5fff360d0d951754cde1d93c1369a89d89817ea518eee7bbfe5880a647fd981e68b6b83a605cb95214394b1ae6f7fb3a1bc19d645ad54628f

  • SSDEEP

    24576:KbJ+Vw/wfvYj28OqDbJuUDo5rLk92NzdNJQB:K1+V+wfvaMqDWr4oNzdNiB

Score
1/10

Malware Config

Targets

    • Target

      mxstatic/font/dianyingim.svg

    • Size

      33KB

    • MD5

      1a475da1b34133e5ca128ab1689cb516

    • SHA1

      2e28dec759cac2febd588cad72ca58801b9787a4

    • SHA256

      792f22f1d1c13e4d483e575107940bc1f6254c56439c11c1e4090dba3f94fc3d

    • SHA512

      f90a162d091a0e4dd04b55d96e82096093c9f2f2ae835a89ba747b0417686964cc45a5145700067d84300baf04a6745d1c89bf84351f6397a968d7379cd80fad

    • SSDEEP

      768:TO545BQnTPpSom/67YWgoufqfwnsUKVDEEOQ7QBDEEkDEEOQDB5Y3N5Raxcmmpne:C54ukL6HgnOUIDEEOQ7QBDEEkDEEOQsc

    Score
    1/10
    behavioral1behavioral2

    • Target

      mxstatic/image/backhome.svg

    • Size

      16KB

    • MD5

      17236715c4c14583fc0048cc6c1322d8

    • SHA1

      8fd6ca1b2e487d37020b2744dcb447ab8b1a3114

    • SHA256

      cc508f161ce1478dcba8691894444ecda9acb6e58a69e7c03166f257002a30e3

    • SHA512

      adb6e701187df76afcda9e8b8b0495c818f3209d106b69fd60eb99f9df76d58ef7bd063ae19e500cea82e8fa94483db002abfbadb0a98f7804cc8edf14e38481

    • SSDEEP

      384:msZo5oESEKmf4CLWU6kToryvCrTWKm0F7FZbUpCc4Kr5wHzLix9dF0:1Zo5oESznCaU6kToryvCnWuFBKr5mOxe

    Score
    1/10
    behavioral3behavioral4

    • Target

      mxstatic/image/load.svg

    • Size

      1KB

    • MD5

      18dcc3a30b244ed7cef176ff226f78d3

    • SHA1

      ebed97677cf18dc9822bb797445335cfdf50598d

    • SHA256

      e92abfa4fb34dd56c62ad686bb6fc95ce9bcf12f02dae9c9807b75645baf5da5

    • SHA512

      e892dd839424afbbc5f8d6ed7f71b935c8afe0a1a7b120275c0614de3c90ed5efa105e7e11ad16723be72a9af91386f9fd5dbf0126ae8b122b971b1c7d415b02

    Score
    1/10
    behavioral5behavioral6

    • Target

      mxstatic/image/notfound.svg

    • Size

      3KB

    • MD5

      f47e52f08ee5a94f55bbedd1e07802d1

    • SHA1

      8f9b04f36999f905cb2a0339d276e0adedf2971c

    • SHA256

      7257eb6fc9d44783049fda988b430ea4d5fc4f0f2ccf5a83a84041e598e2437b

    • SHA512

      31f2b2bcd1e606168272784544663d2a8794736b413e36931feaa07fa0e0b3bc6e85ff69a2ce18df938140e8e0bcd52ac3dfcc3cd7e0eb45adbadb393bb8dbd4

    Score
    1/10
    behavioral7behavioral8

    • Target

      mxstatic/js/desc.js

    • Size

      7KB

    • MD5

      cc1d269086a2065a233144f89d8ad225

    • SHA1

      6429e0172435b33e494a391e895811ac4028906e

    • SHA256

      6ce4cd67ce29b70b280afe5117f0841e8eb5040074a6ef5437e92dd420b5acc3

    • SHA512

      8a615f4cbe1f240f83698f71dc1f59279381e81a7c94e005fba9874abe32e7155804fc5b48bc10b6d30251d718095e1bb41a3d3fb44c5119bb24237256cc1914

    • SSDEEP

      192:ebV90aYdKIOqSUQYYwmhY9jqkhR9jq4NsODUXIv+O55Geog7w6w/QoYh0yUsu8Ps:ep9BY+7UwY9jqeR9jq4NsO4OGFSw6jhK

    Score
    1/10
    behavioral9behavioral10

    • Target

      mxstatic/js/history.js

    • Size

      1KB

    • MD5

      9015b527c62d9699325f0d3344a4f2f2

    • SHA1

      6323c47e410e185cbb8610a495ca4a81dd9b8c58

    • SHA256

      555abc790ef68a2f7a74d3d778564442c690efb9c9cdeeb94e978bac3937cd03

    • SHA512

      2b1ed58191dadd7bcaaac761c394fc86b17ad3c044885ec45431a522c5e46ab7c6ad255eaeb9092d35096622e88aeaacda8d5fefb7ebe414ad930538cf98d01c

    Score
    1/10
    behavioral11behavioral12

    • Target

      mxstatic/js/home.js

    • Size

      30KB

    • MD5

      e658cebb88ed7e8f0ea1d54d2ec14173

    • SHA1

      26338e411173fa8a9a2372a2f715cf5fdae55efb

    • SHA256

      817e774c7aa0790596321287d2de13a58cfefd780978c414e6ede24c9760836c

    • SHA512

      19521ab4c35c6758ccc1e9e3c464de0aa13709f55cfe0b7341564f98c28eed827b9c76957523e0b052ebbdcc1663857caed0e1dff5bb4a592b0c03c752ece5e8

    • SSDEEP

      768:hRBzc5Tu8ebtwbhd3rXb7z9CTbhzr5gr9UP3TNzg:hRStdLyg

    Score
    1/10
    behavioral13behavioral14

    • Target

      mxstatic/js/jquery.autocomplete.js

    • Size

      24KB

    • MD5

      25e39e17d13ccf1838ec9da98ee1b927

    • SHA1

      7d294a86db684afc9aff8e323258eb94e8a3fb52

    • SHA256

      9dbf67356894f8936b263656a0f02b58981eacce47e95c669aaa40ebb334cc79

    • SHA512

      46584f7d5e6d5d7dd1be0e71e82a1a649f1615cd0a6f7b014caf2be41b7a9ff4a24dbea28ae495058511dbdc7793f32c6833a0713a650ff4a5990b091376938d

    • SSDEEP

      384:n28MJlHqBlgr2qMrLXej2Jy7fwaoSXo0TviE:n57Dr7OtZTqE

    Score
    1/10
    behavioral15behavioral16

    • Target

      mxstatic/js/jquery.clipboard.js

    • Size

      10KB

    • MD5

      3f3688138a1b9fc4ef669ce9056b6674

    • SHA1

      eb41c0e88206dda6f0fd8dfbbeefdc0829a9d13d

    • SHA256

      99e1761c92764dcaeec33df3e1773160344cc4aa6b8ddaee0477372279a2c424

    • SHA512

      84fcc043b460510fe3b0ce9558f581a6fd9bb6377d1d6bc49bc588c009e062932e6a83298a137a44e8fc7111547989d5d2f4d81dea64b11cb3cec92b8682f966

    • SSDEEP

      192:XjHh4LyP153pPJ7rVWLBTwuLJ/eXbA5gpEHa4Lyc2mltIjk1QGo:XuA3JVVWLBT9LJ/eXbA5Tj2mzg/

    Score
    1/10
    behavioral17behavioral18

    • Target

      mxstatic/js/jquery.cookie.js

    • Size

      1KB

    • MD5

      5ad5e777b99bac4b5726cd535a3d5ae9

    • SHA1

      fb2d57eec37f7665ca36ce6292097385b5771687

    • SHA256

      93ba6fb465c36bd79b567b1ccc3e56a186f1d68996037b9ed06ec6d9ee249a07

    • SHA512

      bb9b7a39f6b2d7e51ce003d260349a714f2d47445ca08227e8a5017ef0c35800ea755f8e27e30087c82515fba8b1056239b30017a08df90f6ee851b7cbd41a73

    Score
    1/10
    behavioral19behavioral20

    • Target

      mxstatic/js/jquery.js

    • Size

      90KB

    • MD5

      397754ba49e9e0cf4e7c190da78dda05

    • SHA1

      ae49e56999d82802727455f0ba83b63acd90a22b

    • SHA256

      c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4

    • SHA512

      8c64754f77507ab2c24a6fc818419b9dd3f0ceccc9065290e41afdbee0743f0da2cb13b2fbb00afa525c082f1e697cb3ffd76ef9b902cb81d7c41ca1c641dffb

    • SSDEEP

      1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUx:ddkWgoBhcZRQgmW42qe

    Score
    1/10
    behavioral21behavioral22

    • Target

      mxstatic/js/jquery.lazyload.js

    • Size

      5KB

    • MD5

      5a0a087606ad5b73ad985db19a150220

    • SHA1

      095dc2105dfaf455fc22d83b246cb34849d90adb

    • SHA256

      7cd978b6e584de9f63d31c671f523882b03d102092c9af77e70399feba3401d4

    • SHA512

      ef33e1b898b8d03b33079790e3e3111f28e38a4a55d266dd4eafbe1e02a98c24e040d76951cc0bd401a873caa822c6f19a291830bb13bb61163fc8ccc84c457c

    • SSDEEP

      96:ZziUrmKGxM7B2PswfNVRL2evyKSCjoFxV2NpjP+OpqC5URolivRTe/UU+5UZqibA:ZGlM7B1wV20jSCcFX2Npj7qC5U2ivdeM

    Score
    1/10
    behavioral23behavioral24

    • Target

      mxstatic/js/jquery.qrcode.min.js

    • Size

      13KB

    • MD5

      05f0b1d7d4b9b0b4975870606d650e3c

    • SHA1

      f424bd339870510d1160d1c5da5d698aedbb452e

    • SHA256

      f4ccf02b69092819ac24575c717a080c3b6c6d6161f1b8d82bf0bb523075032d

    • SHA512

      34551c0e59b857e6b6b233d7ee04442178024858daf5c1ed28f38bd738fa4219c4d2f718ebde4c3837a1aa46866132f22f6c317bfc2daf8678f52bea5ead7651

    • SSDEEP

      384:ILEsd9QYYAA1TRjjrlqgbHH/sgDZUnEbBIg4:wIFbVg

    Score
    1/10
    behavioral25behavioral26

    • Target

      mxstatic/js/mxhtml.js

    • Size

      1KB

    • MD5

      24f3b9f0a5b166ea5e0088a2638bf1d8

    • SHA1

      25a5910f27c33c64a990620fb37bff2b87eeda7d

    • SHA256

      58e45bf3caf2dd3a03cf24f07b6c7050f2b26fea99e4dc4b3c48d3fce3736cdd

    • SHA512

      6882a6c7d81c173ed9d104be27efb45d783cd210647bd5f35940fe02349f1ec648e6dcf4aee3b97b4ed17efe1531aae8c6d5dc589d48ef03e94c2eee58b89cea

    Score
    1/10
    behavioral27behavioral28

    • Target

      mxstatic/js/mxui.js

    • Size

      55KB

    • MD5

      921bd98381d7b0201805e580e69fa13f

    • SHA1

      0c71df4d3d9aeeaf2549babd5306f623ccc2d60b

    • SHA256

      b8f6f3579e2f1497c080592fbe4275a6f872bbf94fdf9722ca74d6b14f55f2d0

    • SHA512

      8adba6d0505b020dcd4f91b54c5a6e1f87f977bf69d89a17e7e596d34fc820f39f937077e0c6814e8584fad74cfda51691547bfb7b0fe46f99730bf9719fb319

    • SSDEEP

      1536:mI7pBhqxatn73Zp33ThP2V/9ipMfgc8dYCyRo:Jqxad33ThP2V/9QdYCj

    Score
    1/10
    behavioral29behavioral30

    • Target

      mxstatic/js/script.js

    • Size

      38KB

    • MD5

      5441b04131fdd888e86c17f89c0bf491

    • SHA1

      5a4c1e0b6c3903c1165aa89fbfa9fddd32c4d177

    • SHA256

      906f339d253075fa12aabababb0f3a23f15fafd60a6230200efeb29df5a3c7e3

    • SHA512

      8432cc3a91db8e6a4958f98e8a624e9ab9313e7a9288ad187556a34aa2d656bc67ab2c67ca194a73870a9839e996716e3d7e2d9689d81a877283e8fbaaa0d5a5

    • SSDEEP

      768:KwSBo/B/BVeFMR4EGrBtS+Gmswp7fZCGKoMy6hdzA63nJufM7aF/8cXvqNLnbEet:KLoBUMRzVfUjHyOxfm8+

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

4
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks