Overview

overview

1

Static

static

var/www/ht...eex.js

windows7-x64

1

var/www/ht...eex.js

windows10-2004-x64

1

var/www/ht...eex.js

windows7-x64

1

var/www/ht...eex.js

windows10-2004-x64

1

var/www/ht...dex.js

windows7-x64

1

var/www/ht...dex.js

windows10-2004-x64

1

var/www/ht...t.html

windows7-x64

1

var/www/ht...t.html

windows10-2004-x64

1

var/www/ht...b.html

windows7-x64

1

var/www/ht...b.html

windows10-2004-x64

1

var/www/ht...v.html

windows7-x64

1

var/www/ht...v.html

windows10-2004-x64

1

var/www/ht...n.html

windows7-x64

1

var/www/ht...n.html

windows10-2004-x64

1

var/www/ht...6.html

windows7-x64

1

var/www/ht...6.html

windows10-2004-x64

1

var/www/ht...ent.js

windows7-x64

1

var/www/ht...ent.js

windows10-2004-x64

1

var/www/ht...s.html

windows7-x64

1

var/www/ht...s.html

windows10-2004-x64

1

var/www/ht...g.html

windows7-x64

1

var/www/ht...g.html

windows10-2004-x64

1

var/www/ht...t.html

windows7-x64

1

var/www/ht...t.html

windows10-2004-x64

1

var/www/ht...b.html

windows7-x64

1

var/www/ht...b.html

windows10-2004-x64

1

var/www/ht...v.html

windows7-x64

1

var/www/ht...v.html

windows10-2004-x64

1

var/www/ht...ent.js

windows7-x64

1

var/www/ht...ent.js

windows10-2004-x64

1

var/www/ht...04.xml

windows7-x64

1

var/www/ht...04.xml

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7ca453f88eff922fc4e249a5f1a051dd.zip

  • Size

    267KB

  • Sample

    221224-kfwetahg62

  • MD5

    7ca453f88eff922fc4e249a5f1a051dd

  • SHA1

    a085cd8046524d5e1e070c8e64594ad0a7abfad8

  • SHA256

    710a21082a7c7325b6d24b9d1f8d6dee613c0850738d6d2d8e56b8cefc8f1a20

  • SHA512

    1908882d815de5f8caf93f193f80f1251898eb1c541c2d72d772d2f9c3e661bfea5f84c239213303b00c5ebcd021fcee9e3b2773f553859cb4bbbea247f9c698

  • SSDEEP

    6144:yx/VXVOVZVosZTgr9BPIvVck9pB9pB8Zx9XGx3WQFpbSv:4l07OrHUcApDpBcXGFDi

Score
1/10

Malware Config

Targets

    • Target

      var/www/html/tata-pravesh/public/images/indeeex.php

    • Size

      2KB

    • MD5

      1795adf32b03ad794c81bd5a1c9b7b91

    • SHA1

      a6e066ad35b5ef3e6016702b5eecbd076673b983

    • SHA256

      44f189a9538add8b6c091b320c002e5c904d28bb251eb55d9a9b805c60ebbbf2

    • SHA512

      3b67874f5c169696865200a95516ec3c95367bae5ae9f96f7113dd65de43d3665b6f8eec4a5ef022f73a2fab673772e7ef726c7e34a6e901128c0ee5f3463a1a

    Score
    1/10
    behavioral1behavioral2

    • Target

      var/www/html/tata-pravesh/public/images/indeex.php

    • Size

      2KB

    • MD5

      8a9551a422e51ffbe8357f218814a369

    • SHA1

      284ae3d7a7dd5a720d39ebbbcc9e523d0c3cd472

    • SHA256

      beb730a04dd1cb5905c6aac63a2a6d05d80a971109845cea823c31e2e21b0bb8

    • SHA512

      eeab0f8d5fcbb4922276255a3317765680421621770ade7e94cbd3215a8aac5da70355394b803f686b7e19f839c11908f71588bec88330f7ec201589da017357

    Score
    1/10
    behavioral3behavioral4

    • Target

      var/www/html/tata-pravesh/public/images/index.php

    • Size

      2KB

    • MD5

      1795adf32b03ad794c81bd5a1c9b7b91

    • SHA1

      a6e066ad35b5ef3e6016702b5eecbd076673b983

    • SHA256

      44f189a9538add8b6c091b320c002e5c904d28bb251eb55d9a9b805c60ebbbf2

    • SHA512

      3b67874f5c169696865200a95516ec3c95367bae5ae9f96f7113dd65de43d3665b6f8eec4a5ef022f73a2fab673772e7ef726c7e34a6e901128c0ee5f3463a1a

    Score
    1/10
    behavioral5behavioral6

    • Target

      var/www/html/tata-pravesh/public/images/login/__MACOSX/www.scarlet.be/_css/._myscarlet.html

    • Size

      268B

    • MD5

      d24b965a8035fd95e91eddcf45b7b866

    • SHA1

      543227cd9522eeff380025e4898c51c26216cb4e

    • SHA256

      ad95b52259cc6b62c642de4c31d47fc30a942f6783767a2c6bd7440cc1c1e692

    • SHA512

      209b5eb85e6734d8dcf7ca529120ad9f4b7f8b68f886f5fb58c0aee614fa709410bb5683125537aa704448e81f38869cef69e3a97ba8c2d09b8e78072212a724

    Score
    1/10
    behavioral7behavioral8

    • Target

      var/www/html/tata-pravesh/public/images/login/__MACOSX/www.scarlet.be/_css/._myscarletMob.html

    • Size

      268B

    • MD5

      4b74ae26794fb01895816b92c953567c

    • SHA1

      53fa5eed11be101ca99a131a79800b315b30ab50

    • SHA256

      d40b707f2114ce0f11a0ca4f233aa3774df4ddeb41bd580fb7121f65bcfde536

    • SHA512

      267691ba4ad834507fadeaea845434f63e552b8d14f82c166228e02b6f67b503515eddedbc6ceef9518011145c9c7c095336715aaff3f6e2c8ea603176140fd3

    Score
    1/10
    behavioral10behavioral9

    • Target

      var/www/html/tata-pravesh/public/images/login/__MACOSX/www.scarlet.be/_css/._nav.html

    • Size

      268B

    • MD5

      56201fecbf11aba6badaa18673f3dd99

    • SHA1

      5df24493d5a59956d462c1c94d57241f2f44bc1b

    • SHA256

      17eec5b884c01b7ca38339853914ea7aa2a82efe5be2f99ea06eda564aebbb6e

    • SHA512

      7f10d8adc256abc2e6168588af8b5c34c9e617673950425acbacae169bba676e3af302521a3be94538228d55251d7df92d781e4f77401d334f597b60a8f557a2

    Score
    1/10
    behavioral11behavioral12

    • Target

      var/www/html/tata-pravesh/public/images/login/__MACOSX/www.scarlet.be/customercare/._logon.html

    • Size

      268B

    • MD5

      977fe817a79c4b4a382624f6d39750f1

    • SHA1

      abf97f50151478c40dffd6abaf01da70393b2578

    • SHA256

      58d3065a22e5c4f535d06e14575952bb68f905d8d8280a01a44971a736ab1ca4

    • SHA512

      f085d745f5f4da7501aa2c1923c7248e34c1d8e3ccc019790945d79f6e9512f72e53084c517087f8ce0ae42e46b440235fdd74d3457cbe282c16c469ecb0f0e5

    Score
    1/10
    behavioral13behavioral14

    • Target

      var/www/html/tata-pravesh/public/images/login/__MACOSX/www.scarlet.be/customercare/._logon4bd6.html

    • Size

      268B

    • MD5

      50436ff8f1aa07d0d5b9d56e4c924555

    • SHA1

      2fc4765e5ae30ae5ffbcad937754cad7b866c67a

    • SHA256

      06f06bafebd5c6b4c420aac457d67c824aae9f3c41318300bec5bef5c43ac444

    • SHA512

      0f757ee59d296f12a40b9a34cd584c01e083dad662a6f5decbe12119ce453ebccc04a15c556006d89157ec3ef45c1bb51c27a682a8b4e75bac54507f720f36ec

    Score
    1/10
    behavioral15behavioral16

    • Target

      var/www/html/tata-pravesh/public/images/login/__MACOSX/www.scarlet.be/customercare/_banners/._AC_RunActiveContent.js

    • Size

      212B

    • MD5

      643287a1d5aa9eaaba0e746a6a43386f

    • SHA1

      409fdb85db041b8f0020eca939bfc0c0b4c2d205

    • SHA256

      d2e68d41acb858557acb08ce17b97aa7e49dc81294320d5f37a2b1cd511f275d

    • SHA512

      ef0131f0a71854da1643533f6dbfd3587f373a8112dae16964debf0bfcba434d6135488e44265b82b231fab3bee14ca5befa76002adf353ba46da624be0f6575

    Score
    1/10
    behavioral17behavioral18

    • Target

      var/www/html/tata-pravesh/public/images/login/__MACOSX/www.scarlet.be/customercare/_images/._icon_lockplus.html

    • Size

      212B

    • MD5

      643287a1d5aa9eaaba0e746a6a43386f

    • SHA1

      409fdb85db041b8f0020eca939bfc0c0b4c2d205

    • SHA256

      d2e68d41acb858557acb08ce17b97aa7e49dc81294320d5f37a2b1cd511f275d

    • SHA512

      ef0131f0a71854da1643533f6dbfd3587f373a8112dae16964debf0bfcba434d6135488e44265b82b231fab3bee14ca5befa76002adf353ba46da624be0f6575

    Score
    1/10
    behavioral19behavioral20

    • Target

      var/www/html/tata-pravesh/public/images/login/__MACOSX/www.scarlet.be/customercare/images/._input_bg.html

    • Size

      212B

    • MD5

      643287a1d5aa9eaaba0e746a6a43386f

    • SHA1

      409fdb85db041b8f0020eca939bfc0c0b4c2d205

    • SHA256

      d2e68d41acb858557acb08ce17b97aa7e49dc81294320d5f37a2b1cd511f275d

    • SHA512

      ef0131f0a71854da1643533f6dbfd3587f373a8112dae16964debf0bfcba434d6135488e44265b82b231fab3bee14ca5befa76002adf353ba46da624be0f6575

    Score
    1/10
    behavioral21behavioral22

    • Target

      var/www/html/tata-pravesh/public/images/login/www.scarlet.be/_css/myscarlet.html

    • Size

      13KB

    • MD5

      483b47184d12b5736f75641e797d413f

    • SHA1

      286430f272013730fb977f74f556d9f6d612705c

    • SHA256

      a40568da6df8bcdd365f2619ebf39a339b85ee0574848de9f85213135fb3bfef

    • SHA512

      9b32baf82a48bd8b917efd8bd6e2eb31961f8a4e890623979fc607ab2ab3a866e0cedc1ce173be82811c8698a8c05e5175899f6b5e1177cb7487753f23cbdbbf

    • SSDEEP

      384:gh5pzzkrcrYx9FPFmA7GCe9kTuLIfRJAXzGLJYG+0/QOUktOaxRB2g:gFPAx9Fd8X4B2g

    Score
    1/10
    behavioral23behavioral24

    • Target

      var/www/html/tata-pravesh/public/images/login/www.scarlet.be/_css/myscarletMob.html

    • Size

      13KB

    • MD5

      483b47184d12b5736f75641e797d413f

    • SHA1

      286430f272013730fb977f74f556d9f6d612705c

    • SHA256

      a40568da6df8bcdd365f2619ebf39a339b85ee0574848de9f85213135fb3bfef

    • SHA512

      9b32baf82a48bd8b917efd8bd6e2eb31961f8a4e890623979fc607ab2ab3a866e0cedc1ce173be82811c8698a8c05e5175899f6b5e1177cb7487753f23cbdbbf

    • SSDEEP

      384:gh5pzzkrcrYx9FPFmA7GCe9kTuLIfRJAXzGLJYG+0/QOUktOaxRB2g:gFPAx9Fd8X4B2g

    Score
    1/10
    behavioral25behavioral26

    • Target

      var/www/html/tata-pravesh/public/images/login/www.scarlet.be/_css/nav.html

    • Size

      13KB

    • MD5

      483b47184d12b5736f75641e797d413f

    • SHA1

      286430f272013730fb977f74f556d9f6d612705c

    • SHA256

      a40568da6df8bcdd365f2619ebf39a339b85ee0574848de9f85213135fb3bfef

    • SHA512

      9b32baf82a48bd8b917efd8bd6e2eb31961f8a4e890623979fc607ab2ab3a866e0cedc1ce173be82811c8698a8c05e5175899f6b5e1177cb7487753f23cbdbbf

    • SSDEEP

      384:gh5pzzkrcrYx9FPFmA7GCe9kTuLIfRJAXzGLJYG+0/QOUktOaxRB2g:gFPAx9Fd8X4B2g

    Score
    1/10
    behavioral27behavioral28

    • Target

      var/www/html/tata-pravesh/public/images/login/www.scarlet.be/customercare/_banners/AC_RunActiveContent.js

    • Size

      8KB

    • MD5

      f5f9c2a58c9aa85cbd602f61665da2a8

    • SHA1

      7533d59497555d3a35c7f0e125304f000d0039db

    • SHA256

      dd4af212d2dce74565cb3360308141d23548e15a5a23d9a49c9cab69b55d95de

    • SHA512

      02d53485153b912338bd8d3a853424ff88c8c382d7fd5cd7bb76f2804854f6ace9685da4c3a7f04c02877dd131a61c24758b65b234c31e9b7711a8f3c8ab6b2d

    • SSDEEP

      96:4wQrpaYZ42Bf0HHyDL7ULELdPJVvgJYxfHzx/zLi2N09ts92iy0+8A:VAaMf0HSDL7ULELd37hLi2IJ

    Score
    1/10
    behavioral29behavioral30

    • Target

      var/www/html/tata-pravesh/public/images/login/www.scarlet.be/customercare/_fonts/myScarlet20170504.svg

    • Size

      14KB

    • MD5

      0e55270998fc0c67aa140fc2cb9117e1

    • SHA1

      be0b50a0d2d306f15fd81b97a3a22384ec15b54a

    • SHA256

      16954b97a5218be8d0f5bf0a96db937ed436ec395ec6a28523d6cbe31850e257

    • SHA512

      49d4b74d7603c1645566efe54dcd5084a3273229ee96389cac0ff6eb18d22d930e531505edd73b73d8d410d94baf676e67f832faad915850b86069b872d0df3c

    • SSDEEP

      384:TWHLM3ZLBFNRFOdyN15FzfIc0AFqrORK9+fbtbnehCqXjhK7K:TmWpBFDFdFfIsUSRKYRDwpXjhK7K

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

11
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks