Overview

overview

1

Static

static

1

extra/eauthy/authy.js

windows7-x64

1

extra/eauthy/authy.js

windows10-2004-x64

1

extra/eaut...hyx.js

windows7-x64

1

extra/eaut...hyx.js

windows10-2004-x64

1

extra/eaut...ode.js

windows7-x64

1

extra/eaut...ode.js

windows10-2004-x64

1

extra/eaut...dex.js

windows7-x64

1

extra/eaut...dex.js

windows10-2004-x64

1

extra/eaut...x.html

windows7-x64

1

extra/eaut...x.html

windows10-2004-x64

1

extra/prel...cha.js

windows7-x64

1

extra/prel...cha.js

windows10-2004-x64

1

extra/prel...ook.js

windows7-x64

1

extra/prel...ook.js

windows10-2004-x64

1

extra/prel...kv2.js

windows7-x64

1

extra/prel...kv2.js

windows10-2004-x64

1

index.html

windows7-x64

1

index.html

windows10-2004-x64

1

pages/0116...gin.js

windows7-x64

1

pages/0116...gin.js

windows10-2004-x64

1

pages/0116...t.html

windows7-x64

1

pages/0116...t.html

windows10-2004-x64

1

pages/0a54...gin.js

windows7-x64

1

pages/0a54...gin.js

windows10-2004-x64

1

pages/0a54...t.html

windows7-x64

1

pages/0a54...t.html

windows10-2004-x64

1

pages/1ebd...min.js

windows7-x64

1

pages/1ebd...min.js

windows10-2004-x64

1

pages/1ebd...ain.js

windows7-x64

1

pages/1ebd...ain.js

windows10-2004-x64

1

pages/1ebd...gin.js

windows7-x64

1

pages/1ebd...gin.js

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7da4a87974ba072499a22b3242ef00fc71db3658ddc140fb2babb752acae8dbf

  • Size

    5.5MB

  • Sample

    240124-qwv2wabfdj

  • MD5

    206cf166d326e7c256fd7e8f909ec641

  • SHA1

    bea35e7efdc1a209ec17f4dc0af7cf40e6a59c9b

  • SHA256

    7da4a87974ba072499a22b3242ef00fc71db3658ddc140fb2babb752acae8dbf

  • SHA512

    f81905ea0dee0becfaa8d7fe6089fe189cd768e31bec7c471efa1306488f5b59cba2cc1995bcf78bcf346b1db8d89814df8985f5199d97c5bdea82d6adbe3d6f

  • SSDEEP

    98304:pcWe44uS7L9flSIZwHgZaHZBAKZh14ZII7QoQZbhKZD3YVEqZlZw77p1ZiyZN6hd:pcWed7ZlibfI1WEPnd+z

Score
1/10

Malware Config

Targets

    • Target

      extra/eauthy/authy.js

    • Size

      415KB

    • MD5

      e52c1e281c211aae9689622f74f0b022

    • SHA1

      3009c8d25bdee6f99368b2e54df675621a0b6640

    • SHA256

      23d7a58d80be43be37ab404b89f175d59a30e8e8b7ccb8799bf44f8d171d7b3d

    • SHA512

      de5b58b79c8bd985d835c2245f66d5a147f59230a2dc15f6f77dec3584785f23ffa8fa263b8d6c5a35d774a6d9a2cd60348caaab102a2bf8104b0fe1afa86fef

    • SSDEEP

      12288:li8nSCSt/Eh+eLOFoDa2AVvVt4bv+07ugD9NBNIWsbBzw6z7dcW8QXhRdWI13emd:livPt/A+ecfz0v+qD9PsV86zpcW8QXh7

    Score
    1/10
    behavioral1behavioral2

    • Target

      extra/eauthy/authyx.js

    • Size

      19KB

    • MD5

      70a7dba9231ebf35cdd0f0416b6a6c9d

    • SHA1

      6ae784736f156886f18a9ade55aa15cdd711d6c0

    • SHA256

      26ba925d9be09eafcb081fd4832a7d7efe82e6a3aa47962a8c38db98f1e4cb58

    • SHA512

      249a2354ffdc7c4a2f0739b341c4f0c76e6381474bc583d1d6c8d2f2bc7d061d0370c11f7016a33095c2e003ed0e143c1ed1a1a2b789123f13794b2e02c7e78b

    • SSDEEP

      384:ivYXcZ6HPo8hA8hlcAPn5j8w7nc/Kr74q4AF+cQs:ivYXVg8hAMzP5l7c/KXhms

    Score
    1/10
    behavioral3behavioral4

    • Target

      extra/eauthy/encrytCode.js

    • Size

      194KB

    • MD5

      25930b37116b2474777d799979918568

    • SHA1

      4d0ae3f123ca421ec90ef3348c3b39ac655e9236

    • SHA256

      b294d339f709a0620968800517ed512f5ea76a8d06959ff59f6f2ec6f3fdcdb7

    • SHA512

      d3df8ee8c3cefab0f214e250a11552a9c94d9374aabb7e745a9271d69c82c04ed7fd525fb0244e1bd9fc24bfcea7a6f4384bbb86051e84a817bb2413f1017a6e

    • SSDEEP

      6144:mSK3Do7geTGmqEAmwROHngtMkCE9UZyBJC:w3MMeTGnEH/gjCE/C

    Score
    1/10
    behavioral5behavioral6

    • Target

      extra/eauthy/encrytCodex.js

    • Size

      10KB

    • MD5

      6e6cc38b5e7527aec20f933d5efe4f39

    • SHA1

      75bace96be9812ca569616e80864bff9c77f473a

    • SHA256

      5bee498e3e1fd2e2869502476a2570f1ba4ff281d87419189ce9b71ac2e8a0cd

    • SHA512

      7441cd741cbe7f1cfb0c140ab6e296b7716dc66608cae73c30c4964f9df6be1ee7478576e2647b74f7e1863ea807bc871e2d5c287d67b7a7e1dcbc37232bb952

    • SSDEEP

      192:i1hGVNzSvnjhLQukpQ88Yk61gL7sSuQXmS3u/vBEPLt8VzxU55iLkXkdTnillrwP:i1IYhsP1+GOmS3uXBEjkzWjiLMkUM7F

    Score
    1/10
    behavioral7behavioral8

    • Target

      extra/eauthy/index.html

    • Size

      3B

    • MD5

      eff5bc1ef8ec9d03e640fc4370f5eacd

    • SHA1

      92a949fd41844e1bb8c6812cdea102708fde23a4

    • SHA256

      dc51b8c96c2d745df3bd5590d990230a482fd247123599548e0632fdbf97fc22

    • SHA512

      672f8ff4ae8530de295f9dd963724947841e6277edec3b21820b5e44d0a64baef90fb04e22048028453d715f79357acc5bd2d566fe6ede65f981ba3dda06bae4

    Score
    1/10
    behavioral10behavioral9

    • Target

      extra/preload/gcaptcha.php

    • Size

      61KB

    • MD5

      0f18f957094f263bf3669232d9f3bf87

    • SHA1

      c89ec3f8464b73e378363642a282cebd2b9208ea

    • SHA256

      31119578f0a4b3e54579007dbe98f1414f17c253ff4048c6799ae13e07b0b324

    • SHA512

      25f313d297c1151d5fb4669f74bdd38349920a8547fa00496a8744ae621e4e9af1130b313dd02672e2332c57759ad2ce117e909943e8eb9011f7d0f9b041a2e1

    • SSDEEP

      1536:FhfinW7WtgOWHQ9uIigRpDx+vWUq/t4md+GHO4:F/7WWw9WMx+N6dHHO4

    Score
    1/10
    behavioral11behavioral12

    • Target

      extra/preload/outlook.php

    • Size

      87KB

    • MD5

      88b872e0902e8a0701396c6428cbb935

    • SHA1

      9eedba9f6939b5eaee15e7deb4fae5e2272af6f6

    • SHA256

      c5c6551377c9ad54202919b311607d61c511fdf3039b5ba6081b689f7ffbae89

    • SHA512

      8791fa0f23b9b7cbf6fb9310a6d83b72f10901c75dfca765ae1cbf430a230c72bfb9f7cc608c033dcbaec97363dc1c49081ecc4ba99bccb76c80be71ef90871a

    • SSDEEP

      1536:eToaKdLS/dZiksjSTz9cm/8LT5yCC+OtA70ohFQImCXIclK+Exxw2OFln2V:eToaKdmnGb5I+CbozQIDXI5w2OFN+

    Score
    1/10
    behavioral13behavioral14

    • Target

      extra/preload/outlookv2.php

    • Size

      134KB

    • MD5

      314d5e0690b796b065a6785c83002e7b

    • SHA1

      61dfa487b6af3db0f763f15460b40ded93bf48f2

    • SHA256

      ce86c1d44c82e99b0d2d53546a969eaf1bb0989169b01bf3b7e78b2032e1502c

    • SHA512

      60602fb05328c0f5ade9209b131c38e014a3969638ad0a827fb1c27fb3210985356753193e0c828cc661ce7b3b94b6a4909ee16a836e90abfea33078bfa54463

    • SSDEEP

      1536:mToaKOLAUcW6v+uQH/dZie1jdkAO2MUF0jSCSRqtODS/NLsb1MJl6fxP1syY/3hq:mToaKOUUeYHhrkAj0jBODSxQGJ0tsHfI

    Score
    1/10
    behavioral15behavioral16

    • Target

      index.html

    • Size

      4KB

    • MD5

      6089b6cb65c59a5ae01e3f50620c2eaa

    • SHA1

      df40259d3a60af08fb048db40ac395d1ee435c64

    • SHA256

      7e4a050b3ebd08d9c1cfc227b53b2122beec5f2dcb531f8ac46da51d7145bda4

    • SHA512

      f5f7b43d62e5c8e48d7be7d14bf0813d3008413bd2b1127c0eec64a1ed4b25a011922a0befa5d4105648b97674547c2c98b07e3da6e3f3304f3aca5343478a94

    • SSDEEP

      48:zQq1D4gY1t+TDaCNaLnaeaYsaQNea3ahea2adaYK/4mEgK0u2YgWZ5tp80H7J2oP:Udt+T9iKTKxLHlr7nykHi69SS

    Score
    1/10
    behavioral17behavioral18

    • Target

      pages/0116d1e1b2/m/login.php

    • Size

      8KB

    • MD5

      622b7a7305e4954df3277da39e560132

    • SHA1

      fe30a07c51f6bce2881adbe962f42123d8a29a4d

    • SHA256

      35cd3f259127ebff60769016c7293dbcfb176fcc7468ea6e76acbfb99be44f71

    • SHA512

      d752137d8641e54e5839348214ef9230e37828fa31d0e9b32606e1bd6390120d97867398cbcce9a45bb59749637fc77980e7ec7e95baae6c428ee53b2b3249ea

    • SSDEEP

      96:T1KDA2V+RDnLdjd90kP2rF7xVlIrqtf6kjT:T1aQ5zQZyqtfljT

    Score
    1/10
    behavioral19behavioral20

    • Target

      pages/0116d1e1b2/m/mxl/m365.cloud.microsoft.html

    • Size

      200KB

    • MD5

      f7599415d118a1d75aa328c3e2ff2a5f

    • SHA1

      33feba861be4c791186a0cbd5d9bfd7f55825469

    • SHA256

      ebd5cd2871aea7b814c57808baf5ae958f6bd5d10bff35f3cafbc18c13c009ef

    • SHA512

      dd5839d692862a0599504de73329851d326c22ff198e39450eac4290d02ff9e46ba53bafa322390539858c59111638c0b4e40b6fa99debfea456d6026c93a6d2

    • SSDEEP

      3072:ncDxUX2li00ajPBL00nPqFbrO8sK5k27uXyvfoDL1:cDx9lib6/grO8y27uuoV

    Score
    1/10
    behavioral21behavioral22

    • Target

      pages/0a5467d5ce/m/login.php

    • Size

      9KB

    • MD5

      81c9be566fb6e9530a1bfcab45972fbd

    • SHA1

      c5c982044d5917b646784d2ec7802c5c8a918883

    • SHA256

      768222121c23241dfdbafdd926b4b456205f2b92bbe55c4e2a5839ba7bab8529

    • SHA512

      2c34667490a2667ce85116218afe4fdb27adca7ea34097f2d879365be19637084082a946bc356064a9c4e933721c9219ffa28c0ad20e4677c38f5eff1ae400b5

    • SSDEEP

      96:T1KDA2V8RDnLdDd90dP2wCA7xVlI7of6IjT:T1amJzOZMofRjT

    Score
    1/10
    behavioral23behavioral24

    • Target

      pages/0a5467d5ce/m/mxl/m365.cloud.microsoft.html

    • Size

      200KB

    • MD5

      f7599415d118a1d75aa328c3e2ff2a5f

    • SHA1

      33feba861be4c791186a0cbd5d9bfd7f55825469

    • SHA256

      ebd5cd2871aea7b814c57808baf5ae958f6bd5d10bff35f3cafbc18c13c009ef

    • SHA512

      dd5839d692862a0599504de73329851d326c22ff198e39450eac4290d02ff9e46ba53bafa322390539858c59111638c0b4e40b6fa99debfea456d6026c93a6d2

    • SSDEEP

      3072:ncDxUX2li00ajPBL00nPqFbrO8sK5k27uXyvfoDL1:cDx9lib6/grO8y27uuoV

    Score
    1/10
    behavioral25behavioral26

    • Target

      pages/1ebd502661/m/folder/jquery.min.js

    • Size

      87KB

    • MD5

      dc5e7f18c8d36ac1d3d4753a87c98d0a

    • SHA1

      c8e1c8b386dc5b7a9184c763c88d19a346eb3342

    • SHA256

      f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d

    • SHA512

      6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516

    • SSDEEP

      1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1

    Score
    1/10
    behavioral27behavioral28

    • Target

      pages/1ebd502661/m/folder/main.js

    • Size

      4KB

    • MD5

      8cb74031362858dcd8474dd907d0ba02

    • SHA1

      9030d4caee133977094fe6499293327e11b48c00

    • SHA256

      3eef441f87992d5701dfdb2c09f809850c97ef4d69c3652c3f89fe0d15fcdf9c

    • SHA512

      793def9a7f16f28aea146bf5a060748d3e184852d0da22cb3b111cdbf501d0926b0a7ff8d43ad873962284f6fa1b33e172d680cde6fa80bf36cf50f00fa40d73

    • SSDEEP

      96:tjqu6cuCtcE3mp+o+i2aiFzWOza/iCGz5CKFH0KFZYv:SCqWli3iYfiC00

    Score
    1/10
    behavioral29behavioral30

    • Target

      pages/1ebd502661/m/login.php

    • Size

      10KB

    • MD5

      f49c1684e4b7f3737b9112157654d0e5

    • SHA1

      f7ac8c912ee8186d8c9d86901cf4b7e99c787ee6

    • SHA256

      2d6a3f5c537d9b8e311b43fb9f22b528d28caab2b871667c0480eff1555ef685

    • SHA512

      8bba49596b3afd28279005963bb921c0ea6c6e818abf61e2d2b67b8e15055c2e4e3a55858b0244be0a7bad901882f299b2d7b3ae406379c6c3290ff829ded57d

    • SSDEEP

      96:u1X2KyJRDnLdbd90kP2Wo7xVlIUqif6rNd4Grb5B:u1WrtzUZZqif64Ib5B

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks