26cdfe6acc78e5bba97432c946e12a3fa96853a922f36f313adc965e63cebe27 | Triage

Sharing

General

Target

FOCA-master.zip
Size

2.6MB
Sample

240713-thedraxeqm
MD5

e449b771892a71f72477e164bc775fad
SHA1

f3df2976158397771c042c2206e1a0a35b287160
SHA256

26cdfe6acc78e5bba97432c946e12a3fa96853a922f36f313adc965e63cebe27
SHA512

fa084bd91e45b67212f2340b7cc7fad57c23505832c1f0d229a970c59f4eff0cbf71aeb63d0135a99d05211e962493c43a3c0dbbf74f8ab401ac9c6fa8898fe4
SSDEEP

49152:y6gpaNmGFcRntj4aujLFaUg3P23I4UBi8lI2mMwgwdP56ZysQheT4dUbp1Ox:y6gpaN7FgntLaFmfrHWTBdB6UreMsvOx

Score

3^/10

execution

Malware Config

Targets

- Target
  
  FOCA-master/FOCA/Analysis/DNSCacheSnooping/DNSCache.cs
- Size
  
  2KB
- MD5
  
  f325e2c47a713a2e8e5d3741649090e2
- SHA1
  
  4b02924503a56eca2c96322e876a0183b52300e1
- SHA256
  
  ce2acbc17819c0763584ab0b63ffbc8b6f99b3b598e450a749aa8172439bcd5c
- SHA512
  
  bfcf3574a2351ae568e59eee246a92f390b52c7d6d685c924ac1fa7de9e17c4e3e89ca20db3eac4e64d299a892b9b964419b4d21bc07e0db766b38cb087f8f42
Score

3^/10

execution
behavioral1 behavioral2
- Target
  
  FOCA-master/FOCA/Analysis/DiarioAnalyzer.cs
- Size
  
  6KB
- MD5
  
  0bb09ffc8c074b2eefb2fa1573dc1304
- SHA1
  
  5801bdd329925ccf7effaf9599d1d30517e107d3
- SHA256
  
  1085855d4e5dfe91d5b7295fbb2b8fef9bf48d00e63f9703cdb2bf5b849e7323
- SHA512
  
  529797be44c4af19b89e86337bd4407813a15429987012e0d32272e9e4d406352193c4784b8a4d16bb076dd7437a403c748ac9fa345f75e595deca7949f5f449
- SSDEEP
  
  192:cedhIoDkifF3bI3RqdR7KCEfNnsn6QyVorVonop3VonwKF9iarSCqyL:pdhJRdUsE5
Score

3^/10

execution
behavioral3 behavioral4
- Target
  
  FOCA-master/FOCA/Analysis/FingerPrinting/FTP.cs
- Size
  
  2KB
- MD5
  
  52dfe3cc52587bb8559d1fb035dc7fc5
- SHA1
  
  b32169edb22b4fb5b1da17ea4ef88650e9fd106f
- SHA256
  
  4dbe4bd00fbf0d074f264b91a62c15461135e7f5de868f522a3457fec47f3ad3
- SHA512
  
  704c5251607a9de98f5b31a8943dae2d084388a57c769af9e58257217bcf7c064a49201e3e086e5d786e31e3adc5411e6895c4147db08f813d15f707fedba6a4
Score

3^/10

execution
behavioral5 behavioral6
- Target
  
  FOCA-master/FOCA/Analysis/FingerPrinting/HTTP.cs
- Size
  
  20KB
- MD5
  
  7bb1a74d5668c21684c1349199b588c7
- SHA1
  
  12f2666e1925c85f3f369e7e2394f60d0d48fa4a
- SHA256
  
  b96f48d3cf417f940d376522c5ba0210c900df8657dadbba2bb61219c9ceb639
- SHA512
  
  221c2397da38b7e54d042960037f8278b0da453e88a4895506f4a8d6675a8d3e05aeac7f4b8012faf4f050d5a990a45431c83c88d52d7a0b200e569b9f079cbf
- SSDEEP
  
  384:brLwXUnZcKKqFKKqERKCSVXMlIQkVgP1mOw6oS2CQ4CWv4:rUgovuKJVgQ/NF
Score

3^/10

execution
behavioral7 behavioral8
- Target
  
  FOCA-master/FOCA/Analysis/FingerPrinting/SMTP.cs
- Size
  
  4KB
- MD5
  
  7b3068ce008bed7d07e745b57768d45a
- SHA1
  
  e51b3018829127b574d899769dd79cec9759d3bc
- SHA256
  
  5292658116e99096e800c57fa9ab59726c11ff3cbf24c15b31785dc1f9171a4e
- SHA512
  
  9855deb4e12f54c9930d2dd85edec4f4e8460d6c450ad3f1d73c1606af1e2296374ffb8bb09eb945a5d252f80d2dcaf3e7a4a7e73ebe5955560e8c14d81bdd38
- SSDEEP
  
  96:Cj4Y26K8cjS6dQSgHhkRQRdSlL0N8aULgz7EVOI550emL:tFlSeNJRQRdSlg8aIgz7EVOI550emL
Score

3^/10

execution
behavioral10 behavioral9
- Target
  
  FOCA-master/FOCA/Analysis/HttpMap/HttpMap.cs
- Size
  
  24KB
- MD5
  
  24f6078b7ca750a6b8ef22ac730320d0
- SHA1
  
  58227da48b7f805f44f148e8829331a35ec504eb
- SHA256
  
  904172dfc6911f0f012b0ef1d30c6c8fa57247dc7316f5e8ce3153b189c6e878
- SHA512
  
  508ddf839e64ba5b420c3ef369f68ccd5c22e7e08507dc1beb9c712c4f0db07a5f1ed505e5b4b88fe00bcff90d25258e4ac7e9c205e5d56d4f1dd156382830f0
- SSDEEP
  
  384:6UFQD52DDmId1Oadjt5yFxqrc0WVYfSXCOazaOjddGmPTOKFzM0uL5K9gdHp7aF6:csd1OaxriIzaObGmPTO2YdO3sa6
Score

3^/10

execution
behavioral11 behavioral12
- Target
  
  FOCA-master/FOCA/Configuration.cs
- Size
  
  8KB
- MD5
  
  dbd3c39cf792660d9eb8272019663a58
- SHA1
  
  454f815406ae97f9bacf6e87ad5c524530906ddc
- SHA256
  
  8e198385b479bc88eaacbaa3f6fb1df6235b5b6b496f044ca2533803c59cfab6
- SHA512
  
  b95a7b1dc7f660ec593bf64c5722fdc058d1a13467d508e50b17964572d233a429e9d5cf0ea92aadedb20acb2f8171541721b5d5332b4fa8acbb0aa22ed55933
- SSDEEP
  
  96:Aj4Y26z8HjucYhlcMqUrQ9SblaP43V7k3sxGiZgmwJWI:nFw8DjYjJbQ9BPIk3AZgmwJWI
Score

3^/10

execution
behavioral13 behavioral14
- Target
  
  FOCA-master/FOCA/DNSDictionary/hosts.txt
- Size
  
  44KB
- MD5
  
  54339c9664095f8dfa7976bb3a6bb57c
- SHA1
  
  5601a0a3fd3473ba1e17925e83411fda6b218d46
- SHA256
  
  35d355f7c68b384737cfbfe0b23264aa1bdaadfc1e1d26d3e5c336b87ee3012a
- SHA512
  
  ec7aba2a98ff94af8cbe24c06e5fdf97e7654b201d27ad207ad539ae72541bca957254db91b000397c1c4095ada70c747dfc32eac0802a140e1f62fa29c52e7b
- SSDEEP
  
  768:TaIT7DAp8X4pSEdBZaXwiEl5wt4R6zaF9qHZyjsjYM2gbQiQX0afUAnfM:TVT70VpjZaXwiEl84R6u/FjsMMjQNzfc
Score

1^/10
behavioral15 behavioral16
- Target
  
  FOCA-master/FOCA/DNSEnumeration/DNSDumpsterParser.cs
- Size
  
  3KB
- MD5
  
  7050d422542d5c3ac4035f70327dbf89
- SHA1
  
  dc5187e50c1b92939249eb347ab8c080b1caadc8
- SHA256
  
  45e1fd4824ace2cd36c8c04d4ba308f5941e7e2b69f732074dc69bf64fc1c8bb
- SHA512
  
  5682661f8bf4e42439ece13a1a44c595c7502f28ecb4193411288fe41ab0914892822fb5a5643b8cbbb8cad9c278d67c1145fa29b4ce79433f2e90ef505a37f7
Score

3^/10

execution
behavioral17 behavioral18
- Target
  
  FOCA-master/FOCA/DNSEnumeration/PanelOptions.resx
- Size
  
  5KB
- MD5
  
  44240faa83a3330294a6247e51b1d3df
- SHA1
  
  b592de3a76a376812c928a9702c06223dbdd01d1
- SHA256
  
  15a243ad10a85ba25a5e0bc3945dec2b66da6f481594a9f4cdc9310c078a9dc8
- SHA512
  
  16223a64102727cfac31e8c809525cd774dca1b372c4e95c57a436deb64abc62f0d8d160c66d739d20568e02585d9314aba1cf75c6e8503300c3627db7ddee6f
- SSDEEP
  
  96:ECf+lbD5X5LPXCazYV5Lv6K6uOidfaxwsxuUPFC3qxdRMvDbu8KsrbEKAy202lU7:Zf+tLPfYnLvFVOiFQaUD7U/s+
Score

1^/10
behavioral19 behavioral20
- Target
  
  FOCA-master/FOCA/DNSEnumeration/PanelSearchIPBing.cs
- Size
  
  2KB
- MD5
  
  4108311eb395bf1ed01357b6104b3415
- SHA1
  
  0417315557c908cae7d232a8555e06ae64f395e6
- SHA256
  
  c969cb0bfb589f0abb259949be9c8dc84e1bed535f873dfb464e5bc59c8d199a
- SHA512
  
  10554877356cf4dab406b7983a1311cd41c159c14ae95a79e9427a23fdb539b651a0657e4ad943af2e57ce1865c948b42b80fce30642bd783d097c4d4da687da
Score

3^/10

execution
behavioral21 behavioral22
- Target
  
  FOCA-master/FOCA/DNSEnumeration/PanelWebSearcherInformation.cs
- Size
  
  2KB
- MD5
  
  94117bd303807d79bdfba98d77898c5b
- SHA1
  
  c19396e7e920bc55716c1f8e26c311378c7d2e44
- SHA256
  
  1983fb7b0c0e6d336b96d4037b2bb29d2ffb76920ad43d68fff675b1b3ceda20
- SHA512
  
  9c35071fbfdf21db996be943ff9340e666bab7130c5d1cd2ed36a8a5817b97b0b6de927c8814d044d36bec79df0dd71f8a64a1aa54bc633dd3291dd902a89524
Score

3^/10

execution
behavioral23 behavioral24
- Target
  
  FOCA-master/FOCA/Database/Controllers/ComputerDomainController.cs
- Size
  
  647B
- MD5
  
  b32cc7d6f9552fb5c2470e25170a5cb1
- SHA1
  
  e6dff888a249838d170412cbe2ff87bbb1360bf8
- SHA256
  
  ea8667ed12825b481e6e20115cef176a77e0ba96301527a3201c25d3b9d5d208
- SHA512
  
  dbf20b438e855a072587ae0b913ca3f6972d9a24b92f98de43005e8a7a055d795a41c36b09ccaaa42fef4c206e5bb87886536083d188e4ba8480c76e9b072b50
Score

3^/10

execution
behavioral25 behavioral26
- Target
  
  FOCA-master/FOCA/Database/Controllers/ComputerIpsController.cs
- Size
  
  621B
- MD5
  
  3f89e58aa3c38960c56f46817e5b5862
- SHA1
  
  18f9bbffbf304faaa3cda79cfc3b056c97c22e57
- SHA256
  
  9d391db8e1db243220afd090dbcd7cc499f4323283527f78f28ef71dc8218536
- SHA512
  
  398783e8b85254a32d856c4acbd17639528a20af035faf10bf77665f40b1407aa43e008f492e47683639eb2f76d46fbff787de9abd1c5c006098cfa5b7aaf5c8
Score

3^/10

execution
behavioral27 behavioral28
- Target
  
  FOCA-master/FOCA/Plugins/ManagePluginCalls.cs
- Size
  
  15KB
- MD5
  
  9910d2df846cba74eb3187065622d27c
- SHA1
  
  ee2e7ae66ab2fe16b946bb728e6fb4f51f59c2de
- SHA256
  
  6d6bf9ee2f222f6c778a4c33b446188589068ef235540611b9835145bdf3aba6
- SHA512
  
  b0803926cc2fede0911f10ab686406b64257e95f54c23ea54617b1ec23f4afba0da4a343026f71d5a8856760f2649c93feffed3408fed924f1a6773ff73dcb26
- SSDEEP
  
  384:JAsmrQQaoWCwkYYYUoYkxWw2ADjpyVzOaH8Rhoto4sieXr5:Csm/s7
Score

3^/10

execution
behavioral29 behavioral30
- Target
  
  FOCA-master/FOCA/Plugins/Plugin.cs
- Size
  
  6KB
- MD5
  
  450b325155876177e1785f8c9f706694
- SHA1
  
  9cae95c1ba02cb6a3ee549bd2697161aa6882fe3
- SHA256
  
  ae4474d5cc7baa3421be9bd698b2890255c3f3e98617e0bb5d5db7a09ad6c56f
- SHA512
  
  09969e031fb99fadc03f8d11e34b962b7aff8c3bdcd582ab1245aa85947e3595943a22190343bc6d531246bd1a081e953bac83bc5efc54b2fc48046b8f846b7d
- SSDEEP
  
  192:zLstRpt+tNF6dShJHSKKlXzdHPrxQjfefFfufefeW37HgLBimkCgb:HstS6dkS1lXBz2jWt222W37HgLBim4
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32