Overview

overview

3

Static

static

1

Heylone-On...x.html

windows7-x64

3

Heylone-On...x.html

windows10-2004-x64

3

Heylone-On...6.4.js

windows7-x64

3

Heylone-On...6.4.js

windows10-2004-x64

3

Heylone-On...ing.js

windows7-x64

3

Heylone-On...ing.js

windows10-2004-x64

3

Heylone-On...min.js

windows7-x64

3

Heylone-On...min.js

windows10-2004-x64

3

Heylone-On...ipt.js

windows7-x64

3

Heylone-On...ipt.js

windows10-2004-x64

3

Heylone-On...Css.js

windows7-x64

3

Heylone-On...Css.js

windows10-2004-x64

3

Heylone-On...Xml.js

windows7-x64

3

Heylone-On...Xml.js

windows10-2004-x64

3

Heylone-On...ore.js

windows7-x64

3

Heylone-On...ore.js

windows10-2004-x64

3

heylone-te...t.html

windows7-x64

3

heylone-te...t.html

windows10-2004-x64

3

heylone-te...g.html

windows7-x64

3

heylone-te...g.html

windows10-2004-x64

3

heylone-te...s.html

windows7-x64

3

heylone-te...s.html

windows10-2004-x64

3

heylone-te...r.html

windows7-x64

3

heylone-te...r.html

windows10-2004-x64

3

heylone-te...o.html

windows7-x64

3

heylone-te...o.html

windows10-2004-x64

3

heylone-te...x.html

windows7-x64

3

heylone-te...x.html

windows10-2004-x64

3

heylone-te...rap.js

windows7-x64

3

heylone-te...rap.js

windows10-2004-x64

3

heylone-te...ins.js

windows7-x64

3

heylone-te...ins.js

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0e1f1bbc7bd4393109e4c6fdd13fc422d207587dbc6ced83d30dcc9f92c2b497

  • Size

    6.4MB

  • Sample

    241102-3nz23syjev

  • MD5

    895f44304f1ad0d441cc89c00d7231ef

  • SHA1

    5704c35a2ff95a4d0edc5715b11f4234541ac679

  • SHA256

    0e1f1bbc7bd4393109e4c6fdd13fc422d207587dbc6ced83d30dcc9f92c2b497

  • SHA512

    f2d90ed0ed0a81fa3b088060ba8c7737a3469a244dbf86c7315d828bf1beeffd084c8aa857706c8bd52c3c93fdaf99960011c537858db3ac1dbcfc300c70a228

  • SSDEEP

    98304:mEllMjxCpwCihhaZEiRk7zTMZ54RWdv20fpEFeu3MdK8wruQ5uo1iqM5k72ZEUEG:j5i3gEcGWFvffCFydKv9BM5dCFOqUb

Score
3/10
discoveryexecution

Malware Config

Targets

    • Target

      Heylone-One-Page-Parallax-Wordpress-Theme/Documentation/index.html

    • Size

      12KB

    • MD5

      13c2233ffd092a67f70d1e5b9a213107

    • SHA1

      ab46d3bf5aada53bb0a970df28f520e4a85bab4d

    • SHA256

      8de8ea06c149fa43ae819d331e1c18202b2aa9e531914ec27884696d68e82969

    • SHA512

      50426be148810549a29dcaacfd02a5267dd82879ffe31cf1a032b51c14b5f9c008deabd649867a4d905dd435f20cd7f42eb2fc9c4cca4dfc65d6fac17d8d4155

    • SSDEEP

      192:u6hbm3qi3zpB6PkHj4NWFih7/csM30VocUYqx/ERVlCMnUl6YCc+Vv5:u6cBRCNhrJk0VocUYyM3lCsBc+z

    Score
    3/10
    discovery
    behavioral1behavioral2

    • Target

      Heylone-One-Page-Parallax-Wordpress-Theme/Documentation/js/jquery.1.6.4.js

    • Size

      89KB

    • MD5

      ea75b2a8f1b4241a872b1cbddbaed154

    • SHA1

      18678dd78c1f5a3525127b442bc70375faf09c16

    • SHA256

      4a62927a380e201c4ee51321dcc1e6b1f7dfbf82049cf349df990629e01e9178

    • SHA512

      dc69cd4703dcba3c8f4a52058c44a34fa7c0b6096bed20f30ce3dab872461eb6dda9d0d381137b9cb022219ad92ca7f5f25d3964ed33d5f41e9fc05efa5330fd

    • SSDEEP

      1536:wttlIQq8jYAJohe7evhKHIJvuUO7prb3qJz34yfbvTXYActjaO7UX5X8BKg1hJOw:IJjxpIpuVkRECra92Zp8++

    Score
    3/10
    execution
    behavioral3behavioral4

    • Target

      Heylone-One-Page-Parallax-Wordpress-Theme/Documentation/js/jquery.easing.js

    • Size

      8KB

    • MD5

      a6f75e0c043a2a087837e5c113cc6f7a

    • SHA1

      c6f74009a95b2d6f9c7b39ec121a4ca53a490a04

    • SHA256

      e4273399cc0bc22e58b35f9f79fdf2705a39ddf4ad918ce852f2624e271d8248

    • SHA512

      422beb65e19a67c231f2a343218966d85d454f743c70fbb0dd44f7b066d3e464cf4eeadca543626268a05de8e430444db31a091c97bf620f1a04e0401b63af7f

    • SSDEEP

      192:ykIOrPJrLEsq3w3r4ZVoicIQssRcqtEO6o3XRwOrPJrLEsq3w3r4w:RPrPJrLEs0KrioicDss2qtL6onRnrPJn

    Score
    3/10
    execution
    behavioral5behavioral6

    • Target

      Heylone-One-Page-Parallax-Wordpress-Theme/Documentation/js/jquery.scrollTo-1.4.2-min.js

    • Size

      1KB

    • MD5

      e457ff61438a96722254c6d6988b2321

    • SHA1

      c89857aa5d21ba70e0bf070d1b857485b70beaae

    • SHA256

      fade98e49c6a5ae1220dc9327357656c20799eba29917e9084992d4f672ad84e

    • SHA512

      7e925d5d8cce6314177b3754e8759efd17f17cd0e3cc1015cdbb4cbe21505d84b1112ed398bf486cc0c2a276647fddf0214b612a705ba2a30fd437f77fdb3d3c

    Score
    3/10
    execution
    behavioral7behavioral8

    • Target

      Heylone-One-Page-Parallax-Wordpress-Theme/Documentation/js/script.js

    • Size

      3KB

    • MD5

      285c8a6664c597fe11b98d96b4902a62

    • SHA1

      a02c0b5fc5917330f663a05d63d28a0539480a98

    • SHA256

      e3057c00417c4d08c9f12e314ea21cb1287b43c10e91a7f77a38d20f290d19e0

    • SHA512

      bddf857c703e6c1a194206a7bc96cc7ad81d08e531b0e0aa749fdd6df891dae449f0da8bae312abe0e0d4185ec9d06625048188518d4a00f8bc63e7f3384962e

    Score
    3/10
    execution
    behavioral10behavioral9

    • Target

      Heylone-One-Page-Parallax-Wordpress-Theme/Documentation/js/shBrushCss.js

    • Size

      5KB

    • MD5

      a07a03d9b8a586105267106ed629339e

    • SHA1

      dc14023bd87bc94ec6cb1f4f1b3570466bb6394f

    • SHA256

      d3c494b68b64e24bdc66748471fe73d49f0d5402e02029fd6acad00e1a1bd5b8

    • SHA512

      b0ed29d6f06ae9e4e09fed540d4dbaec5196d293daa35b3439a871b831731f7c206f8798b41e267de3d0900f8fb3e5634a42acbf4f626e91f99c53a07bc4e599

    • SSDEEP

      96:dj3v+SxHzw1HH/whglqOA8G9pHz4eQvwCVK9TvkUCxBMhpdC43C8Po:VzxHoHHVATRCVyRhywtQ

    Score
    3/10
    execution
    behavioral11behavioral12

    • Target

      Heylone-One-Page-Parallax-Wordpress-Theme/Documentation/js/shBrushXml.js

    • Size

      1KB

    • MD5

      ba290ac0111d2c3f8e1ce36fbaf6a239

    • SHA1

      311b19458f80720e59522be044709aa5c78adff1

    • SHA256

      fb1fe49a904a4fda3ed82d2f88048b2ae88c217980b6bf2163c07f048663b43e

    • SHA512

      4c98b73a8cd7b778ceb75389155d30c6577004d2f5360e9055dc7836e2daf4d8bca591a2d0d28ccec943f633e2ed8cf6576d2fff0b9184f53059fb61642673de

    Score
    3/10
    execution
    behavioral13behavioral14

    • Target

      Heylone-One-Page-Parallax-Wordpress-Theme/Documentation/js/shCore.js

    • Size

      15KB

    • MD5

      488ca2f56c37f84283fc9be63219304f

    • SHA1

      bd9599773965e9c84565abc2e6acdaa92ad6e83f

    • SHA256

      584a26f39cef2db245f41d4f6b8e3d0f7dfac5c06f0f454a49dfb94f6fb1517b

    • SHA512

      e3d4014019c09742dc1974c9ecb91288e835970615e13c7f5e2810eaba9b73a4045e7f9d902a3cc1e759286c416cb43b3313fc745513fe1cbdede7e8a321bbe2

    • SSDEEP

      384:tW98cZiWYi4s4B7Gxk9xzXNMyhElTMfUsMCMUzMS:MTGzAxWzXA4fUsMCdAS

    Score
    3/10
    execution
    behavioral15behavioral16

    • Target

      heylone-template/blog-post.html

    • Size

      14KB

    • MD5

      f8b45c226409bbc65070f403375d65f0

    • SHA1

      4a352f11be414e5e1936cb224f709d8e707bac64

    • SHA256

      796c36378e610d75442203630a0d0a001fd034bd5f88b83bb183776de020faaa

    • SHA512

      2d3e533dbeac29e7dedd2ca5f0abb4379cd82e202451c7606256f6667a3b846d667c5fc4c17473e5bcaeb354e393d1d6cafde9f52778e2d3f0e4cb8c67422be0

    • SSDEEP

      192:TB7LJ7xkWqrTFMUNNBcTUcTUcTUcTUcTUcTvcTUcT8cTUcTakQ1gm1KET+Tq08eM:17lt0SONOpKEpexwIG

    Score
    3/10
    discovery
    behavioral17behavioral18

    • Target

      heylone-template/blog.html

    • Size

      11KB

    • MD5

      527b473e96d116409453a06f112e138a

    • SHA1

      a8a2480c7288e43f4a53ab9568bddeeff0d93f0b

    • SHA256

      f73291ad3ef56b82c3c4a1902765145bc74e0761002ca2bf623c956c632caf38

    • SHA512

      a0e12db1445f30898da4d220e68008aa9fd129b645b303fe3218d968ccd31232db4deeb501021e7fd2340fa522dd93484362afe1d70037b5a96be0c415329cfa

    • SSDEEP

      192:TB7LJ7xcWqrTPZUFFLcTUcTszZ6cTUcTszLcTUcTszwakcTUcTsz9z+T6UXeRwIc:17lts1eFjfyeRwIc

    Score
    3/10
    discovery
    behavioral19behavioral20

    • Target

      heylone-template/features.html

    • Size

      29KB

    • MD5

      d8ffbcacd032a54e04aa85cce987f9dd

    • SHA1

      2b3a6372e84515f058c0c6221fe5e58501b7582f

    • SHA256

      03e14e68f3d08ef562c4672472d8a726a1abdad269ef1cca4e2c4312072bbc2d

    • SHA512

      4019fb2407e44867761c9c8efcec35d6031c37b288ee7fb50299f49ef5395961f315409b01e8d0584116b6a08de8b8310b044e81b2ae715b0d70261cf877db68

    • SSDEEP

      384:m7wtUGdSSa2yp7s18aOAPYz1D1ZSOmCi6exwIc:mEUzJRp7y1Ci6exwF

    Score
    3/10
    discovery
    behavioral21behavioral22

    • Target

      heylone-template/index-slider.html

    • Size

      30KB

    • MD5

      fa548c4c3a3898470f9256ca150d5823

    • SHA1

      9533dda46fc06cdd71108367620041226a11529b

    • SHA256

      5cd95ad2024cbfbfdaaf2168995e4212623de5b3f875df043b62c852c1fcc125

    • SHA512

      512eccaeadcf4af67e9d8ef4bfaece746c80de430b06eb380fa5ccbd81573b5f908ebde0d12c68ad291f13623de0ea015285f9b1223a9b0176a803215f7ab5d0

    • SSDEEP

      384:rjtD7SJucCsDThS/mZDctLzz0hEUUlzeRwb1:rJD7SJucCqhS/mZDwLzz0hEUieRwp

    Score
    3/10
    discovery
    behavioral23behavioral24

    • Target

      heylone-template/index-video.html

    • Size

      30KB

    • MD5

      1847e9481e527fdcd217601a23dfe696

    • SHA1

      ff9a874585dd4393d516c4160da725dfd1c114c9

    • SHA256

      fb84d3a7f7ddc014b9c46feb48aba3223aa45cc2aca144276ee834d614329c44

    • SHA512

      aa3d2726270ad40754de890e5a4f7847221e366ef3d300ad3735f757aa0eed940f46781d5e540d6e4cf492adc86c3feef4a9be11269bc9d7192827bedbc806af

    • SSDEEP

      384:rjtafb7SJ4S3sDThS/mZDctLzz0hEUUlzerwbc:rJI7SJ4S3qhS/mZDwLzz0hEUierwI

    Score
    3/10
    discovery
    behavioral25behavioral26

    • Target

      heylone-template/index.html

    • Size

      30KB

    • MD5

      8ce7a8b76ebee2c303aa9530c9eca69c

    • SHA1

      f3273402670bc5b46be5e0e66e223527329355dd

    • SHA256

      39364e4b3483543684b5610a4945fbfa38525ab305128cf3a7d295adb9358e4c

    • SHA512

      b2f03759799b9b254a7c9b1ea3085d0a0c7300996c2ab2ded403244d13a4618b0d4f9739e1d870189f97b4ba56fcac815d0407355a5e52f7230bfd35078c8cf0

    • SSDEEP

      384:rjt67SJZtwsDThS/mZDctLzz0hEUUlzeRwIc:rJ67SJZtwqhS/mZDwLzz0hEUieRwF

    Score
    3/10
    discovery
    behavioral27behavioral28

    • Target

      heylone-template/js/bootstrap.js

    • Size

      27KB

    • MD5

      40f62439a6f677b539e363c230671b0f

    • SHA1

      cf2c16e7bda28bd9681b8730b0bd934f281c3153

    • SHA256

      0a0d44714c6844b88d225d57c55af1563e8c00272fa2be8ff9fc906602b92166

    • SHA512

      68398be0b99885dedbd8d836e4fc2a6b017d8ab889a266806329886e1f97dd26ae9fb0b8041399c63950b552a73800e06a617e35386fd45b0b7aade0bc1e1f45

    • SSDEEP

      768:yHKvvntnxcD9nJzqnUpDv4JYZXXEtpSOdPVQTWvN0:vyP0Sqj0

    Score
    3/10
    execution
    behavioral29behavioral30

    • Target

      heylone-template/js/helper-plugins.js

    • Size

      68KB

    • MD5

      a78b7da1da6c954a6a2bea8c7d66245a

    • SHA1

      d46b7b3bab2cae73ed30e85e21f43e5dcd808dfe

    • SHA256

      bb01ac06cbd04e20bcb5dd59061b81b932ebc306aaebda034f46b1d7b9588976

    • SHA512

      41754891794e2103addb82f67032975f0e9f231108e03876280b96ef7893073dd1ce6dd06545ae18f58eeff05d858dc0fb91cedb9a68330c5c46732368bf7f8c

    • SSDEEP

      1536:93a3/OMlG5rRs1lpYQicoujRof+NkPSrhL:9q3/i5rRwiRuFRL

    Score
    3/10
    execution
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

Score
1/10

behavioral1

discovery
Score
3/10

behavioral2

discovery
Score
3/10

behavioral3

execution
Score
3/10

behavioral4

execution
Score
3/10

behavioral5

execution
Score
3/10

behavioral6

execution
Score
3/10

behavioral7

execution
Score
3/10

behavioral8

execution
Score
3/10

behavioral9

execution
Score
3/10

behavioral10

execution
Score
3/10

behavioral11

execution
Score
3/10

behavioral12

execution
Score
3/10

behavioral13

execution
Score
3/10

behavioral14

execution
Score
3/10

behavioral15

execution
Score
3/10

behavioral16

execution
Score
3/10

behavioral17

discovery
Score
3/10

behavioral18

discovery
Score
3/10

behavioral19

discovery
Score
3/10

behavioral20

discovery
Score
3/10

behavioral21

discovery
Score
3/10

behavioral22

discovery
Score
3/10

behavioral23

discovery
Score
3/10

behavioral24

discovery
Score
3/10

behavioral25

discovery
Score
3/10

behavioral26

discovery
Score
3/10

behavioral27

discovery
Score
3/10

behavioral28

discovery
Score
3/10

behavioral29

execution
Score
3/10

behavioral30

execution
Score
3/10

behavioral31

execution
Score
3/10

behavioral32

execution
Score
3/10