23e55bf7492b078ce5d15badd7f9eb2bb8c6184bbb40b00300f2e68ecf7a9332

Sharing

Copy URL Twitter E-mail

General

Target
pasarela.zip
Size 4.0MB
Sample260415-pg1hdagt41
SHA256 23e55bf7492b078ce5d15badd7f9eb2bb8c6184bbb40b00300f2e68ecf7a9332
MD5 353da10162c4e57966feab4e30f1d786
SHA1 771f1997003cc89b2202b8de04a27342b95bf8d4
SHA512 131014de7d3014ff63e9c801e47f2eabe3b9999b03f935f0430de2690d8b88ac5bdc045978e673b93964382d9dae8d60b660fcfe3e2ef0334d4d76fc6d4210cd
SSDEEP 98304:ID+kwVKwfvENVaOhtZ5ZIXJ3RFtw7w+N3PmfcjUJLCqjooCKZQp:rKwnErZKQw+N3PmfNoD7p
TLSH
T14D163350C03123B5CBBDA1B620966BB052FBE1D4C12A63979863C1316F975C87EF791D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  assets/js/main.js
- Size 10KB
- SHA256 68747326517695cd7f84b001a2ac10cb5a40a08f7883226bd01b5266f6b31fdc
- MD5 1597294859bd94c85f423c83ba20df47
- SHA1 51786e6b099c37a522b239bb4402f865add72efd
- SHA512 392277a680d233e9c1d96d4a513bdfd1ca9a4a1abee7723fd480ed7f5469f9d43357d069962b0be95c91fb19399dbb3a9cba7894913f31a8e818215ba30252d1
- SSDEEP 192:e0DETx5yRkKNQ6yG+2bVfVM8stss9HhcXzbNJKZyA2YHSDDmk9w:e043qgsXXzbf8kS
- TLSH
  T11422515F35F6247205B3717A6BDF92407530101B784AEE297D9D83880F84B69BAF2BC6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  include/footer.php
- Size 5KB
- SHA256 4e7d73f00922ffd94309ff3ec3b52f0422bdf34a91da4f0da30d6de863b61604
- MD5 e8ce92e5a9416f7b0d6107b056b2093c
- SHA1 34d5cdbc46f64dcb7ad45b4e4a3090b25249558e
- SHA512 4c6499c8de7235fe2d34014efb68db073a7bd033bc82bfc97d3a245d8fe7bccd7dafa27fb929ff5869431c0a51e18681f02a4a9edbfb7bf145d3dec5d3cf03a4
- SSDEEP 96:Fq1mElsRFW4MWQQSyPjh3/T2U3gFlAVPZ7YFqCFjL0EW:FqPKL1jQGVvT2U3AE+LpW
- TLSH
  T1B9C1D83814D4103704F391996A20AB4DFFA1824BCB1B9A6476EE67DB2FF3D01CD57A88
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  include/routeros_api.class.php
- Size 14KB
- SHA256 1874b313f87cfe71121abb0d28135b7ae1259949d96e0cc21a947b05c59ae872
- MD5 473ed129fb0d09230e990e012af85f41
- SHA1 5b471295719eb17fdb6af68b44ad6d58836dcc7d
- SHA512 76ba2b7e5070cb860df32803313087231d1b45cf42905046b1888170651edc189bad514d995026393c8a57469a1c80d42c72e6b1b19b35f5b5461deaeaf219dc
- SSDEEP 192:aM3IlT2tqylyTCAXntSa+nlUG/1HYEf3SzfJz6DOvDMD/i:a+IlrvTvuKt6KvDZ
- TLSH
  T10E621F0836D90979613373789707E001F92A553B270552837DBDBAA07FB5B68D2F0EE5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  js/aos.js
- Size 20KB
- SHA256 33930f466f222cae0f98a1c2372de195709c4a7fc91e9a5ada0e10bb357c5eb5
- MD5 97de38e2f1b8cccae595c2697d549df2
- SHA1 5b2d065500f3431363e2b2fd067350032e13045a
- SHA512 3bde59b2e472b259c6da79f753d3a189f2a2e77e58c114aa9c6a398583469cf50a83e809e94cf0d3c1610a31b5c7497ca9366527553703bc86a1e6588dd7e475
- SSDEEP 384:zfM0mrrAIqZqhjc+Sqw/7yek23UF6AFisW5:7M00AIqZqhjjSqw/7yek23UF6AFisW5
- TLSH
  T1F992505CBA90B5B95137B3BA87AFC404F9B0063F018496433E7C909A5F3287556B2EDD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  js/bootstrap.min.js
- Size 76KB
- SHA256 7e1f1503df765cca5e099891b94e318a2ef95081ba2af1eb6d417cc884bfdbfe
- MD5 0aa8d64e726c4a57adb5c88f9115996b
- SHA1 901169527507ff9e662cf64d8e361f359308970d
- SHA512 ef6583f7684bb3b4f91405e7def90d65f9561baa609540c3a66f3b4de4267d283c2a7af298bd86df447b6ace05993c2182ef47ede4b30c25f79a38ad49e70a9f
- SSDEEP 1536:tp+1ZTPR2t4tXbih05ve8/pwgrEpc9t0vSAIAxCs:MFRIpk0vSAV
- TLSH
  T1A573D6493254B87309EE55A68037460BF3255994B14B802CB9BDADDE2B3DC8272B7F78
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  js/function.js
- Size 155KB
- SHA256 02343ab594892926360c9acdc7f665b8fc7e00aab7196f6de8533bb6ba89eae5
- MD5 92a557cc6606e67149068a5974e1860a
- SHA1 d5f00660cca36dd46e22e27a7f13a4fa056d6f18
- SHA512 5ef870c31baab843f155787d2ae90fb28ccd1bd2745af047a541bb03f729c265a44559bdfdf9dded5aa46a29d7baab82262985a1ef6179d8bf250fb55b42a928
- SSDEEP 1536:K22ZM2l7DCZZc21H3F32V1YUyosix30dmUxq/aRc7cZ+noj:K2w9DuZc21UT30oUxq/aecZ+noj
- TLSH
  T132F3C518B9F313B145B330BA4BFFD6157A72805B8A08D854BE5C96D01F88F60E667F98
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  js/inputmask.js
- Size 181KB
- SHA256 c6406a93018b3358a21397d60b94fa2ea23b3cfdf1851ca3ca73713cfb54e521
- MD5 5b823acb476bb1c793bf16234413fef2
- SHA1 8f28e6d28ad2d01421aaf5aff6749ae6352270fd
- SHA512 76548bcd7787cda06700d20784b614d49956a2988cc9d6f3a665ac16f8de7ecf006b437b14b586fc3075f0eb85dca4bd998df265814a56930e963b8ac2a24ab7
- SSDEEP 1536:ijrgVS5qT6eXZDmch6+Kt+9fP+rKpQ0vP+y+2nbJ/vYSsbEhG:iUVS5qT/JDmch9j8W7GV2nb5wSw+G
- TLSH
  T1AE04A3C6AAE222359213F0794FBFDC05B236954F2289EC05394C65A05F159B84BFAFF4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  js/purecounter.min.js
- Size 5KB
- SHA256 411f765db1fac5fc9ad8684376b7f05bed4340e7619711f1dad18ea4a1031d63
- MD5 079a392a7db635918dfea48c2d4b10af
- SHA1 fe38ade8d574dce3c5f4cbcd6a10926ef4ff2bfc
- SHA512 67e2a4daff5a3b87acc35da41afb80b0c2e09684d6c8e6b4219ccd60e104896b00b7ed78c6cfffbd7fb05ab963ea7b0fee59be5c4c6cfc061dd06d15f245652c
- SSDEEP 96:DtiT7tq2iuxhKnTon2qls7O2tIKZgVoYLaXOih1GU6:Dti/42iIhKnTo2qls7rtjyVoYLaXOoGD
- TLSH
  T19AB163BC7382F4B2835B717A100F22127236649040AAC484D27999D17F7B98EE5A3FB6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  js/script.js
- Size 3KB
- SHA256 82a49c42700a68a99eb11d67686ca6dd4a3614ef98ca8ce6d63831bcc56dadc5
- MD5 5c88b93f893c2804ed3e018561ab307e
- SHA1 3b81f5b24571fc7b709d12c12831c540e522190c
- SHA512 9c16551e1c3fe32834e3b1c340a59c95fa0994cc7889a83778befd7f41a565df1f4d6e2a0e1d3f20790957cc77e7c3276c356c991316d7ac9a6591039630c21a
- TLSH
  T1877145E96144123901FF6376637743D4FAB2186B61826226787DCECC2F31DA542A1FED
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  js/swiper.min.js
- Size 122KB
- SHA256 765d1654297c8d730165fbe731eca09c1d3e6efaa9e7006aaa567c5a2f7994ba
- MD5 74571ff9ea0f905f582197d9e94ab140
- SHA1 2a902def916331df8a60421561e5ed394f42fad9
- SHA512 979d1402dd2a28da875ada4ea14eaeefcdd73f4d6f789f62d49d26d3b33cd1ccaca7733e306924c17bfe54e13a637e9bcc75a73b13ab0281dad5231b0096ee0d
- SSDEEP 1536:p4pN4iK5/lsXrSnTLaK82m9lyu84yjRw5Du644gvpuXvH7WcWUmcPqMj3E8EtObb:jsXr4JHmXk8q4gYfH7WcWUmcPqdVOX
- TLSH
  T11EC31849B35071D551E72256539EC601A3B66845B90AC0A831B2D8DBACBCE8C03BFFFD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  pay.php
- Size 40KB
- SHA256 65841363cda2a9ce37fc812e386991e06f2f60c8c4562c7744d979ae836022df
- MD5 38c34f0c37c4c3f0a184a282bb6d71e3
- SHA1 f00bee1b5f90c20e401af8704013e1f09a07e6da
- SHA512 6399d2096cda2b26aab45e447173e25bf28cc3aa50077a784e7c2885f63cf454fc395cf82b39ef925b0c2fa2d3f39f94b12b0a650d46e3762411b37c7fbbbdb4
- SSDEEP 384:DcoeBe9eBeweKe9e03eqe45PoXshvEqMSUb+P4c4WaRDvp5omNnRZ7nOoooEU:Dcc5oXWvEqMIgcT+w+Z7nOooM
- TLSH
  T11603B516A5C055620033A358AFB68A0DFFA69123C7064A1D3AED23D71FF6D58C213FAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  webfonts/fa-brands-400.svg
- Size 730KB
- SHA256 679b5a5216bbdf913cc22d6ae44778c1ef975ee387a6c4c5de87e75d19a22232
- MD5 ba7ed552362f64d30f6d844974d89114
- SHA1 24aff44d36f6c4a6a08230474b546b29641c75d6
- SHA512 4233bda3ada13669c77be7fa12e1cf338bfeaf89f2da25f950ebc8df2b733dc4f4d7d10301616040568f3ec8c375b2c57b135d150ec2ac874782b79e7de757ad
- SSDEEP 3072:JWPxeOclcjMLRgkqGKJT8L9oHKzKZ6S6204HGIZZGstUkpAlxUxJd1TzJ5QhDiK:71gU6U2dy
- TLSH
  T1DCF41F5CD3A4C2B8FBDA4EE8893A7ED6366B35FF39103254C278A56028727784C4D59C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral23 behavioral24
- Target
  webfonts/fa-regular-400.svg
- Size 141KB
- SHA256 2326849b6c3dfa217a0e9ecaec9553c910a4e2987c87315c85073d2b95a484f3
- MD5 0bb428459c8ecfa61b22a03def1706e6
- SHA1 8d0198777d4c6ff9c39a387f212b4ef732f70abb
- SHA512 736005210fb2287defd0836899964e020306d50e8fe3ede05911d540ef835160f4f3e145c75c95cab8654c961b214af294f306765d2b3c260b414a9afbc57636
- SSDEEP 1536:3vcVm6PMIRykxntAdEXqODsxwXgxWd9lpvNp8mwm7ET7sNdxlu+3Yn6eigaCN/cH:0EtyfqCnestodxsnV
- TLSH
  T141E33359E754D6BCFBDB4B95853A7E90226A72FF35143264C378B0A02C3277C8C9E588
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral25 behavioral26
- Target
  webfonts/fa-solid-900.svg
- Size 897KB
- SHA256 fa498fb2596a5235c5c86d7b68a7fbe76e9855c01af4b0e5ab41c41047c648e0
- MD5 376c1f97f6553dea1ca9b3f9081889bd
- SHA1 33fe5758f3992d8da2635c4fa230b54376dd18d1
- SHA512 8086e1524cf173dde26cd5b3fee9002af3f585dbed52f015a1412fc4e491c0feccdda5b51e9b88048b6f75916cdc2dca78ba921303a7d2f0afa966b7ca515890
- SSDEEP 3072:Vii43t/Ev67ioBPy59N46EUw5ZtCamLqm5vK4KmPyduO/WylCAHGN+VmNthwiY9l:O91mzPjLr6
- TLSH
  T17615546CE36491F8EBC64BD58A357E9026AF65FF36203124C378B5A01C327BD4D8E598
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral27 behavioral28

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28