61ff384fe1cfa2af061ecc4607f1976b29cc6c6d8b5bf02d479834c8e61bb381

Sharing

Copy URL Twitter E-mail

General

Target
inwoin-zipper-2026-04-19--09-01.zip
Size 861KB
Sample260419-wtcemsfw8m
SHA256 61ff384fe1cfa2af061ecc4607f1976b29cc6c6d8b5bf02d479834c8e61bb381
MD5 a38218809cc08b4d34ee991a1496272f
SHA1 6cc77cfa1b9ebb9a9dea42643745964f99fe89c4
SHA512 808eb7a7bef4dc001aa7a5d9c54c08dfdb557c92ef0027295010de05d72ebf9b62b6c732395ba03c4894551a23ac5f4d1c7fa6959a8ef5f0fd0a90da6819b1da
SSDEEP 24576:5rl6fPjh7pE5jptSS1R+TsLeFHfDVkjgkxsdvmdMsR5X:5rl6fLh9Ojam+TsLeFigkxCudMsR5X
TLSH
T1981523D095082EDACD5789BDD87CA980084A10C6FD89F9DFA6FD9481FF778901B623B4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  old_23032026/nc_assets/fonts/museo-sans-300-italic-webfont.svg
- Size 106KB
- SHA256 23068e0f6da15b44bc5781bf53d3e1eeebcd8f521c77b14dc14948c39c698b3a
- MD5 f8f397efc2c87a3c1b2f8c0b0192d2ba
- SHA1 7a8b04db99c1db314eb98ddae7da46309a1c7a66
- SHA512 16c263e4ab80546aea604c1410f09a241d6cf4e363cedb92ecd629a4b1b76a5423310c75abaa8ca9193836d8b0bcaedadf1cd7d2da95693091b881ecfb6dd777
- SSDEEP 1536:OcWIa7MI0pVObvvaiVY/QpVfSvResUnb/IN/lPc9r:6foUnb/IN/lk9r
- TLSH
  T1D8B384ECF94A49D25EA78BC0EF84E1FC402B83F7642A3C5499DD96B90D2E718DA074D4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral1 behavioral2
- Target
  old_23032026/nc_assets/fonts/museo-sans-300-webfont.svg
- Size 99KB
- SHA256 c14f561e3ef2e8420d37f1c7d2c2690228a580ad1d69da84bfd446c63fea7947
- MD5 bfcdb73dd4efb6b3ce5349ee83cf3fb8
- SHA1 92c194816176bb8888e76eea76066d23614b3f0c
- SHA512 b95e1e87ea77f298d07b1843f4dce58a1e50196613b5dea91fcec9c5a07e7c3e8f52fa428bee3e03840372af30b8ba32060980e6cd5b0197c521c486f7e01886
- SSDEEP 1536:78IRR02lURjqiSzJNVVLQJ6t5AhIjN6x+tYlq8:Hi0LgIjN6x+mlq8
- TLSH
  T1EAA384E8F5498AD15DE79B80DF49E5FC403BC3BB301A3C5099DCA2B80D1EB189A579D4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral3 behavioral4
- Target
  old_23032026/nc_assets/fonts/museo-sans-500-italic-webfont.svg
- Size 106KB
- SHA256 901954934ff606a7173748a78a599473d100af756cb32f3ae9741708ebb3e4bc
- MD5 f3f3240a43b1e79062dcd339b99e7017
- SHA1 200beb71bb9a104fa4c2541cceab9ac3b9490b7e
- SHA512 850e1cbd573838c07e5b8c9e243fa79a5efee6a001b548e25a30293e21728d42c173ffeca654719cc90b15946003bb56220cb4c53b8a4c844dea0a7eea28c024
- SSDEEP 1536:Aisiph7JnAqEgT7I20a3g9/9y1spKdI4drKUJnNZkJEyZ+XLaUlOpWf3qyaEvw/q:PE+mSu39v6u8Cy
- TLSH
  T1FFB385ECE94A8AC25A739BC0DF94F4FC413B83FB7429386489CC51B54D19B28EE17598
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  old_23032026/nc_assets/fonts/museo-sans-500-webfont.svg
- Size 99KB
- SHA256 7e9dd3a7f4860a4ba60e1048d9ca0539332d8271a9073dbd6ba0a6b4f9d04a5b
- MD5 2cc1de4ff2eaf295f8b4bcf1c61152c5
- SHA1 8e281f5e453bb89893b7a453ed5a45a11e6d8296
- SHA512 ee60ba89d073558bf71bf1da70abdfa902a909994a5ddc2370d364abcf15b55fbc81367cc4f5da0b387aa0d26ea495d2412dcfc13a1c72badf2e721e0ae335c5
- SSDEEP 1536:NtqouQ0h7Lw/RaM6vr04loFuXlblwouLIqqGPIDC6/f9KIoz8B6+DMIVQTzO:9FE7i8B6+DMIVQTa
- TLSH
  T108A393BCE50A8AD18EA78BC0EF69F4FC403A83FB74193C548D8D96B44D1C7289A574D8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral7 behavioral8
- Target
  old_23032026/nc_assets/fonts/museo-sans-700-italic-webfont.svg
- Size 106KB
- SHA256 c8f7ee030984ae26b2fc147b2d3574b9e7b737a75887737591523167f72b87d4
- MD5 a7e870f135d17ae571f85378d999a03b
- SHA1 cba3c5fa98ce05690faf757bc71e0baf73539864
- SHA512 649183a8f167727869b01b2ad4217ea995324bea8f471bfb6454b83dd0a0fe36ce7a1b79595024ad6f22d0a9569e452f8e2fca887ef1a50b437f5949c83cf0c1
- SSDEEP 1536:yqjiwvne3b/DhWlZ160pGOm5wIcl+6d2CRFScPCMbmftub2cN/sQD432mTbwE0r8:Du0ZM0pGOmRcBRU70rhJSMvCdGb/m
- TLSH
  T192B394ACE64A89C24DA78784EF48E4FC402FC3FB70293C599DDDD5B50E19B18EA27584
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral10 behavioral9
- Target
  old_23032026/nc_assets/fonts/museo-sans-700-webfont.svg
- Size 100KB
- SHA256 ec3fddf59b1400b18a831e2f64b2106dbf06f25f90a2b992231668dffc733094
- MD5 7a97a802c388030b62d40075f4437fef
- SHA1 60f2379bb23a4e06d548cdf3ab5672fe367417dd
- SHA512 47f98f2be7cf457b4910266e59cafccc870d8ff1668534fb1e1adff90fb7a816bb33c2ecc417b45a923939d2733eb5dfc83de6301c0acdeecb3d4804343407c7
- SSDEEP 1536:/kZmRc/rifTmxIQRfqQBQQmazkKBd6H8amlTpw1Vm/gLLzhQc0u0GlGGudAo5:Kjp2LzhZ0u0GlU
- TLSH
  T1E7A374ACE5499ED28E678780DF49E4FD812F83FF30193C489EC992B40D1DB159A1B9D8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  old_23032026/parking-page.shtml
- Size 4KB
- SHA256 a7f860ff68ffd08d09e3a7382f5c8a670877725eef566a0bccd719882c60578f
- MD5 971976f5e1cedd6e6c5fdfc5623f5df0
- SHA1 af3c96abb7759e9686735d2008c8988089625a41
- SHA512 d3c98b4dd21cea413441e8bcd79207bdce1a386165fd96b4fa20b93ce9d0142e6a8e99bbd386267b3d11be29a956021e611c1a190dbe7cc1d3a1781f725bc506
- SSDEEP 48:kvYMFTR3WFM1oCW8aPNPtxKfLfxHTEerHbo2br+BhrEYnHGoA4FnrNEaAfJhau:kvYMFfNcs5HTEIH0W+Bpme+9Uu
- TLSH
  T133B11F2361F4543B072392C5AE357B29BAC1A11BCF46491473EE4B917FA9C82D96383D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral13 behavioral14
- Target
  submit-lead.php
- Size 1KB
- SHA256 cc1aa1fa58085a9612ddc31defbc97e18f98c959ae0cdd7c8223fbe28a64ebfe
- MD5 814d6f83c6ddca1a6be46389cf5f23ab
- SHA1 edcd6bcbd2e3b35f083d6112a9194e2096f11b39
- SHA512 60f3022b50e56ec9bd8990261bda827b0a90342c85b8eac0890e8833e73e74df01b41650c51eefafaa20556a695df20b97dc413026caed4fb7cfefb2d295a66d
- TLSH
  T1713162A4689739E52DB3256F3A805400E48B40260E7121B2F4FD523A1FFAD1DF6607A4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16