0a9b21b0ee3a7eb39ca4b81d145ff8a824e91b752b262a82b244ef8a3851e521

Sharing

Copy URL Twitter E-mail

General

Target
download-20230518112237.zip
Size 11.6MB
Sample260423-av58fsey8y
SHA256 0a9b21b0ee3a7eb39ca4b81d145ff8a824e91b752b262a82b244ef8a3851e521
MD5 15bf4b52eb3ae7822820ecef6c35d221
SHA1 93632a2718374f72821782bbc644f76fa7db63f6
SHA512 d5c9373c554bc610df083eeaa716c55bf558589065fdf7883ceebb09a9d0570afad81f7e82290340e106df1cd77ad1c8b715cc84b58129375e9293e0cab210b8
SSDEEP 196608:NW5MS/Uc5e2IN23pAZMXsL81TTaIUAaU77E1LIC+lsFll3U:NS/3i2oUaIUAaQfsF7E
TLSH
T191C622B5CB0C0969C61E617DB22E43DA86CD424B7502F63B6F3987976D8A8C43D31B36
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Targets

- Target
  pedrocatv/api/player_api.php
- Size 1KB
- SHA256 f3ca7bb13bb04f04c50aa834614074d0546f45a6dc1919b0cdaa8b601a546541
- MD5 e3329e4ca7c9f8f8ff64f271fb3adb8d
- SHA1 edcca371866063b23a4a84c19be3ab23c97a0e92
- SHA512 2466761694713a732be9d7c8f609f2cf4165e66aef7f88507e36697ea86e8fd23067754671456f74768de6b917dc4e0751a4079346b024cc2a3df6c18c509729
- TLSH
  T1444131203CA75C86807B90D6932758483AAC811B2449C550FEBE83DCAFD9CBAF95C17A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  pedrocatv/api/xmltv.php
- Size 1KB
- SHA256 bf4b61d912569a2b4e5f1a24ffc7d5e77d43148f0bae0dd7bec33cd63acd51fd
- MD5 483448bdbcf201a5431355f389f14b64
- SHA1 e8beac5d844eb45264ecb7d100682bb4053fc752
- SHA512 412722c9685531c23ab5b8e4d6326a23471b5dcb17e480df677f2421d1d876acb7779e56a44158dc6bf8465ccba4aceca4723a783b34e81804d08f3cb9a58f28
- TLSH
  T13C3142603CAB5886C06B90D2537B54483A6C811B145DC550FEBEC3D8AFD9CBAE95C13E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  pedrocatv/assets/fonts/datta/fonts/pct.svg
- Size 2KB
- SHA256 3338c0e0f77578a3e5b31415c6aa9c44bd305d570b11d8490b58369e7d06c31a
- MD5 658b8102bb3b4a36abaf6919cb37dd7f
- SHA1 3d23d68017f1c90c9dd1cade9560a17a57bd92ae
- SHA512 ce4ffa1c95b8183a51f5d1c8342cc1bdc8e5d8795c76d43404c9473a094751193f47d5fe60e448b880c4936a51bab55548cce8650e8cc4c4872806daca92d1ad
- TLSH
  T110511609E11E9CD9B59323614FADCED50928E7A97039607548DCBB72440B236776D6C8
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  pedrocatv/assets/fonts/feather/fonts/feather.svg
- Size 187KB
- SHA256 fa75ebe597b2a51c13382c2573aa851649b8b917dc42af0a9cd3f8a9394c4d0d
- MD5 c77259fb4200a7fb612f19207ea5218a
- SHA1 cf31773269e9732b4f5e1f7cc93b656bd063910e
- SHA512 6e36e06bffc92d06cc8ebe4d006c4913557f6b7b7c50ddcbdfacb8aa9515baec0b2357136a8ff45f215bb567f76b4540830ba76fb5eb4ef4c7b5ad178ce53f90
- SSDEEP 3072:j3qnpj7ljaF2mQg1X6hXv4Qu2s/ltldtlzHHT0wWvGKyGPBJ0ZfQtacS3igeURsj:j3qnpj7ljaF2mQ2X6hXv4Qu2s/ltldts
- TLSH
  T10F1456A4878925BCAC2EE28B7419FD54D31D206771D8DCB4A56C0CE20D76CEB9CDB18B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral7 behavioral8
- Target
  pedrocatv/assets/fonts/flag/flags/1x1/ad.svg
- Size 32KB
- SHA256 8c88dd89d5be6f2870e761b460e9aa9d9ce5db11f67998b6c87396520554d363
- MD5 293e056022ee4378888c4bcb620725c7
- SHA1 2a91f7dcd470af4a5ab1cbe39fb24d43b11d07b5
- SHA512 9938e5ff600607bbf084db3bc826fd8f37cc1de913d1abb61e2bb943cbfab8926ebfac3a58933d1e4b613783c58d1c6d276a8b9659bf9d2923d8557aa6443b79
- SSDEEP 384:GpxVTa/fGb/w9zXbrP1N/pJjM/lIy5GY6bFM6PrROzNT5ACm/PSzOhODxl:GpzFz+LbznpJINv58PlST50SzCODv
- TLSH
  T13FE2C17C4658D3BC9E63DBAC9F3A54B0960D90DAA0F6C352A62DD17027E30C8E25F8D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral10 behavioral9
- Target
  pedrocatv/assets/fonts/flag/flags/1x1/ae.svg
- Size 271B
- SHA256 eaf80b3aaaec829c4ae0f70039bddf1b3e1a538ad167ffdab39861ea25645dba
- MD5 3936bd0be874ec776d4573eee60919f6
- SHA1 ccd29111a75310f73f41d72253cb4a3ce0492760
- SHA512 4ed9533ff54c9b71abe460dd36d612b514b89b5a1ceaa894858c5fccdc74ec4f08e29829ec310893dbe54c1cf67d12e4d5b1910ace07bb35198123b9fb55b818
- TLSH
  T199D02EF4428F28885E2083002FAC7CC34946A0C350E24BE6F460212A601F4839CE3F8E
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  pedrocatv/assets/fonts/flag/flags/1x1/af.svg
- Size 20KB
- SHA256 0fceb7f3dfe61d164879a5aa78c3e032ff1d1e146b59177672eeed471165def1
- MD5 2c964e596cb32aa45ab8100283801a86
- SHA1 3c69ced1de8c4eb2fb7bf6237b53df630e38c894
- SHA512 680b445c44f68eba9bc2fbc358cee3114a0e1896ecbead87f171cf59fe84ddd5ea1e41955abd869fc93152a5b87e70e939e329a2186981fdc89d0d3d595c17ca
- SSDEEP 384:UIMN5FhdKm7O91UYf6Bz2YjO88AK05wUMGxO1SW8K7bQAje8:uYhvUYf6JJxcIbAe8
- TLSH
  T1D792AE7C8358D3BC9E62DB6C9F3A5070D50DE1EAA0F6C352A66DD17027A30D8E25F894
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral13 behavioral14
- Target
  pedrocatv/assets/fonts/flag/flags/1x1/ag.svg
- Size 778B
- SHA256 52e3d7242cce73b53ffcf23518b9cdafa21497c22d2044e70a2770ba2e2c6288
- MD5 d161f12aee3e5bac3b9ca481999b92f3
- SHA1 794eafd2ede4790a0e2e284f4db6c22cfb5617b6
- SHA512 0eca7502395247777dae527939abd04316c14152cb1825dae2e463b430ab586f809cc901833d3f7b9c94159d69fa758521253c5b970bb257406f5eec9cd9248b
- TLSH
  T11101D0F051D5F554AB35C3109BBDBEC55939F18A41630BA4F06434336B3D8570E93AA6
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  pedrocatv/assets/fonts/flag/flags/1x1/ai.svg
- Size 47KB
- SHA256 915d36ff71e95f8517c074281c0bce2a26abe2cad0fc409284ef9a1be2a5039f
- MD5 ecd0e44b1853cee2d031286f1c2a2637
- SHA1 41edb210bc7d4ff468c47aa080cf8cbf3b481e38
- SHA512 ca9a41f77325ccc351bd1e4ee4633862600fe7cf275f4269f21c99f1288650d4032228f5dec6eb231d750a107bf42d1855bf8adf50e092b15e503717300069a5
- SSDEEP 768:k1SpTgph/xxZHICFKV1PbA8cQGJBhbMVELNAfRwB06mJLUuy4mrkQx+HYayyYN:kIRc
- TLSH
  T11D232FA4E5A8F7564EE9877C4F7D95F78C4530EB0125D2EB3204F0772A6D2DAE583A00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral17 behavioral18
- Target
  pedrocatv/assets/fonts/flag/flags/1x1/al.svg
- Size 3KB
- SHA256 ff69c706d69c1ed698b8bf28d373669bbd89155a22c4e96600cde916ea308d47
- MD5 fcc913cabb7f5b0905ef22ab543568fd
- SHA1 7a163c7fa42f46bd4495eb4343d715d946970da5
- SHA512 9d310df9bddc289843c17b67aaebf0a54c6065b11fc52d75ee9f0c4ad0ea4e594af547554d5deb7bcdc9c4ba0ac3432d5e2c781be963028bb708d12845f33e8c
- TLSH
  T11C61BC3DD298D2B8EDA39BF8DB3620F0E41E95AEC2E4C316837CC47076618D9D15E895
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral19 behavioral20
- Target
  pedrocatv/assets/fonts/flag/flags/1x1/am.svg
- Size 239B
- SHA256 849fe02689aa966acc26293d55fddf0f79133a4f564c15e357e2d2bbda82d4ac
- MD5 282803a7200d8a580af7191d01cbc2a7
- SHA1 cdf97a31b06360336a5ca9c7452d86eb481d0de8
- SHA512 e0012ef8de2ac1d3007aff6b1bddc7fd308e051a8d17efb44277c5a95e7569277abb8d200aea7027caf291df8bcd3e547349a63017c92883f33f5994dca56e3b
- TLSH
  T145D0A7A4425F64445A6443152FACBCC3454AD0C341D257D6F4502436241F4D79C93B5C
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral21 behavioral22
- Target
  pedrocatv/assets/fonts/flag/flags/1x1/ao.svg
- Size 1KB
- SHA256 ceea841a8ef1cb52dc39c520a3f552608ac55782417069e305c38a88a7354b37
- MD5 f52f203d57be33efa9e4adf288097b72
- SHA1 d9c30ac39751b9478a40b41f7b3204174646571a
- SHA512 aaf07e91cf5c9c30bef95e45097385ecb3cc7a4ad2972da9a6c22748873da2b8c49937fa96da0214fb49048c025b465b5bbb0c0f706505bb5a550cb555161404
- TLSH
  T16731C0B8C258D5BCCEA60734DB3C25F062AB91D81590197171D8A03035261EE849F9D9
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral23 behavioral24
- Target
  pedrocatv/assets/fonts/flag/flags/1x1/aq.svg
- Size 3KB
- SHA256 f8995f8f221cd22c9b2a0bae94f29ee21867508ee0c77adcf6c81ebd222e02ce
- MD5 360c4f81511cc04cacdc9cd43da0b35e
- SHA1 ff47834d86b751eb6ea8cecf3b3c03e204325199
- SHA512 506852cf57c42c06c8b64a48b8594511a1cec9a7f0cd4264029d261e2a0442fd512d7e0d050083928eb6952410afb698f5e714911dee525e0e691d06e2e15e1e
- TLSH
  T112617D6D839082BCEEF24BE8DA3630F0D48EA5BDA2E4C311626CC07077915D4E64F889
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral25 behavioral26
- Target
  pedrocatv/assets/fonts/flag/flags/1x1/ar.svg
- Size 3KB
- SHA256 5cafba83331f5f5c9a35582392627cef884ad0759b71570fd1dc4a22fa481ab5
- MD5 f09301668255bfa8bf32f384b161f21d
- SHA1 e65602971372b0659437597daade8504438447e7
- SHA512 6c1d403e3fcc5acde70511f2ab47e1868349401b31d99d2a9d5fe7bddda804e721af8b1c21454ee0a2250c14f1e0cfd73d54ade74848dd3ac765455ba3a03de3
- TLSH
  T11671003891C8805CCE76A74CDBAAE9EC430FD09792A64747F628B4BB00365DAC99B55C
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral27 behavioral28
- Target
  pedrocatv/assets/fonts/flag/flags/1x1/as.svg
- Size 7KB
- SHA256 3b623b284d647290b36c040aec19811101e4688cebba8936b555d9bc2c176ae7
- MD5 339cb517f9a9f94503c7fabdb649cbbc
- SHA1 8dcd1455d0a8b403bcb507e303c6751b4084f3e2
- SHA512 9b4bb32ce5a831007c8e115b9c8bdf38cf96875d56c57553a142255fbb3284250f501d7b6939a71e87d3673cd050052707b201dd407d8c883fad34c2f0776559
- SSDEEP 96:OpOTTvA6KuaUMxdUSFvwtQVaF2+LuGh09hLFPE7gdECdmhQoBOq8keewkS04J6:OkfAK8OSmKVByhSlECAiogc4J6
- TLSH
  T1D1F10E7983948374ADB24778CB39A0F4E82F95CD82D453A8313DE4707B514DD96AE8C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral29 behavioral30
- Target
  pedrocatv/assets/fonts/flag/flags/1x1/at.svg
- Size 251B
- SHA256 e8c92cbd3a14de3de2c35e0a11bfb993bd954cfda180bfd88ee7e1ab3b563688
- MD5 e2075bcad3cf4d591ec658050c9119b5
- SHA1 f63b0f18e780bc0b61a5e7dc16f93536ec5dd318
- SHA512 003aa9c930d8cf6a84dfb06f5efff7f59bbb406e342f083f96cf02f88bdb8c5df08b9fa61d17928fff960d02a25a6ec58bd06aaa48a83a630a85052966d139df
- TLSH
  T12BD0A7B41C9D5829CE3681305F6CF5CD1A61F545D2C02EABF1F03827650B9931807E9F
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32