b6cbad2b5c2c3921ccc8ba82e3e15eeabee464b3932446d66e66fc66f686aacc

Sharing

Copy URL Twitter E-mail

General

Target
h5.zip
Size 12.3MB
Sample260506-w2fr2act9m
SHA256 b6cbad2b5c2c3921ccc8ba82e3e15eeabee464b3932446d66e66fc66f686aacc
MD5 5d3e77f5a820f0b908f574a0cc8cc67d
SHA1 f9436e17444a5bd719888fd8ed48a1a229922781
SHA512 32714172eee23d86f85d729832d38b25dc4b23c736143a4e1a39e180f477854030f176dfc8a0cb94a33687acbe62357c9ab16f940957f0b78771b7704adaeb01
SSDEEP 196608:SJK211UYnwZTUsYIW+H+V9wSokANCHdNFHHpzBlXazVz4a2aP+QDUQUi:Sz0JyzIWXu0pHdznpzBszx0aPRYDi
TLSH
T145D6332FCA6B5E02C22A41B2634F960C94F348E586138D9F9F5A3A946C1F5415FBB3C6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  h5/index.html
- Size 1000B
- SHA256 bb0a2910a044974392ef61178b27b6d94f3cf45445a9aa799027c050ec233e9b
- MD5 850197f6873f693a0f9f3c6a63be768a
- SHA1 7db1dc2fa07a7c15619b15fc1613114e1a5510cc
- SHA512 6e608cfe2019c6f949f7c042d3e70eaea855358160eae756cf823e95651341e28ee5365ad5a061e392685c6561c1ecd71bcd19f41129b42d0f7996cfb070d09a
- TLSH
  T1C41110D66D10C6592721AA6D78B9F25CC4AF86A52C61E801B8CC1D9D5FE0FC84F388A8
- MD5 SHA1 SHA512 TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral1 behavioral2
- Target
  h5/static/chart.html
- Size 1KB
- SHA256 354e8f5acfc8c4a1daffadb22ca25d1d80b37d83dbe91e72367fd8f00956a004
- MD5 348e689a5722f491283384beda31df28
- SHA1 58b210243d0758577c8c93b9f3b4a8b3ce4b8b38
- SHA512 39cd06a9a456a719d68872dbaefd014644dd4f16c15148b2a86d419895b47a8b2b325e36f8bdf9b9b8102cdfe4c417dc7b3a79bd1761ba44fd8517cb95243eab
- TLSH
  T15A115047F7C8082533B21B3E02FF918CAAB98443A20048507CCCB4563FA8A915EC3AA8
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral3 behavioral4
- Target
  h5/static/common/js/jquery.js
- Size 271KB
- SHA256 19c2ff8384c14552104a2f7a5a830aef510669837d65fb0c20a9bee749e54b8b
- MD5 a5a8ab0a7c815e296c5421f9eea326db
- SHA1 c92232f824a57965c959bb779fd39724b690e1af
- SHA512 f58dc50244e9795d9abaf87b73f3b198c7de5187a2dfe69b6176d03b64fb7c952ce220f97ddcd9b14c00233c926d4cb9c97c086d1c943a517eb4bc26f23691c6
- SSDEEP 6144:2Ea6/GLY8CTHkFJNNgFbPms3JyL2yGp89FMuY1x+mvbpHe56bc2A4DF:dwgFbPjym896ZtHeobc2JDF
- TLSH
  T1E944B4D9734F116F4BA233AAE43B5149FF7DD1B0520550ACB58D996C24A081883FAFBE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  h5/static/common/js/touch-emulator.js
- Size 11KB
- SHA256 2968f310031c7a0c1d271836caa44aedaa28794289d14c577f0b17033e8c036d
- MD5 178ba7db6232252a555ba6ff953756a8
- SHA1 31129606e2c7e395a73184f30e81e835a424cdf5
- SHA512 dea2f867ed3e1774320ea9494c9fd6fa24a7c7eeba27e50099530d3eabe196b6a34f70cfb7d0ac87aa5c70dcb5172d149de92da8af78725b6090952588041dbd
- SSDEEP 96:L+vx+c5tJzNjX/wGiZ27oA2qMrttS7KDWom4RhvYahnT/TCKkTIT1/CoShwqhzcs:yvx+chzxItcKs+LmKk8TqhzwoEPq
- TLSH
  T11A32314F098A226204BB7329FB9E904AF67E85A311012056FCBC5F653F72A758694ECD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  h5/static/decimal.min.js
- Size 12KB
- SHA256 12e5a514ad46e2bf97437d3a3bfe79c6979e7288f635e9b390b4f2d328591e76
- MD5 66c82683ac1967aaea3cd0e7468f0670
- SHA1 78722ba06fd71961f1a7bdf6d62f8bc583ae6bb4
- SHA512 127cb153f2d2c1c0790c5063e5e8bbe6e79ec158d7c31cb61823f8f325f72b1296ef44d3313256f430c65bd4182c2a48b39e5674578ce99a135c56a610368c16
- SSDEEP 384:SsS4OogpxcGHjcwGO5P3VrrrFcJSAArX3:TSHogD3QwG8P5ros3
- TLSH
  T10942C6D872B1F0D643F364E040DB1406E13A6E49688E61E2F35995D23CB1EC6917FF65
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  h5/static/iconfont/demo_index.html
- Size 164KB
- SHA256 de3473ea8c4bd331f2a53cf6181a30ad0c9433da85bfc54c4a34885da8ba80d5
- MD5 e41971e12df2f934cf7e51efa1e4b679
- SHA1 4054da2684170ffc519410ab0b2bfea91b27348a
- SHA512 14345f3232ad65049459a009be08f71245165156cd35e65d8ec1a5dde277831ac46ad12325e31708acd703886c52809afabf487aa5fcc0500b9dba0b450a73d9
- SSDEEP 768:0SvedYBszjEeDkeWUgIq95OAjTREEvk2vVjY:0SmdYwrkerpMTREEjY
- TLSH
  T1ABF39BB081C2513602B3C1C2DA685B59FD95D24BDE8F8E5236EE27E74FF6D01AD0346A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral11 behavioral12
- Target
  h5/static/iconfont/iconfont.js
- Size 301KB
- SHA256 66491ed6d9949a4e41b9f3bd935fc086a1488cca0154cd2b8713f90f420eccd2
- MD5 7255b7ec3d14deac7729c22508877371
- SHA1 c9ab288b50585102c7ada9d5ecd21aba6e89dba2
- SHA512 93d0dd35e0310f96381ba83b531f151988646c026fcad12a4438a17dbbc4c3db5df2fedf4affdbe59db67a421a9a1cf183872849c7744a1e8a5ba54b0711987a
- SSDEEP 3072:u1mlH9IiBfM1iMfWhKy68geEj535xP3OD:1L68gh5rP3OD
- TLSH
  T12064E7E5932452FC5C0E87EEB925AC64360F14FF39D1DDBC82688E9095939D8CA49CCB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral13 behavioral14
- Target
  ieo.svg
- Size 3KB
- SHA256 845db9f4b9a1fe060b813b16436a1b8381b5d72132749a423330fedf9ef8668a
- MD5 49c1fd150d0d68fa5dddd8fcfce6890d
- SHA1 33cbe585d4e1df63c16be1d4b9c0c447c22bfaad
- SHA512 0b6662fe91b376241715c7f0b2e2934c363c270205dad2169ac14880cebe334b932984d855edfd84d560d46b92e18aa0df7fee245d7e3053fa68494999d5f81b
- TLSH
  T1F2515D376E82FFC08BE0A0912AEBCCF4BE57665350068C4E21963353426C7BDC9C1256
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  h5/static/image/icon/ieo.svg
- Size 3KB
- SHA256 eef2bcaa241d066cb36bfe24daacc9736fd9de4c2f6b16bbf6143b9b8ef0be22
- MD5 b522218d60e58e08c420fa67f5bf71d0
- SHA1 630e4df8e944dd7e2bb53a78551dcc7deae91d4e
- SHA512 63426263a0ce303019eb94ae73cdf1546b1469e0dd8ad8c0d3fb9bc5665baba2af1f44cf8cae484d55521cabdac563f1bab2d802f39f17c0b477bdca2b0062ff
- TLSH
  T122516D3B6D817FC047E094A12EEBCCE0BF47665150068C4E32967323866C769CBC1959
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral17 behavioral18
- Target
  h5/static/image/svg/address.svg
- Size 5KB
- SHA256 e5e6c4c181e087844632609c928ba248df069d877567dc1252a9dccd05a0e6ef
- MD5 94a4030c59a66c90a583a0ebbeecddcc
- SHA1 e8fefdcdd3a013c1fbff701648d87486dec96ccb
- SHA512 2bbb18c831ac3e1af639f34937b5932ddcb29983d800a73e508189d267a614760553479611861aacffb675567647ec68492af4a449f0bb09f1e89c1b480321ff
- SSDEEP 96:XrlTQa5CdpSAHj0wNFSnLQ3M/qpgnJL54z7Z4K0+A7fLTdfGuF2Xb:blTQa5epVvCLQ8tMm3hVI
- TLSH
  T1A7B185850296D3B8B82231126558A4B2FE7D307B7542A658F45F6CE2EB34DED01B7EC3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral19 behavioral20
- Target
  h5/static/image/svg/bill.svg
- Size 8KB
- SHA256 e8ccbcdac59d9a70303b8f7926ab6da0c0f75dec19c64dd177ceab42da2bbcff
- MD5 fb3e16d2a2739c8430fee242d1e8bd50
- SHA1 ad06fb33fddf2bf46632131b490a54b40cbfe545
- SHA512 d0ed4d15d0a303c0afd7d4647921465b7bb84e92407ba8ec50bf5a76e635f6d8d8f54af52c2ef0981d52df9b621a917ea38d3b37dbe408e55a88b632e82a5c0a
- SSDEEP 192:b17zQa5epVvCLQ8tMm3kodxTu5cW56WII1Ak9:dMaaVvCvtMm3xTuqnWIe9
- TLSH
  T1030275964394D378F4226265A25571B2B47D343B3682E208F46F2DE1BB319ED42BBDC3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

adware discovery spyware
- Loads dropped DLL
behavioral21 behavioral22
- Target
  h5/static/image/svg/card.svg
- Size 4KB
- SHA256 9c8e0eb385b637c2e60f816321a958bdf2501e085ba5f41a6bf8d1209acede87
- MD5 d87c16dcc73f019766f6daf2283b0006
- SHA1 d0023de421975d3f5f3c744b0ca9e2fc30ba0aec
- SHA512 6607d76c28d3dbc23a9cbc45f41f9f5e8f4b02bf4332bcd1ab41e8f06098f9a5e79d898d7bde3709d8acc1e1d38fbef247da2dfb09105bef158be2bf3d6cdbb0
- SSDEEP 48:cSLrQ3+y37qpdfNtdHqxexcquUhy0I0h5tfyjiB58K19pluVhtCxiZhxFEZfyYyb:XrQCpdltdmZWK+TmVhtCK4FyA7yUJXw
- TLSH
  T118A1C840258597B4941723B2B26A32A59C3031923686FA85FC3F6C72DF3ACCD4177D8B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral23 behavioral24
- Target
  h5/static/image/svg/collect.svg
- Size 7KB
- SHA256 4aef958e320022d06b0e3bb3871693d299d76d7673e02100b4e3b2cd92f21380
- MD5 e562562535710c6b97c204affff029ae
- SHA1 f5658b30e03dad80a65709f15c07e1bc65c6bcb8
- SHA512 430a8ce6cfb839df9b1f786a52f34d21d6b357cb27b3407f0d9d556c06a5987cf4e53a0360685cba13035366d8c02181ce3937610d5ee91b4be71dd5a8ba554a
- SSDEEP 192:bAUQa5epVvCLQ8tMm3wzD9vQIumcMJiwN872T:iaaVvCvtMm3wzJOmuwy4
- TLSH
  T16CF194840395D3B8F81222169655E472BE7D317FBA925258F44F5CA2FF34CD880BAD87
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

adware discovery spyware
- Loads dropped DLL
behavioral25 behavioral26
- Target
  h5/static/image/svg/comment.svg
- Size 6KB
- SHA256 d760ed66512d11d69f312647b36c300ba4ba0eed26920f79d50224d0101cd022
- MD5 60b356bc913094ab5b6da824097c695b
- SHA1 6f088d527054e24be0cb30f34f17b773356b89c0
- SHA512 556a95a077b2f75d3cf1e528eb5ee0f30cf2509c3745db9aa73e8681d3f3b7d435f234a8dfbfabebd5c4efd0e7131ad18162d6ba292190d576946a2650d60ee5
- SSDEEP 192:bemcMQa5epVvCLQ8tMm3L2C2wisrYM4C2wisrYK:6/aaVvCvtMm3GT8
- TLSH
  T1BFD165C202D1D3B0A5577205778CA0B2E97D72BA35419168F81FACA2EB34EDD0167DC7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

adware discovery spyware
- Loads dropped DLL
behavioral27 behavioral28
- Target
  h5/static/image/svg/content.svg
- Size 6KB
- SHA256 736e54dab0c527e3cbdc30a5c6c3e15e2d9ceb425cab02bbc9d3c58633906028
- MD5 7f19abd84dc1259169cbc405fc9d8bdf
- SHA1 12fb31956cf3a5c1361ba2c751196862ac66cc74
- SHA512 21c509f23caf2ac16c901ffa20e54283f845c1f2ea90ad01e2db1ef031e40f9e788a219cfab4b7ee437ccc2f766a764b58476528d9cf81d0c6e12ae828701fe7
- SSDEEP 96:XrDWQa5CdpSAHj0wNFSnLQ3M/qpgnJL54z7Z4K0+A7fLTm1HfeTnkKNNBoIjIod:bDWQa5epVvCLQ8tMm3JnTaIjIod
- TLSH
  T1BCD195850355D3B478223222A198A4B1ED7E31BA7502A29CF84F6CB1EB34DED01B7DC7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral29 behavioral30
- Target
  h5/static/image/svg/coupon.svg
- Size 17KB
- SHA256 1d4cc530d342941b359a233d52cc9d99ed5902966a44ea706eedb89d0e6b50b2
- MD5 9fe7727e8fca89ff9bf1bac1d4e347ad
- SHA1 1e2aaf75e00d9e4e8e2103c59ad9f1c65e355712
- SHA512 8f5e7cfd481ebbb8a29f3515b1453b317e7532faf787a03fca56d19aedb548f7182c551e9104f14a42553165246296111c9481c99e1d0e6b9651bf837e0db8a0
- SSDEEP 192:bfrQa5epVvCLQ8tMm33WkhmoaQy+DkhwST7404xpFIBZnDdGS6khmmaQy+dkhwSz:YaaVvCvtMm3vmxwjeBFm1wjeB9qzXzhU
- TLSH
  T1F9827492036DC3F0E541437A49BE486669AE70A77983135CB0CE69A2FF319F4909E9C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Loads dropped DLL

Loads dropped DLL

Loads dropped DLL

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32