Overview

overview

7

Static

static

1

pre2/index.html

windows10-2004-x64

4

pre2/index.html

windows11-21h2-x64

7

seguro/ins...4.html

windows10-2004-x64

3

seguro/ins...4.html

windows11-21h2-x64

7

seguro/ins...00.svg

windows10-2004-x64

3

seguro/ins...00.svg

windows11-21h2-x64

4

seguro/ins...00.svg

windows10-2004-x64

3

seguro/ins...00.svg

windows11-21h2-x64

4

seguro/ins...00.svg

windows10-2004-x64

3

seguro/ins...00.svg

windows11-21h2-x64

4

seguro/ins...x.html

windows10-2004-x64

6

seguro/ins...x.html

windows11-21h2-x64

6

seguro/ins...min.js

windows10-2004-x64

3

seguro/ins...min.js

windows11-21h2-x64

3

seguro/ins...est.js

windows10-2004-x64

3

seguro/ins...est.js

windows11-21h2-x64

3

seguro/ins...xel.js

windows10-2004-x64

3

seguro/ins...xel.js

windows11-21h2-x64

3

seguro/nas...x.html

windows10-2004-x64

4

seguro/nas...x.html

windows11-21h2-x64

4

seguro/seg...n.html

windows10-2004-x64

4

seguro/seg...n.html

windows11-21h2-x64

4

seguro/seg...4.html

windows10-2004-x64

7

seguro/seg...4.html

windows11-21h2-x64

7

seguro/seg...0.html

windows10-2004-x64

7

seguro/seg...0.html

windows11-21h2-x64

4

seguro/seg...0.html

windows10-2004-x64

4

seguro/seg...0.html

windows11-21h2-x64

4

seguro/seg...0.html

windows10-2004-x64

4

seguro/seg...0.html

windows11-21h2-x64

7

seguro/seg...0.html

windows10-2004-x64

4

seguro/seg...0.html

windows11-21h2-x64

4

Sharing

Copy URL Twitter E-mail

General

  • Target
    cgi-bin.zip
  • Size 13.9MB
  • Sample260507-pg4vsshs9p
  • SHA256 211ad515bb6f7b920b1d8f67984fe387d0a5e2848b283dac990e588ef0151005
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
adwarediscoveryexecutionspyware

Malware Config

Targets

    • Target
      pre2/index.html
    • Size 6KB
    • SHA256 c125d8215b3d3bd2fc9c95195ee2029453e2a962faee6052c8a3f44f259071c8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    discovery

    • Loads dropped DLL

    behavioral1behavioral2
    • Target
      seguro/inscricao.html/3.4.16
    • Size 56KB
    • SHA256 2ef310c1da794542b69623466029dea175b0c4e193141aaae9d02f8d371dc22d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    discovery

    • Loads dropped DLL

    behavioral3behavioral4
    • Target
      seguro/inscricao.html/images/fa-brands-400.svg
    • Size 730KB
    • SHA256 679b5a5216bbdf913cc22d6ae44778c1ef975ee387a6c4c5de87e75d19a22232
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    4/10
    adwarediscoveryspyware
    behavioral5behavioral6
    • Target
      seguro/inscricao.html/images/fa-regular-400.svg
    • Size 141KB
    • SHA256 2326849b6c3dfa217a0e9ecaec9553c910a4e2987c87315c85073d2b95a484f3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    4/10
    adwarediscoveryspyware
    behavioral7behavioral8
    • Target
      seguro/inscricao.html/images/fa-solid-900.svg
    • Size 897KB
    • SHA256 fa498fb2596a5235c5c86d7b68a7fbe76e9855c01af4b0e5ab41c41047c648e0
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    4/10
    adwarediscoveryspyware
    behavioral10behavioral9
    • Target
      seguro/inscricao.html/index.html
    • Size 15KB
    • SHA256 f598f4e30f469e0cfb141ba73e99fcfb0e603d0642cc58f9b49740fa7af5999d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    discovery

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral11behavioral12
    • Target
      seguro/inscricao.html/js/jquery-3.6.0.min.js
    • Size 87KB
    • SHA256 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral13behavioral14
    • Target
      seguro/inscricao.html/js/latest.js
    • Size 12KB
    • SHA256 e411fc67f406df6d7ab6388f0dbe8bfa3a0494b39300e4d5b8a4675b1e7f3e83
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral15behavioral16
    • Target
      seguro/inscricao.html/js/pixel.js
    • Size 38KB
    • SHA256 9c23bd843917272feed0ebfe76af34b328009a659cf886566704402ca8129e69
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral17behavioral18
    • Target
      seguro/nascimento/index.html
    • Size 25KB
    • SHA256 6b2a08efc1e00500e0b4868a9b29dd8c5796757dd8ad4bdc36e48e76dade1cf9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    4/10
    discovery
    behavioral19behavioral20
    • Target
      seguro/seguro/confirmar/bootstrap.min.html
    • Size 2KB
    • SHA256 927b2585689eb8960876fe23b45f875b344313273f09841c3d349670f5479acb
    • MD5 SHA1 SHA512 TLSH
    Score
    4/10
    discovery
    behavioral21behavioral22
    • Target
      seguro/seguro/confirmar/custom_404.html
    • Size 2KB
    • SHA256 927b2585689eb8960876fe23b45f875b344313273f09841c3d349670f5479acb
    • MD5 SHA1 SHA512 TLSH
    Score
    7/10
    discovery

    • Loads dropped DLL

    behavioral23behavioral24
    • Target
      seguro/seguro/confirmar/fa-brands-400.html
    • Size 2KB
    • SHA256 f67cd5636fa0ad71b70ff31f0a841cdb9e01bc86a6cc668256ffc6e19bfa39d1
    • MD5 SHA1 SHA512 TLSH
    Score
    7/10
    discovery

    • Loads dropped DLL

    behavioral25behavioral26
    • Target
      seguro/seguro/confirmar/fa-regular-400.html
    • Size 2KB
    • SHA256 16877d32b8f2cf088b4d4ff5ad09a8b69deb1c16ab8348ca95542aa38890ff54
    • MD5 SHA1 SHA512 TLSH
    Score
    4/10
    discovery
    behavioral27behavioral28
    • Target
      seguro/seguro/confirmar/fa-solid-900.html
    • Size 2KB
    • SHA256 a42fbe1b78597cb3daa395eb522b48ec6e1d58151005eb1227ea3a528a0f95c0
    • MD5 SHA1 SHA512 TLSH
    Score
    7/10
    discovery

    • Loads dropped DLL

    behavioral29behavioral30
    • Target
      seguro/seguro/confirmar/favicon-120.html
    • Size 2KB
    • SHA256 927b2585689eb8960876fe23b45f875b344313273f09841c3d349670f5479acb
    • MD5 SHA1 SHA512 TLSH
    Score
    4/10
    discovery
    behavioral31behavioral32

MITRE ATT&CK Enterprise v16

Tasks

static1

Score
1/10

behavioral1

discovery
Score
4/10

behavioral2

discovery
Score
7/10

behavioral3

discovery
Score
3/10

behavioral4

discovery
Score
7/10

behavioral5

adwarediscoveryspyware
Score
3/10

behavioral6

adwarediscoveryspyware
Score
4/10

behavioral7

adwarediscoveryspyware
Score
3/10

behavioral8

adwarediscoveryspyware
Score
4/10

behavioral9

adwarediscoveryspyware
Score
3/10

behavioral10

adwarediscoveryspyware
Score
4/10

behavioral11

discovery
Score
6/10

behavioral12

discovery
Score
6/10

behavioral13

execution
Score
3/10

behavioral14

execution
Score
3/10

behavioral15

execution
Score
3/10

behavioral16

execution
Score
3/10

behavioral17

execution
Score
3/10

behavioral18

execution
Score
3/10

behavioral19

discovery
Score
4/10

behavioral20

discovery
Score
4/10

behavioral21

discovery
Score
4/10

behavioral22

discovery
Score
4/10

behavioral23

discovery
Score
7/10

behavioral24

discovery
Score
7/10

behavioral25

discovery
Score
7/10

behavioral26

discovery
Score
4/10

behavioral27

discovery
Score
4/10

behavioral28

discovery
Score
4/10

behavioral29

discovery
Score
4/10

behavioral30

discovery
Score
7/10

behavioral31

discovery
Score
4/10

behavioral32

discovery
Score
4/10