5680277a000dfcddbb852ef82bbd66cfa19ba16426b9bf47c72ba5fc50ede2b8

Sharing

Copy URL Twitter E-mail

General

Target
ccnyc-webappV2.zip
Size 5.0MB
Sample260511-pchf1acv2k
SHA256 5680277a000dfcddbb852ef82bbd66cfa19ba16426b9bf47c72ba5fc50ede2b8
MD5 9dd71835c831d157ffca265e555298a3
SHA1 f4ca502f1acf1cb165ac1a4e021fcbcb4fb01c0c
SHA512 5ae6e125bf5b57d024a64131576ece92f4467a8b2f14ae963c48243582413360e51c27409088bc2eaaff5f2234b5661892a1ff84d3a0e6d4ea12b18456ad4463
SSDEEP 98304:ETAcVAOacOsvU3NWUX13PQybMGchKau4vmUigUxovWpb6gIPY1gMvX:ETAcVAOacsdWq1r42aNrsom9aY1g+
TLSH
T1FB3633FE8EBE54B2DA1E2B386A8DCC8C84DBA2440405ECA535B77701FAFBDC90517654
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  ccnyc-webapp/OneSignalSDKWorker.js
- Size 76B
- SHA256 2f213985d10e5c5117acfde4f0cab00ad2c13035577ef38c7f0d86d2dd722fbc
- MD5 8e3ee21f321e4291e1671535f04679c8
- SHA1 26fa40df48fafb1a2b86ad69e1f76b8d4c78da37
- SHA512 e7c20a29585c1f146b644e757f7988fe2dd70caf58de4077595c8aa07da7330d29239679e8d993cf46dfabbc27d07daad21097cd042e0517987c197d6868757c
- TLSH
  T111A022C308A0C2AC0F280CCA22FBA0AE0333CC0A0CF0C0E0A00A8CFC0C00300023AE23
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  ccnyc-webapp/app/Core/Database.php
- Size 1KB
- SHA256 2de845f9c7d89608943903a6da7c9528ba39ee42baad793b562ea8348d4ff95b
- MD5 a1f5e3fcf2475871ce231a64a4ff3afb
- SHA1 051083a5eb15fbc270b67cdd46ed50010ad26580
- SHA512 e8bde8c153fe12bd0b85486fdb3e8ec4335830fd7190585f0f347e9d10580f33e415838c74261289f2ce082ee8c7f331ee3d16fbb9e2a850d129e07b8b819ec3
- TLSH
  T19421D2273159565341A76428DD4AE01160BBA507114CB917BE6E8284DFF006CEDBBA5E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  ccnyc-webapp/app/Models/ContactMessage.php
- Size 1KB
- SHA256 d298cd9ec5cf86aa3ce7247dea6f5dd1d86d1649a89111d86ea32a23eb4ce6cb
- MD5 dc271a32163d2c5a1277fbc4982968d1
- SHA1 ede24a160445bb62444e2136944da22e9d25d29a
- SHA512 022f01b97a9f3e8cc846c2a7724162260406e07b121528c021567b0979ab91b5d0103179c6c44ad7477464d977a2bf38a8c08df9958007da105f882c72872ada
- TLSH
  T1E8211624752F2A71C58762223E26E420D4D76143108C3E13B59ED04C9FD862AFBA8355
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  ccnyc-webapp/app/Models/DailyVerse.php
- Size 17KB
- SHA256 e954055bcbabf457285d8c056d915f217b4587469229496b160b7335feb4d4eb
- MD5 d39d4d72ee2e83a9231abb9dc5f5ad83
- SHA1 441e7c4551aefbeb61137a34a90919c702a0b44d
- SHA512 a843efa9b52cb9c9417bbe2be7cf3b99dd0b5a557cff6f1458e6c5906d561f6539e389c43b817e2a03962b1828007d5d83f46983e70291532139fe9ced65116c
- SSDEEP 384:Nc4OUeBnilw8UXHuXMuADvi9dFjzEARCXQOCgwiArOkBFki+FARBuIREjz0IEACY:xliODADv6EAR6/ACzARBuSACPAPgTuA2
- TLSH
  T15B8285A5B4E744229853703E868F9500E31A04130DEC7A22FF2E56A45FE8D7DD77CE68
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  ccnyc-webapp/app/Models/Notification.php
- Size 4KB
- SHA256 1a318ea4da5c1b10346ccc61b5ea92d419b375fdf51eb95b32d93fdfc54724fc
- MD5 386bdb17bedd43b5182864cec831db10
- SHA1 ea6f2a89575ae57bb1f3eb1a6f78a4a93e158dcd
- SHA512 9f1e8af1f36c03e942e587330c793769e711588e7ae7fb1862b6eaab3ea6db224bff7237423eec81245b69a3127c3d9353400dbe514c46c88021042f8f375272
- SSDEEP 96:TjGeKP94+IoAej2qLDgQ18irxtbEtvqvflZ8O8RWL:eeKV43oAdqLD9UvqvflZ8O8sL
- TLSH
  T15591433935A715225C47B027630BD89060D3A0131CD77E56B78EA6541FEC22EF6F8E7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  ccnyc-webapp/app/Models/Section.php
- Size 14KB
- SHA256 1ce698445feae41e6507b9e7f24e81c8fd0b176476c9254c0eed4deeddde2951
- MD5 85c4783fe5931496690b15498287e630
- SHA1 2b8c921c435aaf4248b527057f203d603881611d
- SHA512 a3f9e027e2ea695aa29fea4199dafb9145096f060a19b2bc3f34a7fc57e17d905fef800cabbf249aa280109645ef095d9f42f622e49605f150ecb23402ec5190
- SSDEEP 384:AilVlGSz0kt+RR9jVLbMefE2fczfXXw8mRVWv5GUbvQtnQAk0SBohs:djc59JLbMefE4Avw9C
- TLSH
  T14E624034A9BB59010A13443B86EED141911081930DE9B963FF6EBB351FE827CC5F5B7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  ccnyc-webapp/app/Models/Setting.php
- Size 1KB
- SHA256 03dd0a63e6b9537b8943f4cf6148614c3f6fc7e37b781a1268bf3ad0c214040f
- MD5 453724c432e4ad4e26d8df93d8578679
- SHA1 c2b8a2624c773c40ccb952c2b8abbd9b6dce24f2
- SHA512 1bba0607581d8cdefc604b512b110e142091b0bdc5dc95cd9367bf34bcb8d4654de166cbb74a335793c69ce6f749038908a2a1783f346463e0d052acb36197fa
- TLSH
  T1C0118C9434E3E66A4803203DC74DC711D206981711B9E9B1F87E02901F619D8AAB8ADC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  ccnyc-webapp/assets/icons/logo-mark.svg
- Size 375B
- SHA256 9184608289bff7df0a1a0e026eefe15aa7dcd6bf5928eeb71c1565765d2b0f4f
- MD5 33e38033a6dd03accdf259c81b24e128
- SHA1 743575ce14fbd10a181a760ae4cf11a2babcc0e9
- SHA512 b7ecd068e24ba5eb185f68e4aa68f60c3d4f30e9bb5aa24e855eb4d5e2d79f101b568a67391366b7a840b83ac220f172cdbc5babefc6c7e3b162bc0325b37840
- TLSH
  T196E0D829320C9D1CA9208509D7293178A1A7A19267491174E6503436A9156DF7D3F3ED
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  ccnyc-webapp/assets/icons/menu/bell.svg
- Size 223B
- SHA256 c2ecacb494415ac20685ef70f61a86efc24ee0ed76e7929cb52a3e85c41b5fd9
- MD5 9b50f78f8f5e01ef2d219aad7ac782cf
- SHA1 46622a9e775c2ae7326370c1f8e5c2eb284989ac
- SHA512 be4e67490182d8663afa275cec30e5abd822d212b732e481f8a0829ad28c75511994e993d1d08935d1543cacf513a87489d8f96c4b3a574adeccaacfbcec01c8
- TLSH
  T160D0A79F99BCA604915E93004DB814005069A0B6028406AE949C8AE040094A85EDBAC4
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral17 behavioral18
- Target
  ccnyc-webapp/assets/icons/menu/bible-plan.svg
- Size 372B
- SHA256 f744ba78c8aebf21be325eb5e2af141536f035cf30098794a65ba43f46064c48
- MD5 aa2360022c467e16638f4450f8faf6bf
- SHA1 939610ee339d8164bdc233b8f46ea59327f35f20
- SHA512 1c35484e24427e2a417d96dc25e7b98aec949af2f9029a3ae43c160f2ae41988d82c3f1d0e2c3b73992a86263fdff0038b6b5aa4c6522461fda0488b0184a4cb
- TLSH
  T167E0D87C9B48CA1DE814C9F87F513421D31CF259F096C348DDAFC63590408C0D50F4A8
- MD5 SHA1 SHA512 TLSH
Score

7^/10

adware discovery spyware
- Loads dropped DLL
behavioral19 behavioral20
- Target
  ccnyc-webapp/assets/icons/menu/book.svg
- Size 294B
- SHA256 fadf66896f33c3e3634af047817f538b54e0494df620084033fdf3ec70533890
- MD5 679feaa5a9fc6a5d986f08bf46721482
- SHA1 280c84aab91debf04004ef57b3964e5710d7300a
- SHA512 60b7a30930f02a730196abade43347b1be8cec1828a83eaa12337733da702dd6b80c1f3f74f7a9161f92723446c3aeb77d8204e67f28b04fc60f7730848d4cae
- TLSH
  T13DE0C22F55AD5506B58882001E3C7521B23CB2FD228520E76B844BF4151BA66EFA3ED9
- MD5 SHA1 SHA512 TLSH
Score

7^/10

adware discovery spyware
- Loads dropped DLL
behavioral21 behavioral22
- Target
  ccnyc-webapp/assets/icons/menu/calendar.svg
- Size 358B
- SHA256 7bf4dc9f01c01154206eb4b6ea12c222600a21b15da81087547362f4757d7ec1
- MD5 aeb1e02cc9955cdc17c631ef17944f52
- SHA1 f58690b958110604cf77dae91f10afb1159ca019
- SHA512 002ccd187453b0a2f2ed2bcda7a052aae0ad96600fecc7f31e4f0c59abbf7642c72b88c668b6b302f9690886bbbdc0b26a9510970d3bba9d935c786b1ee86182
- TLSH
  T1EEE04815915DE40CCB40D71C162C949570A7F1857F3E410CF9C83B65CDA95CBE9BA39D
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral23 behavioral24
- Target
  ccnyc-webapp/assets/icons/menu/close.svg
- Size 158B
- SHA256 f76507f19058ffa49fab5262e6f29b0e9fd40f9c6333fd0acd5964d32a5e41e5
- MD5 99313566c5fdaa07174cc09d1ba3af79
- SHA1 ca5be0e34203dcc25213ae1d64c37cc3bc5fe7e7
- SHA512 b69c82f94668c81fa2f6e09cf731ea9a05d3df8cc5834ccb5d79c5c89ee39505a4ca0ba1224b67dcc801dc0d3aa48254fd692e73ae080f880fa294cb3bf93a21
- TLSH
  T141C04C2E6578D541B2558611186C940F50BDDF520284045BA68055A8110BD5E7A419D4
- MD5 SHA1 SHA512 TLSH
Score

7^/10

adware discovery spyware
- Loads dropped DLL
behavioral25 behavioral26
- Target
  ccnyc-webapp/assets/icons/menu/contact.svg
- Size 403B
- SHA256 cb407b46f723ce640af71111f9f800848bc4d071c59d72f3658908b8b7674d66
- MD5 30b694f7fe20eeeb2a02eb460204cbe9
- SHA1 0582907c8696582a30f59fc73fe29fe3ef85b3de
- SHA512 4261ccf7441356eff45361b6e3bafdbfa21f89e3a0a48f3ed501adec0220cbbcdf918112b141fb8f8a5b58df078742d989094581df3da9c4dd28454f85ea2dd5
- TLSH
  T18FE02266E20C980CCB10431C9B6D70A5213AB0CAE34C0110B89859AA9A0E1ABBD7B6DA
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral27 behavioral28
- Target
  ccnyc-webapp/assets/icons/menu/gallery.svg
- Size 274B
- SHA256 bc76869c04efd1bb6c4782a6fefdfc6bb27a568c239ed3ccdb1eec7c519ae82e
- MD5 86f28ddb2a5fcb762ec80df52dc033de
- SHA1 1ac53f333de2b30d04d6f8c9f728fcaea7cd69e5
- SHA512 8f35e4b0ca601ca45e6df59a74b4ead81adfa14ef5e3502e327758f1608c37c8bdee504e880c1965c8eb9db309ea26cdf254dd64366d2402f5d0712a86c3204b
- TLSH
  T1F6D02B1AF11C9C19D280C20C192C6884307BF08593080105B6C81AA8050A4977DEF6ED
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral29 behavioral30
- Target
  ccnyc-webapp/assets/icons/menu/info.svg
- Size 210B
- SHA256 4e16bc27bb34f68731889103b41128810156f2d897fda72a3bc5fc9691097d76
- MD5 ea29b49e25033161ded9698d8d31bd75
- SHA1 3d2325d7c807ca775442cd36521319478c71453e
- SHA512 0cf8d8d4b72a34f18862978bb441cd141c1f390177f4c303f554bba432215d9db49e28f769add8bcbeeb9ffac9e2933ffed9902c9ec4f45e9fac6e429b226e7e
- TLSH
  T1B6D0226AF02C9C088070C209FF6F701832BF90CCE3050285B2C00C3128844A339072F0
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Loads dropped DLL

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32