233c9caeea248f542b0aaaa26c37cc92ffc2e73771235ab88389745b149eddea

Sharing

Copy URL Twitter E-mail

General

Target
ccnyc-webappV3.zip
Size 7.3MB
Sample260511-pcvfkahs3z
SHA256 233c9caeea248f542b0aaaa26c37cc92ffc2e73771235ab88389745b149eddea
MD5 58b06e304458d40f35162dc621aa2a57
SHA1 c8f2f513a0ccb062677aff446f6b632c1c9ef9e8
SHA512 bf2c372d795a5c0ba37ed85ad85a091ec8e3bedc192586a9e5c6f57de8561a8f637621c652d57b1c0a7742a1e6849f1d7e6efde4cb2cb3cec779eaae4e9d0da5
SSDEEP 196608:5vAcVAOacsdWq1r42auvJkO64sQ6D/U6LOaFaczGBKvtkP:xXVAZpvJkh/U6LhFiv
TLSH
T11176333CC1AA67F1EB2FBAB6859D4C8898BF52010315C591377FD60871E6ACD264BF18
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  ccnyc-webapp/OneSignalSDKWorker.js
- Size 76B
- SHA256 2f213985d10e5c5117acfde4f0cab00ad2c13035577ef38c7f0d86d2dd722fbc
- MD5 8e3ee21f321e4291e1671535f04679c8
- SHA1 26fa40df48fafb1a2b86ad69e1f76b8d4c78da37
- SHA512 e7c20a29585c1f146b644e757f7988fe2dd70caf58de4077595c8aa07da7330d29239679e8d993cf46dfabbc27d07daad21097cd042e0517987c197d6868757c
- TLSH
  T111A022C308A0C2AC0F280CCA22FBA0AE0333CC0A0CF0C0E0A00A8CFC0C00300023AE23
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  ccnyc-webapp/app/Core/Database.php
- Size 1KB
- SHA256 2de845f9c7d89608943903a6da7c9528ba39ee42baad793b562ea8348d4ff95b
- MD5 a1f5e3fcf2475871ce231a64a4ff3afb
- SHA1 051083a5eb15fbc270b67cdd46ed50010ad26580
- SHA512 e8bde8c153fe12bd0b85486fdb3e8ec4335830fd7190585f0f347e9d10580f33e415838c74261289f2ce082ee8c7f331ee3d16fbb9e2a850d129e07b8b819ec3
- TLSH
  T19421D2273159565341A76428DD4AE01160BBA507114CB917BE6E8284DFF006CEDBBA5E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  ccnyc-webapp/app/Models/ContactMessage.php
- Size 1KB
- SHA256 d298cd9ec5cf86aa3ce7247dea6f5dd1d86d1649a89111d86ea32a23eb4ce6cb
- MD5 dc271a32163d2c5a1277fbc4982968d1
- SHA1 ede24a160445bb62444e2136944da22e9d25d29a
- SHA512 022f01b97a9f3e8cc846c2a7724162260406e07b121528c021567b0979ab91b5d0103179c6c44ad7477464d977a2bf38a8c08df9958007da105f882c72872ada
- TLSH
  T1E8211624752F2A71C58762223E26E420D4D76143108C3E13B59ED04C9FD862AFBA8355
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  ccnyc-webapp/app/Models/DailyVerse.php
- Size 24KB
- SHA256 1471daa4f91498fbc339180b14676452f0f916f5c8ad8012b6d453b18086ceac
- MD5 bb05253a4a5a08e150158235644720b1
- SHA1 d260df67c47675ba9a0dca6435e23efb06e19030
- SHA512 6c739e9a789d9ab53a5583cf8b1b21172ae2d9b4dc41ff4442989e6546054dc90f419edb55e974b9888cf627c91a39cfcc051a859010a4469eafda500631918e
- SSDEEP 768:7AUAVS21/tw9BpJci5AQ/uAR6H97lAkpgMACzARBuSACPAPgTuAcPAJq:7AUAVS2tOJAQmARAlAkBACzARBuSACPQ
- TLSH
  T11CB2846AB8E720124853B03D87CAA100E31B44171DEC7A62FE6E96945FD4D3DDBBCE64
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  ccnyc-webapp/app/Models/Notification.php
- Size 4KB
- SHA256 1a318ea4da5c1b10346ccc61b5ea92d419b375fdf51eb95b32d93fdfc54724fc
- MD5 386bdb17bedd43b5182864cec831db10
- SHA1 ea6f2a89575ae57bb1f3eb1a6f78a4a93e158dcd
- SHA512 9f1e8af1f36c03e942e587330c793769e711588e7ae7fb1862b6eaab3ea6db224bff7237423eec81245b69a3127c3d9353400dbe514c46c88021042f8f375272
- SSDEEP 96:TjGeKP94+IoAej2qLDgQ18irxtbEtvqvflZ8O8RWL:eeKV43oAdqLD9UvqvflZ8O8sL
- TLSH
  T15591433935A715225C47B027630BD89060D3A0131CD77E56B78EA6541FEC22EF6F8E7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  ccnyc-webapp/app/Models/Section.php
- Size 14KB
- SHA256 1ce698445feae41e6507b9e7f24e81c8fd0b176476c9254c0eed4deeddde2951
- MD5 85c4783fe5931496690b15498287e630
- SHA1 2b8c921c435aaf4248b527057f203d603881611d
- SHA512 a3f9e027e2ea695aa29fea4199dafb9145096f060a19b2bc3f34a7fc57e17d905fef800cabbf249aa280109645ef095d9f42f622e49605f150ecb23402ec5190
- SSDEEP 384:AilVlGSz0kt+RR9jVLbMefE2fczfXXw8mRVWv5GUbvQtnQAk0SBohs:djc59JLbMefE4Avw9C
- TLSH
  T14E624034A9BB59010A13443B86EED141911081930DE9B963FF6EBB351FE827CC5F5B7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  ccnyc-webapp/app/Models/SermonNote.php
- Size 5KB
- SHA256 44e1e0c6beebb6a969e6b48e6dd9d644b2e362d7c145dfd9f3f4b48a731f32e8
- MD5 c4661a2a0fb5da2ba578e6307f183ed9
- SHA1 8ca779237f724a210f5b57a60c129ce5771f0d5e
- SHA512 dca02082b2ceeef5b2dcd668f8753eaad229e99bdbe60bd64ced5307bacd56b24befe378d108b8377a3e79dbb5e34e2aa7b96e62c61d2d3814290d39e03745b6
- SSDEEP 96:T2Td/KeG7j6dWEFJOl/6yjiOCIO+gOSZgy6PhqYhFdQMzsKUR3:ydbG7j6dWEFJOV6yjizIdgBZgy6Ph1FC
- TLSH
  T177B1327178FB4121A853302D96CAA180D25744134EED77B1FC6F07A02FA5A39EA7DB9C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  ccnyc-webapp/app/Models/Setting.php
- Size 1KB
- SHA256 03dd0a63e6b9537b8943f4cf6148614c3f6fc7e37b781a1268bf3ad0c214040f
- MD5 453724c432e4ad4e26d8df93d8578679
- SHA1 c2b8a2624c773c40ccb952c2b8abbd9b6dce24f2
- SHA512 1bba0607581d8cdefc604b512b110e142091b0bdc5dc95cd9367bf34bcb8d4654de166cbb74a335793c69ce6f749038908a2a1783f346463e0d052acb36197fa
- TLSH
  T1C0118C9434E3E66A4803203DC74DC711D206981711B9E9B1F87E02901F619D8AAB8ADC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  ccnyc-webapp/assets/icons/logo-mark.svg
- Size 375B
- SHA256 9184608289bff7df0a1a0e026eefe15aa7dcd6bf5928eeb71c1565765d2b0f4f
- MD5 33e38033a6dd03accdf259c81b24e128
- SHA1 743575ce14fbd10a181a760ae4cf11a2babcc0e9
- SHA512 b7ecd068e24ba5eb185f68e4aa68f60c3d4f30e9bb5aa24e855eb4d5e2d79f101b568a67391366b7a840b83ac220f172cdbc5babefc6c7e3b162bc0325b37840
- TLSH
  T196E0D829320C9D1CA9208509D7293178A1A7A19267491174E6503436A9156DF7D3F3ED
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral17 behavioral18
- Target
  ccnyc-webapp/assets/icons/menu/bell.svg
- Size 223B
- SHA256 c2ecacb494415ac20685ef70f61a86efc24ee0ed76e7929cb52a3e85c41b5fd9
- MD5 9b50f78f8f5e01ef2d219aad7ac782cf
- SHA1 46622a9e775c2ae7326370c1f8e5c2eb284989ac
- SHA512 be4e67490182d8663afa275cec30e5abd822d212b732e481f8a0829ad28c75511994e993d1d08935d1543cacf513a87489d8f96c4b3a574adeccaacfbcec01c8
- TLSH
  T160D0A79F99BCA604915E93004DB814005069A0B6028406AE949C8AE040094A85EDBAC4
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral19 behavioral20
- Target
  ccnyc-webapp/assets/icons/menu/bible-plan.svg
- Size 372B
- SHA256 f744ba78c8aebf21be325eb5e2af141536f035cf30098794a65ba43f46064c48
- MD5 aa2360022c467e16638f4450f8faf6bf
- SHA1 939610ee339d8164bdc233b8f46ea59327f35f20
- SHA512 1c35484e24427e2a417d96dc25e7b98aec949af2f9029a3ae43c160f2ae41988d82c3f1d0e2c3b73992a86263fdff0038b6b5aa4c6522461fda0488b0184a4cb
- TLSH
  T167E0D87C9B48CA1DE814C9F87F513421D31CF259F096C348DDAFC63590408C0D50F4A8
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral21 behavioral22
- Target
  ccnyc-webapp/assets/icons/menu/book.svg
- Size 294B
- SHA256 fadf66896f33c3e3634af047817f538b54e0494df620084033fdf3ec70533890
- MD5 679feaa5a9fc6a5d986f08bf46721482
- SHA1 280c84aab91debf04004ef57b3964e5710d7300a
- SHA512 60b7a30930f02a730196abade43347b1be8cec1828a83eaa12337733da702dd6b80c1f3f74f7a9161f92723446c3aeb77d8204e67f28b04fc60f7730848d4cae
- TLSH
  T13DE0C22F55AD5506B58882001E3C7521B23CB2FD228520E76B844BF4151BA66EFA3ED9
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral23 behavioral24
- Target
  ccnyc-webapp/assets/icons/menu/calendar.svg
- Size 358B
- SHA256 7bf4dc9f01c01154206eb4b6ea12c222600a21b15da81087547362f4757d7ec1
- MD5 aeb1e02cc9955cdc17c631ef17944f52
- SHA1 f58690b958110604cf77dae91f10afb1159ca019
- SHA512 002ccd187453b0a2f2ed2bcda7a052aae0ad96600fecc7f31e4f0c59abbf7642c72b88c668b6b302f9690886bbbdc0b26a9510970d3bba9d935c786b1ee86182
- TLSH
  T1EEE04815915DE40CCB40D71C162C949570A7F1857F3E410CF9C83B65CDA95CBE9BA39D
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral25 behavioral26
- Target
  ccnyc-webapp/assets/icons/menu/close.svg
- Size 158B
- SHA256 f76507f19058ffa49fab5262e6f29b0e9fd40f9c6333fd0acd5964d32a5e41e5
- MD5 99313566c5fdaa07174cc09d1ba3af79
- SHA1 ca5be0e34203dcc25213ae1d64c37cc3bc5fe7e7
- SHA512 b69c82f94668c81fa2f6e09cf731ea9a05d3df8cc5834ccb5d79c5c89ee39505a4ca0ba1224b67dcc801dc0d3aa48254fd692e73ae080f880fa294cb3bf93a21
- TLSH
  T141C04C2E6578D541B2558611186C940F50BDDF520284045BA68055A8110BD5E7A419D4
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral27 behavioral28
- Target
  ccnyc-webapp/assets/icons/menu/contact.svg
- Size 403B
- SHA256 cb407b46f723ce640af71111f9f800848bc4d071c59d72f3658908b8b7674d66
- MD5 30b694f7fe20eeeb2a02eb460204cbe9
- SHA1 0582907c8696582a30f59fc73fe29fe3ef85b3de
- SHA512 4261ccf7441356eff45361b6e3bafdbfa21f89e3a0a48f3ed501adec0220cbbcdf918112b141fb8f8a5b58df078742d989094581df3da9c4dd28454f85ea2dd5
- TLSH
  T18FE02266E20C980CCB10431C9B6D70A5213AB0CAE34C0110B89859AA9A0E1ABBD7B6DA
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral29 behavioral30
- Target
  ccnyc-webapp/assets/icons/menu/gallery.svg
- Size 274B
- SHA256 bc76869c04efd1bb6c4782a6fefdfc6bb27a568c239ed3ccdb1eec7c519ae82e
- MD5 86f28ddb2a5fcb762ec80df52dc033de
- SHA1 1ac53f333de2b30d04d6f8c9f728fcaea7cd69e5
- SHA512 8f35e4b0ca601ca45e6df59a74b4ead81adfa14ef5e3502e327758f1608c37c8bdee504e880c1965c8eb9db309ea26cdf254dd64366d2402f5d0712a86c3204b
- TLSH
  T1F6D02B1AF11C9C19D280C20C192C6884307BF08593080105B6C81AA8050A4977DEF6ED
- MD5 SHA1 SHA512 TLSH
Score

7^/10

adware discovery spyware
- Loads dropped DLL
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32