b873d3a0fd58b5db577208c2dc918e0001c4a7d054be6aa7a1b77da2c47b6d6f

Sharing

Copy URL Twitter E-mail

General

Target
FCcalebTrollTriage.zip
Size 1009KB
Sample260522-1csshse19p
SHA256 b873d3a0fd58b5db577208c2dc918e0001c4a7d054be6aa7a1b77da2c47b6d6f
MD5 cc64ed113f8d33ca8f92d73f483b2f21
SHA1 1cc8549ae0bcd40cb4773385c37f307f8ca7cb1e
SHA512 bca50f3d7e8b27fe7c41d5e2fce3dfce14b6e3ae54065461e7478cd3d2ab95d4a4bcdc5889ee958a136781dd1a8421aa7e78d72d938034f922dbf72f2cab242e
SSDEEP 24576:zmN7XDtU2cgh+8e7JXLhfYx3XjecXDtU2cgh+8e7JXLhfYx/XjeK:aN7Bamle7dux3PBamle7dux/Z
TLSH
T197252322DC212690C5DFB771D50AFE0F0B428209EE63E11628739D93963D6ED6ED3689
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  FCcalebTroll/FCcalebTroll/.vs/CopilotSnapshots/10B42C26A788AA4DAC1E2E9C796591BD/952527D02727834481176CD93815D852/038D249D8965E017D4C0DB16271B328A
- Size 3KB
- SHA256 65a7063aba82fb259a9db7e6ef9f4d75937e4897c431897daee779edd7d2bb6d
- MD5 7e4a8ac280b0393e29b7076bca1428bd
- SHA1 f74e78b344e60ee698adc13ff51493aa4829b8be
- SHA512 3b678bb483cd29be88f8a450ca96958804dbe76615a41352a1acba87a2a541f24ede0dcb2dc7100c36ab480b38677884698fa38f81468c4046c56aef62b54a0c
- TLSH
  T1EC818F26ADB50751047ECA2A274B9E093331404F22C1EA2936DDC5519FE8D9372FBBBC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  FCcalebTroll/FCcalebTroll/.vs/CopilotSnapshots/10B42C26A788AA4DAC1E2E9C796591BD/952527D02727834481176CD93815D852/1D72441F25B20542B8E2E139974B3DD0
- Size 3KB
- SHA256 65a7063aba82fb259a9db7e6ef9f4d75937e4897c431897daee779edd7d2bb6d
- MD5 7e4a8ac280b0393e29b7076bca1428bd
- SHA1 f74e78b344e60ee698adc13ff51493aa4829b8be
- SHA512 3b678bb483cd29be88f8a450ca96958804dbe76615a41352a1acba87a2a541f24ede0dcb2dc7100c36ab480b38677884698fa38f81468c4046c56aef62b54a0c
- TLSH
  T1EC818F26ADB50751047ECA2A274B9E093331404F22C1EA2936DDC5519FE8D9372FBBBC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  FCcalebTroll/FCcalebTroll/.vs/fake-captcha-main.slnx/copilot-chat/34253faa/sessions/262cb410-88a7-4daa-ac1e-2e9c796591bd
- Size 63KB
- SHA256 4e9b519511e32a22d86ba7a2c299d65d74951c3052949045d2a75e6b68bd4452
- MD5 508ce519bd09d5e1309c9ef88c4b1e74
- SHA1 07d0fa880256211bd17c567fe0b638dbcfe15946
- SHA512 e9b1b80da377f59f2a227d181270e481d67bcce8d51791863133fdd203eced99f221a904520d90f1bde494c1af090246b9f1445965d4e86c95bbcfca56ff128b
- SSDEEP 1536:wj1me8+6shTjeTtHwd9xUPtRGcdfQG+YnVp09:wj1me8+6shTjeTtHwd9xUPtRGcdfQG+l
- TLSH
  T11953F96AAEC423B109B302616A6E5AD5F339C1DF93715470FCAC416C57D493382BB7E8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  FCcalebTroll/FCcalebTroll/fakecaptcha.html
- Size 2KB
- SHA256 f046340f01f3bc755fe332adfe3488f96250b8500f3b116ab57d9aedb3fe8cac
- MD5 a6b51e73b4a8f768fbbccd46f001d4ea
- SHA1 9e485147c49a97f2ec7c966dc475a4ed6bf27116
- SHA512 8f63bd007274083b6d4ff1a6eb6226bdcddcd4d26887571fb380147f203b096ae7b3d7db1f6605ed509139c2e11bfb1ad1f90147c8e25c6bdd68b29e63abb486
- TLSH
  T1A6413B652FF81C7304B55C96231BBE017AE0C083E2C17A327FAD86945FE6C82D56B54A
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral7 behavioral8
- Target
  FCcalebTroll/FCcalebTroll/images/captcha_arrow.svg
- Size 438B
- SHA256 c833c1ccb809a8c80fd463210632d0eeedf0716595ddac58ac4c0ad7fd3ee85e
- MD5 57aff6892b787d0ae08162eac03306b1
- SHA1 3052b1c7f16cc9ee00bd69fd1903eb862d70b103
- SHA512 ab3491205bb51895fa6809b0dc9b6a9fa9e27c95a35915dddfc05ad7142739bcfd76a096b8b0886a78b5875430e02a3ea1e139aafc0aa87dbd0fc16a1dc16b6d
- TLSH
  T129F0F11C42AE4139954A4615F35C35815C2BE09B82AAC0D6BC8D1C28DF18F4538B33ED
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral10 behavioral9
- Target
  FCcalebTroll/FCcalebTroll/index.html
- Size 3KB
- SHA256 483b94b9363bdf7afad0479db85842b374708d1491b9bb94db160180cad1899b
- MD5 fe21043385e26c5fe042e3075b1e3bdb
- SHA1 d7b0298f7105feb749e6c5e08e929585e233a6ef
- SHA512 22fe80ae9986f5f0cc28481992f8f261e1915dff3cce9efdf8670197d62bb8284938e8ec88d5c4cfb575c77b2cf227a9d36db616ddaeca7db974a9087e77e9a2
- TLSH
  T1F07100D26FDE0DA200A9885613A7BE0479E2D183E1C0B5717FBE41A45FE5C93D25B68C
- MD5 SHA1 SHA512 TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral11 behavioral12
- Target
  FCcalebTroll/FCcalebTroll/src/fakerecaptcha.js
- Size 4KB
- SHA256 721e66c9b1b4b78bc47b32d3fc8cdf48b637618da9de3deea433ac5b8bd3e2aa
- MD5 366e60e13532c83594478cf0deffcffa
- SHA1 1429e18810c73b288ea08f8bd44118e1f37dbdd8
- SHA512 d029e2349c363d98a49d5298be8a64f9cbe0ccfd8271f6b6c89861b86aa2d2ba6c18edb1dbee1b37128a6e7f9ad0f5611fe0d4c6f440089efa2e0f60a45f78d2
- SSDEEP 96:nSzxSPYLl4AuOMpUM8TD49C1iRdlBjjTWRqzm1icvFQk43q:Tx58w9Iiui13q
- TLSH
  T17491AE26ADB11751087FDA2A274B9E093331404F2281EA2936DDC5519FE8D9372F7BBC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  FCcalebTroll/fakecaptcha.html
- Size 2KB
- SHA256 f046340f01f3bc755fe332adfe3488f96250b8500f3b116ab57d9aedb3fe8cac
- MD5 a6b51e73b4a8f768fbbccd46f001d4ea
- SHA1 9e485147c49a97f2ec7c966dc475a4ed6bf27116
- SHA512 8f63bd007274083b6d4ff1a6eb6226bdcddcd4d26887571fb380147f203b096ae7b3d7db1f6605ed509139c2e11bfb1ad1f90147c8e25c6bdd68b29e63abb486
- TLSH
  T1A6413B652FF81C7304B55C96231BBE017AE0C083E2C17A327FAD86945FE6C82D56B54A
- MD5 SHA1 SHA512 TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral15 behavioral16
- Target
  FCcalebTroll/images/captcha_arrow.svg
- Size 438B
- SHA256 c833c1ccb809a8c80fd463210632d0eeedf0716595ddac58ac4c0ad7fd3ee85e
- MD5 57aff6892b787d0ae08162eac03306b1
- SHA1 3052b1c7f16cc9ee00bd69fd1903eb862d70b103
- SHA512 ab3491205bb51895fa6809b0dc9b6a9fa9e27c95a35915dddfc05ad7142739bcfd76a096b8b0886a78b5875430e02a3ea1e139aafc0aa87dbd0fc16a1dc16b6d
- TLSH
  T129F0F11C42AE4139954A4615F35C35815C2BE09B82AAC0D6BC8D1C28DF18F4538B33ED
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral17 behavioral18
- Target
  FCcalebTroll/index.html
- Size 3KB
- SHA256 e98e612b0abb3f6516941469a959c13319447ceb3fce8a3e58375ed0d40b6dea
- MD5 2a3587ce95bce4f6e6aac8ec4f9c8c76
- SHA1 4cf7ae6b85655ea951c6a489a00b930b4811382f
- SHA512 28818399ec36d6194a697b1b27adcafb9ec71f90ef6a099f9d7261a9ae2eabcdac2cada910a693ae122dfccc812b9f3dfa192fbf9979e472f16c85fe3d98e7e4
- TLSH
  T1F37121D36FDE0DA200A988961397BE047AE2D183E1C0B5717FBE41A45FD5C93D25B68C
- MD5 SHA1 SHA512 TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral19 behavioral20
- Target
  FCcalebTroll/src/fakerecaptcha.js
- Size 5KB
- SHA256 d05d5a093feb35b94cbb1fb33a52788c4a94e1c7e31f5af41b6aeadeb50e7292
- MD5 0360f5939df7cf2a61b4c82d8150363a
- SHA1 375dc9b165a63240dc52725cb96104037eafdd81
- SHA512 01fcc88b9a8c65a6aefdacc733f7693ed3c3d013e9a6cbf48722df54e2c770479638ba34125ad6c5fb1d543002fd31854493c073f50f36a92a17048be2cfb138
- SSDEEP 96:nSzxx33bAI0FWyG/PJaPlKuOMpUM8TD49C1iRdlBjjTWRqzm1icvFQk43q:K3tyGHJy58w9Iiui13q
- TLSH
  T139C18F266DB1066049BF9A2A270B9F053330804B1281EA2937DDC5519FE4D9772FBBFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Loads dropped DLL

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22