ed6130afbda2b9bdcdace7683d2553d37acdd5a2f9bf4889cb747d690ad240f2

Sharing

Copy URL Twitter E-mail

General

Target
dan_ver_buton(RM15).zip
Size 11.7MB
Sample260528-phpr9se17k
SHA256 ed6130afbda2b9bdcdace7683d2553d37acdd5a2f9bf4889cb747d690ad240f2
MD5 62bf567b8f99b6ae4bc5d1854a8e01c9
SHA1 e447812178b8c8aa751f81a9efa2a4a60d577704
SHA512 1aae16a0dfdcc3e41d9a0c303ccf23ade15e04321aabe057f6da88b39bfd8638e2b5d1d263ac58bad7ca304a74d3eebbb8af18291c2d4dae69cd13f608a904f8
SSDEEP 196608:+6Q4fyUvCvoXcyoXcqw+2HXLgm+mogstluBJDtyZHTNzy88XLFdRVinNA8UEl6bG:+94qUvCvoXfoXX2XLj5itwqzwFdRsNcg
TLSH
T146C633BB71758809D7271971CBA33BDAF85C458B03530941DD68EC7788B4BA25EA833E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  dana/OwlCarousel2/assets/owlcarousel/owl.carousel.js
- Size 87KB
- SHA256 db9d6cf3c1c4b047c62f646e7d9991c06a212931c362bf53f9a2406b30f09466
- MD5 ccdf893e7d8b26933af0c336bcc3943e
- SHA1 ac575ba3377f95ef22bad865ec35b0b3dcb0dfe0
- SHA512 818db99c2eb775d1342dc2cf871509185c5ad86a08c80e452f29b8509a870c43078e9f11113e999ff487a35b25b6ddd6b95b6a7f2c4408fdfcfdd69473f59510
- SSDEEP 1536:owLoreUC7AuLMjvNlP8GNMBJ6IcIhKJQIOybQOoiYM9OJ0QQKOv:oUMNlPBqJTuOGQOotEhKOv
- TLSH
  T1BF9393C5F36C261B422631785EAE23CE723D402AD911186F7CA8E9DC29D546C436EFF9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  dana/OwlCarousel2/assets/vendors/jquery.min.js
- Size 84KB
- SHA256 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
- MD5 a09e13ee94d51c524b7e2a728c7d4039
- SHA1 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae
- SHA512 f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a
- SSDEEP 1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69
- TLSH
  T1748319DD72C6B06247AB71BA00BF550BF2361999684D4410F129E4EABC74B4E823BF7D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  dana/ast/img/hc-home-contact.svg
- Size 29KB
- SHA256 fe2c70ef744132df52d3cca69c70b471600cd926dd03a942816554c275bb9466
- MD5 e2b2f56e35d76ce1c1aa82b7a5455fa2
- SHA1 85ea01a3afe2cd42a06cc51a2802aef9af4c7f8a
- SHA512 e6732cfe40ad027f81a18245bf1977a947d4c7bf7cd055520065ca1011ed786d178c1a031750dbad8744e5f37674a8def0e79dbbcacd87ffad8e953fecf92db0
- SSDEEP 384:8Zk4zaQiKlLWDndsA5rpQxUnlyBZvuuY9xsvd0XXqUD6LF/ZKOkTu6At1c4uQtkB:8qFQxqrpVnlUuXx6Z/ZKOk5At1f65eS
- TLSH
  T1C5D24FCD2BB02AE5C8C9D7D6FF0241DD391FD1BB69918F34C32D8E19299286ED914D82
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  dana/ast/img/hc-home-merchant.svg
- Size 110KB
- SHA256 c9d8a08fbb5e3cdaee8c394b9f2143910a97fc4a2d45d1742037e4c15ede5dc1
- MD5 c3d45f3fb3f244a226ce00fa71575aab
- SHA1 b1e8c74b804324b50be23dfd0407c631fdbeeaa1
- SHA512 80f395de6a8d69865ffb736b240e2aa68104cc44cd4c30938a0188446955f2620abe6bfabd33e234241935b33f7e75c21a18fcf0c951e2f2e2463c2c3720a12b
- SSDEEP 768:UbqvK60ptmSc5xhUqQ/Jfhhh89km1fS+fT++Cfuk0HmiBFSD9hSXYZIuej3pcbmC:UbqB0eSw9WH3DkYyuKcbmC
- TLSH
  T1D5B352ED67A85DA6D6CCC3CBFF55907D202782F7DAC1C290C2946F1E285988B4C1EAD1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral7 behavioral8
- Target
  dana/ast/img/hc-home-tips.svg
- Size 24KB
- SHA256 90943a9b6ecf08a143aa6d7cf517be9e7bf04231053a2569b63832bc26cb45db
- MD5 9522818b8d3dc2c1e22b441e70e936dc
- SHA1 083c1c6f33704ec616b257ba5456fb1e4ed3905b
- SHA512 5014340936baf9662219b147d8d3f4ce0b9de8d245a9e70be1877cdde2302b31c997901640fcd5fb315ebf69a54bd594a51006f120e16da1a5d5260b09d0ac87
- SSDEEP 384:+1hu+C7YLbzDJzJnQYQgsnxOZF8YtFzFZVhhXEhmhQ8neTb:+1QNejJzJd8kH5zZZ901Tb
- TLSH
  T1ADB2B6ED3B755CE6DED8D3CEEF029079201351F799914640C198AF2E386189E5CAEEC2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral10 behavioral9
- Target
  dana/dana_v11a/id/www/nlhost/bi-logo.svg
- Size 6KB
- SHA256 8a4906561c6f268348e69eb8d660a558223ceab0219ed54b7d0a700104a7f0c7
- MD5 684dbd90a5b96a90e6ad284e5873f736
- SHA1 a1d3d60fc0bac27d9c65adacde840a4320f78c46
- SHA512 f236193fcd486386073cbb30a3b6ac86f2aeb8e5ac038b5b0f90239d166ae8cc8ff84e6e990bbdd74635386bf585b2d3a77cc95269db05f2e1b06aef053b835e
- SSDEEP 96:1OJ0FALCAY2j2JeOiHnEqQO6VK3zFoo+p40HZBBKN4Uljp8HergTHCHU5ULWfAds:1OJ0ECA92JDiz5f6405WqUbfeUsAscY
- TLSH
  T162E186CA573096CC94C9FC9EDF6BEED43A0EB0A97E3684D6935ECB5844578D8FA01810
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  dana/dana_v11a/id/www/nlhost/checkbox-green.svg
- Size 664B
- SHA256 5ba82e982e3d024f370b2d0b1aeff9d57adbf90010db0977edf63e4dc5009b08
- MD5 c03df3c8abcd3ef803870a0dcacbd6b3
- SHA1 46cf5214a41fbe9c1b1780ebbf6d55cf58333e87
- SHA512 5674499745c1dbb35dd252f15c03207f3fed76eb49ae6c03671bcd1d3388413a9cc53b0f20df3401d6d2a8dc5282244eea673d94840e9a7ccd3f2de8060c7b81
- TLSH
  T1A0017DE5073585D538234EB9EF7D5992333728EDF150140A73F4AE026682DB546486FA
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral13 behavioral14
- Target
  dana/dana_v11a/id/www/nlhost/dana-protection-two-lines.svg
- Size 4KB
- SHA256 cc5082ab551c576c65b6f5f6ec0b0a6098822b2db9c60ea219ea05a6079169c0
- MD5 0a8035d1e9eb8ebe13f9a0a3d351837e
- SHA1 d2dade260b3f9c6e583d5a5667eaa3c92d64b31a
- SHA512 fe5f7eaaba3ec9612d5184fcc9788f66206ef85ae42cf79c67157719bf9d4c931249ffd29de23ef8d501d3473f3f7772aef59948f6eadee925c3f20e69657d7f
- SSDEEP 96:mYPXvWxC17xZz/birpFGJHSiehCBBSBAuIecD:mYPXvWxQfW6HdehQgCRD
- TLSH
  T1B2A161DC2AA043E4B858B3FB6B17B9D8396B50FB7F81C935C780AE2174435B84E549D2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  dana/dana_v11a/id/www/nlhost/dana-protection.svg
- Size 8KB
- SHA256 82f36d611ddb5ba75fdaea7de436376f5095961f44cb867e535bc7e656808bfb
- MD5 53399567d2cc1806364bfb4544603db9
- SHA1 f7e622ccd2ef16e0b915f27024c5cc4f35e00450
- SHA512 2d8c96ee72f38269313b386454dc77642d11f7cb24cc4473719487b0ce8822909e361061c5b6779944d89c0bd9041d78b73c4757c592cffc8fc3c69b8754097f
- SSDEEP 192:OmdvJvALquhsSUvmkmhqJ3DTwEQ8wlDPJ1BCaMrT0+axkKWyh:xaeTekG6nSPsaMr3aqOh
- TLSH
  T1B01275E867D8A1E4B444E7F9C90394757E1B18F63767DACCC3A66E4AB24206D8CC9C81
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral17 behavioral18
- Target
  dana/dana_v11a/id/www/nlhost/dana.svg
- Size 771B
- SHA256 6b1a93204c9f9b3b6e6f9acbff1ba94e316a4bdef1319ab721db6b14a60255f5
- MD5 ad30fc72d699e905ebb102d276268b20
- SHA1 9a8836a2d1cfda69e466193dddfbf8a5ad8c371f
- SHA512 b973b6f7c3076974e378df6d9d924897f9ee9226c499ab89f23331b4bda43035832ad9e1d19873d865a1320b1ded034c51e1b06fb6145a38950feaae97258391
- TLSH
  T1A40175D006B4E781D5C6C939DF35ED155786F1BD4DF128C086E185449E8FC4D380882C
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral19 behavioral20
- Target
  dana/dana_v11a/id/www/nlhost/help-blue.svg
- Size 420B
- SHA256 1df7179a0f4da6a2cc178cce29c898d694eabe91dcf1f4ea53ca54202e287f08
- MD5 ef0353a3c491e5e221a29dbccdb912f5
- SHA1 a08ab2be5406d4509a1db26098d692c449cd4b14
- SHA512 b783cbc15e7071143c862d2ce667edfff911fe9405f75eba1e7856f3d5cf5fc935cc74d3d48883404db09938c812544f247b531ab30d9f4073b4613901bde030
- TLSH
  T1ADE022F8C004B00C63C70B2300396C149863F0277BC08C29A10E37C2D829CCCF02248B
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral21 behavioral22
- Target
  dana/dana_v11a/id/www/nlhost/icon-waiting-orange.svg
- Size 315B
- SHA256 96e79f53235353256a425e2c1d37bfc80274556a8f807b32992546e342fb0c0a
- MD5 c9f98bd22d895deeba0b594661a93f8b
- SHA1 fcc150cb48b2200eb4bd75295527e831a9df0ced
- SHA512 511f1c3361df1e58713fa3383aed5923241625fb6ccd8748756cd85a92a5c5f7ebbb8b6d8fba814495ec36677e7538668089f5108a3401d58a3a7f07ade0435f
- TLSH
  T195E026F1AE0C984ED20181B0CA2852D6122F84BC702F015C639D0EB0A013F33C84B548
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral23 behavioral24
- Target
  dana/dana_v11a/id/www/nlhost/idn-flag.svg
- Size 6KB
- SHA256 bebfe71bed7a9dc0d8544378476f66ead604a5c14713fd1562cdb3f2a2b86db8
- MD5 51e15e83c084ebd3cc989a93d7a1b0a5
- SHA1 43660ee406e9208e5e9f71bacf1ec68a36551c8c
- SHA512 c50cafcaf21b500048915138eaf12d68484f61466b146f03f0a5843820188d2017cc9b298808c915471e1bd50c18928eeeb73d6563bbfa268b8c20c9348c200b
- SSDEEP 192:p7lN57lN57lN57lN57lN57lN57lN57lN57lN57lN57lN57lN5e:p7lP7lP7lP7lP7lP7lP7lP7lP7lP7lPG
- TLSH
  T117E147798E9C4B1D2332496EDB0A02AE2E9E35DCB245E8DF796F34EDE2325053461D84
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral25 behavioral26
- Target
  dana/dana_v11a/id/www/nlhost/info-filled-yellow.svg
- Size 403B
- SHA256 546f4c9054883ffee1b793505f014aece484df039d990d875a1be456a0c7a82d
- MD5 17fd7180c4c47e408e97bf389eb37a1c
- SHA1 c28b753dfdab4cd442611b81da417031a32d9423
- SHA512 b75e517bdaa061c9e952116cd8cfc9232cbb3eac2710a7576d4ce046f4282c8de4279b278681c5b0ef5f916fe4d3286dd213166d1a73df52586068f26cdf2abc
- TLSH
  T19CE092FC5349159C45170033FD3C3F82256D92BC239CCD5CDB7C9AE210018AEA255995
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral27 behavioral28
- Target
  dana/dana_v11a/id/www/nlhost/kominfo-logo.svg
- Size 4KB
- SHA256 e287ecb82e52a66059c761ea19b4f211b0a8d360453f96e16be09ec871a9a24e
- MD5 c4dd27ea8f7bdcee398d4d91de126d06
- SHA1 1192c6cad4903df46dc5d9a4a491a4c3ba4a62f4
- SHA512 c11c4388aefb6033156c0528dcf96c97ab8206054f1719c325b31edd412b49835c9c9cb0bb494282a93717f2c0f78cf35e6ae51e250230b251ea597602aa3cc3
- SSDEEP 96:LYFmGPQWH+XMUVU5IcQ6IPQvi7RZcNveVhQ3++fYvBEYdLeWUpKlKcan:MFQKhkU5/I4EfcQ2YvBEoe0ltan
- TLSH
  T1BBA165C543205380E5C7DAEEEF27EEC8151F74FE9D6695C9969F8904544BD8CFA04844
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral29 behavioral30
- Target
  dana/dana_v9a/dana.id./www/nlhost/bi-logo.svg
- Size 6KB
- SHA256 8a4906561c6f268348e69eb8d660a558223ceab0219ed54b7d0a700104a7f0c7
- MD5 684dbd90a5b96a90e6ad284e5873f736
- SHA1 a1d3d60fc0bac27d9c65adacde840a4320f78c46
- SHA512 f236193fcd486386073cbb30a3b6ac86f2aeb8e5ac038b5b0f90239d166ae8cc8ff84e6e990bbdd74635386bf585b2d3a77cc95269db05f2e1b06aef053b835e
- SSDEEP 96:1OJ0FALCAY2j2JeOiHnEqQO6VK3zFoo+p40HZBBKN4Uljp8HergTHCHU5ULWfAds:1OJ0ECA92JDiz5f6405WqUbfeUsAscY
- TLSH
  T162E186CA573096CC94C9FC9EDF6BEED43A0EB0A97E3684D6935ECB5844578D8FA01810
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32