Overview

overview

6

Static

static

1

pm/confirm...0.html

windows10-2004-x64

4

pm/confirm...0.html

windows11-21h2-x64

4

pm/confirm...0.html

windows10-2004-x64

4

pm/confirm...0.html

windows11-21h2-x64

4

pm/confirm...0.html

windows10-2004-x64

4

pm/confirm...0.html

windows11-21h2-x64

4

pm/confirm...x.html

windows10-2004-x64

6

pm/confirm...x.html

windows11-21h2-x64

6

pm/confirm...nts.js

windows10-2004-x64

3

pm/confirm...nts.js

windows11-21h2-x64

3

pm/confirm...est.js

windows10-2004-x64

3

pm/confirm...est.js

windows11-21h2-x64

3

pm/confirm...t_1.js

windows10-2004-x64

3

pm/confirm...t_1.js

windows11-21h2-x64

3

pm/confirm...1_1.js

windows10-2004-x64

3

pm/confirm...1_1.js

windows11-21h2-x64

3

pm/confirm...gle.js

windows10-2004-x64

3

pm/confirm...gle.js

windows11-21h2-x64

3

pm/confirm...ure.js

windows10-2004-x64

3

pm/confirm...ure.js

windows11-21h2-x64

3

pm/enderec...0.html

windows10-2004-x64

4

pm/enderec...0.html

windows11-21h2-x64

4

pm/enderec...0.html

windows10-2004-x64

3

pm/enderec...0.html

windows11-21h2-x64

4

pm/enderec...0.html

windows10-2004-x64

4

pm/enderec...0.html

windows11-21h2-x64

4

pm/enderec...x.html

windows10-2004-x64

4

pm/enderec...x.html

windows11-21h2-x64

4

pm/enderec...nts.js

windows10-2004-x64

3

pm/enderec...nts.js

windows11-21h2-x64

3

pm/enderec...est.js

windows10-2004-x64

3

pm/enderec...est.js

windows11-21h2-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    pm.zip
  • Size 12.7MB
  • Sample260601-pgqceabt2s
  • SHA256 7126fc3948a02227686e4e244fc166de5086166b0b61141d4f911c5f7dc0508d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
discoveryexecution

Malware Config

Targets

    • Target
      pm/confirmar/fa-brands-400.html
    • Size 2KB
    • SHA256 973c7352e432dc0c9a778ee6b48c7214e4df93875f82815768697d39021b5af7
    • MD5 SHA1 SHA512 TLSH
    Score
    4/10
    discovery
    behavioral1behavioral2
    • Target
      pm/confirmar/fa-regular-400.html
    • Size 2KB
    • SHA256 973c7352e432dc0c9a778ee6b48c7214e4df93875f82815768697d39021b5af7
    • MD5 SHA1 SHA512 TLSH
    Score
    4/10
    discovery
    behavioral3behavioral4
    • Target
      pm/confirmar/fa-solid-900.html
    • Size 2KB
    • SHA256 973c7352e432dc0c9a778ee6b48c7214e4df93875f82815768697d39021b5af7
    • MD5 SHA1 SHA512 TLSH
    Score
    4/10
    discovery
    behavioral5behavioral6
    • Target
      pm/confirmar/index.html
    • Size 26KB
    • SHA256 93bd0fe915069f6f8f3a6e375320554dabded338e5dcb8c487a2040776995395
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    discovery

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral7behavioral8
    • Target
      pm/confirmar/js/fbevents.js
    • Size 357KB
    • SHA256 30c7c64e2a789f5cd5d98d6bf6e9d197cb4e4dcb1c9c1506335c1f1401e0877c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral10behavioral9
    • Target
      pm/confirmar/js/latest.js
    • Size 17KB
    • SHA256 7ecf43c7bbccf8c5415b0fe9e64ccbc613a79c7435f59bd8ea0571729e36c2a2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral11behavioral12
    • Target
      pm/confirmar/js/latest_1.js
    • Size 79B
    • SHA256 b76449b103731b66a03ea69848733d0cbb66f59c88e974c6459f98acbaee0f7f
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral13behavioral14
    • Target
      pm/confirmar/js/latest_1_1.js
    • Size 16KB
    • SHA256 f3c0953aa47ccedee12ab1336c98fe129c424154b778bb57c9a39adab06e73b5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral15behavioral16
    • Target
      pm/confirmar/js/pixel-google.js
    • Size 38KB
    • SHA256 8cd8cad6e4e02d20615a462b1748e718c5f22702c699cb6058a969e63cf734f1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral17behavioral18
    • Target
      pm/confirmar/js/utm-capture.js
    • Size 5KB
    • SHA256 af29a5623fc22791608c7d559e49875b15d6b193e410c010a1b13929e6c63cb9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral19behavioral20
    • Target
      pm/endereco/fa-brands-400.html
    • Size 2KB
    • SHA256 cf1fe76b3fac95eb12ab0626cb8dc00634bd4726e20b140e9ac1666ebc332e80
    • MD5 SHA1 SHA512 TLSH
    Score
    4/10
    discovery
    behavioral21behavioral22
    • Target
      pm/endereco/fa-regular-400.html
    • Size 2KB
    • SHA256 cf1fe76b3fac95eb12ab0626cb8dc00634bd4726e20b140e9ac1666ebc332e80
    • MD5 SHA1 SHA512 TLSH
    Score
    4/10
    discovery
    behavioral23behavioral24
    • Target
      pm/endereco/fa-solid-900.html
    • Size 2KB
    • SHA256 cf1fe76b3fac95eb12ab0626cb8dc00634bd4726e20b140e9ac1666ebc332e80
    • MD5 SHA1 SHA512 TLSH
    Score
    4/10
    discovery
    behavioral25behavioral26
    • Target
      pm/endereco/index.html
    • Size 24KB
    • SHA256 5a48d489add3dc7adf2627040789ad99c523d992b0fb6d7d92cba3026b131c73
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    4/10
    discovery
    behavioral27behavioral28
    • Target
      pm/endereco/js/fbevents.js
    • Size 357KB
    • SHA256 30c7c64e2a789f5cd5d98d6bf6e9d197cb4e4dcb1c9c1506335c1f1401e0877c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral29behavioral30
    • Target
      pm/endereco/js/latest.js
    • Size 17KB
    • SHA256 7ecf43c7bbccf8c5415b0fe9e64ccbc613a79c7435f59bd8ea0571729e36c2a2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral31behavioral32

MITRE ATT&CK Enterprise v16

Tasks

static1

Score
1/10

behavioral1

discovery
Score
4/10

behavioral2

discovery
Score
4/10

behavioral3

discovery
Score
4/10

behavioral4

discovery
Score
4/10

behavioral5

discovery
Score
4/10

behavioral6

discovery
Score
4/10

behavioral7

discovery
Score
6/10

behavioral8

discovery
Score
6/10

behavioral9

execution
Score
3/10

behavioral10

execution
Score
3/10

behavioral11

execution
Score
3/10

behavioral12

execution
Score
3/10

behavioral13

execution
Score
3/10

behavioral14

execution
Score
3/10

behavioral15

execution
Score
3/10

behavioral16

execution
Score
3/10

behavioral17

execution
Score
3/10

behavioral18

execution
Score
3/10

behavioral19

execution
Score
3/10

behavioral20

execution
Score
3/10

behavioral21

discovery
Score
4/10

behavioral22

discovery
Score
4/10

behavioral23

discovery
Score
3/10

behavioral24

discovery
Score
4/10

behavioral25

discovery
Score
4/10

behavioral26

discovery
Score
4/10

behavioral27

discovery
Score
4/10

behavioral28

discovery
Score
4/10

behavioral29

execution
Score
3/10

behavioral30

execution
Score
3/10

behavioral31

execution
Score
3/10

behavioral32

execution
Score
3/10