5a7cf9e05a93d34b68e24b58dfb42297f935c2970294bc26503ab5e80dbb4d95

Sharing

Copy URL Twitter E-mail

General

Target
PRODUCTION2.rar
Size 188KB
Sample260603-ag29msgx4p
SHA256 5a7cf9e05a93d34b68e24b58dfb42297f935c2970294bc26503ab5e80dbb4d95
MD5 341cdbf4f93f93b7c40b33a658293849
SHA1 d89ccd81f029b01a81811be485984a7de310a2a9
SHA512 7f430bfadadd3f3b923d23d14c4c529887c810ce0aad54941f0be78a81d27dbbc4b5876bbe9e788a237441b2f0fbbda1e8c0491f800cdf614631a9fee76f991c
SSDEEP 3072:YKI7yXYPbul7Xy5GGNP9Kn7mh/Wjr7eIUptBQik671LeQPjgPqjkQ73ugS:YKwyXYPbuiirP5UrBQn67NVPjIqgQ7ep
TLSH
T14D14124E89066C038112DAB6EB5DDF6C511FD46C44CD0C36E8BBEE539A9B3196870E3E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Targets

- Target
  img/04 Honeycomb Foundation_pictogram_Medium._Mobile64.svg
- Size 6KB
- SHA256 bde6548522b38205d24a5caf1ae12bddbfe7d31c5f4ae71e441b1688e4a42946
- MD5 544d488b12bf86b04eef3617976d74ff
- SHA1 dfda5d740ca875fe435ad5c66ea2e94e23ac36a4
- SHA512 3ede8cecb81a9724e97c61a5b4debbfb707b9e7a96aee498575fd7101d0d05ca228ca1b70ead185758b1431c4c6353c9873ff34a42eee4ee3b904e9cf44c7c19
- SSDEEP 192:pEGJsowHhEGdVfn4ga5XOUZnYq27Zb0qy92hgRvF19:tsowJta5XOUOq21bcz9
- TLSH
  T1B3D1331925F605614663F07E2BEF7444303E80973A0EDDA4B98DC7B4AF1641E4AB7BD4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral1 behavioral2
- Target
  img/Pin64.svg
- Size 6KB
- SHA256 be55dacbbabd01abf35a3892daf6e77c4667a4cb8cb03d004c2f15b10e1b78e4
- MD5 2b8aaa80b5d9baf62415b10b318bff1c
- SHA1 25c74a38068061722d3fcc84d5b57667b1a35dea
- SHA512 f30072a3515b24902187a3b446eef0582535f8b45f6025533440035f383b4fdd5f8bbd5bec0d63ceea1e768017ebd39fd0f1ebcd430420119aa9f965c42af726
- SSDEEP 192:pEGJsowHhEGdVfn4ga5XOUZnYq27Zb0qy92hgRvF1:tsowJta5XOUOq21bcX
- TLSH
  T154E1435939FB0151D663F03AA7EF7804303DA0A73A8EDD64B58C86B0AF1641E46BB7C4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral3 behavioral4
- Target
  img/pictogram_Lock64.svg
- Size 1KB
- SHA256 c471c9802e9634452789799ff6fba94270938e512aebc30ed6a58ca415c8fb98
- MD5 6fcbc0db250931daad74437b17d7661c
- SHA1 0e50107b1745f9ef57828a415dbf52f38e8cc9d9
- SHA512 94ac2ae82d88008cbdb903d99f3ebc6a170765bb2639ea0ee4e0685c582f0723a825c93b29496f2e1aa505752bdb2b08a0594a42e7cd313ab616baff1d1caaf8
- TLSH
  T1F42123C0B2FD4A2DE1028B21D7A570B7553D208BC6CD0660B0BD1135EF1408E261F1DD
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  index.php
- Size 48KB
- SHA256 86efc707b08ea7bc0d77a303b0c63c2ea3d3d694f927164e1b500058d16e0730
- MD5 ff5e7f2428f01f6526241b39d5abdf4d
- SHA1 6a11d81b16446e81ee97df04983a0d604736b2e6
- SHA512 7fa5cb3ca057c3dedb45e68aca8a30be6f380caa04f14113743a6527499d8e424a368e2d2b887c23e48633b3a4086f39d48320a4b978e6498c952a71147f9a2a
- SSDEEP 1536:m5xsRfJDZueNW7c2EEn5MYvXhbPLCaLPmSppyR:m5KZS7cxoXh/CabmSyR
- TLSH
  T1EA23D175216A6C3FA3878C53F431772D3E76DC6BC9019BECF49C684A96D2E804C72899
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral7 behavioral8
- Target
  js/gx2.js
- Size 4KB
- SHA256 4da698936886a6f02dc755e60b2d0faccca8c70be5ecbf4117e80fe6a369e82e
- MD5 6f459bdb3359e27f18ecba174ab5159e
- SHA1 f7b047da1261ee2cf1d861d6a26d7b73c27c9cda
- SHA512 1b6fda3010e769892b9ffc89296b2ca977c9c2e15965d826cf9e6df57e3a71a918efd3b7c32176153f457ea983297bd624097da8fd90aab5d1b77ceceb702714
- SSDEEP 96:D3CtXyhzgZJFmdYnIp/ki4bOyQwqFKY9v0z56IebHqybHqDb:OtsziFm+nIp/ki4bOyQwqFKYV0z56LD6
- TLSH
  T1A0A17391FFA1475F0732A1B42CBE161FF7EA0992164C5C9AC028916530E0F6F667EE00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  js/jquery-1.4.2.min.js
- Size 70KB
- SHA256 e23a2a4e2d7c2b41ebcdd8ffc0679df7140eb7f52e1eebabf827a88182643c59
- MD5 10092eee563dec2dca82b77d2cf5a1ae
- SHA1 65cbff4e9d95d47a6f31d96ab4ea361c1f538a7b
- SHA512 cc92cf5a9b3a62a18af432fdffb81b76da84e2f43ce3c7800a919c10809118d0611e29a47f103ff3df18a54d5331bc5f06ef4771dc406cc763b30ff2a66a3e81
- SSDEEP 1536:Du98G2ltZMNWnDr7doqPp07HVDTLGbY9TGA7zEcbnkb17jQq3nPRefqvpsz:DuJItn6qepq15nUfqvpsz
- TLSH
  T15063E9C9B2C67273C3E730B824AF510AF136A8AAA44C4854F06CE8E5BD74A55447BF7D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  js/jquery.payment.js
- Size 17KB
- SHA256 38d1c43bb5a79a62bce3ec642fe216db420582062f0990bb7ce095fe9698a834
- MD5 774152a9c53dc99373516c145798a693
- SHA1 f15414af093561097469a786645ee647829a85ed
- SHA512 419c16d60dab72ae377b32f81f3a4ae04f8af56c5205209a4b79d54b1a3f4e3b0d246e719c1a38e2e03637143c9a5eca06861f3f312ebb0089a3a84bbddaebd5
- SSDEEP 384:8gMT56ppcyYHN2Kg9/S8bxgDP7lMKXJgG:8guGcy64Kg9KGoxzXJgG
- TLSH
  T15282EE4CBAF350E19623723C0BAFA5056A3EC9571809D919BC5C63906F42E7897F8FD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  js/jquery.preloadinator.min.js
- Size 1KB
- SHA256 6dab4fcc95fb9e408fa8901ab6024e30da6ce2eefff0bcfdb5b1fc71cb330d50
- MD5 6e2f8dec23e24ae9888380ebf2bc774b
- SHA1 30522b073d3f03bb995d5952d0bbd52f410e8d21
- SHA512 c45f28a048d9065053f731852435a033ac75f6c0c14b126fc71fca2a101b74b92dcfc818968ec6aa61876124dd7bd5714c43a7864b8bedaf641595e661e2b2c8
- TLSH
  T1CE212DC97552B00010EBF6F8953B440F56B16633DE6980B43A9CAD6CFD625DD4322F75
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  js/jquery.simplemodal.js
- Size 9KB
- SHA256 70b5a6613f03d3c015d826185e39839e6dbc2d03871f151bafbed5cc58503f69
- MD5 8c3ea9d905753f972d82b31a2dd58da8
- SHA1 2e42e4ae0c0bd4484d508ebbcccb876e95521d3d
- SHA512 626f31fe82fdec3dc7d31a374a8f9e09425493547432ab5dc616231664631e0263be777ad2cb357f7d99a7b3f0f059486d9342216568ce01678cdd05df8ca1af
- SSDEEP 192:FnBSyrC2Qo+b0DzDscW870yvqxnTTBEMDQwTOGkVR:FQyrCZo+btaoycPUwKGo
- TLSH
  T19C12867CBF247235C5BE606E71A7CB653F36563376C36801906EC5A8AD60D812231FAC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  js/osx.js
- Size 1KB
- SHA256 0b91308b89c55c1fa28e84114b00740680cf3cbb3a217ce80e06a54b385ee379
- MD5 7d7b46d47eaa768d6c3e58829c3da7d4
- SHA1 092d066c46cc79a24b5d1e8bf0dec369a44c38d3
- SHA512 bb9a13878c190a7e9c991d08c83ce9edc3dcab3bb58e87061dffb4714e6c6a3cdaca7707132c07275606e8fe8544233145921667d4b1611669068622e6a94098
- TLSH
  T13631CF44DF6C2071E7BE21BD186F68DD4E2C8273D04D4CA5BC39C4918CE4A3D3611C28
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  mobile.php
- Size 4KB
- SHA256 09c3d7a9d80dc735e55de1997983063061adbedfed9b1df885eac8df271cac61
- MD5 58db7e94f5e9f325618425f40f07b5f4
- SHA1 8f88a319a4afb07c70998f0dcec308bb74fde551
- SHA512 8a097b8891cb2bfc8fa0deeda3654f522f27f7c19c9750d9f265230634c0817e89851f4b59243175cdb5c5c923d1a4bab63fcf762fd4b6181cd8703e839125d8
- SSDEEP 96:12Cc5hz2cur0ECoBC1E1L1j1fpCCR3qXKOmHQkbID5ws:y5hz2cuIECoCWtZ9iK5HTID5ws
- TLSH
  T1B3B1C4169655010CF0138070FAE19A9A1675CA07934A8DD8BAB8B777EFC22E189733CC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral21 behavioral22
- Target
  success.php
- Size 38KB
- SHA256 f98feb1c1cbac8fba04675b7ca6f76a48e4950ef36645d744d9bd6f42bac1989
- MD5 ebd082f32df6824ad2dc2e0828dde5df
- SHA1 52a2c8ee81d5da570687b7df0018565249d68806
- SHA512 3b897ee90a4bee8dd9c2ed53621e492620d93c123d5f9cf5db781c4fbd94c097cf3825616dcb62e9ebb0ff4105164e0cbd3ee9661d6d913e4d83fd6ca9fb86b7
- SSDEEP 768:35x1ENrsRfJCaYKu3suc9Ngfbn5zF7Dw2EC0SZvBMYoUXEr25sw:35x1ENrsRfJDZueNW7c2ECBZ5MYvXECh
- TLSH
  T1D103BF751165692FA313CC73F0B2772C3DB5D82B85069FACF86D68599FC0AC04D72AA8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  successm.php
- Size 4KB
- SHA256 54a3cf5845864329aa7265a1953d82ef2ec02a59cd0bc260b764eda123df18f6
- MD5 acce9052daf76727ce8a5259b9420206
- SHA1 2caa34066220d283c79c5e636ba4d84e22e82dde
- SHA512 a3662fe8ae7195204759eec6870460a51f5e0a6776d6bd35e841a22de95cd8607deac9aaf0fbfd85eabbdd4fb8041d64b3527591dc229ece05c28aa65344e23e
- SSDEEP 96:NmDl94u2Cc5hz2cur0EC4Fp92bZFkecbIm:SEz5hz2cuIEC8pkn4Im
- TLSH
  T13891E82616B1510DF0238862B6F17A0D16B9C60B739BCC9875B8B72BDF817C98973249
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26