68950ad7836dad224ecb100b2909914c2e6d6b97b41a658afc239aef97006890

Sharing

Copy URL Twitter E-mail

General

Target
google%20drive-1.zip
Size 4.8MB
Sample260603-pgalysfy7q
SHA256 68950ad7836dad224ecb100b2909914c2e6d6b97b41a658afc239aef97006890
MD5 f82eac06404e93e2613984efd7cde4e4
SHA1 56af4584b10501f8c277e75af0b24dba9c7eba93
SHA512 8f770f10470c201ddd94d2e6a171c0677119f5e6b14042a4b351ec714a4b2da22add1bc89a8f6c2a1c8ddae9cfaa99c82d9c96ab591875a7e7dd6af284338ff4
SSDEEP 98304:chWuV7Uar71FCVtznEfXkKBviSR1WZpo5pA0XWP4pfpKgGb/ntP7OiCEHwD:aWu31FCfnGviSjW7CpQQf4gGztPzFHwD
TLSH
T1B7363379F80BBE0BC02E64F55C435FC1E5FD291A11968C063581667F42A05DE2FABAF8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  google drive-1/ao33l/coded.txt
- Size 13KB
- SHA256 2e67fb8b92e92ab748e498c70fce71ab99f94bd568a864dcfed220c5e5897cee
- MD5 59c5ac3bee8b9b57e0c41c15c1922687
- SHA1 ebe5ebbd0e77ea9758e285d34fba8f9a25378676
- SHA512 d92f52c3e4b0c75a191c0020054894af9e52b06e2d4f920eb88d28c3d16d489a7375d0df3d10263138a2b9c76d4ad30661ce25efca07d9a45b2debf132c0411d
- SSDEEP 192:FC5REtIzDT0Zpm72mUhail5kWoOC4fpXpWs6/4QYJMuDM:FG7jUTi82uDM
- TLSH
  T16852A52598F70D97254185A03DF1751AAF91C213D38DED2CBEEC46649FCBE8A8C87278
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral1 behavioral2
- Target
  google drive-1/ao33l/geoplugin.class.php
- Size 5KB
- SHA256 effe117fa89a3389108542ad6bd16616d3da3f5223ce130681a7cfa904a346cc
- MD5 855843d9cb173722e425fa36a67fa6d9
- SHA1 824ccc74216a122be3327a36c575e91446c76b40
- SHA512 d6f4414bcf3ec4492adaf4aec858e71af42c9abdb4f096f27843bcb9763f939452aa766fe3a74331b48f6635d24756cac31441996234c66f7a594c564041853a
- SSDEEP 96:zQapMrp1cwAzq1YZgwQIKAqh2iCYqWGXUQaVc96oAeQeLN/YoLQhyiHQG:0apMrSlgw7C2iGWGXucr9M
- TLSH
  T14DB15405318E5CE7A53931853B3B8487E63DE3FA22CAD9D27AFC400A065963CD365AE4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  google drive-1/ao33l/index_files/guid.html
- Size 150KB
- SHA256 645afc59f9f878d2c96ed75e5af641c6f32f782d6d3a0d5508c87ece87d72724
- MD5 93ef6b2dc45cc3009e753c1a606ace1a
- SHA1 ec9e77ceeb0ddfd3152e0d5f347200a4d48c04fb
- SHA512 93abd92d135d90fef53e98d5f2e585052b594bd41b4a398950761246794d121c1b830045f21414765b8c9aabb708085f134ebf5c21c03206c336de25c5a4238b
- SSDEEP 3072:vW2Km0BEM7QbpDRa/9WCoGeMvrDdNuJMcjMoLxemrvpWHJa:vWFBEM7cD6wIlgJyo7BIa
- TLSH
  T197E33B5A37E90A35941730785E4F9288EB20900B661AEDA97C9CB3D85FDCE3401B6FF5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral5 behavioral6
- Target
  google drive-1/ao33l/index_files/lp-ui-logo-header.svg
- Size 1KB
- SHA256 64cc82939599ae62a09db24a8daaa3c0dd6118fba01a94be9e6ab8c68e3b7352
- MD5 221797b1861e1edf8158ea77436dac61
- SHA1 65fffa15cfef1df6c4859f6a5423c9bcbaa01783
- SHA512 bcc4f379740ac1fd1b5104bd46bccd3b1af0bf6eccf0514baa5172fb2b2074d2ee1bf0806eb3b1eeff4e67cc9d4d4b83d7c1158380a1b39a9fc27fb978e622fa
- TLSH
  T1D321E45D05FF180A9D532516876A35A03975E22FD26586943D8CD3327F08DE11996BC2
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral7 behavioral8
- Target
  google drive-1/ao33l/index_files/saved_resource
- Size 78KB
- SHA256 3850c356bf2fc41a38ba5b66fd8f269ed9e1be291bdd9472f1a9485e7e35d082
- MD5 b277c998abf3f611ccda874ae502f051
- SHA1 09c00054e61b50c51e5e8a89ab62b4fdb9c89562
- SHA512 fd18122c78c3be2b6446bbea36c8607f9dcc72f95011cabc4b3deed2d53080fa295ef372031e876762028961390c8c0a1a4b7ff7e6019a8d8d913e5c046e2989
- SSDEEP 1536:PmwZJxMTZ0+KOLSFXDB5aoVabRSNA1RvMbDiU5i3rjVyPjHRBpW:PmBTZ0rWSlDoS6/vMz5IQVW
- TLSH
  T1FB734CC576613436466360F864AF0806B136EF776C8988F5E484C8B46D38ED612FFFA9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  google drive-1/ao33l/index_files/saved_resource(1)
- Size 95KB
- SHA256 5f1ab65fe2ad6b381a1ae036716475bf78c9b2e309528cf22170c1ddeefddcbf
- MD5 cbb11b58473b2d672f4ed53abbb67336
- SHA1 66f47b885d587aa9a6c453ae3f2c9a382e5c7ec7
- SHA512 2bb663ecf1ac1e4d9fa58dc9c2f6eea3d9ca739e353287c5aeb2da5143bdcea8219c9c5b677667df95bf65e5ef6d3d91b52ba3c466f0f0f824aa9a195d76c687
- SSDEEP 1536:eYE1JVoiB9JqZdXXe2pD3PgoIK6alrUSTJWFk/zkZ4HWLZoHsrOa99fwk6b7/Hpu:V4KZ+S3WLZICOaLfwk67qD1PaUa98Hrn
- TLSH
  T1EE93E8D9B6D6706287B734A851BF410BB17AA8EAB40C4C60F058C8E47E74E9D507BF2D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  google drive-1/ao33l/index_files/saved_resource.html
- Size 35KB
- SHA256 a52668395e57259c5cd7f2d255a5bf0d125a5a4bfe335554d337a3895380cd1e
- MD5 27ebd560dca1bea54c1436369a764068
- SHA1 e29658af0179782932259afd32fd94e235060b0e
- SHA512 922de6aad07d248d5c2b37991bf4bc4dfd22b7d10e4ccac5797cc6a4b2b32487aba4d35795bde3de25dcbf332717aa6151c64df0b644181bf2bfb512f3292a07
- SSDEEP 384:Ev+ZNcBLDTfArAOp/HScDlqwB9CN3uKD4wzzrXdhBW5j/IBSn:G7DTo5p/cOc3lBujw6
- TLSH
  T11CF2DA687AB37029581B71BA97FF330E3235D047920BCD44B99C9AC46F90AB55623F9C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral13 behavioral14
- Target
  google drive-1/ao33l/index_files/tcode3.html
- Size 150KB
- SHA256 a2080970ae2d50637e0b774728c2e049f835238e0ce06664ded3697ea24253be
- MD5 9f34f9d883b7aada0e6c7853ecd23487
- SHA1 8c65e4f262017ee27594d33e8831ec2851f9b9c6
- SHA512 102d955a877723c80807cde355e9eec3e53b4bf24e4f2bbb35853699cb93a51cb5ffe0fde80d68abdf4ce0baebbb15060cb4e7d2c3fb62557e59e7751eb71c9b
- SSDEEP 3072:2W2Km0BEM7QbpDRa/9WCoGeMvrDdNuJMcjMobxemrvpWHJa:2WFBEM7cD6wIlgJyoLBIa
- TLSH
  T126E33B5A37E90A35941730785E4F9288EB20900B661AEDA97C9CB3D85FDCE3401B6FF5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral15 behavioral16
- Target
  google drive-1/gm33ail/coded.txt
- Size 297KB
- SHA256 abb14402f3c63aeef9450da2652eef24bc7fa06e7a69bde12d634a095bad30d8
- MD5 7b459c414a6159c14681e3d97c6a4580
- SHA1 ccdee3e18bdf7b0e1c181a1dee9f282457e0057e
- SHA512 423b6f2b846e4c458d4b4524df297ed2c71410ede611fe2deb40b9ff0e70524637232541f6254caf8730a87dfa41ec8c2f41fb3016c8e24bd2b27dfff9c1c7ae
- SSDEEP 3072:gk8WIBW4Zfih6z+wB8G5/hxisAlD7VEhDgOWbObnOlJTVCyIp:g46HBX5/hxiND7KeUO7T2
- TLSH
  T13754966F5AE30145691398AC17EE0A583338D013E40ADCADBFCE5689CF47E98D9D374A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral17 behavioral18
- Target
  google drive-1/gm33ail/geoplugin.class.php
- Size 5KB
- SHA256 effe117fa89a3389108542ad6bd16616d3da3f5223ce130681a7cfa904a346cc
- MD5 855843d9cb173722e425fa36a67fa6d9
- SHA1 824ccc74216a122be3327a36c575e91446c76b40
- SHA512 d6f4414bcf3ec4492adaf4aec858e71af42c9abdb4f096f27843bcb9763f939452aa766fe3a74331b48f6635d24756cac31441996234c66f7a594c564041853a
- SSDEEP 96:zQapMrp1cwAzq1YZgwQIKAqh2iCYqWGXUQaVc96oAeQeLN/YoLQhyiHQG:0apMrSlgw7C2iGWGXucr9M
- TLSH
  T14DB15405318E5CE7A53931853B3B8487E63DE3FA22CAD9D27AFC400A065963CD365AE4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  google drive-1/li33ve/geoplugin.class.php
- Size 5KB
- SHA256 effe117fa89a3389108542ad6bd16616d3da3f5223ce130681a7cfa904a346cc
- MD5 855843d9cb173722e425fa36a67fa6d9
- SHA1 824ccc74216a122be3327a36c575e91446c76b40
- SHA512 d6f4414bcf3ec4492adaf4aec858e71af42c9abdb4f096f27843bcb9763f939452aa766fe3a74331b48f6635d24756cac31441996234c66f7a594c564041853a
- SSDEEP 96:zQapMrp1cwAzq1YZgwQIKAqh2iCYqWGXUQaVc96oAeQeLN/YoLQhyiHQG:0apMrSlgw7C2iGWGXucr9M
- TLSH
  T14DB15405318E5CE7A53931853B3B8487E63DE3FA22CAD9D27AFC400A065963CD365AE4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  google drive-1/li33ve/index_files/AppCentipede_Microsoft.svg
- Size 7KB
- SHA256 bde5e27f76f371121f1955806f1b662f323f3793b079455f5bfe83365a393625
- MD5 aed5eb9ccea43f119a25b3b74c59c7e7
- SHA1 d94927d208e78c24a5fdcfe9cdd95cb31887b630
- SHA512 2fac7590ef69a8fe65fa4c9ff1b3cd8d426a131a38c4805128753632589d6b0b81227fb23a31e79fc342fd0957fd92c885cd3d9185d797c9d5127acc127d7dc8
- SSDEEP 192:rqy1QmQ1KEXDTAUTXN1HVMq7xTCBIzZc/KFlSBSZiP:rRMHnTbFTCazwSUP
- TLSH
  T1AAE1585E437883E478AD5774983A2FC333A198D9A920D488D32F7C059503F9A3B3DE54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral23 behavioral24
- Target
  google drive-1/li33ve/index_files/DefaultLoginPaginatedStrings.EN.js.download
- Size 11KB
- SHA256 b0a29b4ace3bc64bd9b9e8a3f050a741bd23d554afd6394ad16569007ca0ff3e
- MD5 881fa706c78c14f37bba49a541f51d42
- SHA1 0bcf928d4b71a4f165ac953b283d7679f8ae7f52
- SHA512 73da42b452849e1b2ac8d2dac0dd50ab3c59f3f19fa0096f99f85b45eb7bef59f6f40c72303d44f785bdd3ac1e81af4c85e68541249d10f23aeb3ee9bb97d5be
- SSDEEP 192:1tMSp6vsooJARqU+ueT8/mOJKvYEjEW/qkgEuH92pcnkfpVnHnGA0PE:bQSJAYUqbOJKdikglXknHGA08
- TLSH
  T1AD32845FF7D0870A5B911FE83C5D69397A52C29A00495C3C9EF4811F72B3E2BEB12685
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  google drive-1/li33ve/index_files/DefaultLogin_PCore.js.download
- Size 207KB
- SHA256 fca53da6b1648011c9ebadccb5507a77eaf0e66568106d9bd42fcba9b27e4b07
- MD5 0317a5967d9505dca027f5a55a450602
- SHA1 75c69a8a80e8b60d7fa503e8dd44cf327b104b11
- SHA512 e67cadd18f542710b2ce818b61a46f76fbcc1eb3cf650800bb813d4c4134a62606b28753eabac70e797779adb5e9944999198fcac202768ccba4b0774f228923
- SSDEEP 3072:oJVoInmvo6cKiaDOYt23JmRkJ8IFwfIw3r8YyaS4KkYcm/1RJbHX3pG3/:S9i1h0ku8IFwfIw3r8YyaJYco1R5JG3/
- TLSH
  T1A9244CACB99072A303D7A0B5503F010B72B6A4292C0F4560F26CC5D66F7AD5EE627F6C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  google drive-1/li33ve/index_files/Microsoft_Logotype_Gray.svg
- Size 5KB
- SHA256 356f7d1241f92c9de9c9cfd0bebb6c10d1b38508a3f37cebc26329c656bad19f
- MD5 5feaa482d83c2a69d012f9bff660d373
- SHA1 ee586d2b46e1a0110c581d507033480a40704606
- SHA512 bc07c9db3c3494a46e4246cab6ebe39215f01ae5329a333c2872052992dc1e23765c1826631113f5ac6fc932ed7f17dc5030ab78457d2bff3e0aa0f7472a4eb2
- SSDEEP 96:Qf/Or7Vir8P8KJfGVfd+nPkRCrthXXQJ/T6SXuVX3ns9ozR0z5tsQyiPr:q/Okr8P8KBGVUnsCrthHQJb6SXuVnn8v
- TLSH
  T132B1F15F0368C5D8748826F8AA3727D337B2E8DC9716E444E39B6C05E406A7B636CBD0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral29 behavioral30
- Target
  google drive-1/li33ve/index_files/boot.worldwide.0.mouse.js.download
- Size 619KB
- SHA256 54e9a8ac54d94d8a2f90356ce177e9672db927c2858a264820b1982ae6f4a6af
- MD5 b61f929ac560a5701b846e898ad6f280
- SHA1 ed13249598bb5e65be05bcd48b017268345ab278
- SHA512 9c4ea4ad4a0236f973941e7931402669808e5e81d6068a774db336fd7fe8b7525e110e4234b6d8b128a2c0d8b79ef1e42b2e800233310cf83b157152042cdc98
- SSDEEP 12288:AhqW/1glgi3jZGVNkzYJSrsHBbovd2MOV0r2qWoBUoOQiDl:AhqW/2lgizZGczYJSrsHBbovd2MOV0rK
- TLSH
  T1CBD4834E71E2B9260693F4F6013F1145B23B94464998967CB2A5ECD7ECB8A0E4237F7C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32