61b450778be258ee3ebf6da270339df2b0c89a272a90d8910738cb82beca8e42

Sharing

Copy URL Twitter E-mail

General

Target
humanicity2.zip
Size 20.5MB
Sample260604-phlqlsft3m
SHA256 61b450778be258ee3ebf6da270339df2b0c89a272a90d8910738cb82beca8e42
MD5 874be727c5347991de53a151962fe714
SHA1 0ec51df6647ebef95ff33cf2d0340a3fca1ede43
SHA512 e26a3707b558fccd6975bb04a5b5ecea485f9932597969538678d704398732205cfb50e0202dbb5372e9a64e8fbe4ab7ae9e00dff384ca30ce07472c2188e775
SSDEEP 393216:xj2SSmGViLkbP6y7bcgJgpM/ppI6BjFYkKuTjmp6iee7Q6lajEsecEWBNHPIwPiH:p2b+yDncvpaI8xKuOpzeFjbEWBNJqrRt
TLSH
T1B8273373E3252251DDDE9A35FE2BC2CAE86D36822B31695277244D0C3E5ACF26C3C615
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  humanicity/ambiente.svg
- Size 1KB
- SHA256 e940ce7ccbf259ed7554f2ccf69b6990936ee7ee2789475eb6c783945c341f87
- MD5 5967e8e83db46062d34e066774d3e271
- SHA1 e65f788d146bfac1cce7622a6c999fd2d0e42f49
- SHA512 c4b3a2c9e6ce30b1fada53f31901240b3889e137440ef260d4503abb2778b0b0c0f7c4a67a8f9aa9e6e05d3975f92720c97b666f7203e3f2ecbe38352c63cc0c
- TLSH
  T179113E7B9362EAFF9CA98B08CCA9B043751120D6B39451D8CBE3A436D8094FB8179958
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral1 behavioral2
- Target
  humanicity/ambiente2.svg
- Size 1KB
- SHA256 60f8b715f3e8399c4e271fa68b0e0c7e791b988e37a8c91f4704ce91a8b215d8
- MD5 3c093747469405bbbcbdaf95a1bf974d
- SHA1 97d8773a3b7ce9044753060e83eca7094c13d2ad
- SHA512 c08830f2dd6293664e4b57ae84154a0f902ffd74063e2d26d9fa7c1452fb179c389b29466b13d6ee76199ae98290bab8eace6ea232fae9a5057cea91301ba531
- TLSH
  T16B1132778351EEFF9CA98B08CC69B043751120D6B39411D8CBD36436D8094FB8179954
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral3 behavioral4
- Target
  humanicity/index.html
- Size 41KB
- SHA256 48a15116c6972515d9d1326fc649d09040d1a3152b116f6877b4f4f84149ea19
- MD5 8a475f805fc3b8131fa0be8d565917ad
- SHA1 673357150e3372004a58cbff222a36c4cb64e952
- SHA512 021ecb46733fad33be4b9fb531f4916b4b77b7bb8bb50b4e74157a1933e0acb6e5a206653cf7ece990e873cf9f58b648c82d4a44b522eec442d833b065c40a5d
- SSDEEP 768:bxJJJJJJJJGeJJ8m4ZZ9FO1RFu4p002r00500DFvuZB+nzQASQYKu/a4:bxJJJJJJJJGeJJ8TZZ7u/u4+VFvuZB+O
- TLSH
  T1CF1353103AC0443A007382DAE7768B55FB61E307E64A8990F1FD0BAB5FF6D66D917358
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral5 behavioral6
- Target
  humanicity/innovative-startup/fonts/la-brands-400.svg
- Size 905KB
- SHA256 4da18191698677d856d44067a8387cd279e8ba5d0cf9fb4bffe47d59bdac1f13
- MD5 9769d0a6a42cf73df12bc63a7a994131
- SHA1 267fd761d38caeb1b089a2b0e9d4a8ecfc46fe6a
- SHA512 3340cee267543237f9d578a6a432ebecb69348ce4f61dd5faa6b56c547c477bfe63a607affd4f3b8aa7db340c2e8d271731f7987f0379bd7b5c077c2f014306b
- SSDEEP 6144:2hkc6FqauNYpc0PnQcm8CS4MqGQ1fwV7FLEUGhuQBF64u0exXGJQJpo60fonVyqh:fR
- TLSH
  T13D1540BDA384DA8EE74EC7925D10B49D364FFEB35BC219A4D086CFA581631BC4E4D482
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral7 behavioral8
- Target
  humanicity/innovative-startup/fonts/la-regular-400.svg
- Size 110KB
- SHA256 884ce19c1a9e7c1c496cf0cdeb5bc26e27c4ddda94f03b239a63ed2835f31d6d
- MD5 55c57a74937e6de260b67c62522f7ea1
- SHA1 0f7b48ddc83338ca2b8925e6336ccdd8b33f82e6
- SHA512 84d13e82988f0316b0a5286a8ac9b57ce5d4c3d1f7399aee3a2e90f9fee5c3c8d9a40b540a0512ebfbd1f278a83da24be35a318f7b17a58c3532ea3851971be0
- SSDEEP 1536:O0aLVwXm7afOIcnDHrNlhSQ82kBU68MMN+MlMJ3E9:LetlXK+
- TLSH
  T166B344BEB355D58F6B1BD7C19E10B1EC324FEBAB468628A4F00DCFA947221FC5949441
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral10 behavioral9
- Target
  humanicity/innovative-startup/fonts/la-solid-900.svg
- Size 901KB
- SHA256 0ce0cc403ccd09a2d55dce9f91791f1d8f848ac0eac485ec9be366c0b9d96677
- MD5 79be4e9fcffc796ec3b2cb9a1f46d39e
- SHA1 e8aff2133506e1e2ed5e37b0819dd35cf2e9044b
- SHA512 cc083f187cd15cb8d612d4ec8180f1c66eda7ef5112c403a996b1114427180866ea828c95862d0e4ebd7425169cd25cf6aee81df13749535e3ba3b2ce75b1833
- SSDEEP 6144:65zXPERYgjdTLz7KxV1QRnE6jQP2MmdYtHK95sGHcDurJ+AdGQV3Td:FbJ
- TLSH
  T1431502BEF349D98E6B1FD7C29E10B4AC324FEFA7468518A4E049CAE847631FC9D49441
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  humanicity/innovative-startup/js/map.js
- Size 5KB
- SHA256 5e2d3198778509b1f56aaa11114cbeb7cdac1e35ed9c2cc9ce19ef484b89bb0f
- MD5 e036944e5a5283fa76a46b5fc525b83a
- SHA1 1f89aed92b0e2db4b144d9f4263e760d2c516b81
- SHA512 9b625db2116ea51bbf360acdbd493d514920c47663ae83c2ea6a9053982e48b845ebec6199c858c7925c94b5b65e75ae16ab9026443f920a92371fe1a6518c66
- SSDEEP 24:qdY7/pVAJxjtnQsAJuotnt4AJx9ntRAJxjtnuO4AJxsnfUAJx0nfE4AJx+nfUAJW:D7CiZ/oIOaOYRBvbY/3Y8xeu2T3
- TLSH
  T150C1BF3AE8196C5741F3733B92DA8281F860435F4380592B393C86FC1FF696A1985FE8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  humanicity/innovative-startup/js/script.js
- Size 9KB
- SHA256 324486381cd67f02b4a17fe6a90b12f212dfaf77742ef7d21fc60cb516250f07
- MD5 46133b2a8e5ed913649cde939314bb3f
- SHA1 59c3dd830b0ccc4ed0904daef66359a2476db30d
- SHA512 aaa83fbf8a10020029cd69fec68ea639855fbb3ce6ad3b365057d5c942c13dc7230a9ad3b5ae6cb3fa6084db34afc68205461f72f01401de44e5789fe7ea6263
- SSDEEP 96:/M/vK24PDPsGAtwgoCrJZ5J5HDwc8pRhp/MMv4rdn1FKl7eMkICnCxGKiAYWbBbB:/H6UplvsdvGHKXWbpAI0c
- TLSH
  T13D123419B020115585BB6376AF7A9988EB76031BC3065943BD7D0A8C1F32399F292FDE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  humanicity/logo-abreviado.svg
- Size 1KB
- SHA256 ee0a5b6bbd1773a425fd0af9dcefe97ddbd122477e9becf264ec08d954edd400
- MD5 73f521dd75b615663844862090f781c6
- SHA1 09513ccd2e17c6527b9371499d7da0d6deb09370
- SHA512 3c4d180af4998359a3d4bacbca5624bef1ff6934008afb1446b3967656253b6fa58dcefc8219ec21535b0bdce3571c1851b8330b6604902870265d20df9366cd
- TLSH
  T1863111BA8B5A0BFC94C0839899213240BE93F48FB34143F5CB972631A912CB3C07849C
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral17 behavioral18
- Target
  humanicity/logo-branco.svg
- Size 2KB
- SHA256 9d1aa3fad336f4024a175b9d1cfe29d3fe01b22ac66eb41dff4fd10a8781e49e
- MD5 b32e091e999ea4cc4e2eb8e1e4f72451
- SHA1 1f0b1826cf40e6ec1bf037918ffe8465b56b92e5
- SHA512 0be404a654744dab4fb3fa07ef5ef9ed183ee866f6817641ab0a274f242b352194f1bff639959863cfb37f09cfedeae6bb5d39ef0427a8d02ef2ce87877862d9
- TLSH
  T15D5177F78BB03AFC6581075C622145D93987786F7361C168DB63BA31EE03873817469A
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral19 behavioral20
- Target
  humanicity/logo-cor.svg
- Size 3KB
- SHA256 6e0ad8563db683a6e26fe3510c3bbfe3dfb00b7f168ab5b1504dc6b250c04f3f
- MD5 93b5018f170ffe0a3d6d0b1831f7d945
- SHA1 e9755e2784f136326b9028c7ade3dd3f4f60251a
- SHA512 c4f4ed1bf61e24ae2d4fc62105ea26bb7055f5cbab43b4a7fb9593a8362c8a5bd14ca637d328f8fe13060c3a51628f3122e4cf462211a1584c4ee20e73fb349f
- TLSH
  T1026175F74BB03EF865810B5C522194963587785F7361C2B8CB63BA31EF028B38174699
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral21 behavioral22
- Target
  humanicity/logo-cor2.svg
- Size 3KB
- SHA256 e53ffdad023f2ec32c5cd28ff906c8aef0a8aede0768c969372d1c2d90b60027
- MD5 e9ba008db5a969558ab9813ceadc5018
- SHA1 a115f98b1573fa32bde778f1ed3b1f1ca7c4bea0
- SHA512 7f37aae91af145ae87dcca555dc817b350c0e6fd9928555840959909584184c8db9561d88ddad27e39497117bfe36da1afe8bf670eb7e29a252b4b4c9b44eb2a
- TLSH
  T1A78140134312CBFBB994822C9724646877E5CCABF020D3E4EB9B281EE25C4D5354C2EE
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral23 behavioral24
- Target
  humanicity/projeto.html
- Size 16KB
- SHA256 a7fecc8300b50c8c1636f9d6ce5c117408c327d17ccce856f99e7db8937cad53
- MD5 419747dfbe5a762de6a44093e27d605a
- SHA1 0f92da3fe5d61be7ddc8ffcf4c45a2c87aa868e5
- SHA512 bf50e71ce11df1630fd5d641a44da78a03fb1bda29fd7e61f9802b9fa385772ce93b9a8f0fdbf742cb289598eaa41f79714f3fb974fb9366ece3bbf86b282657
- SSDEEP 192:1KEBnic7CoJJJJJJJJGeJJ8G5CrZZp3Zi90U/wmkzXuEtkzvTwl:bxJJJJJJJJGeJJ8G5qZZ5Z2omk68kD4
- TLSH
  T1C972FC266CC1543B413382D89A36EBA9FED6810BD74A9961B1FD1B4B2FF7F488D07841
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral25 behavioral26
- Target
  humanicity/saude.svg
- Size 741B
- SHA256 8a2c433f179f191c88d227d0dc1206f28ef56cbca9d1d2080ee2be8d200bcf93
- MD5 45814b6edf8190be4e8ce5d45e4cc36e
- SHA1 4a8683d697f931f5fd012edf9d7d2b3e8522a1cd
- SHA512 34232083e1ccaafbf8622ca418a6b0fafb13826114a673eb94670a22efbf6669fe6b01fe367fd263728abbbec2e1c8fce4ec895a429cc3f4392da5c415214204
- TLSH
  T1B201B8BF93AA0B36449A03416498F44520E16432B239A2C96B53232ACA5A5F30134DF2
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral27 behavioral28
- Target
  humanicity/saude2.svg
- Size 741B
- SHA256 5cd8ee374d0912ca5a2b7b6e61e2617b5d10319239a857adf282ab4192b1798c
- MD5 52c97d93a1279cfbd5b712212959b476
- SHA1 a0b96612eef3434fd03c940ee988af2d2a0a75ab
- SHA512 38b7d1973011727b9b1bfb313634ee600df091e8d1c3322d4e926336276e9836ffc9c63daed381e83cd638e95445fdb16076a7ccceb260488f9a58fe5a3d57a7
- TLSH
  T11F01DCBF839A0F37459A03416498F44520F16433B23992CD6B53232ACA5A9F30034DF3
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral29 behavioral30
- Target
  humanicity/seguranca.svg
- Size 635B
- SHA256 f21ed65bdf53e3d4f6e46b1410a9477a5dc238ab4d9cde4c57b93c9645713767
- MD5 deb68eabb693bd9367b7899a9e2ab876
- SHA1 94b9378e7bcbeb813a7dd2320d3016c2c0ecac48
- SHA512 178a052b76b11bb6bc3056ba1c075497ebe13697145d5ed8dd53aee29e53e425dea093a225bc638203aa2e73bcd9cb1ea9cb5c3b9465f6e7a164bf04ef297f20
- TLSH
  T1FDF0D37FE3E14D7D2A5703041194F452793F505874E491ECDAA7A73999484F119384FA
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32