59170610105188138e5cd0cd8b54a94354770bc5e192eef40921ce2311c7ab9c | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Thugware-main.zip
Size 446KB
Sample260608-r7thvsfs3j
SHA256 59170610105188138e5cd0cd8b54a94354770bc5e192eef40921ce2311c7ab9c
MD5 96f2fd6aba384eccf84e175e87c05d06
SHA1 1fc0ee7c02987ab546fc09a43374079a871b087d
SHA512 270aed243c839acba2a63b3c755f2ffcd144f1964083cd7b994d9472e1c0c46b27776ce85f219a775f6285a42885f5575d44e5bf6a74ca25638d19ffbfe4a5c6
SSDEEP 12288:HRkNbl/lp4GYRoBOTiWOdZWFCMmgPPNKdIWwh:HaFJBsa0F8ZWFCedKdYh
TLSH
T147A4234FFBE22D3CDB8314BA3845330C93989052429E6DBAA76B85E55D5F010F7396AC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Targets

- Target
  Thugware-main/build/Thugware.min.js
- Size 21KB
- SHA256 9c36fb5a79d24ceb70b114f487169587607bc19ddafa08d73bb516bc96d6e2a9
- MD5 a5793cce8144474e4e436d161d1f59ae
- SHA1 ae3ce1c2c4b489079d4ea1ae7e60c87e9c2287f9
- SHA512 42c0d9b1169bd7abcab28708c543b46ed8280c2563ad6bf68dec28dfb22ce313a8d678dc53eda07af9a97d351c02e91871e1142e4be642de7dd3a0a5c6a41009
- SSDEEP 384:JOor7ymwy+KuDB2ni0Hxh883zcxp3oBKr82Hy9RVgyyJ6c6FN3eGG199SwZA85/v:Lrfa/B6Zxi8jcv3o1hPyJYN3eGO9Swnn
- TLSH
  T191A20A89774368BC82B544D9E17F52047362207A2147A108FA1ECCF73A98C6BD1A7FBD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  Thugware-main/build/Thugware.user.js
- Size 21KB
- SHA256 c00ac6b78e2138596036812899bffad102fa2edb05308cfc6e97b5c49f4cfb2d
- MD5 dfb351bb09d908bd2629964a6ff5004f
- SHA1 00b13f55f5e5b7a60c896966e7649ce50a69fb43
- SHA512 c2c86944eec76e023ebcc7cafa190c8d5ba25cd963318c6b20d279f74382f2688ca409d1bba4aa5bfcbd73bd089f93a607ec94e5130d673529249b64aa7bf450
- SSDEEP 384:jbkOor7ymwy+KuDB2ni0Hxh883zcxp3oBKr82Hy9RVgyyJ6c6FN3eGG199SwZA8N:j+rfa/B6Zxi8jcv3o1hPyJYN3eGO9Swn
- TLSH
  T17EA20A9A774378BC82B544D9E17F52047362217A2143A408FA1DCCE73A58C6BD2A7FBD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  Thugware-main/src/Modules/AnonWhiteboard.js
- Size 781B
- SHA256 8feaa0254da4b331add8869434000d1a898481142dda31338972ddad9de3ca24
- MD5 abbbc57eca3e61192ecaac7eeb545fbb
- SHA1 a78859766b4592d26ec4d67ac8bfd2128badb8fb
- SHA512 9ac3382adfdec3fe4ea5fbf870bb79032775ca9b7f394eaed6beccda744f107c3d9e67ffa3bcc654506b6dc7da10fcad940b8f54b5350d4fdfc62993d36c4158
- TLSH
  T1DF01FC0B65EB2C0EDF5A503A5BFD185353DCCC4B498FDA14387C0704EF9491401D6AEA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  Thugware-main/src/Modules/AutoRejoin.js
- Size 899B
- SHA256 7d1ba774ca07a33f7eb13d278502809daf90232dcda36adaec5817b71ace3c7b
- MD5 f09c7d9f5ce1f94cb6c310e28acee438
- SHA1 f1ff0d5127111b2b06efe6b9da43a62538ec0d47
- SHA512 61277a09e094442939f82c25f0f910cb7b6f20836ace9e8c4f810904c5894a8706a38a468985c2db8250c17a450fafd66e5c70c000622ea6a98bc66b43648550
- TLSH
  T1BB11B10633D7551CDCEF195D371AD94533B22407725BD502B55D41832F9E41942E8BFE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  Thugware-main/src/Modules/AutoUnmute.js
- Size 1KB
- SHA256 3e7187e682f21d52614e0892a58c67b87ee7d26b16a4d2579e19dc65d2d016b4
- MD5 929b22cee7cf6a939c21725fbe13652e
- SHA1 545dd83a544b056b2e4b14ba801384137acc7913
- SHA512 cdef3b80089c3030a57564606d931614c4b15e35ecee93c97b32fccddbe1682914c5250b30e9b1eacfdec00c7748ed1d9040aba488f3f19e2af29a7b833e28ad
- TLSH
  T1CC216B0A67F3A01D946720F86B8F742D3361A52B015A9C03BD1C83852FAE936C5C5BEE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  Thugware-main/src/Modules/BotMeeting.js
- Size 1KB
- SHA256 c840260199ce57edd5fca3cbdf27ba38d434a1ced2f3ba948b01b5ec57fb413a
- MD5 ec901bfc0c24903988999fd5fb035e28
- SHA1 cfb5fdf978c0d6e7e4a2dde378ad80b192995c45
- SHA512 1bd1920501750726d969415dab827679ed78077e5888450f47fc16b9908db62efc5c53ea98398b301afec43a092d3038b420f47dfedc8822337974c4fdbb47e8
- TLSH
  T1A2211E1F6E33062DE176918E73ABA34872905023B001D524361EC309FF64D0B26E7BED
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  Thugware-main/src/Modules/ChatSpammer.js
- Size 968B
- SHA256 8091bcd7c9e084c2891a61693cd3a96a626068b2e33d89365a2e491166bc1c51
- MD5 ab95313b4064c9bdfd8ef7b703a00d80
- SHA1 ad0cad85db041e6faa8cf4b160da19871a1b683a
- SHA512 6d1283ff501599e7d717c06561780607db0cb1fdc1901c6b2413344b909d9dc575ac3a05475436b61d2826aa4426e534a9618a722e8f0846790dc345c227b393
- TLSH
  T16311401507E3EC5118E7E0743B4F66843254E05B0242686ABE1D49F35FE586BA2CAFDC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  Thugware-main/src/Modules/FloodMeeting.js
- Size 2KB
- SHA256 36db9fe9d3c582d7b290d0181d5bb7eed43152e74a895ab92813684e36bcda9b
- MD5 4337d8319f69803f2d5db2797e21e470
- SHA1 8f929a64283c05c952f45c3b08927396c63b0dec
- SHA512 ff79b328f925c138de227ac9b6d7a336c761b05bc15ee869469918d38bf3c3b41e86c4d5b14fa6cd8e9ffcbc6c52e8a708b15f991c4956c5a5e94f6def3dff55
- TLSH
  T17241150E7F731228A227A49E63AF9258759090133004D924BB4D8359BFA0D1555E7FFD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  Thugware-main/src/Modules/ForceHostKey.js
- Size 1KB
- SHA256 e8c3c6845b2bb05ce3c97ad5a0b503a70e4016f88195ddd03197044865fcc1d6
- MD5 1e0a46c557fc4757cc6b83bfaae0cf43
- SHA1 9e355320650992038fd19ee09366d37f06cb3f10
- SHA512 3d4c9695d6e57fb865c38a0dd1a5e313b760cae390cf63799f5549aa5a26078f764e06216bc3e1f561ceeb970ff6f44778929c1f9a76ea6fe20e320b0683ca73
- TLSH
  T1D221020E96FF983152E220682BFEA552720FB54B1212CE863C8E13162FD506D01D5FA8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  Thugware-main/src/Modules/HandSpammer.js
- Size 1KB
- SHA256 ec53e205f3f3bd6ad951e0133662ea178bf949267ea408b794d1204563ef03a2
- MD5 eeb25be82b1a99ede2909d7d4cbfe3db
- SHA1 f726b09644b6832572dc2c2ac604b923aa41c6f4
- SHA512 566ead820554f5c279edfdd6abba7f556ac193bcce99f703886dc756dff6d193c4c74d446ac7a484e887985e94bca70a1287672aadaf27b435d1fbf46bc9c09f
- TLSH
  T117116F0BF3F36D6264A71078279F11093329602F01864D0F7D2E82513FB59BB9AC1B9D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  Thugware-main/src/Modules/HideNotifications.js
- Size 597B
- SHA256 34506a85b5936066ae37e1e37be7ad4911d15dc98d6bb7feb404fb565fda5b31
- MD5 e7aba57509fcf8df1f777cb270a5d606
- SHA1 2055356538db6abdf46ffe51202d03bcc77bec23
- SHA512 0ad54328d90ee2e5bb918ec5f192edcf384f9b0e250464240e52fe5cda9765bb0980079528d553fc5bcb6a2a27959da3f1e979914c15e07067273211bc7b65ac
- TLSH
  T124F087BFB29205D16ECB08770A434089B33B414E2DA398443FCF86625FA5B10C37FA68
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  Thugware-main/src/Modules/HideReactions.js
- Size 1KB
- SHA256 e5477dd136c02cb425606851f23d71ee7c483d51a030e4a454f971ad603e65b8
- MD5 c3773b26be554d9c0d1ab464cd99f15e
- SHA1 1af4141247420846e056c45b12fde09eca952063
- SHA512 b4391c82f34c55f3ece91c51e61b3859e4365b730b79430385feae94b523058c511e64d7a909842dbd4c9023cbae74fb8b800b2ff768a569366a96445aa7892a
- TLSH
  T10621EB2EE3DAA1B408FB14992B6E8412772E505B43458D427C1E4322BFFD4F910E2EAD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  Thugware-main/src/Modules/NameSpammer.js
- Size 854B
- SHA256 a1aeba7a4a335ed3eda08b800b14e6157fa8df255e18972f358abaefcff12323
- MD5 03c4fee269f08b2c7f2246e0e3851f72
- SHA1 b1189e134c68b7d65aba000a41fa8be2c1f0514b
- SHA512 388d605c35528e3140f39f1bab1da5ad7c478a51d367868d93ca4af5b1ae5d6c4d4c0ee728f6c6106796042e792f594eccf39b44d5bb2cc1f8b4a7b590753d4c
- TLSH
  T15901F90D03B78993A4A3547C07472A5F2B368617A842560ABA0C81617FC55A7C5D8BAD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  Thugware-main/src/Modules/ReactionSpammer.js
- Size 954B
- SHA256 3e4df19aaeb9c50ddca10bc3e9b2e51c7ab188fa613cd6a1775dc9f2dfb4e572
- MD5 c5c2e47949c4376c9c1a4bbe54814c0d
- SHA1 abf62e4951648f7abee03ddbd18911b49fd75402
- SHA512 e9a8268b21b530dbcd1dd8c1e7d16c8bb3e4d53bd9a4539866a1e56374fa6c64f6ec4e4c7d2b02cc11bfa6d1f91b531b76b542c080e51901d46af41c57320fb5
- TLSH
  T12F11C42A23A769B284A37099070B55183B36422768CAA435394DD1943FF45FFC4CB7A9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  Thugware-main/src/Modules/RecordMembers.js
- Size 1KB
- SHA256 12efd5f4ebaed67d917d0511bf6d1bca2bd586f70db23449edec604a94647f17
- MD5 8e26c9f07712f2b13e4fe81221a0676e
- SHA1 b4b1e92b2306de9a8c46ea20eee2a2e40cefa1f3
- SHA512 014bd20ecdb2f020c54877bdc8c86483f0b8e57b8fe316002c0b6fab95725599940c1f36566f65a92deb7270214bd0133ad686a9489ccf382479243c5c621b7d
- TLSH
  T1C5216A0F2EAF38985997E00F1FDF5A4967605413250CC5887E0F8BD69F6981615D1FD8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  Thugware-main/src/Modules/SpamRequestAI.js
- Size 601B
- SHA256 77e49d051fecad261999f22929d8bd53b36eccc65644c5a954b6914d1d1b0b72
- MD5 e40bbd1c775f0b95c15649923443f937
- SHA1 76f072415ae7ec202b20c82c6993656a63a50669
- SHA512 ea8e72321cfe5100193c02bc48d56674c6da2dc22d4f751cd969cbcfaa02e1ef86f8ccf49ac2107c14ef77392ad2e33a91fdd85378784d8002899dfe77183f08
- TLSH
  T1F5F05E4613F35993B86372246E4F53056231B52B30474A377A0C42906FD683AC695FDD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32