99c6427a3502782c7d2fdb6681b600548ff4963a2131a62f314bd23dbf48ca40 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
DELTAEVGENV21.zip
Size 470KB
Sample260608-xtds5se19l
SHA256 99c6427a3502782c7d2fdb6681b600548ff4963a2131a62f314bd23dbf48ca40
MD5 cd35ffa42b398ffcb77eb396daa939b2
SHA1 66d894b1c1e996db0d29bae12a9296b0e7e0ef19
SHA512 fc191cc0fa30d4d89903bb1192b150618ff28dc6880f98cba79d97e099fe5da5b607a6bd059087faa020a168ac419d08eb709142008a413cdcaa7adcca821919
SSDEEP 6144:OIlupuQT4GhzHk+nTvqCR4jXyHfmQRgC11uJNem1IlF0IkoN4C0hfZBdM1RBAjzL:OIY/hVdRl/VRH1uLckTC+IYHGdDJU
TLSH
T150A4221BF32C78C2FE2E277B8C45C519C259653AF9787608891E1471F9AB9C87D2EB04
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Targets

- Target
  DELTA EV GEN V2/__pycache__/main.cpython-312.pyc
- Size 70KB
- SHA256 a8e2610a48132d271c8748363e5f297d72f895de29fba82733e7c6be77f8240b
- MD5 c0e9e312bc01a1fdadf8e7892e5da16c
- SHA1 eaf3f10c87f85b7456334758cb69752637f8fc7d
- SHA512 38453d2b84f2793af83ee5297d7e22b621fd6db119b31b12ddff67d6bf0f76126f1d8aeb1e7d3a288b0d7849f0d9eb8f53b2cdb6e5e42ec210dd3ed5743461fd
- SSDEEP 1536:v6cfjo1xx/lot6O+1biDEC24c5g8RfIbPgWQj:ePC6TiDW4c5Qu
- TLSH
  T1206307A13762DA73FC58F4B94476AB1FB36164F4B310C30BB1EA5068BE8A5709C605DD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  DELTA EV GEN V2/driver.py
- Size 3KB
- SHA256 99e9c07b467961a798bb848fbf4f0bd5bb8dad7ba78ee624e81c1843e8ef387c
- MD5 980c2f6ec4d10e5842e57001d1bd83cc
- SHA1 d9bc47d0b215caefc77e9c2034118b40469563cf
- SHA512 639d3c54a16c6530d87c476de9ea9d7473684c0a9d1cecce0c9df5f90c683e570e9585f86ca682f5c1acc2231f6e09051226732480c48044b5d4219de4f9d9fd
- TLSH
  T1295134129DA04D6187B18A1CEA1BFC50F2583323B6B7248D759C41EC6FF1368C962A59
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral3 behavioral4
- Target
  DELTA EV GEN V2/main.py
- Size 57KB
- SHA256 1c1afa8d9736a34da6040d419d7f98d6b37ecdfac14a4adc983a491b913a7ef0
- MD5 ec00881785f93a5a9680157d9df0dd9a
- SHA1 d9d8fbb2be54286026e184551ed58e128677b5d5
- SHA512 863c9ee4a5f0d77c67919dc182f4e3e2cccf1cb765f717a48302c7ee7bce789439465f102b5a7f70026f1a9f41b1a589db5a0d62e1fc84e2ee6cca3c34f39166
- SSDEEP 1536:q9Py2gF9XkJgZAtW7fIvTiwMuameswWjr/:qQ2gFmmeA7AiwMcwWjr/
- TLSH
  T1734383319C162522B176C91C58B2D505F3597247B9391503B9ECB2A83FFCC22DAB1AFD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral5 behavioral6
- Target
  DELTA EV GEN V2/nopecha_ext/background.js
- Size 81KB
- SHA256 52824b76d7fb462ac53de025e4af72a25a65e2cfb3bdec6a34a7b7a2a529d062
- MD5 2be7eeca95ffa4de31b3dcb42d99c56b
- SHA1 4fbdb2fb36103a6f21f61c90b992c07cf9190c0c
- SHA512 d79009b7b8a5ec12bfeb2082e1c92eed1f65f2b3c86600efe9949cabab6a0b74ba6940ad00ea22fc5263a199694b5d34f1a60b1380226d9760fb75f3a99c6307
- SSDEEP 1536:1UzTmSSpva5h7nSRUtdCRuxET/nR7xLdHjdt8:aT7Spva5hUcxszH8
- TLSH
  T12A8308ED234FB49B173E182F18F8304730D269A0165B049997A9F7B516F2B9681DFF22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  DELTA EV GEN V2/nopecha_ext/captcha/awscaptcha.js
- Size 32KB
- SHA256 b4629476d50fc4cfa3560f0caeadf0efa24bd08e21b4605ef07340c67e14b4ec
- MD5 ee98659218791f5f86b25de347812890
- SHA1 af7ad861dd95598bb4f7946538855e7b7bb5b417
- SHA512 9c740c978510c5dff70042d463db3c466d84acc4b4ef0e587f9cfbe529f23bdb42b3938e007eabd338f03a7d8d44ea9ef7f7de5162b042a046c897ccc8636da2
- SSDEEP 768:KJzkFsNkRukZDU6Ji1TPh5Vd8oQJw6oPk+To0ETueA5uEz:mrk8kiLFhTdLQJw6oDeu
- TLSH
  T197E208E933C7B46E672A50783CB6E19030DA983017651CD88364F67B27726B462EBF13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  DELTA EV GEN V2/nopecha_ext/captcha/funcaptcha.js
- Size 59KB
- SHA256 d6da8e802e4a43da3ed43be008dee0f50df69166d9a5894953735767334e008d
- MD5 c7b72a91b3dff9320bb3b8dda4ac7e78
- SHA1 c71d05229cc4b40acb48cf05ae5e4a3cafc6f8e9
- SHA512 837f38813229080b009a2fc3768d01148e4b0123ad30b8565b029a545cea887c87072df0fa2c0fc97697221df823f325b08bffd8ae9340922d3a5e4e3076e5bf
- SSDEEP 1536:J5RD0AzJlJfoeF67fJyXnNIXqPfPMaDS3:JnDxJfRFux46X+fkaDS3
- TLSH
  T15B4308E927C2F0AE5BBA90687CF9E055309B483006151DD88365F77B26737A891EEF13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  DELTA EV GEN V2/nopecha_ext/captcha/geetest.js
- Size 48KB
- SHA256 f9f066f08bc59e6301ff8470750b248b1dd0be960570c0ac21d540a400970e4e
- MD5 2a82da3f8c10c69a67a7f7e1117421fc
- SHA1 6d158645e946c70afff206c95138ef5ca7686363
- SHA512 8e5d1e0869661a50be5124a816ffdbf9aa6de7670e79e5d7cd97bce743a7e2dadac4af29b5d9b4ded71120305b1f3258c5cd1c99feb0411bbc478e3b0b0d4f89
- SSDEEP 768:Bcqifapa8GX8SkdsBfsPdshpaYD71imIapmjnqwF3u2JOD6I9sEm3j:Bch8GSdshs1sbaY8qwFv0fst3j
- TLSH
  T19323F8E93F8E74AF134F1C2E18FD305460D665B0065818D983A8F7BA16F2DA492EBF15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  DELTA EV GEN V2/nopecha_ext/captcha/hcaptcha.js
- Size 96KB
- SHA256 f96b025f7c05a8393c2175c307918ca09110b28257eb2f8dd43c5da2b3c92eb3
- MD5 2f10ff3a530caec2ac7a7a29d8a0c5b7
- SHA1 824daa57fb2ed0f28357b6900699f55ae4de149b
- SHA512 a088ef5531ec717f0717b4cf590fb101af7f3dbf61d6d7a85b1599129f69d1a85882f56cb03ce086e0d0de8c8c240f787791ffe6099d6e4e721df776724dcef9
- SSDEEP 3072:rjfXReAge9/HZ0Go62YmiOOsPTcAGGZmc5TrGTZjhVDdNdhH:XfXoWOq5
- TLSH
  T10CA3F9ED139A78EE037D051F64E830D730C6A5F1752F04E9D388BAA516F1B9684DAF22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  DELTA EV GEN V2/nopecha_ext/captcha/hook.js
- Size 19KB
- SHA256 75554801d76e441b2d4578c7436ea9fbcd31ef77f30387c680c58dc9a57e6921
- MD5 f0cf91acb497b9cd8677d96c188d7313
- SHA1 768222e4b2d31fbc8b87685137d3bd3e9f7d89cd
- SHA512 760b62f525c2963d5da64cb49fd1da4733f491ff2f7feade4c3bf2601aeffb9d794b7f0a8c10f5462be9fbe354168dc9f3385e515ce1349991b6d65258bec0d4
- SSDEEP 384:NYTb2/9YLga2nFYvZpVsmcnqz3sjbb4Gad/IyD/ONfJEi5WQ:NWb+9ggadd9cnqQjbkGa9II/cxH5WQ
- TLSH
  T1E1920BE93382F0AE0BAB50643CBAE15470DA88700A291C94D364FB7725727F591EBF53
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  DELTA EV GEN V2/nopecha_ext/captcha/lemincaptcha.js
- Size 84KB
- SHA256 616ed78019b66625f67bfad8b9ce12a1aecde475e2763e1d1da0ffda0f21e729
- MD5 f24adac94f32b30a5daff9d21f6fafda
- SHA1 5419078ffc9340c912fc0a10ee2da3af53aaacb4
- SHA512 ccae1906ea15baeeffa793b3822c56f8d31be410c3b432ef345cf4af0e519de94ef20f355428ccec447387c0d2b3438ecdd1562c829f1a798a6f05a24c08e0aa
- SSDEEP 1536:oaqfUvmOO02lNAVGeGeF2XASV+1fGQGHeHGcHGpurX+e8QO97LVCu9GDK0FGSVM:a8zOO7sOxFFBdO97LVCu9yFG
- TLSH
  T11483F9EE234A74AE137E146F04E830877086B9B1665714C99748F7A512F2BD681EEF33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  DELTA EV GEN V2/nopecha_ext/captcha/perimeterx.js
- Size 22KB
- SHA256 3bb15093690c725834c00fe5dedd53de6d01636b363cfb878601d0b9f7eb114f
- MD5 588df204af4ba5023d940b9441569e1e
- SHA1 4c175152e2986decd18b7fea7a09bb2205484af5
- SHA512 43e4b43a42932196795cad348f6d64f8d1158491d937be79679dc1b35899514f65392b36002ad81cd0d8de857b59efb7b34282a387842549ce656389b84f396f
- SSDEEP 384:3itLq9v9hICsqeXnRD2HCiDJD1VL4O6Rog7/lTSoU6lhDlEX6BHzDOv9:3GW9MfRDGd4O6Rog7VyOg6BS
- TLSH
  T1BCA2EAEA33CE706B236F183E54FE358630D55461062909D88358F7A536B2EE691EEF06
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  DELTA EV GEN V2/nopecha_ext/captcha/recaptcha.js
- Size 57KB
- SHA256 0c29ce1125f301a3803aa4c532514944fd1b79ad9b0270fe3060befb458d6c93
- MD5 58b48b94c7afd93317991dc6819c500c
- SHA1 70688d43eefc79bf426b3777531ab7efc5c25195
- SHA512 eddd62f1f986feb743392cdd08ab083567e9fcade5ac9caccd249a9a0074b09252dfcf276eb174482e469158e89839ace205c208a81311f889c7c3ba4b9f233c
- SSDEEP 768:PsMpwWKrYHEdxTpIxk0I7jIsjHIgvdOt6fpl1IHISkR6DIstuEPrU4jGLL5y0ZdS:PNkJIxDIPIs7IwIHG2zZ8kmcywT
- TLSH
  T1BB4309FA3FC2B09E176A40687CB9E255319B487017506CE883A0F677167267892EFF53
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  DELTA EV GEN V2/nopecha_ext/captcha/textcaptcha.js
- Size 32KB
- SHA256 9fa3f9fdfa2ed2b671020e0466b5c4f3260321dfea5dfc8c95daa1cd8c83bd2e
- MD5 31fd039e1c2af0c4568b1de2f8b3878e
- SHA1 0c7033325c0a13139c3d4c21f0e569b2453761f0
- SHA512 776d3c03c29f16eaee8330dca25d4fa17aafb997a5f830e733e061a21140b02383fd93ca5fb024f0794dbe00d2b1570d11c179556e70eaaf34bd9138c1dd82be
- SSDEEP 768:RrXgSoMzIK9mStCUK5zTstC4blq1xgv0z7dRIdDgnnjaG5DJh:RHUK9mSAUK5zPHXpRwDYj1r
- TLSH
  T1D4E2F9E527C2F4AF177A41283CBAE39560EB947016151CD8D360FB6622325F562EBF23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  DELTA EV GEN V2/nopecha_ext/captcha/turnstile.js
- Size 21KB
- SHA256 9636bba93dc65af00dc95b0be6bc9e6ed0c75d3c54ba6b6d6ad664f3714b15e6
- MD5 731787f0044a62273937226d8079c213
- SHA1 044b651f42e5402366e92a2e9d02878dfff8f2ea
- SHA512 c44ea315d6d8176db2abb71a40c22243321ab7fabcfce51440842a62dfd4f2ecf489803122b408ac5db9b5d5ae9b4d484bf84f2b0e147f590e2960dd685b7d82
- SSDEEP 384:TyOTfyEOOyREDpmd/SzO1VuKfiKB2u6wsqtUbsBTjBoAdimdivJ9idiwFJ8fgj8u:TTO6DE/XVuKqK9HsqtKspDdrdwedFJ8i
- TLSH
  T13AA20ACD27DFB05F231F083E18F9329531DA95A0150908D9C3A4F6B662F29A891EFF59
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  DELTA EV GEN V2/nopecha_ext/eventhook.js
- Size 4KB
- SHA256 63f2ddfba49955aac59c9378ca6f9c43345f52dc5573ff679534df1dfa1079ef
- MD5 b0bb8cab74e9630e4c21644f81dbd679
- SHA1 84bea00a168600fcdb521f66e806ae2037025ccf
- SHA512 90e06e4b2d32219a530eef667e41fb6b4c03152eab17431db55f3ab05572d1618105f867a69294abc639e8ae2fa4ee919103357a7d0204fe083ae2a79a58d751
- SSDEEP 96:PdRfUYtPIWm3MQx2qys6bC4di+TmjyVfmbhI/b/CrY:vM+IWehsW4A+TmmkbC/+rY
- TLSH
  T177913A56799CE8A303AF14BAE8740C18A329ABF8556D02B6D14413BA3530DE9C3B6F80
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  DELTA EV GEN V2/nopecha_ext/eventhook/loader.js
- Size 15KB
- SHA256 cf6423dbf213493f9ae97a384f41d4ed8e7b259fb2e4afe6ea9f5651b7f07650
- MD5 017bf465f5f041797d8e0319a2a3fdfa
- SHA1 f7f8daf814e8a9dfbf753a3aa0c83af3dd707e9c
- SHA512 917cea528df422ec2e28d70a78b360d9ae3c1674663375e4b919779e9f0cf0373b54de581245d32712af1b3aad2420db3f545fdf41a9ae05e6d0379c70395e59
- SSDEEP 384:CzqpbP6kioPkS+ogUoBhOLXLXk943GkY47XF61:Xx6bsn1gUofsXL09IGkYKI
- TLSH
  T13F622AEA37C2B0AE9777102A7C79D2A53096457016140DD843B0FBB627736B892EBF47
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32