09226eb1032046ed8ec1ffe7f80d61ef7cd502842f894420bf99fecabc8fd99d

Sharing

Copy URL Twitter E-mail

General

Target
Theme83.zip
Size 1.7MB
Sample260608-zvsd2aez8x
SHA256 09226eb1032046ed8ec1ffe7f80d61ef7cd502842f894420bf99fecabc8fd99d
MD5 aeed66f91940ea0a2723270bdd60e556
SHA1 3c15edfcb1960738f3984a811bd71fb67c4d8917
SHA512 92303c40de767aa2439f276c91231e908eadd9bee67ec9f51ededbf80751a3767bc2c25778ada2ca20b9a24a78596a29caabd074b26fd1bd490568ab564276de
SSDEEP 49152:JaNnpWOrRcwAdNqIETjl036uALdjeeloRVervUL:JGNclTqFl0q1LdlNML
TLSH
T178853399ED0192EBDDE74071113D858B9EDD03D59D1B9FAC2D380FB612A908807FAED8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  assets/AMAZONPS.svg
- Size 2KB
- SHA256 7c8a923b29020037f8b642f8aaad2560e0e096ba39270f35c859fd9836df5357
- MD5 15adf99ebc408662672e9f23d58fe5f4
- SHA1 42066d8f2337cd561d2fd6d9199a3b0d796b8680
- SHA512 e1252c5aa76131584413eb655ee4f91ee2a3f59ef93d5a89398fd54c77c8fc93ea24185258bb54f3abf1c73ee42e6918665fc61a5f0874a5816d8e3efd3f2aaa
- TLSH
  T1635185CD8FF48DCC02C847C7BF14A0996D97B8BA19555D1AF15C6F0310E286CEDA6782
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral1 behavioral2
- Target
  assets/BTC.svg
- Size 1KB
- SHA256 8afcf25c49045a409d0d357f25aa766eee6bf5d8010cda1203109c1b8358d016
- MD5 44ab418c5f332e24ac705825d1863dc8
- SHA1 c4b78990cb55b6f178fcc4c623cc046ceefe0e74
- SHA512 6a06aeecfe299fa6ced9009ac3d6541e866fd67bb1d01a0390cf9fd3ab4fbbc3d40c80c1ee2c690cf89aa4605a57284c31d8bbee3a2df607d78b386acbc5aaf1
- TLSH
  T1044132DC5FB78DEC04C883D3FE97D054A917A1AB06914E04D94C1F5A2ACA82D7257386
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral3 behavioral4
- Target
  assets/CASHAPP.svg
- Size 1KB
- SHA256 34983e8386af88f7a619a913a1665ab702a8eb0ebab7222758b7b6b05a129f2f
- MD5 1b0d2570944886a9b405ce3f304e216c
- SHA1 1da750fc8fad41bff0c7125a7627fef44f4e812f
- SHA512 a960b6d827f4c1f7e610a63678579b1177c104a5e41b7fdd79385ffdd43127611d205aa3cc0ae6c2c0cb3bd8c56a5018014cd307046d11e46c33c99fe465cd11
- TLSH
  T17641348C9F98D9EC490C87C3FF02E191A547717A46944B85C14C1EAA35DD91DB4A17CB
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  assets/LTC.svg
- Size 1KB
- SHA256 8db8fbcdb4d4259b91d9aac64e6b2c913cfb3a5cd81a273e4860de0f49f9bb40
- MD5 5c66d9342d2fa136c2ee56f027bbf47f
- SHA1 48cd9a60b20dbe9727b7b32ed6d5995b29379617
- SHA512 3057adcdfa8dd41da03fab9796804005db571b236bc687418e394532c3e2b30be94cc11937875ace429a8c132b20df738a94160378ded4ffa1491d5cd26f8776
- TLSH
  T1793195CD9F58E96C284007C6EF47F480355FA06E128A060ADADE2D05189B82F19E636A
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral7 behavioral8
- Target
  assets/MOLLIE.svg
- Size 3KB
- SHA256 0b1f26fe94b134b423e5e02462238ba78971fdc9fd231a0dbff46396595e0508
- MD5 8cda44cf87b4c7302a872232ad6aecc9
- SHA1 5c42d10faec3f950c2a667b7535a2f8df060a479
- SHA512 f2396f5b4f0b4a594b1e5d5ab3bcf6b974c33fcf81b217598ab418981e355a4eeb45cede7c5ecc1ec484593f71aa4affe5d855cb59992295f2c618015bd192bc
- TLSH
  T1CD6175DCAF74ACCC55CD87E3EF0654EE3C47B22B48118C0ED69F2F09169541DE991A4A
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral10 behavioral9
- Target
  assets/PAYPAL.svg
- Size 2KB
- SHA256 eb47ede74aeaf3cbce9abd662280282232a52b56d2129382d95272838511b806
- MD5 b9aef1d952d432889f1e853121a3d457
- SHA1 b4056acb28ed5c84202db8639f19f4e3ae63b419
- SHA512 d317ce58ecae04401b18ed2cd2ab553022ad2eaff610f4067ed91dea276bdf0db1399d7a70a6e79538fed0cd44810419fabe90531467dda00f4b652e0a13b1ba
- TLSH
  T188411ECCAB949CBC495917C3FE26A16D5427E12A42808A1EC8CD1F8922735DFE4D6B06
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  assets/PAYPALFF.svg
- Size 2KB
- SHA256 eb47ede74aeaf3cbce9abd662280282232a52b56d2129382d95272838511b806
- MD5 b9aef1d952d432889f1e853121a3d457
- SHA1 b4056acb28ed5c84202db8639f19f4e3ae63b419
- SHA512 d317ce58ecae04401b18ed2cd2ab553022ad2eaff610f4067ed91dea276bdf0db1399d7a70a6e79538fed0cd44810419fabe90531467dda00f4b652e0a13b1ba
- TLSH
  T188411ECCAB949CBC495917C3FE26A16D5427E12A42808A1EC8CD1F8922735DFE4D6B06
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral13 behavioral14
- Target
  assets/SKRILL.svg
- Size 1KB
- SHA256 adbce7ecc32c53f3980bede8d89f688b57abf539bdc59dbc1dc34f7713a5a8ff
- MD5 c7a498274d560c66984e5bddb5f37aa1
- SHA1 0192d98034ff6da63ab4866006307e10465d202f
- SHA512 fcb6fac73e3cb2328e9a68f194638b8f4c8517798eebfb08c150a935bbec388dcf4394c4c8460444379b893020dd07e11fd86ceb2212ab1aae5ba768d5646934
- TLSH
  T12F31771AD21542765C9C53BE41B06456EAC3A84A71B222FCB5F73355E02CCF055582EE
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  assets/SQUARE.svg
- Size 3KB
- SHA256 dec6539fa4f7c0451d6ae3799a4b1d76a909ffc41b7cff6e8674ee1c93921f79
- MD5 add39e807be318edc3da7524ec181042
- SHA1 70f2034e8581da9235c432c5b3c0a150d153c313
- SHA512 7fb468f03259e9896b19eca1ad8fec4892bd0121adff00d837408f7508d1b5393904a87228c5231d661a7f44cebaa5d0de41181256312665077403ed0b63a2c3
- TLSH
  T1E75130CEAAB408DE888847EABF09517D243A75F32D50080DD4BC5F7A909553CBCB1B93
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral17 behavioral18
- Target
  assets/STRIPE.svg
- Size 3KB
- SHA256 dec6539fa4f7c0451d6ae3799a4b1d76a909ffc41b7cff6e8674ee1c93921f79
- MD5 add39e807be318edc3da7524ec181042
- SHA1 70f2034e8581da9235c432c5b3c0a150d153c313
- SHA512 7fb468f03259e9896b19eca1ad8fec4892bd0121adff00d837408f7508d1b5393904a87228c5231d661a7f44cebaa5d0de41181256312665077403ed0b63a2c3
- TLSH
  T1E75130CEAAB408DE888847EABF09517D243A75F32D50080DD4BC5F7A909553CBCB1B93
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral19 behavioral20
- Target
  assets/SUMUP.svg
- Size 584B
- SHA256 24f38d3457dafc8396ffa5d4fde8675bbbbb7e50bdb63cc81510d6cc85bdb696
- MD5 ff5a8cee69c26328eeee6e7a0f71d9b4
- SHA1 7d8094e899ea8ed9e48ad7dc8c96cd8029a4201c
- SHA512 f14186f0c413c4a3dd95795d0fc87cc489afaa0af74efbeca10757a7215fbe424c63c9a083ae21a322095754c986af77b0143e384893a4002bf6c2c97504439a
- TLSH
  T1DAF0A2E85074614C988E591B66382D43121E7DA1DB1E865D560E0F05F5568C3E80BE08
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral21 behavioral22
- Target
  assets/VENMO.svg
- Size 947B
- SHA256 cbeaa39b873c140fbb2724d44b9c03b2208ab9aef060a3a5714858e02e13a411
- MD5 b7bad04a4196c05332d6c9ee7543d4bb
- SHA1 c0baf859283a313f66c2675424d5387bc44812af
- SHA512 cde35aadf1e0164fc82eae7c0ef9daf67786c561ae7d367591588a0709755e55a3e0f61e9e3a3cd599c47004aad62466f3f9c5c49c6ee5ec7e434be718a17a4b
- TLSH
  T12A11540E8554EE7C05284312EE74F0A4AD23A2AC46402B08CADCEF31713E0E4DEB1E9F
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral23 behavioral24
- Target
  assets/script.js
- Size 11KB
- SHA256 d59a66d34d464dfbef543c630a4482e98bb2b42d23a062f8b1021137e28b5871
- MD5 03ed6bc936a89be43cc8088b1c1666e9
- SHA1 cb5690533dab1794d3dceffa515283640635ce80
- SHA512 1c04af3dd0b520869921b12420b018e8a3c704f3575b9de67cc600f46ad34891371e2fbdd36e29b87aa9f1e83dba1e432f4f305cb7487983fcce816d19fd0e66
- SSDEEP 192:bvWCCWpnAJp4AuXmSKvS7S0n2MSfidyaLXQkyDPXbjn4teINSztDyluR2K6iaZac:bWCCWBAJmAu2Lm2kXQzXvhIED8yi
- TLSH
  T1DD322F590AFB1434C0A764BB6ECF29157A37121B384ADE583E2C43441FD0A3A96B5FF9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  components/before-after.njk
- Size 3KB
- SHA256 a6674a4899de57dfe26fef0bbae27b38b9be8b63075f6c25a13c15ec09b68880
- MD5 eeccdbf89a70d6b887ce7ce8311c28e2
- SHA1 ed024ae9f06f3a216e44555b869ad26e5e7e548a
- SHA512 440ff4180dfbf424c671e4ad8d337205040c6e61b39f1faddf2a987fb1bffebfe90915324bbf2de897c3803c1591836f2bc2de2f054b9ecdfe53cab7ea8a4b1c
- TLSH
  T1E181673165831437813782D92B21875AFFBB4183DB430224F7EE1A8B9FA3C6C946B695
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  components/cart-page.njk
- Size 14KB
- SHA256 1a7a1361d99ec3ad187db7dcae5b28d255cadd9238e066b10535d5d7ba455fc4
- MD5 77c8636c8949bd7ec1b9efd440e015e9
- SHA1 91abc9f823758f041796aa51a30c023f93172577
- SHA512 fee1bf1bb2de949a20e35628374d7c38661db685d85cce0433d9c0da8da7bc41d5ebd5da0fb5e4743a75eab7e7b05cc7a1c81b8fc1a318f6ce53e3b7d8784c05
- SSDEEP 192:mmViRttitLz9It5cu/wFNFT+yq4Oq0q4ASqmCkSDSoAYDMUtBYI0+Jaf6aQ:RoyXK5fIFNFT+ytmC2oAvhI0+o0
- TLSH
  T1A652737401F109B88667917C7BDF9E02BB298503EA8B894D7B4C53C01F87C9781B7AAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  components/hero.njk
- Size 24KB
- SHA256 15c743b0773b12e0228de2f34f51e5ed282c7a24187ffcc04256a98f627d0311
- MD5 7efd0d5256c7a1c5608ba0864ef648de
- SHA1 f6a36a12dbd9518a823de612e4640f3cb5d93614
- SHA512 8509661e762161748d520ba8b2a46a7d737d16e951f2032d6949cfd5d0a5de33960acf7b5207e03cf32c03680118f30198517330793a0654a678ee2f1e24ac91
- SSDEEP 192:YGqfwSnb8EgeAwSSnjym/T/sTuXtDPkXlq9gZREGkW1h+MAJrGjnWQUfTRbSKP03:ofhb8hLwHjyoT/oEGkGzi7bnjM/9
- TLSH
  T17BB2B558D9F90428347BC0B46AE34B993B7CD047CE49CA3C73FD22946F49DC5A9A3688
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32