0c59642a77ed2c852c6fa71e6706e6936f21bfdc48c8b21f28b3600e62eeddaa

Sharing

Copy URL Twitter E-mail

General

Target
icis-sgcr-wires.com_juruskungfupanda88_gmail.com_h53j6ugo9g_backup.zip
Size 5.1MB
Sample260625-ph62jsby9j
SHA256 0c59642a77ed2c852c6fa71e6706e6936f21bfdc48c8b21f28b3600e62eeddaa
MD5 1867db68caceddf0aedd4cdd41ab2c36
SHA1 7d5234ba9a96a37df44aa8b5a14c2959cb2a42f5
SHA512 da22ca13f759989c054b9c0ca2fdb31d418a4387c6efe1ab0375fa2db9ac4eb5b8c6a961b1c00b8ab5fc6c637568370b4012de20c926d832b3331983a3cc8068
SSDEEP 98304:PX3zuNej4lI2ApSLVo4D4F7USR/bacbqOqETnw4Y4Kq2T6KaR:PX3zjUlPcUPc104Y7q2mH
TLSH
T10E4633741DB9C921CE57E076B1E03D41EE6CCF4345E9036668B42492EAF37F267AA342
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  about-singapore.html
- Size 694B
- SHA256 583f320991f0e49af74f6d331849dbdbb6fd3384407e8e4317ffc06798116927
- MD5 dbf48ddda135c88fa02f8f189f7ac425
- SHA1 22d7f4dcd41a0fed7c7e740f6b85161be5ea9783
- SHA512 d88ac8cfcd8188b68383d5c2c35586090eb7d73965f183ec09463dfb0e0dda624ebfa07c8fa819d43ce24f01892a66551a6e46f1d291a987fa2378532b3346f6
- TLSH
  T1050110CFBCE49A323222C278C76DB650B17752EAC240D092C9200D9C02D422A83A76E7
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral1 behavioral2
- Target
  accreditations.html
- Size 106KB
- SHA256 dbfac047d1b7508b74d52c05758f724e7d9d245973f26edf53a65308f7e2d183
- MD5 2981fa93339c91be141da278d17d6a35
- SHA1 636750fbfe33f75f10fda80ff6d0d20e9a7a8695
- SHA512 4b7b8784608722d2f5aefd0ce4f28324da03d069ba3dbd5de61de7a8c26207e1add401ce19266c1380fee2de99c81d33c7591936eafc8310bdf734e4ce63965a
- SSDEEP 3072:+GnJp34NaNEhsYEs1md3tfGI52D/EZsP49y9DB/Nb:+g8aNEhjb
- TLSH
  T112B3B5617D8F443E322F128F9013771C708A9ADADA509BF1F5F6502492B5EE037B36A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral3 behavioral4
- Target
  ajax/libs/Swiper/6.8.4/swiper-bundle.min_ver-6.5.3.js
- Size 142KB
- SHA256 94a552f5a652414eb4d918d5eca1591406a9f92b9fb5d1c505ac64a8a701cc9d
- MD5 e01dc8228edced2b73c5a9c0626ca29c
- SHA1 a7534d861a79f159c9a512831426dc6d1f990f33
- SHA512 776b09e1d299cd5b91721e131dafc944c1a8ed8bae91cab2fbf9c55f0ce7cf3b9018eed4b6b877d0369f7a54b8e565d7b52a809dd1bc4021ee87844c1dd749d0
- SSDEEP 3072:Ew783dMOhBnIqNMa7WpA2H79cVOd3dq9gyH:V78NMfqNMa7WpA2H79cVOd3dq9gU
- TLSH
  T1C8E31789B360B2A151E7325A539ED10263B65845B80AD1A470768CD7AC7DE8C03BFFFD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  ajax/libs/Swiper/6.8.4/swiper-bundle.min_ver-6.5.4.js
- Size 142KB
- SHA256 94a552f5a652414eb4d918d5eca1591406a9f92b9fb5d1c505ac64a8a701cc9d
- MD5 e01dc8228edced2b73c5a9c0626ca29c
- SHA1 a7534d861a79f159c9a512831426dc6d1f990f33
- SHA512 776b09e1d299cd5b91721e131dafc944c1a8ed8bae91cab2fbf9c55f0ce7cf3b9018eed4b6b877d0369f7a54b8e565d7b52a809dd1bc4021ee87844c1dd749d0
- SSDEEP 3072:Ew783dMOhBnIqNMa7WpA2H79cVOd3dq9gyH:V78NMfqNMa7WpA2H79cVOd3dq9gU
- TLSH
  T1C8E31789B360B2A151E7325A539ED10263B65845B80AD1A470768CD7AC7DE8C03BFFFD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

execution adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral7 behavioral8
- Target
  call-for-abstracts.html
- Size 694B
- SHA256 583f320991f0e49af74f6d331849dbdbb6fd3384407e8e4317ffc06798116927
- MD5 dbf48ddda135c88fa02f8f189f7ac425
- SHA1 22d7f4dcd41a0fed7c7e740f6b85161be5ea9783
- SHA512 d88ac8cfcd8188b68383d5c2c35586090eb7d73965f183ec09463dfb0e0dda624ebfa07c8fa819d43ce24f01892a66551a6e46f1d291a987fa2378532b3346f6
- TLSH
  T1050110CFBCE49A323222C278C76DB650B17752EAC240D092C9200D9C02D422A83A76E7
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  call-for-nominations.html
- Size 694B
- SHA256 583f320991f0e49af74f6d331849dbdbb6fd3384407e8e4317ffc06798116927
- MD5 dbf48ddda135c88fa02f8f189f7ac425
- SHA1 22d7f4dcd41a0fed7c7e740f6b85161be5ea9783
- SHA512 d88ac8cfcd8188b68383d5c2c35586090eb7d73965f183ec09463dfb0e0dda624ebfa07c8fa819d43ce24f01892a66551a6e46f1d291a987fa2378532b3346f6
- TLSH
  T1050110CFBCE49A323222C278C76DB650B17752EAC240D092C9200D9C02D422A83A76E7
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral11 behavioral12
- Target
  contact-us.html
- Size 694B
- SHA256 583f320991f0e49af74f6d331849dbdbb6fd3384407e8e4317ffc06798116927
- MD5 dbf48ddda135c88fa02f8f189f7ac425
- SHA1 22d7f4dcd41a0fed7c7e740f6b85161be5ea9783
- SHA512 d88ac8cfcd8188b68383d5c2c35586090eb7d73965f183ec09463dfb0e0dda624ebfa07c8fa819d43ce24f01892a66551a6e46f1d291a987fa2378532b3346f6
- TLSH
  T1050110CFBCE49A323222C278C76DB650B17752EAC240D092C9200D9C02D422A83A76E7
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral13 behavioral14
- Target
  exhibition.html
- Size 694B
- SHA256 583f320991f0e49af74f6d331849dbdbb6fd3384407e8e4317ffc06798116927
- MD5 dbf48ddda135c88fa02f8f189f7ac425
- SHA1 22d7f4dcd41a0fed7c7e740f6b85161be5ea9783
- SHA512 d88ac8cfcd8188b68383d5c2c35586090eb7d73965f183ec09463dfb0e0dda624ebfa07c8fa819d43ce24f01892a66551a6e46f1d291a987fa2378532b3346f6
- TLSH
  T1050110CFBCE49A323222C278C76DB650B17752EAC240D092C9200D9C02D422A83A76E7
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral15 behavioral16
- Target
  flight-and-accommodation.html
- Size 694B
- SHA256 583f320991f0e49af74f6d331849dbdbb6fd3384407e8e4317ffc06798116927
- MD5 dbf48ddda135c88fa02f8f189f7ac425
- SHA1 22d7f4dcd41a0fed7c7e740f6b85161be5ea9783
- SHA512 d88ac8cfcd8188b68383d5c2c35586090eb7d73965f183ec09463dfb0e0dda624ebfa07c8fa819d43ce24f01892a66551a6e46f1d291a987fa2378532b3346f6
- TLSH
  T1050110CFBCE49A323222C278C76DB650B17752EAC240D092C9200D9C02D422A83A76E7
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral17 behavioral18
- Target
  icis-registration.html
- Size 103KB
- SHA256 e7a5ef2db13611a483f12ad2a3697689b50f7cae4bd29f9b8885f3c2cba7d030
- MD5 679215b6302ab326f96ba0ccbbfed6e2
- SHA1 20147deffdec5f69a80e618cd963c23d356c4002
- SHA512 72458f86eae87ebb39325ae6445b9c90586f2edbd3c3db10612de46a231f41101e19df95c5bbbafca1a2b003abd63c68332b6626ca7817ccd852dd6779aded9f
- SSDEEP 3072:MjEpl4n+ZqtiEsemd3tfGI52D/EZsP49y9fB/Ng:Mmw+Zq7g
- TLSH
  T148A3F8617C8F143A326F138F9013371C709A9AEAEA405AF4F6F6902592F4DD037B35A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral19 behavioral20
- Target
  index.html
- Size 107KB
- SHA256 f9a442551c46ed98caa8d8ce83bca065bccf942aa59268e925f1c6409b6135b6
- MD5 04e079f50ff77ac1f1b0e32270b5a471
- SHA1 a9d42c028f328e991e1f591a0eadb96ce730b660
- SHA512 8eb22953d193f83ad79bad8872cd4f067a262d03c79d6ddf8c518cd2b66ba3822b4e7040cbd30d00c3de5ec6c97514bd0e4c13813dbb9487e6de94324567aabb
- SSDEEP 3072:OeUd4C4VL5jKXwVoSKX8J6JuyHZBPIdvcza5N0:6/Ajj0
- TLSH
  T1FEB3B8617D8F543E362F128F9117770C7086DAEAD6409AE4F5F2A02896F4DE037B36A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral21 behavioral22
- Target
  local-tours.html
- Size 694B
- SHA256 583f320991f0e49af74f6d331849dbdbb6fd3384407e8e4317ffc06798116927
- MD5 dbf48ddda135c88fa02f8f189f7ac425
- SHA1 22d7f4dcd41a0fed7c7e740f6b85161be5ea9783
- SHA512 d88ac8cfcd8188b68383d5c2c35586090eb7d73965f183ec09463dfb0e0dda624ebfa07c8fa819d43ce24f01892a66551a6e46f1d291a987fa2378532b3346f6
- TLSH
  T1050110CFBCE49A323222C278C76DB650B17752EAC240D092C9200D9C02D422A83A76E7
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral23 behavioral24
- Target
  members-type/conference-speakers.html
- Size 697B
- SHA256 29d3bfadb5af7646789a52e758fb8345b4129f9b1e3b31252adc25b63c66e05f
- MD5 5ffb7d52c2b9bf335f0db554a465a990
- SHA1 c173229fd6d1d9438ff1d5914b51f2863f934cd3
- SHA512 4fd6bdf9cede39ed4ffe24aa1ad1d68e888b514d2e5f29b3f24a12ba2dfce2138ebf3fbd97b0d1e8429e2c442ff07c20ee5f4b4f662fbf781e25ad109591ff3f
- TLSH
  T1340110DFBCE4AA323222C278C76DB650B17752EAC240D092C9240D9C02D422A83A76E7
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral25 behavioral26
- Target
  members-type/organising-committee.html
- Size 697B
- SHA256 29d3bfadb5af7646789a52e758fb8345b4129f9b1e3b31252adc25b63c66e05f
- MD5 5ffb7d52c2b9bf335f0db554a465a990
- SHA1 c173229fd6d1d9438ff1d5914b51f2863f934cd3
- SHA512 4fd6bdf9cede39ed4ffe24aa1ad1d68e888b514d2e5f29b3f24a12ba2dfce2138ebf3fbd97b0d1e8429e2c442ff07c20ee5f4b4f662fbf781e25ad109591ff3f
- TLSH
  T1340110DFBCE4AA323222C278C76DB650B17752EAC240D092C9240D9C02D422A83A76E7
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral27 behavioral28
- Target
  pcw-coming-soon.html
- Size 694B
- SHA256 583f320991f0e49af74f6d331849dbdbb6fd3384407e8e4317ffc06798116927
- MD5 dbf48ddda135c88fa02f8f189f7ac425
- SHA1 22d7f4dcd41a0fed7c7e740f6b85161be5ea9783
- SHA512 d88ac8cfcd8188b68383d5c2c35586090eb7d73965f183ec09463dfb0e0dda624ebfa07c8fa819d43ce24f01892a66551a6e46f1d291a987fa2378532b3346f6
- TLSH
  T1050110CFBCE49A323222C278C76DB650B17752EAC240D092C9200D9C02D422A83A76E7
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral29 behavioral30
- Target
  privacy-policy.html
- Size 694B
- SHA256 583f320991f0e49af74f6d331849dbdbb6fd3384407e8e4317ffc06798116927
- MD5 dbf48ddda135c88fa02f8f189f7ac425
- SHA1 22d7f4dcd41a0fed7c7e740f6b85161be5ea9783
- SHA512 d88ac8cfcd8188b68383d5c2c35586090eb7d73965f183ec09463dfb0e0dda624ebfa07c8fa819d43ce24f01892a66551a6e46f1d291a987fa2378532b3346f6
- TLSH
  T1050110CFBCE49A323222C278C76DB650B17752EAC240D092C9200D9C02D422A83A76E7
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32