a9df0caf460ad0e584fca25c21e919279cdb5bfd53bcb10e139cba3016728964

General

Target
Naturalbeautytips.zip
Size 600KB
Sample260625-ww2sbaes2x
SHA256 a9df0caf460ad0e584fca25c21e919279cdb5bfd53bcb10e139cba3016728964
MD5 1a1a5095b9375356f20417cae75f8f4d
SHA1 06231974c560af417d12936e86c5d42d721fc166
SHA512 a31f90e4a9ff0e401ccfc0de948235d629fc60471c04ed5e3c6818f876f812ddac218fe4a3e96a1b06ee00dc352c76dfac4b004615bc39e53238066ecfa209bc
SSDEEP 12288:0HlmtM4gQNroqCJyN83cwoqq+GTONKBc6n+kwOReypM0IrGPHncojBxdY:KGM4REyN83Vov+GTOsB7GxypSyPHNe
TLSH
T1DBD423BFC29596C9C8C71C719B39421C229F61408526B9E9747BEB6E50270EB3E3B1DC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Naturalbeautytips/includes/bootstrap.php
- Size 6KB
- SHA256 67944a50601089d32ce8cf049feb90f066eecff1b1d34c78d9747ed47d7b0178
- MD5 f37ff70f5444dff74c07ce54d8d73394
- SHA1 18f2a2a60f110466baa6c13dbbd6e551d30a92cf
- SHA512 767cae38cdc88c7b496a18c70eecb64a2341b5c59fae5432984905043128b5e49bcf3d38f27907489fb4a0baddd459168cbc1d4246be348608c442d843671be9
- SSDEEP 192:brgP4pnu5z1UNCa7sBaumtbxgbXwJgVTlzQIM96DTt85:AInu5RUNCIglibSrwJgVJQI2
- TLSH
  T1CAE176AA7846A0D80AF2D33DAB939404FE565437059421A5FDAC11CD3FF463CE764E9C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

execution adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2
- Target
  Naturalbeautytips/includes/layout.php
- Size 9KB
- SHA256 c991d6e0a49be0d6cf815ac7fc783a4cdab0ed933389e018dfe7035f622270b1
- MD5 bc62efc485873b50fad3b5f3056cb262
- SHA1 abbdca99a509ede184fa54e718f0de570777a93c
- SHA512 ed9ec8e8380178d7efe4b62c81a482243d7abd9b72f90d0416195522eb4e2d626d09af0da644f3808eb984d4dc5ad33a5a459523f92091ae86dfe9e46878b5c9
- SSDEEP 192:qE8y36Z/sc6qvkKCyWnqHnKCiKNYNzEOxc:D98mLBnqHnKCdYhEt
- TLSH
  T141128736750031370136C688A363AB98F453114B9656BD32FABFA3A40FF6EB540AEDC5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  Naturalbeautytips/index.php
- Size 13KB
- SHA256 616f6ad875d02fe47b71de178d2a50433f342883520a5d3878e0c0ee0c897466
- MD5 c5f1a6964045a92a5dba341f0cd55011
- SHA1 eda165c88a33525e8843c382b3b3a89a25e86ee8
- SHA512 06f583622b362e087b228dfdfc36db8efaa381ee6200b2427ce225bafec6dedf277c550978e3ed6667f36208dd67dc1afccfb1b2772baaa52a5b78c3887ec905
- SSDEEP 192:AsvdWj/thdk7bd9CuIupoT0lFuQJdzWJGGkfBdg0DCnA:3VWj/thdkXCuVOe/
- TLSH
  T1A552742572013777411392D8BEA24F65F4934047D90BADA1B9BBB2B40BF2DF1E92D909
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6