4321ec2d9bc182145ac5260b2a00d8c4140176913263338043fd4af2ca21fcb0

Sharing

Copy URL Twitter E-mail

General

Target
hmhs-site-31jan2025.zip
Size 9.9MB
Sample260626-pf4teabz4p
SHA256 4321ec2d9bc182145ac5260b2a00d8c4140176913263338043fd4af2ca21fcb0
MD5 00cfeeda7238634c5f30699c3677a264
SHA1 e5f7457cbd903c77d2df0c462673cebecd61a851
SHA512 73a725e53e70a6836ebc30523e248ae49a814d77e1d66b31908d661c27bf4d0abc7a362681431a3b7dc1218c17e5f275e61c20e75bbb0c52a1969c88da5fe396
SSDEEP 196608:oaRvqBmlfniR0Ptd6FTYUbPFWUiNvpoa888Tuc3YvIVt3j54i/eKWkDYEaMFj/:oz4l/s0PsTUxpoa888x32qt3d4XAta4r
TLSH
T119B6333942582AE1C04F50704D6E552BD52BFB8B7341B8CADE5454486AEFF883BBCEB4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  6e3951d9/radio.php
- Size 5KB
- SHA256 49419927901c4d68b0c272f4a3341212906559904e352f87b5e4fe4341b8dc1e
- MD5 4a5d568a7615ead1cc55a00ea9064907
- SHA1 80a4707baa25be49513760b21e8a8a03a92f5f59
- SHA512 6f78d9c497ed0e704c86c2942ae141ad36ab515d87753288ce4f02d550abdd117bf57d48d429e6ff166070086e7315668b5e04ea8b813bba50d71428ebaec9c6
- SSDEEP 96:VbKc54Nso1h3gAC/3xS7kJFT/aHsnAzKsIcEkvhbP5rPGU6X2ln:tn54Ns6tgACJSIn/aHsn6K1cEobJOU64
- TLSH
  T1F6B16A16FAD4F048322D243049E4E0D2429D9932DE40B4F1B730B464727A2ECBDE9ED7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  Community Counsellor-CV-SHAHZEENA.pdf
- Size 167KB
- SHA256 475cad28c6d98f0ddbedc285a57572c7aac4e4d6834bbcb55a8ae74b85abea0e
- MD5 3578741983f29fa1caed6e9f9e261e04
- SHA1 05494eaa832b3888e3766c2564123ba0b2448cd3
- SHA512 93e47d2890aaa9382128e46b7cf9080d413f80547476b16fb9f1d3fad89867928cbd7b2677ecdd4134be24d5fcfacecee3f78f84b1359766f72c277617a2be39
- SSDEEP 3072:Bht2EIp8hiXCZtGgfx0R171RTAAYATz42RtE7lDh2MdZ5JcNsEE6A3M1fGo:rt2EVh2z1Vlk/bXXc+EZA+fGo
- TLSH
  T1EEF30254E585B9CCD60BA567AF94F87EA31DF26572CE887038CE48C7A390F83D892152
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral3 behavioral4
- Target
  HMHS Website Screenshots.docx
- Size 2.1MB
- SHA256 5658689c6e30a157414e0f7da4505ee04e4d263b7d00b52476063faf66eacd13
- MD5 a82258347cbcfdc9bed6d8afbabd8017
- SHA1 0ac0df6f3c6eaee6039a63bb4dae37902ea5ceb4
- SHA512 d444e63c62f1f5585150bc563f240d46f05af13ff6629846cd571fc0ad337190d7670b490c481df26645cd1ffa7fa63fcb4fd41331e67141e1ad20a238d97e24
- SSDEEP 49152:ZjxwFWb+QYiZqnQJOtzgej/y+IrnZn2wQc7Z:ZjxwFW8iQnQJOX/yDZnmc7Z
- TLSH
  T111A533C1C5F8C73FC7430036AE234B2F5EA2696E46C159AD841AF579BA81E7C6104FAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  HMHS Website update-03122022 (1).docx
- Size 149KB
- SHA256 983a3f0a5b71458c08a007a2864b18d5236ab3ea8d3581599d9c35697f63b6f0
- MD5 e77f611c2708e93424ff8a4874c919c6
- SHA1 2f5375d6988a4229ad1ff9c9362984486cde4928
- SHA512 53b526e32843d6cd4c6fd31618d20554cdc5f2bf2715972b0064dc3f3d08185436eef8c3a90a300f47974b6f94462f2daed0dcb97c59ca4f43c44e81b41fd52d
- SSDEEP 3072:VQIH2lrWc5jYrJ6PFB7EIjwsK/cm88Q+oeXprJr8s98pZzUN5Bqac8:CIHKrWSjYrgvwncm8n+/XprJws98PSKK
- TLSH
  T1CCE31230595E687DC19BAAF024988338D537958A5B435A6FFC093BD90C83AF8C5C3BC5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  HMHS Website update-03122022.docx
- Size 149KB
- SHA256 983a3f0a5b71458c08a007a2864b18d5236ab3ea8d3581599d9c35697f63b6f0
- MD5 e77f611c2708e93424ff8a4874c919c6
- SHA1 2f5375d6988a4229ad1ff9c9362984486cde4928
- SHA512 53b526e32843d6cd4c6fd31618d20554cdc5f2bf2715972b0064dc3f3d08185436eef8c3a90a300f47974b6f94462f2daed0dcb97c59ca4f43c44e81b41fd52d
- SSDEEP 3072:VQIH2lrWc5jYrJ6PFB7EIjwsK/cm88Q+oeXprJr8s98pZzUN5Bqac8:CIHKrWSjYrgvwncm8n+/XprJws98PSKK
- TLSH
  T1CCE31230595E687DC19BAAF024988338D537958A5B435A6FFC093BD90C83AF8C5C3BC5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  HMHS-Facts-Sheet-2019-21.pdf
- Size 622KB
- SHA256 e6cd3f76403fe3fcd5368047c605bc6dc830d9b4cd18f040f79a850f18240725
- MD5 7fec17faafb5e363512986102ba4aeb9
- SHA1 a2acbd672b42e9c1e4aa6339fc79e35253b354d0
- SHA512 0617662f096ac16ed6a531157ac811247b18f517c7fae9f3fa1929df46fb5421a9e2c576b702e27a15b2ac5b107210bc4e587f571f4a0dd175e491a1fe8f9205
- SSDEEP 12288:SB95Nt27T1t01Cpbs6a5Qg9MounyKWDVJUYWYEbYqc8c9sYs0:s95Nt2f4nUgsyKgTobYZ8c9sYs0
- TLSH
  T150D4F06A596C3CDFE3998381D70F3D6E758D7471B0E917A00328CA2281B867F985358F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  HMHS-Write-up.docx
- Size 160KB
- SHA256 347b890f27d41741ef34edc5880628ae55ff1e704d355632a945dd8e650daa74
- MD5 a0c5d24e0a5ccdeac1e172cf3fb1b1ac
- SHA1 2773c369f9144a9e05541f96f3d4df018bd5efdb
- SHA512 8927b29f11dd939d8aa8553cb3b460b3acde20a37d30e8acb3937649203230f8b38f5355929d50327a99a0ebcb240f0bd98beda422dd1260cb9945d0bbd99d4b
- SSDEEP 3072:PK86ZK3JrWc5jYrJ6PFBBEIjws0/GOCJhQX+rfnHwgiQq7xvDRmYNFtcB:PPJrWSjYrgJwwJJhI+7np+7xvDR16
- TLSH
  T12FF3127D32C83656C34343FFA6618F3ABC70359441169625E6806EDB4C21FBD8ACA747
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral13 behavioral14
- Target
  assets/js/breakpoints.min.js
- Size 2KB
- SHA256 309febcd6d6e0cf092201532215f03a6a9f30b30f26203272a4861d704e7cd52
- MD5 81a479eb099e3b187613943b085923b8
- SHA1 bab199b97edb25ed1b07410c6188ff52ea95f5a2
- SHA512 52181cf048ff13059f4e98b10f36105480fed40eedb26d95e2c9e1d56210823ad211216c4415b5bf3b108ac9d4bc79475b26f2e9d955aaff9466da4062702fa8
- TLSH
  T1B541BFAF6E4F6D5C14B1D6E7623F716E00B5F966B60A2CE240C2EA806B107C554BAFC1
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  assets/js/browser.min.js
- Size 2KB
- SHA256 c4217feebdd357e8a952e0ffbaa02791e5323482b8e3d80b3f714b84b1664103
- MD5 c3368a3e74d51bcb77f4d673769b7ba6
- SHA1 d994066dfe6e57063d3daf01a3692db8afbfc1d5
- SHA512 c8e4256e7941243f1acb7bc0899fdf4ea1ae084319e7347efab1fbc094627234632ff66fe78f557ed6f73f88f41bb6c661d4f5a450662951b39f8842d6a7fe19
- TLSH
  T15741559E3343F99589763D11650BA116FE3C6A5713CA12E22B800F9E3EB25277125CA5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  assets/js/jquery.min.js
- Size 87KB
- SHA256 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
- MD5 8fb8fee4fcc3cc86ff6c724154c49c42
- SHA1 b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
- SHA512 f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31
- SSDEEP 1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
- TLSH
  T1069309DDB2C6702257A720BA007F510BF236199D6C4D8450F169D8EABC78A4E827BF7D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  assets/js/main.js
- Size 5KB
- SHA256 a3b8bc04e80d1e016d019ebad18756f514d45f02cfadf97872c72615d335715c
- MD5 13526a5f459c346e6b29a88fe4ec3d1e
- SHA1 aa5a0ee44179ef28f7ef3b37ada8efebbc4c7476
- SHA512 63659b4f3c86810dfc2d4294534e86b87b9b448e1dc7124eee08ef7e4c1ad8210b4a2d77ad61cd0155322793f045d0c6e97792b7e43176c4354b4a5c29fe4e65
- SSDEEP 96:EiKCrgkK8DlL7mEWWgoGmLbk0SzGn+UFA5zG0rc5+u2xgDIy:3rs8hL4WgULY1rUFA5a0rc5+5xgky
- TLSH
  T14FC110C9B13F64DF5C2B3225C6BA5464213FD5F0800A43B6B5AACD7CB35424A922A5DF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  assets/js/util.js
- Size 12KB
- SHA256 c2e1e72b0de356f6ce184e3af4fa8ab6590a2581162905a27d77886b2d960e00
- MD5 fd2716a7b68ce7748c9676787b61db43
- SHA1 e32e958f74bd5edc4e1fbdd9fa6c30425d3c7954
- SHA512 5b3750e70a8dc0745def9105669b96ae70affbbcf89478c755a8078e3354dce1258968cd55fa9dc9f7ea5ee57c1aef97f7dc675f1c266b879f25f6786d85e129
- SSDEEP 384:8uuVLI9hkwbZo57c1VAcggOy3kDA8XiVD8bD:8LVLI9hkwbm9CVADgOy3kDA8XiVD8bD
- TLSH
  T12D4273D6B39F58DF4D36325AC27BA448B23FCAF2410A1352F8A1DDBC706090D46354AE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  assets/lock360.php
- Size 472B
- SHA256 a84b6c17aa36a131a2421f77a3d8d65feaac1012ddde24894c3ba8d64fdf8db6
- MD5 1d8aaeb5c9aeea3f2c3fec7e5c1b9438
- SHA1 f424c5721866302c7fa6b215372ae8a0e36d6908
- SHA512 60a85c757fadd34d861ef9f625142fc03502fe3e6e61851d236918a514c50edb5f1f2480fb42b656ed194c5a40f181bc944b686f6d61bc264235022227243587
- TLSH
  T179F0D4F70CA6C58EB6A16A418EA4235891DC1651148CC43FD0D47C5AAC7835FDE4A231
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral25 behavioral26
- Target
  assets/sass/libs/lock360.php
- Size 1KB
- SHA256 14d0fd420058770dd437c7e5d11ba3ab89a8ec1da6ce2c97f8d415a9c1aaff75
- MD5 fe6188678285beee409aee5cfc6c6e4b
- SHA1 d345d1592c8a48baaff10a17de6ffa9305d34d1c
- SHA512 27831bff0f3f461b33296847c17dcdde80e5e1395e7905214578d97b66af0919aef233db1b60897a0f49a55ced3f66b42db570088ff8b6eb5f13fe0bb772f9f3
- TLSH
  T1CC11753724229D0961F281D11E61E20C4D0A5B4D53A1BDC1BFEBD6BB3E806C198ABAD8
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral27 behavioral28
- Target
  assets/webfonts/fa-brands-400.svg
- Size 730KB
- SHA256 a3b9817780214caf01e8aec20bcdc2305a1ff34a15fae81ecd0923df9cd5cd0a
- MD5 1d5619cd804367cefe6da2d79289218a
- SHA1 907bfbbe295332750575900984a00136de0f0e90
- SHA512 bd12e1f895862cf6e8bbe0eaa9f3e1178a8bea456c5e6ae86d30d9e1a0ccf9e978e2b9581d29f4a6132c77f628a714d738814bcdb53f6f406a21bfdecf4273f8
- SSDEEP 3072:qWPxeOclcjILRgkqGKJTQL9tHEzKZ6S6b04HGIZZGstUkpAlxUxJd19zJ5Q+DiK:C1dStU231
- TLSH
  T12EF41F5CD3A4C2B8FBDA0EE9893A7ED6366B35FF39103254C278A56028727784C4D59C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral29 behavioral30
- Target
  assets/webfonts/fa-regular-400.svg
- Size 141KB
- SHA256 be0a084962d8066884f7fe9bd27ec16e51f5a93b72a502c92c5a24dc87eb2ebc
- MD5 c5d109be8edd3de0f60eb472bd9ef691
- SHA1 326e1d8f0b23f6df95cd6784fdf330bc6414ecd0
- SHA512 cecdebcdb2932924690aa9bab4b1157594054907a8528b2a5609c0cb10345ae10a8fa0f4853ed0c7f8a666c6d2c9df5ccca8a485d9f158dfb46bf25ea8212eb2
- SSDEEP 1536:MvcVm6PMIRykxntAdEXqODsxwXgxWd9lpvNp8mwm7ET7sNdxlu+3Yn6eigaCN/cH:rEtyfqCnestodxsnV
- TLSH
  T16CE33359E754D6BCFBDB4B95853A7E90226A72FF35143264C378B0A02C3277C8C9E588
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32