11712919f74e6c3110400d61d91ec3717cc6fc48cb8fdeb7c8e1214bbd45f8c2

Sharing

Copy URL Twitter E-mail

General

Target
ajax-chat-org.zip
Size 30KB
Sample260626-pfevaaby9p
SHA256 11712919f74e6c3110400d61d91ec3717cc6fc48cb8fdeb7c8e1214bbd45f8c2
MD5 4901131cdde354dc81fe8d83a9eb57cb
SHA1 f45c810ea92f1a87493b9fe71b63beae3926636e
SHA512 a58d355e26c238c2c9e03ad886841f0b9e7ca991d3ae6a913d471b4486b052369609e27009fd0338fdeb9b9a8d539006f27e29506086807f19ae22cfb2cff4f5
SSDEEP 768:cuq4h+T+V1AndBhBdUCiqbkciXAqVAn5G/brcWPme:cCESLAndBhGg/iXFCnY/brzt
TLSH
T1B5D2AEBDB1460E63F2AF087F534B840EBC9523E26752757578F01160EE122E62AB1D9B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  ajax-chat-org/ajax-chat.html
- Size 1KB
- SHA256 c3310f56f6334d9d0b9f5b55ac93193db12a9a765932e72cb98217365f5978ec
- MD5 eb0e3ebfde31ceb803125acd7995bd07
- SHA1 fb54096edb184ba1ef620faf0f83ef0d9e714363
- SHA512 09e1d69d68c5aa0b359c874faaff9cd893d2bd876e0fde1e9efd8cdf64be48b23333167c8e05801ebb02a70b8d71022a4a8d68a5827ed77c09903b63a405d13d
- TLSH
  T19331A00568264C2F52B355616BB2690DDC548253D312AEB831FC19771FF5E8CCC67B45
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral1 behavioral2
- Target
  ajax-chat-org/js/jScrollPane/jScrollPane.min.js
- Size 11KB
- SHA256 82c265e0519c749411979f54b6e27bb7af5adf798ac42bef638e864ef37d0a26
- MD5 8e608fdc7b3ef275832b64f93c7f4f5d
- SHA1 80d3e43b4e6e2940303a16667449cfb877f2ade4
- SHA512 8fa909ae2c32ffeec96f79e56dc7848812dff5f277b5dc73c9bea7e09e1bd72e35c38ffa871d78d683e63900cf79154ccee343c3ef202efbada3aabfa25493f6
- SSDEEP 192:a5PHktR3bTot0LTQQC7ZsGhiNDQUFGuz8jDGhtGHrGACvCK7b+/Yfpo/6iSssPoO:a5PHknTotCQbZsGh+DFFGuzARGACvQ/2
- TLSH
  T1FF42A654335138BE96DB722681AB5B0D1A5641765F23C8A0E476D4F83D38DB83337E8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  ajax-chat-org/js/jScrollPane/jquery.mousewheel.js
- Size 2KB
- SHA256 a314d3eb5344651f35bfbd24b38dd6371605f63789d061a1365eff5522d7d143
- MD5 d4873f2789edd177fb8167c4732c2356
- SHA1 ea607671dee3a7245c047a35c9d789a0b663b029
- SHA512 7522fa177d0cc12fdc30284cc4e977bf9ab5ed8b44bb4a6f8fc25bf3ea46d46452030fde6fb7c00711a072cb471c6cd9d012b663101097cba1c737740c2057c5
- TLSH
  T1B041EF48668901F744BAB735EF4A9187F17D40A711267CA6B42D2E842F30D945BB0FDD
- MD5 SHA1 SHA512 TLSH
Score

8^/10

execution adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral5 behavioral6
- Target
  ajax-chat-org/js/script.js
- Size 8KB
- SHA256 c8000874e0853a38e04d7c2a5a0db38381cca7e3774d4e8937700042e76e1191
- MD5 46a2aa1309433a6b27793d36ce8ca48c
- SHA1 7fe45fa5aac366023d7e208a19641b63d44ec859
- SHA512 f5c5263cfed95f2688118904c3ff593ec8bcdd9ca2fbe7dcabc12e7a5813b549a5c7c2066bc20f2291d6ebe592ec7c3f47cce4730eae778aae8e00bb3bf8af87
- SSDEEP 192:APyGwzFLA+0lE8VsaEsWsIxIN2SPDUbIgR30B11jXA4qiRGJqrb:wyVLAnnzEdsIxIN2SPDUl0/FhRiw
- TLSH
  T1A0024485B34D773D41D66029503F2A14AF2CE83256225DF07CA85CF869B4DD423EEFAA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  ajax-chat-org/php/ajax.php
- Size 1KB
- SHA256 64232c95113ab747718285c44fc6cb848fd5a3333bad490b81ce423b2f477b51
- MD5 5a971146cf5126b89c8012039671ef6b
- SHA1 5836be5bdce19d13b7b64753cd1407cf3e33030e
- SHA512 77c6f84af84eddc47c2e9fec97c99d6b25785fc39853dbf296e3b1c7fd90636e3b4c506baef955fd7e2f7ec7c27e15ecd8466557a52db243e30ecbadfb8af393
- TLSH
  T1663142F3350DD1791707E4A932366C11F9E9D118C2A168B3FDF6F504AE4829C91A38A9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9