b84fcca8ad9f11d87ce08cb7a7772f0125fe326566e13c0e942579b8232985c3

Sharing

Copy URL Twitter E-mail

General

Target
newversionalllanders.zip
Size 14.0MB
Sample260627-pd344aat7y
SHA256 b84fcca8ad9f11d87ce08cb7a7772f0125fe326566e13c0e942579b8232985c3
MD5 209d6efd790a4dcaa521558c7f66d679
SHA1 9c9063f150449b23da7f69b7bebe21972484bdcb
SHA512 11463925a75205439e474e32a73234066d1ed8d1bc7cdf863f68ec985df754d3cb991da51a2055d0422058ee9779499b006375bb5484fb5924bab87e02d205fb
SSDEEP 393216:THiM8F86MLWrLBVki36bze9Ykz7oXiwhoRJ:T9VrKLz3p9Y27vj
TLSH
T12DE6336DCDA02672DB1EB872258E35C2D05B914B0336A0C36E315B356D7A6D40BFCB7A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  land-au-1/__MACOSX/._index.html
- Size 585B
- SHA256 2ec426304ec7a7e8940473fb34309c7f327712f5179b68d063e118092756427a
- MD5 e0ec92afd44afc5c05140f216d0c8280
- SHA1 3565266933fd2318c6cd45224d2d31e51c394eb2
- SHA512 0641e5710b1670f417dd9a72084750d5ff40fc5b05cf3615c71693a3084e7389e08fbeacd1f58c7c5df7dacc337810768ce14cd2c31d7f294ce6be2a182f7d16
- TLSH
  T117F09E6567C6C9A1D864D67451E1B3457333F8BAD68287137B59CD200F00DB539B1589
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral1 behavioral2
- Target
  land-au-1/__MACOSX/assets/._main.e9465d9e.js
- Size 323B
- SHA256 31b5f986133953a766a2985260e8e7ffda74258079dba5d5c0bad17a7c2be6b2
- MD5 5821ca70883e58f9fb288df193e772c5
- SHA1 124ee07e35f621e1a6d0ef39ba2061966e1fd4c2
- SHA512 5e0745dd5fac0ddca0646dea86a0d9556eec89713990bc5909968f323d05da75407cc0340fd921d83ebce52b61132eeae74cbb1cb80393d21515ec420ebea2e1
- TLSH
  T187E095E2434102D1C034D37012F3F7D073235265C552D233B929C9100F14C1139A5715
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  land-au-1/__MACOSX/img/._obtp.js
- Size 379B
- SHA256 bdb9115aea3ed6c9537790a9f096db478e88c3110eeda78885928ed6070ec9dc
- MD5 366698d1b552e842002788629da2404c
- SHA1 1e6cddf6655efe5ee76ed53a1a120e680e62a22d
- SHA512 5640ce0c46f19a9dca71c50b32aab0357c8355e731f2b4c01a33f3fface79550928de9bca63eeec6bdd174510e65298580e855266110fbc07ed492ccde16aa4b
- TLSH
  T127E07DB317400702CD54437880E2B5D94F5AA433CDC2D7677A19C7014E0815129A9240
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  land-au-1/aindex.html
- Size 199KB
- SHA256 af3f8efaf669be3c5f9e63d1d588c5a62bf14bb59bd817f9afbbbeabafe02672
- MD5 5d599b950b1f340c37b1f4988e90e650
- SHA1 9c1edbaa667c0dc29f4a219f50834e89324a98fc
- SHA512 c53a4c3172897b14aebc60e43e4acf8dedd375957c33d55d931b05cb3a1510462a6174d2dd851e4b2b835a862801047b7506be057ba4386d8966d46323a2669e
- SSDEEP 1536:Q0adUuGzekmdUAZa2dEnvFYW3ibckSj76FvNNX5KO1ZsdA12o2HGqtkdKtA:Qq/0S/YNjT2ptkoC
- TLSH
  T10814C6A942F30220084392C48FE72B1537B4D15BD747EDA97E9E4ADCCF86D85A8D3789
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral7 behavioral8
- Target
  land-au-1/assets/img/9finance.973909c8.svg
- Size 3KB
- SHA256 ccf1e6ebd240fdd7701b055caeeeff93433cd18de1f6120f70b04cbb56b0cbea
- MD5 973909c824dab6a7f16e90be1b888eed
- SHA1 81f1949bd5486483327299d94385d450ac17d696
- SHA512 d9fc43d4ac43c86be523ca1e85a6edad3e6e3c312475d29b6e3bd7b604f7b073138ee4500ab68eb13dcac8b8d0be5ebcc5bb52af6a98b3b5f299af06610b9639
- TLSH
  T1D661891B0708D2EE7DA5467CAEE8108DB3E1986BE470B1C0BEB61815FC5C8D8684CB97
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral10 behavioral9
- Target
  land-au-1/assets/img/9news-chevron-down.7e95d338.svg
- Size 1KB
- SHA256 ca0de6a3b873933877f761b7f27838e4f16e034cccc29a7a01ab8eeb9eeef309
- MD5 7e95d338a77dbec46e7ba439cb528d3e
- SHA1 18d12563bd03a42ea9458ff3a835a101cac5fc42
- SHA512 87f64bf4903483225aeaa9ea9173eb09a707938411d747ce8cc0298910e25764f5217c6be4866f1e0694f3ed0ea551cbffd5473edeaeb0a1db80cca088c6beeb
- TLSH
  T155111F6813DD693DD5064631E3F47AC1EAE5F50B83D038E4E2AB383BDBA54F5428CA18
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  land-au-1/assets/img/9news-chevron-left.e7668cbe.svg
- Size 1KB
- SHA256 9af73e1d6ecd67cf0efaeb19b264b1b61399fd817fc0e0d63c50d91af286a74c
- MD5 e7668cbe3d7132430a9e227bb394056b
- SHA1 87974ce16f5f36746fefe4041b118ba5abaf6cde
- SHA512 a6acf78f8353e8814028e6e130c9fc573e5811e755f292f87db81e2b4def853763c23b495da8075c63e79ef1ef7b131056700c3ed1debb0fbe7c77c38f385881
- TLSH
  T18911CC5D13885D2DD1014631E3F876C5F7A9F54B83D128D472A638BBD6E58A01298A28
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral13 behavioral14
- Target
  land-au-1/assets/img/9news-chevron-right.7021871b.svg
- Size 1KB
- SHA256 420bb258122bf9a3cae7edf2e387ff98f7f2abda07a82851d3adecd65397db1f
- MD5 7021871be2afb89b3928a1554af90817
- SHA1 dcaffdc369c0bbf2f24c8628667800b607fd6d4d
- SHA512 12fd0341c4371e765fc7097b59e8f98824a9b987eaa7ada01a0bab7cf9f2ed241c7dc8c7ef528a3799bfcce5735214f8a342aaead049eac5235b5e9598bb1270
- TLSH
  T13721BEE846FE4114C50DC32293E8B609B679325F72C1855879DD1959FF2056B0E5B28B
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  land-au-1/assets/img/9news-logo-gray.aee35126.svg
- Size 5KB
- SHA256 cc833c66a3d7f0ab81c4d9b72604d0e3068e726202063cbcad12c1f222fa29ae
- MD5 aee35126e7aab70c688e82cfd7810da7
- SHA1 65c811736fc9cce6a6b5e85a83e8ce557be4344b
- SHA512 163a526663872ffc52384274403c89e296b663f306fd4d637a5662a22579a415023ec2db088dcaa6f37dc6857890db2868dee68accd2c70d8c3a3a7cac5ac2ca
- SSDEEP 96:Y3S68CrcwBERyQ3QoQbQnQ3Q8yCf2mOqaMMam71daggN7a8kIDFtSnCL:Y3SQnKRyUHAgkQCf2aZyIhtSnCL
- TLSH
  T10AC1858467F58EE4E8C85BE984026415703A18BEBB91D7BC85EEBAF03C051EB158E5C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral17 behavioral18
- Target
  land-au-1/assets/img/9news-logo.fd629f17.svg
- Size 5KB
- SHA256 05824f10c18655b1bfb7ab32633c4e06fba2809c7cb086e00e80fd328849ffd7
- MD5 fd629f175f6e05c76d76dd17941fcc80
- SHA1 85820506ad8d752cc3d5033a21b6da2081718027
- SHA512 4ec44cfbd2f8044259924de8023c86fb131d7e1b2707f835b2b77841b43fdd373e63cc788b851b2e62a69c8b602e663af9cd61ba9a9fc195fa2dcfa14409d811
- SSDEEP 96:7S68CrcwBERyQ3QoQbQnQ3Q8yCf2mOqaMMam71daggN7a8kIDFtSnCL:7SQnKRyUHAgkQCf2aZyIhtSnCL
- TLSH
  T171C195C463F58EE4E8C85BE984026415703A28BEBB91D37C85EEBAF03C051EB158E5C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral19 behavioral20
- Target
  land-au-1/assets/img/9wwos.e9f63e18.svg
- Size 5KB
- SHA256 4f92a09820a9329bf740aee8cbdb94f14e40c98a3e79987bb52ce4170fb76771
- MD5 e9f63e18ce406cf98706d9f7778a5b3c
- SHA1 dabfebb3aa7031f9d8ecd719a41176c05fde1f08
- SHA512 2978b75daecaeace055e8ecdfec7c1a6def97359b60ef7408616fc2d118e2398e4ad27e7c9856c566429ea561190ec346bb9fd4e7cd9a5ee65d193294e1a2628
- SSDEEP 96:JwrsmnZ4IYikU7oCuoJv9qL29fsHtIkFmcE0sv2lufcpfFI0Wr6qpfj617vMJ6Qv:JVo4I3FhuoJF9QIKM0sOc8fFI0GBGRQv
- TLSH
  T13BC196EA833D55EC94E34EE9EF2358B6279DB0793F61C280C5AC9B2856C3B64D907C10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral21 behavioral22
- Target
  land-au-1/assets/img/chevron-left.879a1b7e.svg
- Size 384B
- SHA256 aa71d3f86d36c1a66f81c85adb5b0301baca548feadfd8638e886d99644db88e
- MD5 879a1b7e5f3c832daa3773da50612e24
- SHA1 20396ca67e841fc183ed23ade17b58776c436b3e
- SHA512 b87996f8a9912954e74cf3489646a5f85dd3c0382eb7fc087b04df83d8c13f859300b3a82514fbc4df72e696efff9f753365b41196da3ff5e87837efd6a10d8a
- TLSH
  T1DDE022AB4281AA85BE39497CAAB011D290E8508AC2D4C3F64BB8C23562144E07408C91
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral23 behavioral24
- Target
  land-au-1/assets/img/chevron-right.45a585af.svg
- Size 360B
- SHA256 9b530ad5fdc5101b06c5e3a36684365d1ba3b1cf8b5b29a4725d5fe964dff856
- MD5 45a585af24a11c158d5e14ef2f8ec608
- SHA1 774987aa7aa357b9ce8c41d2f05205f0625e2373
- SHA512 94ed161c09ddb701575308a3bad20928ef5b6e94512dd77c96de2cb45d24270f3a2435bd225404e3ae3e541fdc838195716710641e2e65df120b0a702d028711
- TLSH
  T153E0C07C40C89540FD3909FCCA7551D1C08EA08C80D24BABDBA4D43110204F1B47C888
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral25 behavioral26
- Target
  land-au-1/assets/img/cloud-and-wind-night.5cabd6ea.svg
- Size 1KB
- SHA256 a616fc0be69914ebbf494b7909e85d9af984f016d26a90ce346489e05628afd4
- MD5 5cabd6eabda3307eacefd68380be9373
- SHA1 37b5e86427974fa7af52ce028089da6baf6d53a7
- SHA512 3f15cf619a416d6f2633162afcdc7c4861f72ccb17960341fd0d561aa1887989ec31519af1d9673bd1af967dc000eaca3d8b937c5c9cf0c917aa31daa62bf161
- TLSH
  T16921F1FA1B38958C398F9FFDAF3430B2129D21BB76951124D34B552218D75EDDE02C44
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral27 behavioral28
- Target
  land-au-1/assets/img/cloud-and-wind.57e72f5d.svg
- Size 1KB
- SHA256 b43ca7442bd0d528ec862365b17495da5f3b2aef2f4274417a9794adb2274c0c
- MD5 57e72f5d1371dfef76be17248bfb8dd0
- SHA1 3ea160a906f68edf3c77be5cbfec6ecc95b6d3a0
- SHA512 2b359c6c97c0df3358593f220f8bda55f6df3027593cff1cec159168809d247adf9e9d43b84d86234a8912ca0961664bfa7434ee347c9871d8b1e2cc1dc32c1c
- TLSH
  T1321103EA1B38A58C285F8EE8AF3430A1028D20BBB7552164D38B653214D79DDDD42C44
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral29 behavioral30
- Target
  land-au-1/assets/img/cloud-night.fed61cd3.svg
- Size 828B
- SHA256 e4735ccddf3298211f701a0670bc3234df328c5ab76ee7f75abf2398f0a5f74f
- MD5 fed61cd38f5e3147ccf6c803fdea5a46
- SHA1 9d61227f663b74c48205be40c249c26be2582e2c
- SHA512 821750311695f7e741449a272e7b3f2cc2979045697ec627ab8bba50966cfcbaccf841d236ada481b5c6cf4ce25fd9c4be7013b22953d92f0e668a659639ac54
- TLSH
  T105011EFD5A686A1CBCC07BB4A77470E112FA74E936C804E473456B14A00195EED5AD98
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32