c67bd8d4463ac697a422cf97b9ef159c9a2be3bbe9af882257cf7d744fc97061

Sharing

Copy URL Twitter E-mail

General

Target
TIP.zip
Size 14.4MB
Sample260628-ajt12set6k
SHA256 c67bd8d4463ac697a422cf97b9ef159c9a2be3bbe9af882257cf7d744fc97061
MD5 51a60575e1ba9c6a12c53dc93289e85c
SHA1 f92f17666958f328892a8409dcd3fca36774c95e
SHA512 88df0c50475867f2bd76a0073be072f2332065ade14b71b039c839665a6139c7831f9db79567a7028f96084020fa93a5006370712c8c6878125a809098bf53f3
SSDEEP 393216:9saTb/oj1mvl1G9NwJS6AvhL/CmAp+iYXJBqs:vTb/ojn9Nw1AV3Ap+Frz
TLSH
T1E2E6339F83444C7BF3B754622DDF8E65F0B817D2888CE55B9D52E2C9832A7394C2B0A5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  TIP/blockly.html
- Size 1KB
- SHA256 962a622622a28ca03bc850d82fa2c61ff1c9af2ae5cd0dc71caeb00a04518491
- MD5 7668e6193d08175ba930eb3a69bfddd7
- SHA1 e61cddf9981d8e73dfe77936e1a3b67683efe6b8
- SHA512 0042fe81176c2b14117a7e5b070fca070c4e0e180affdaf68fabc271f6ce59cb3851c7dabf6d80f2af606acddc4545d8bd7930849f58c8dcc1427d81204a7669
- TLSH
  T1C021E12392D52806437042498D62B37EDD064197364D3E62F55E6A0F6FBD611C88B2DA
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral1 behavioral2
- Target
  TIP/histoire.html
- Size 5KB
- SHA256 4e97389ae19cb62bd777a50b31070f47bc4dca6f72ba132fe794d126a5d26256
- MD5 616ba2347015c2589ffc33157f879c3c
- SHA1 a77aac4e933fdb4d4fffc2b2c4b6e990383f135d
- SHA512 00267f7b4b03891162da3dfe34b68ed9bdc3a120638bbda0ec2b5bff76223183fccbc850debfdf71dcbfc885d147e8f005b1c15c1a9a5161623a751d31ecd0a3
- SSDEEP 96:nah6NqwBJXMX9TT1orAnr0/E7YySie1Rfh9:aMNqwWTT1oereM7e1R59
- TLSH
  T147C1332250C831530B315122FB2BA65FEC5480877906AF85F9AE435FAFF961D41B37E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral3 behavioral4
- Target
  TIP/index.html
- Size 3KB
- SHA256 764911052652dd27c96fbbbfe71ab0016468e08d03a11a5b0d3515970009bd4f
- MD5 d255f2457fc178762d7738b0de89f2a5
- SHA1 2b9ccf5e7c323ccd4f527097628c25cc72ef76fd
- SHA512 a44e7ad59a490ff21fbe65a87d46cf305bff32ba93534734f95bb3433fe7ffc631a2f39f68881be48a4e698c1d80ca41f9442c64986386767a7e4f0984a24d74
- TLSH
  T188615335D9C07406407A11129BE1E32ADF10C08B710AA6C97C9F521F6FBAF049AB76C9
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral5 behavioral6
- Target
  TIP/js/motsCroises.js
- Size 8KB
- SHA256 d9bbec988ae3656b2be866a11f4269921fe10762b73c51fc051d584e685b58fa
- MD5 2fc191d9b2765c850be9edf440e43809
- SHA1 4550b3dbf60946d237a18150080d21764944a234
- SHA512 935e848d952b257ff03d1d7c5fa4badf8e5ee49097242281a0e04577ccae84b3926d6c0a22ff39cb2e94561ba2de10cb85de5c957ee8b74f31ecbbb8559dbb9f
- SSDEEP 96:zjmH3tMghaexAi5Kr+6LMmLr1IjEQFnNohulMQqof4M0GKLiMxMkZTfiufh:zjmH9NxAi5i+QMSAXomBhgZnLiQ9quJ
- TLSH
  T1B3024F5A65B415318EB3233277DB4204FA154237B008965D7DAD82051FF2C91E3BAFDE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  TIP/js/phrasesATrous.js
- Size 1KB
- SHA256 a8a71b2ee0fa13370127d845aa9dbf2b02ad25d36c474ec60a4accbe1b516cab
- MD5 fbb701774daa00c7aa61f5aab7b8d47b
- SHA1 c9e2188a6232bb8b8e04ca205922307fb4baa81a
- SHA512 3017767eb3ec19f578368d08fe69e614032a77765e82b826262d8d852ce479ab2c8aa31e90f5a0c15eb2827f92d18dd5ea9a35309db18f38e266bfe9ba7a2ef6
- TLSH
  T16431206BE1C919361AF627BB6712D905F224E0273400E245397E9E980FB1D2895BBDCE
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware execution persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral10 behavioral9
- Target
  TIP/js/puzzle.js
- Size 3KB
- SHA256 e4c375622d5a1203439b8c469784f2bab3193e15e89355e78c2bf2cac3291d50
- MD5 d1be95ef779af4fc376cfaa9888b5cea
- SHA1 108ae0f980b790a055eca2c5ce27d313511969cc
- SHA512 c0a78d50c348edb1227018ffc6ce35a8b518e6a2e583581fc985cb9465e25989b171e8a0a639f042eac419dcc057b2556ca4237b60df14a5d223d4100d113c7c
- TLSH
  T1646112979A08183C057AE23D7213F54AFAB050B7554496707D8E41AA2FB4D88A4F1EF7
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  TIP/js/script.js
- Size 115B
- SHA256 0ba8cf1fd240b626272b4804b68c325ed0dcd97490d956898af2395088e8a1c3
- MD5 287484be622beb74bfc152e9ca8755cf
- SHA1 2c5805de0ac5be437701e3b92505a609a4eb0a08
- SHA512 4e664355fee5b2d8f2189f18f59726b22728553161cd3013a1acfad65fe478822485c69cbb789632825449cbb7e7d5d2bd2230a9ca7288049c96117b322500ec
- TLSH
  T1A0B092645F951DB291258A29021AAA4A65BDA83322E1A502AE54640B08C9B9D84B5CDA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  TIP/motsCroises.html
- Size 1KB
- SHA256 d1a3b2283c6f7c888e4a452be8fcbcc3925cab5cc3f1c50a8cc37246535d238c
- MD5 550c4bf243bb0ed54a52bc157543bb1d
- SHA1 a897dd6e18611ba8af9ae25d48fc7b9acb0150b7
- SHA512 4cd0be999a2abd5cd2788c422f2eb8d1aa31bd534cd1cf18af639723c865c2c60d16792085428b5b2bd04ad36686e00262e2b8e0e7b8ff7a8cd7139e7bc8806e
- TLSH
  T1AA31DD1A14D81C178272915C6DA2B36CFE56C347474F6E8030DE7B9B1FF3A498C47426
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral15 behavioral16
- Target
  TIP/phrasesATrous.html
- Size 4KB
- SHA256 0c65ffc63f3d44a8104822dbabb9642c2d8abf5dafc54e233d9ceca188d9aa1a
- MD5 7d5e0c73d49aee15cfa3b919a0a7c7bd
- SHA1 cd7fd2fcff44d7c2fd40a825e9304cccaeee4ac6
- SHA512 6623c9229e5b4476738bf7007df391174a2fcfaefbb88c93fd47978780b484ec4394aecce0573dc9dff90750f6a6468b915d01ddc864886c4d0d328e92158b37
- SSDEEP 48:tQcbCi4axjTRsCMUf9+7B9IyA1/lWRrjIeg2JCFUgpjBng7c:BWaxx+7Bx4ijtJCFUgp9ng7c
- TLSH
  T18E81CD6602CA362701B6D4C9FA6EBF0AFF51800BD209615331DE23972FE3E54E853499
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral17 behavioral18
- Target
  TIP/puzzle.html
- Size 1KB
- SHA256 ad0461cd1497d8761f19448dae1e6fedc9f48a4b42733a600f2463ae3f390a51
- MD5 68d1d29debbcc9bfe955a500a070bad0
- SHA1 5e9724b6b6d29707d0e48e29966809112263b191
- SHA512 99a2ad02e24ea35381947c7162db89ed93285bfe60b8a6a775eff9d878de430d7a977c90bf016992e570a824a5a0f9d29e66bbdf3e6dba2d3fb7abc19ef000f5
- TLSH
  T1AD41662140D4246E017A9188BEB1B31AF98692439B0F5A5170EE5BEB3FE7E588D83045
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral19 behavioral20

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20