ebdd1c90ea67e46937398f4537272e725e75b34e748e802086b5073094dac7a3

Sharing

Copy URL Twitter E-mail

General

Target
prostco25_telegram_colombia.zip
Size 7.8MB
Sample260628-pee4nagz7w
SHA256 ebdd1c90ea67e46937398f4537272e725e75b34e748e802086b5073094dac7a3
MD5 13b003afe51a3d8aba17c0661f5ba471
SHA1 346f9fe611085314bf49e4639ac0464830d0fb61
SHA512 295cd7c2462f0b119ba58e11489adf45ad92686befd26c15314af9553ba19f16c620899453232e01fb105c3d76d884d89308cd7ef4a99c125e1a3ffcf9c887be
SSDEEP 196608:wR2EnKXfX+SmX3J6czVWbzzmv7PxpMvAIsBcrRXVTb8aorc7Yo:NE0fX+SmmzzGz0vAIsBcnTb8ayu
TLSH
T18B863312D6211C93F19DEF3571F38B22B723454493A3AA1CBD3E54C7A716E688EA14CE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  assets/js/index.js
- Size 1KB
- SHA256 fa26ae97fa7ddf2148a4a0330a85555b892320007900f1d226880c4bc97c1959
- MD5 9f482a806a55155c509c3a14ae883a7e
- SHA1 180064d32d1c5ee45a6e5f62849cff36a4407d15
- SHA512 d7a59a10d8499a821c7ea5aa9acbcb6185875d2ce28c11f1819dad4adcdb338d0b78d0644944579da01640e0e6cdcf8ff54a7ae8336786d40b20f63b81f8d1cb
- TLSH
  T1C1319B5ABA9A20362973B33B9FB6110CEF37511381558651BDAC58D21F7036150B2FEE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  assets/js/plugin.js
- Size 56KB
- SHA256 331630f199a04c347399895297f249263d479ec8b23948c428040d98b74a27ff
- MD5 3a3e623a80fa8674fd6e86705b6a0915
- SHA1 4196d094d88d7fe5205f6fd4fd289f9a83edb4e2
- SHA512 5ddc5c1a58050342ced7c461675edbc987196a05dd0fcf50cfc22342b7d7d8a62460f6027d858785ad72f2fad83d2826068486fd705a69abf27bc3412514a60d
- SSDEEP 768:RO0rZoUp5v25EwVfg2GcfkUEy9skMF5t18Q3ZAHnCgSHh6u5l12I/delVGs8EpEX:35MJVpGLqPMFXuYzU8As
- TLSH
  T18B439449F220786A479791A1563F120BB23A242CA416506DB978E5EE6C7DC8D303FFFD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  assets/js/translater.js
- Size 7KB
- SHA256 e0d07e79fdd24dfd1c5a1839952c5b34c9ec47b1ac75493cc14f982b154554f5
- MD5 8a57b217cc83889fdce397e448a76924
- SHA1 28018f7c025ac26c87fe60a95c6f9d3e2011feb8
- SHA512 00c18674ceec696a975bb8ee3b6b4402f01cecfd93b600abc9659f2175d4c1cfd6f0be7ce203996404cbd6c1615c5ee3a0af489341786962e5695d373b7f37d7
- SSDEEP 192:bEoUuDPho2devEuWODz4ZZSslLbQQoQ0KMdH0yrU82wZJ:bZDPho2SgwslvQYvnyrU82wZJ
- TLSH
  T136F1506784870A5B4DF2A24EA582DD37E1C6FA4CF110CE93F86C561513CFA08A51FEAC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  index.php
- Size 24KB
- SHA256 6affdda3586400ad281536981e3614f1c84c83c1c348f07fc9c2f316aaadbae2
- MD5 c6b0667416353dfd526b01f781874c57
- SHA1 41b6fe25acb6256d3bea9c3729d2734fa05f5741
- SHA512 80c9eb56059d835cf455e46f2575e84936d4beb8377b83762bacafe46dd0a74fb2173303b26b4b5c7b0ec434034b09f5df126f284731ec7d2364d8d1758d9d62
- SSDEEP 768:2jG8YThFziWZrFWSnJrWP3+WooLW1gud0r6sNI1AfY9:phFziWZrFWSnJrWP3+WooLW1Rd0r6sNa
- TLSH
  T1E7B2FA3064F1542340E3D1D6F9668E1BABE4DB07D81B8241B6BC9BD84FD7E82DE27819
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral7 behavioral8
- Target
  thanks/assets/images/icons/dot_bottom.svg
- Size 509B
- SHA256 a5a8c02f3dd2e419ecf331387ef9c70a9824d2506a01579b9ae5f9798fb489b8
- MD5 07ccb4686b563381b9c252a0aae9c46e
- SHA1 a61b36271d8f5b7b067f8bad9fb862b77259e829
- SHA512 ef9191cf11a1703266b7c4f40f9c69ca32e53f8e46dd66284047c2268ea16db93fc3dc7c99eeca3f78f664e11283318c935c5d47676fdcc09aa4715206048371
- TLSH
  T1ACF059DC1308C189A61857086E183C6C4C6DE1EA6A4A009FB368277B2D3CA97DD142D8
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral10 behavioral9
- Target
  thanks/assets/images/icons/dot_top.svg
- Size 160B
- SHA256 8e7e36e09ef7a4c637dbac425f15eaf37f6cb32855f853ae78c2bafa3720f95c
- MD5 553f3a8b603839fecb0a9bea73a921d5
- SHA1 320d56626863eb3848b3fc97bfbcc09110ce6037
- SHA512 d1e8f2bef0d35568c698b90042804ebe7de885f352520bb00833c28db8bf3379c1b47e1452d8f00b9c45d22f47d2d047f487949c51bf5d89e8b710c38c0a120f
- TLSH
  T148C08C3A822C8D08D1088A28526EB957249B80DB8A99A266C9582C1670418EF7C023B8
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  thanks/assets/images/icons/order.svg
- Size 1KB
- SHA256 161e123891202aed82698d99c3c3bd4e78e99189f640be67bede1217120f7fef
- MD5 34db89bc5dc6ac072bd24fafd76c8105
- SHA1 e986d945b258f75914e756baa4dce34423bf6a70
- SHA512 ab0029e9f346d4da4024ca4c872f5f629f4b62367b1955eaffc19a6c7645b8533f2e2d547c882d69065a086d302a37052308cc4a89181a317f7b25b792fc2048
- TLSH
  T1D521F4E8329C680DEA04ABBD975D79E2303D25C56924416CEA623C19B49497E4C1C1CB
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral13 behavioral14
- Target
  thanks/assets/images/icons/order_green.svg
- Size 1KB
- SHA256 161e123891202aed82698d99c3c3bd4e78e99189f640be67bede1217120f7fef
- MD5 34db89bc5dc6ac072bd24fafd76c8105
- SHA1 e986d945b258f75914e756baa4dce34423bf6a70
- SHA512 ab0029e9f346d4da4024ca4c872f5f629f4b62367b1955eaffc19a6c7645b8533f2e2d547c882d69065a086d302a37052308cc4a89181a317f7b25b792fc2048
- TLSH
  T1D521F4E8329C680DEA04ABBD975D79E2303D25C56924416CEA623C19B49497E4C1C1CB
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  thanks/assets/images/icons/order_white.svg
- Size 1001B
- SHA256 65dbb5e24d7027e459fae6dce3f1b4f40d5f426b01bb8c8eab7552ad7b19e1a7
- MD5 78561de0f8386368b65b7b90ddfe9fb0
- SHA1 bc0ff0982368c25109e8299590a79752870b5f6e
- SHA512 6ffd1048deeb98fe6c2dc8691c4e53cb3a0cc5ab635f95d8b1b389f8b2508f121d88fb68fcf5de9b2541bb77cf0241e0e310c8712cf67a77668dc3aaecb35d62
- TLSH
  T1D4110EB8E158E85885046F390B49A66A7237B6D1FD4040E493302E1F30927DBEC962DD
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral17 behavioral18
- Target
  thanks/assets/images/logo/logo.svg
- Size 7KB
- SHA256 4502c5e501aa30e579f0c8e0951190cfe7f7cf4fee8438ec020a3b569c8b6cb2
- MD5 614a86555b61e8b75c476676022f5347
- SHA1 2c9f9aec8c289bea85b4bb25cdc44cb90b04c550
- SHA512 571b693779e6222a3644201df9b642a7ba4025c34ddf69b7e6468fb4ffa9031efe3df31314bfc4d02abade53a4b0be214c0237c55bc96fceba326b3414c4649a
- SSDEEP 192:JQw2227wHyw23jFYBurgo7OeAm9vo5AqY:6w22vL23jFY8rb7O69vo5Af
- TLSH
  T197F185447B8982F0DD42FFF95B19B476021B2CE99C2150FCCAA62CA1AE5553E8C6DEC0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral19 behavioral20
- Target
  thanks/assets/images/logo/order_accepted.svg
- Size 1KB
- SHA256 161e123891202aed82698d99c3c3bd4e78e99189f640be67bede1217120f7fef
- MD5 34db89bc5dc6ac072bd24fafd76c8105
- SHA1 e986d945b258f75914e756baa4dce34423bf6a70
- SHA512 ab0029e9f346d4da4024ca4c872f5f629f4b62367b1955eaffc19a6c7645b8533f2e2d547c882d69065a086d302a37052308cc4a89181a317f7b25b792fc2048
- TLSH
  T1D521F4E8329C680DEA04ABBD975D79E2303D25C56924416CEA623C19B49497E4C1C1CB
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral21 behavioral22
- Target
  thanks/assets/js/main.js
- Size 649B
- SHA256 691a180488f2eb73c502a5acaacdfd365e906056f8380303d1ba63d901cb18ce
- MD5 50a02c5aa52d1d33e82719ae675a23b4
- SHA1 e449a29e4b60cdc39c2e79e9bf44964bffa96c00
- SHA512 a03c119b13e240b020615d02e2a1885104ef134250d647806ef91e27b3cabdafd7f0a87345065d1a54dca0bd9beaf890ec2c3528b3cfef5992afb2a9876070b9
- TLSH
  T12DF028AAF53480A8017BF1394B26AA84FD6250EB054DCF0079FC1C991FB121683D7E4A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  thanks/index.html
- Size 5KB
- SHA256 73c4e369db085f5d7865c00cb7aea27ca2f32c145143f2666cb6344f84f29710
- MD5 1eea13701134f97a7de514536847ec5d
- SHA1 23988c500d0fce6ed079d9d4687125170f05754e
- SHA512 2f491a8bd645b6f90b92db3d6f9897987cac151a901d222ccf93631f60f523b3221d9bbdc8baf3966ec95d6937c07dd7f46db5951e9e4322fe4e5826750672cb
- SSDEEP 96:x1Dn4rQL/6JZNwXrRYJrv7nM4X5zkovkJoIPj8MJk7+z6mI0TVbyk:x1EQUMQBy8MLTVbyk
- TLSH
  T15BC10A34F8F5047B1042D08869616F9BAEE0E60BD58B8616B6FD5AA91FC3E87CD6301C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral25 behavioral26
- Target
  prostco/assets/js/index.js
- Size 1KB
- SHA256 bf120669c095993425f46c47e8eebd4fe995a53bf896041dd0b86672b35e37e7
- MD5 bd9f0e723e092aa0ad3d5df4f47b478a
- SHA1 c0c326fc7c0854a8b52168b8f884be571917f78a
- SHA512 ebf3873639500cb30d394b4a57738da1938e0666fe415bd8d1d3c97d20228c84e3caabb9ad1e37791e6cef854f479ddcf0a02c30127f236346eb0551956c67c6
- TLSH
  T1FB41BB6DBAA624252A73727B9FBA0108EB3681035044DA50BD9C69D26F7027151F2FAD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  prostco/assets/js/plugin.js
- Size 56KB
- SHA256 331630f199a04c347399895297f249263d479ec8b23948c428040d98b74a27ff
- MD5 3a3e623a80fa8674fd6e86705b6a0915
- SHA1 4196d094d88d7fe5205f6fd4fd289f9a83edb4e2
- SHA512 5ddc5c1a58050342ced7c461675edbc987196a05dd0fcf50cfc22342b7d7d8a62460f6027d858785ad72f2fad83d2826068486fd705a69abf27bc3412514a60d
- SSDEEP 768:RO0rZoUp5v25EwVfg2GcfkUEy9skMF5t18Q3ZAHnCgSHh6u5l12I/delVGs8EpEX:35MJVpGLqPMFXuYzU8As
- TLSH
  T18B439449F220786A479791A1563F120BB23A242CA416506DB978E5EE6C7DC8D303FFFD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  prostco/assets/js/translater.js
- Size 7KB
- SHA256 e0d07e79fdd24dfd1c5a1839952c5b34c9ec47b1ac75493cc14f982b154554f5
- MD5 8a57b217cc83889fdce397e448a76924
- SHA1 28018f7c025ac26c87fe60a95c6f9d3e2011feb8
- SHA512 00c18674ceec696a975bb8ee3b6b4402f01cecfd93b600abc9659f2175d4c1cfd6f0be7ce203996404cbd6c1615c5ee3a0af489341786962e5695d373b7f37d7
- SSDEEP 192:bEoUuDPho2devEuWODz4ZZSslLbQQoQ0KMdH0yrU82wZJ:bZDPho2SgwslvQYvnyrU82wZJ
- TLSH
  T136F1506784870A5B4DF2A24EA582DD37E1C6FA4CF110CE93F86C561513CFA08A51FEAC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32