0857548e069de17c6e66c9e1de910faff3ef79e8b509c30dc58bbb39d4f97776

Sharing

Copy URL Twitter E-mail

General

Target
KuponMarketi-v3.4.zip
Size 2.8MB
Sample260628-spdkcsh19m
SHA256 0857548e069de17c6e66c9e1de910faff3ef79e8b509c30dc58bbb39d4f97776
MD5 d131f8697140838f8ef6163b7b255c01
SHA1 5208eca00f940931dc468a2d316c68c0c99130da
SHA512 988298cf47862a7bfc4b50f7681729872e374f44fe2a21e5113f02f9383345d3b3ea07d52e98a8e16bbd19ee8b6592b4b2119c702b7958ba146493ac84dc0157
SSDEEP 49152:R90Amd3xNJ4fMKjBk13aGlTV8p4MLQcDeTMNngr0BjDHF1roJPnxc5gMvJVC3PE:R90N3fCkz13a4TVnMLQc+qjbUpxcDnCs
TLSH
T195D533F5C421127EC4A5F3E61E4A822917C68DAFB1D240F03E6C14B554D63CEBC8AF2A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  background.js
- Size 1.8MB
- SHA256 33023bad080b77be9c5c04a5b516505295e7b832c272f4268962c7865f8b8739
- MD5 6fa7f28d6e5e8e53fb5591fd668918e8
- SHA1 f81b7561d0916dddb720a5377128b38bbce3c487
- SHA512 f11f042d717a9f2a1d8e66d3ea0ee416cf44ccf111de4253109a44df05175977b562c393d48a7fa67217cb137366c8090a7653dcefa4a0eb456b7868a6fde8c6
- SSDEEP 49152:X2dhqz7QUXuRAUAq2EUp04xcYUMexNZZgeD5MQWom:n
- TLSH
  T17095B41163C07C60210B8FB7772BB6E5EA2D9B6C769448CFD144BC64E7EA901EBD0A71
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  content.js
- Size 357KB
- SHA256 f2e2013c3edf297d4b0acaa3824fe2995af52484155be73e3ec18739b5f2fb16
- MD5 af6f84ce7d0f2443e6928e80af97a73a
- SHA1 8cc31c7c9807f3e77db24d23f0df690258926e09
- SHA512 dcf87b52aaad8975444c9ed177d7dd70684f1da2cc0942b7a4906b6a8d9109b1556ce51250d050c2d0213e58d81170347b8599f73a63b188c674a77dff23f7d7
- SSDEEP 6144:O9aPg5aRxkhsajv8un1vvX5fzNxczSj3TaSnTGH3YY/irwEW6jT:O9wg8xUsajv8ivVpxczc3WRH4rwEW8
- TLSH
  T1CF74953163D1BC9621075F73372E73E8EA28A7AC794809CFE908BC55E2ADD1697D0970
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  crypto-js.min.js
- Size 47KB
- SHA256 0d8a1c113a018a86c02cb0e271b4288be5c50363ea7f848f1b5402a0ba4332cc
- MD5 4278da41fad60364309c4c6b4400490b
- SHA1 c4304fc98980b640698b93f307c475b93afce89b
- SHA512 e8f4b61b6fb516b55a32d9f803a18585d66aff980e0274a349d6b1a4ad2a9cdb895aabe951a00b968f6047e75e481d1f8f55de012dbaeb94651429a1fac5ff28
- SSDEEP 768:RhZ1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:bfZYDc6lXJd1mZpZEdS
- TLSH
  T1C7231AC5A19C605153A774C40D7F704BB4633526170D8AACF628E9EEECFCAEA9039D78
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  earlyBlocker.js
- Size 40KB
- SHA256 1b7b692a7289881f48c72476598d99aa760c7c0277c7cf00b73cef285587d69f
- MD5 601e663fa089b351200329426c386d55
- SHA1 6909c4c6cea90e4f276b6a3b006655ae073c6bc0
- SHA512 79a881d192a09c272abc4865448991d7038e1cc184bc881ae77cd589de946da4e6aba1b327b254e19e485dc29358c6c2c52f0e3e86dfeb029e484f99f6ba33b1
- SSDEEP 768:sv750M+eVUrtJOCxBEWNQGhCUSwVlDi7Ug37xV/vG+woiGvSviJFZ1sfNrXH8ODb:8VUv6GnvK34fjn/YZqSUt
- TLSH
  T17F03649263C1BC44164B9FB2772FB1E6EB25AF5874940C4FE844BC60E6B5E09EBD44B0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

execution adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral7 behavioral8
- Target
  fullscreen.html
- Size 52KB
- SHA256 57e8dbb76d5540e14f4517f0ad9ab05a29364206e161d13c4c443e053e68c955
- MD5 34ea4f7fe1b55f08190dac28edc56612
- SHA1 de48167592c9f9dd486bf993471fc566e848288c
- SHA512 261bbd7149e887f4acd64173fe5235c0d20966cc870f59c7d44bfc32b5c624c0449d8050ca2c26f5f7efa939aa71f1e5c8e83701382ca1274b25e0a3e9e4f9aa
- SSDEEP 1536:wCnxCgQAmQeA6aBF3Zlr8aUx2f3PINpiTYLYP:yZYP
- TLSH
  T15333D5131220213ABA6399863FD7874F7534E003D4069DACB9DD51A9CFCFDE189AB729
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral10 behavioral9
- Target
  fullscreen.js
- Size 489KB
- SHA256 45981dd2d15e5841fbefa3817ca3a45298fe53f571603e6d1a70e4dd9038d9bc
- MD5 2ea132aeac69a5a19a65beac49e4417b
- SHA1 126d44a6c90ef161fafa0d396fc582cf506b885e
- SHA512 d7d8be96bac248e7efd33309574709e50963226d1db565f981ab071e41e21df128b2040623780aea84da15766bfc0fba57a9496a763bc84ead3d78e6dcf701e3
- SSDEEP 6144:jtsM5b0Zt9Ey+RiiGgckXSo/OzOh9u6yStAtRuqmm4nKVD9nMpiN0:jtsMMky4i59kXWzOhs6yYA+P1KVSkm
- TLSH
  T148B4711223C1BC82110F5FB6332EB6E9EA295B6CB8480DDBE509BC54E7FD502EAD4571
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  generate-rsig.js
- Size 30KB
- SHA256 06aff95b69ffb8d38f3eafe1b2e9485e69c51df895d4d929ab00111fe2153be6
- MD5 79ad2fa2618e9075d002758166c0e6a4
- SHA1 29b4e09908d666ab049be4f42ff4a666eefa0fd2
- SHA512 8753a38a49761b6a7437f0ab8feec28cbb51189cb691362209640dafcb0e14e2a5f255c090e18e71bc699b17fb6c7bd38aeac6ef7c2053005dee771907cbf39d
- SSDEEP 768:smmtI7AfbxXq+TT+FKLohptc9PGOTlU3ZetSLsslJ8cdbIXUGbHniL3GgyNkfWk:XoI7knToz3UQ
- TLSH
  T13AE2544013C8FA51160B8B77665FF2D4DE166A9D308A0CD7A1207E38E79BA28E7DD371
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  inject.js
- Size 154KB
- SHA256 b0af3b0c6a91a136a373920c7b16ae8f6d681096a487cac762e3377b19d82ae2
- MD5 fea1170dae883c468cf6fcfac2686cc3
- SHA1 5b8498987048c156e4a28385825a4a07a6dee936
- SHA512 fab39db9a084593e59bb1f6a1acacea28c817527b2f7c9a40c65bbd42601f37771496e3edcff4bf5daf823627b1928b388e85e3c8f0df98e2097c080fcd7556d
- SSDEEP 3072:1ijshTby6UOFEkzPvosJNTKTLULsR4iCIl/DG5Hq:1iAhTTUOFEkzPAsnTKSHiCIlwHq
- TLSH
  T17FF3B75163C47C51214B8FB2772BF5E5EA1A6EA834490CDFF0087C88E6BAD07EAE4571
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  migros-coupon-inject.js
- Size 255KB
- SHA256 91525f5b2cbe8197f75856a23d1c908e8e3ed118d1297b49fdf8785625490d85
- MD5 40edd522e67b010afc496946e1311e96
- SHA1 421408ca83053677f7f7437447978874cd98bfb2
- SHA512 2c6b217dfc26760b2795ec4ab75516a6e0b84a2f86872417b5b284f8bf0929f144e5bfcb7b05e9c86e7e0b5a10a40a9e0e4a127981ea1145bd091c5f9f9b2752
- SSDEEP 3072:Cb1daOPFP6gfgOPlMQ2lpfMivUXbW4RWwmdq+QyV8KO/qkxpN6TbrA5t4k:m8O5b2blpfO9RWwmdq/M8hTxpNebrK4k
- TLSH
  T10144962113E56E5189179FBF333EB1F0EB6C6B59B055048BD0047FB0EAA990AF6D05B2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  popup.js
- Size 63KB
- SHA256 84352f272d4f5a0724fbe20515be854db330340a16cfe3172cdcf7ad4882af8c
- MD5 5a5aea77adacb32787df1d18e7ba480a
- SHA1 48b22643b9047b983bb38d87439e35b1c36e20da
- SHA512 63d69df3fe8967859dcb7a68265d0548e79f32b187d71c05747d49b11a1181f9685d26940c37617ddead4c41145bc74ac1ecaa74207c11cea63a1907d6b9e453
- SSDEEP 1536:WJULpSeVJnvTauqaAaBMsKUWJRHCZ2RpI:WmBVJ7/AqMsKFRa
- TLSH
  T11853545213E43C05218BDFB6732BFAE1EB656ED8B4460C8BD14C7D64E1A5906EEE0B70
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  src/core/endpoints.js
- Size 7KB
- SHA256 ec572f97d64d042978606e9aa3cbe641d59c3deca09ef7f26942b36066662601
- MD5 d39bba2147bca1c8e3ab83deefc91369
- SHA1 4649c6ce78506e18ed0d3672d60388b90d7d33c8
- SHA512 92afffe60022442abc95953cd2eb91814acd0161ff26280eb2a04dcd3b4386c40ac4cdfaf6bc644bd7aec73fe0ba563643d9509aa0c94b0bf47fb56a44233bdd
- SSDEEP 192:77DEdm5296YsvTulshfu5tTMi1+c1JMITBLr84zA0Wf:HodmI0Ys7uEfIRMi1+YTq4zdWf
- TLSH
  T148F151C061C06C64760B57B33F2676E4F8AE996E7A83C9DBD6807D58FE49421F2E0670
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  src/core/helpers.js
- Size 26KB
- SHA256 693e878e98ec01c648e086e79772bbb157946660b5dcdde62d6e8d9b4b5ae136
- MD5 865fdbe87275ac30e19a853fba63deae
- SHA1 f3ba84545030fa707f4758b5038aebe7c1d02b5d
- SHA512 f47843f6f07c181edd3f5fd4f140bb06e09f8a23f67e1f7777ac5faf7198523ee92f3844a54aa2723af08195719de2e4c55f935a8b11f10fdaf176dc0de088a4
- SSDEEP 768:C8L385TAR2U+5Bl6XN29eYzGCaiNas9n1nYcL1XAaWVaRyhM4YU9ON1HL/snXCh7:Vsa0mriTD
- TLSH
  T16AC2421123C07DA0120BDFB7772BB5E1E6292EAD7655088FE1047D94FAA9E0DE7E0670
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  src/platforms/migros.js
- Size 34KB
- SHA256 e497c82b0d01081a92937259475c619d3022cd2f1c1b63b929ad15165b992043
- MD5 20bd02c5e4174bd95b54c01ae958853e
- SHA1 ff8c83070227d94e37066383040b78a1bb33bf65
- SHA512 130dfacf63e9056b93936d59b07fd620dcb8a605af2296763a28debfc4b6c5df32bcecedba759917547af2390831087605037fe4aff281e06db61c2c09ba178b
- SSDEEP 768:v47DNVvlvbui+jN/1BsUsijFFhbjqCV19bEIXv5h+VyIZvSAw7T8GNaQeghCFlEp:wZ6p5V13I6n79NaFifY95/DnwWmfG54T
- TLSH
  T137F27422A3D06ED2110B5FF37F1677E2EA1A486C3546889EF7047C51F6E8962E5AC133
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  src/platforms/tgoyemek.js
- Size 70KB
- SHA256 467ad53e6f33b99a4d0d33f8e60d910cfc6229c69d6e5cc0b436c00aa80e0a05
- MD5 55dc67925558e807902321f4e50c17bd
- SHA1 ea62c021240bd714c91c6e075dcd2ebd48798bce
- SHA512 6dc55fd9dfdfb506b21ff38ae9c917878d8078085c21ea2ac358e88e5a3631d7d46622701ed4ab810c7853da039669bd9d6704c4b02860da1a11d8bda3f9b3fe
- SSDEEP 1536:TbTrw34CeTr1Jj/mGK7bSYJsHsD+P+1QY7GkR2fFKF+4sXe6LyqD://P6H1zGkRaFKF6Xr1D
- TLSH
  T19963452393D03CA1118B8FB6B71AB5E5E929699878A40DCFF404FD50E6FAD08F6D0571
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  src/platforms/yemeksepeti.js
- Size 183KB
- SHA256 674ef263ec589d543ac22ba6705b454f6a225d6883dc19c454c56f3be5cd09cb
- MD5 348dfcef45e312d21e4c236800541e85
- SHA1 dd8a828fdf25ce1e463a2716b889bb6a24a1b472
- SHA512 7148a90a958035decb2c82e5ed904e1c9b1b667802a16ca1b09ddc7d43ae39cbe9f668f51ad5d683f00b4970c271b2fb1cb70f8bb2439024290f0877681d3b4e
- SSDEEP 3072:PgvaBwBUUFS7SvAovAGQf/0b8B+BRlS9u4/8cLNaLyFbe3fHtmPaS76:/BwBU/7TovAGQf/0b8YRwu4/8YaJF5Sm
- TLSH
  T15504836153C1AC65200B4F73772EB6E5FE2AAB9D3464088FF544BC54F6AA817EBE4430
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  src/yemeksepeti/productLister.js
- Size 44KB
- SHA256 1c106fc36e0831a7d943a4ebecbd0e1ce22f940149ba8949edf85d5eaf1a8ef3
- MD5 e07475a38e2bf55dacc48eec33282eda
- SHA1 002bf9d0f3212dcf3b34abcd33a6c44537547a49
- SHA512 0090cec78bbbe9e2ee2866e6cd3e525c4c522c092df2c735d331d539ea07e742a2e8b79b92274333b32caba4a1792b76fda5aea3f4e652b7531304fef1103d51
- SSDEEP 768:JeFanU8bLW5F4wE3uPOw/fmDQ/1Pw0skQ7kOcw1Q1GSlBWeDH4gho9Ald1GIjdHg:rWIZIJPhskHTh0FKPTo
- TLSH
  T1CF23848223C1AC60150B9772772FF1E9ED2CAFA572850D8FE144BD44E679615EFE0A30
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32