df84a88ab3b2ec9f21bc236a4fc867834bb369c6ab2d7f91e599c715786dddb0

Sharing

Copy URL Twitter E-mail

General

Target
nhjsgille.com_superrajapanda88_gmail.com_kob0ta0w35_backup.zip
Size 21.5MB
Sample260628-wtawtaa12w
SHA256 df84a88ab3b2ec9f21bc236a4fc867834bb369c6ab2d7f91e599c715786dddb0
MD5 cea491e9a9adbcf77ef98d6cb8b2138e
SHA1 9d0b1bce2d44104ee6a62620d905dfacf07d181d
SHA512 c9f85928a7c198daaed115a593bf6efe12954f6f16062fecf73b39dd45d35aaea05a656fe9ce612d9f913920b02cca0e88544827c3b9a6262a90790213899935
SSDEEP 393216:3oQId73BnxSxK5XvFes1le/Al+ufYyaXWn6tODIDx8aAuGMyRup6tG1:4l18Oez/AzfYy7n6tn8uAd4
TLSH
T1503733789E41706ADCAA5F3A88646315736803FBC462754CD4203AF58FADFDC2D3A49B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  -sqs/polyfiller/1.2.2/legacy.js
- Size 42KB
- SHA256 4aa9ea4e56ac01721a07b043b4bb1a800c2eca8fb1c959078135ba049d312fff
- MD5 b6a9976413b19b39e6ff6a6f0ed4b700
- SHA1 1925243f46c864162b4423a388e26790ff6bbb77
- SHA512 8d6d9101e9fdf09771db94261c9f38115ef290833cd78339626fed75a753b6115f642698694bd184c20a3ec054f207a22af0611fe6f6396d456704218e1c21f2
- SSDEEP 768:Gohmb6d3xYJNCBsIDsrQ7WPEx3SMpgENUDVros:Kb83xYJNpIMlPMPCD5
- TLSH
  T18E13528DFAD5B0EE46E26AF5012F750E91F62655F94BA890D261C4C4E83C90F503BF2E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  -sqs/polyfiller/1.2.2/modern.js
- Size 80KB
- SHA256 6a801f781b109838b64c593ffbabaeb97e553d349540a9636cb63e23a8479423
- MD5 782269a1e71d6fa339f3fe3e96260920
- SHA1 19a1d6f5381a86ac75c007a853c8d68d4184f224
- SHA512 f296afb05df32c56a6b57cb22074c279fb345a8e17b9c37c58515a4ac73d6df4b49c43435f2351dfb863e17460786642c61db58088e9c76b42c6986c3ddc32ec
- SSDEEP 1536:q7JlQUX5RefXJfjN4oGX9sDjhh5ISVVUI8MjLmL3Y4+P94GhnMsKovmBpkBi17P0:4DQy49MOqDw
- TLSH
  T1A983D5C8F681B0A947E37564402F540BE1B76B58B44E9890F762D5C0AC7AE8FA077F2D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  -sqs/polyfiller/1.6/legacy.js
- Size 41KB
- SHA256 05e8f7a9a14bfe6d0f8485cef7e13dc01e220a3c99e8bc027ced2144baec167f
- MD5 f644ad37e7f3bfabe00a71bd57f52821
- SHA1 8190bffe3aa5ffa09a14d87c4b81d81997fa5766
- SHA512 95ab4a29a5edc411c965d86b90fd892dd5bdb18261f9bf92ccc743df56823918bb386887248fce12b9edc310a7c3530c013f0554cbc61f795e86f783cdcca5c2
- SSDEEP 768:dvM9fiz5j0xtiz+kdMY7W0vSRIKKst5K7B8Hht216l108:I6+xstH9KtK7B8Hht4008
- TLSH
  T1DA13C98CB681B0AD4B6266A4512F440BE6661F60D49BE410FF62DC48747F91FB03BEBD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

execution adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral5 behavioral6
- Target
  -sqs/polyfiller/1.6/modern.js
- Size 114KB
- SHA256 54e832663426c696b1f603379026e5e15720e8c812bbbc60d63aa2ad8a479f75
- MD5 93a2aea230d421d550375c528b22583e
- SHA1 e8d88b00db1c30510928a7c6618f0f7cffa9b4c2
- SHA512 2ba5180b32fcd62b7a430e75c8cd8022076563299f055ad99b836afbaeb39d205d825b2848e0686f7e136502eaae91b39b4659d6c1f6a0895c16fa5515494eed
- SSDEEP 1536:bocmEAoU4k8rNnI/JrB5DCbFN+srq7Tgk09F/yUblX8Q:YoUWNI/J3QqSLL
- TLSH
  T153B3F788F692B0A50BE36094106F4407F2762A54B84E9890FB62D990787FD9FB077F7D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

execution adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral7 behavioral8
- Target
  evenemang.html
- Size 652B
- SHA256 9468b5f61f3c0f73b62be989573fcecdcd72b596588cd38f414654b5dec43e2c
- MD5 d7445ffc7717e02fc8e1be7100c32f03
- SHA1 cab3252d8bf6da22a2a6587332f4cf2de2a662c8
- SHA512 27d51dc164f95ac258b4c17ca3139f9d3bd21b054aa038395d71f593e641fbacd0a4c09cff7be388dcaf26f1c8053fe2434f018f17541b4031e060ce8733dcd1
- TLSH
  T15BF0D3EF8D4591123535E778EEBCB594B223019F8220E086C1150D9E53A5623D1879AF
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral10 behavioral9
- Target
  galleri.html
- Size 652B
- SHA256 9468b5f61f3c0f73b62be989573fcecdcd72b596588cd38f414654b5dec43e2c
- MD5 d7445ffc7717e02fc8e1be7100c32f03
- SHA1 cab3252d8bf6da22a2a6587332f4cf2de2a662c8
- SHA512 27d51dc164f95ac258b4c17ca3139f9d3bd21b054aa038395d71f593e641fbacd0a4c09cff7be388dcaf26f1c8053fe2434f018f17541b4031e060ce8733dcd1
- TLSH
  T15BF0D3EF8D4591123535E778EEBCB594B223019F8220E086C1150D9E53A5623D1879AF
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral11 behavioral12
- Target
  gillestrukturen.html
- Size 652B
- SHA256 9468b5f61f3c0f73b62be989573fcecdcd72b596588cd38f414654b5dec43e2c
- MD5 d7445ffc7717e02fc8e1be7100c32f03
- SHA1 cab3252d8bf6da22a2a6587332f4cf2de2a662c8
- SHA512 27d51dc164f95ac258b4c17ca3139f9d3bd21b054aa038395d71f593e641fbacd0a4c09cff7be388dcaf26f1c8053fe2434f018f17541b4031e060ce8733dcd1
- TLSH
  T15BF0D3EF8D4591123535E778EEBCB594B223019F8220E086C1150D9E53A5623D1879AF
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral13 behavioral14
- Target
  gillet.html
- Size 652B
- SHA256 9468b5f61f3c0f73b62be989573fcecdcd72b596588cd38f414654b5dec43e2c
- MD5 d7445ffc7717e02fc8e1be7100c32f03
- SHA1 cab3252d8bf6da22a2a6587332f4cf2de2a662c8
- SHA512 27d51dc164f95ac258b4c17ca3139f9d3bd21b054aa038395d71f593e641fbacd0a4c09cff7be388dcaf26f1c8053fe2434f018f17541b4031e060ce8733dcd1
- TLSH
  T15BF0D3EF8D4591123535E778EEBCB594B223019F8220E086C1150D9E53A5623D1879AF
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral15 behavioral16
- Target
  home.html
- Size 652B
- SHA256 9468b5f61f3c0f73b62be989573fcecdcd72b596588cd38f414654b5dec43e2c
- MD5 d7445ffc7717e02fc8e1be7100c32f03
- SHA1 cab3252d8bf6da22a2a6587332f4cf2de2a662c8
- SHA512 27d51dc164f95ac258b4c17ca3139f9d3bd21b054aa038395d71f593e641fbacd0a4c09cff7be388dcaf26f1c8053fe2434f018f17541b4031e060ce8733dcd1
- TLSH
  T15BF0D3EF8D4591123535E778EEBCB594B223019F8220E086C1150D9E53A5623D1879AF
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral17 behavioral18
- Target
  index.html
- Size 70KB
- SHA256 7b70fad11f62e3c762d50a76dcca4ed89509e6594a88d56c11b28af419e27938
- MD5 ac9bac877073d6f95e992f60ff37b2bb
- SHA1 4d6233436c9ea4512fe46b898f3e6e466456c89a
- SHA512 1fa5cdef3e563f1aae9f30b705f3fedbabda72df2feb20fd2446094fa564409646ed060bf848ffb0e2f90c71497e1d85e7420dd969f978a4540e3d034545e766
- SSDEEP 768:VcNZbWt5nYi6uwAt2sD8tizprC93auaDvJe6YHhLVwO8MS2enYqWaYplLyr:VcNZbWt5nYi6uwAtnO593auKe6EFv8Om
- TLSH
  T1BE63D931ED60203B12A352D4F6257717BAC6E757CA4244C4F1AC4F1A2FCAEE10A9776E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral19 behavioral20
- Target
  javascript/conveythis-initializer.js
- Size 1KB
- SHA256 9b6745abcb897599b0304e1006a7d57038731444b88210ef4aa81383fc2c1222
- MD5 f3d94fae8e0abbfc8f9c9b4a8e9ff3a9
- SHA1 e1c816c40bd2160c2249bda588cb9061bae72a4a
- SHA512 e34c8342692506dc475fc05ed5f77fa5c3e2891d8ddf167ca14c32053f38aebcd56caf02781321960df8705acedbf48a979e8262b0ffe3b5f9b73f6b9c13937b
- TLSH
  T13B3102C4DF8DC2B9956524A6053BC1ECBB6C6431B900CCD2BC049D691478E58868FAE9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  kalender.html
- Size 652B
- SHA256 9468b5f61f3c0f73b62be989573fcecdcd72b596588cd38f414654b5dec43e2c
- MD5 d7445ffc7717e02fc8e1be7100c32f03
- SHA1 cab3252d8bf6da22a2a6587332f4cf2de2a662c8
- SHA512 27d51dc164f95ac258b4c17ca3139f9d3bd21b054aa038395d71f593e641fbacd0a4c09cff7be388dcaf26f1c8053fe2434f018f17541b4031e060ce8733dcd1
- TLSH
  T15BF0D3EF8D4591123535E778EEBCB594B223019F8220E086C1150D9E53A5623D1879AF
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral23 behavioral24
- Target
  kontakt.html
- Size 652B
- SHA256 9468b5f61f3c0f73b62be989573fcecdcd72b596588cd38f414654b5dec43e2c
- MD5 d7445ffc7717e02fc8e1be7100c32f03
- SHA1 cab3252d8bf6da22a2a6587332f4cf2de2a662c8
- SHA512 27d51dc164f95ac258b4c17ca3139f9d3bd21b054aa038395d71f593e641fbacd0a4c09cff7be388dcaf26f1c8053fe2434f018f17541b4031e060ce8733dcd1
- TLSH
  T15BF0D3EF8D4591123535E778EEBCB594B223019F8220E086C1150D9E53A5623D1879AF
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral25 behavioral26
- Target
  kurser.html
- Size 652B
- SHA256 9468b5f61f3c0f73b62be989573fcecdcd72b596588cd38f414654b5dec43e2c
- MD5 d7445ffc7717e02fc8e1be7100c32f03
- SHA1 cab3252d8bf6da22a2a6587332f4cf2de2a662c8
- SHA512 27d51dc164f95ac258b4c17ca3139f9d3bd21b054aa038395d71f593e641fbacd0a4c09cff7be388dcaf26f1c8053fe2434f018f17541b4031e060ce8733dcd1
- TLSH
  T15BF0D3EF8D4591123535E778EEBCB594B223019F8220E086C1150D9E53A5623D1879AF
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral27 behavioral28
- Target
  medlemskap.html
- Size 52KB
- SHA256 2fa1c86bbe09f419f71ca726b64f13c74ee0cb936542b85f73be42de129c4dd0
- MD5 a0d0829822b780a65d482e21efb99c3b
- SHA1 b9c67491e174340a5b59fd40865642ef8d678df7
- SHA512 f65210993fa41bbbbff0cd753ced69d40e6c555b48628a0b85461eb1df120d2e3bcbb3434cbd9419d0c3710f81c5a1167ea0e972b20555a6d4ac79ea2cbadf2e
- SSDEEP 768:xspzCWyyprr5MuYDvJe3zjtUKjbsviYpnLy9:xspzCVu5MuAe33CKEE
- TLSH
  T1D533F831ED70113E12A756E8F2157B27EAC6E357C9828480F1BD4F166FCAEA1065363E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral29 behavioral30
- Target
  nyheter.html
- Size 652B
- SHA256 9468b5f61f3c0f73b62be989573fcecdcd72b596588cd38f414654b5dec43e2c
- MD5 d7445ffc7717e02fc8e1be7100c32f03
- SHA1 cab3252d8bf6da22a2a6587332f4cf2de2a662c8
- SHA512 27d51dc164f95ac258b4c17ca3139f9d3bd21b054aa038395d71f593e641fbacd0a4c09cff7be388dcaf26f1c8053fe2434f018f17541b4031e060ce8733dcd1
- TLSH
  T15BF0D3EF8D4591123535E778EEBCB594B223019F8220E086C1150D9E53A5623D1879AF
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32