e78e97ef0a94625c3c2e0b2a8eda1eda2ded9396e24efce9f4ea14fc44def98b

Sharing

Copy URL Twitter E-mail

General

Target
app.zip
Size 161KB
Sample260629-ajm8hahs91
SHA256 e78e97ef0a94625c3c2e0b2a8eda1eda2ded9396e24efce9f4ea14fc44def98b
MD5 e314b7df0c6f1616fbec1d9e453122de
SHA1 7504fcc66e66eade03e46a9cc5f1356eb100c255
SHA512 46e68fc4b5f0735ffccad80ad9add9e7812dfbe5417acde94bf5e6b6cf18d48cff7f4e4df4db6f953b36825b9734587cc66e0c481d7f775a798456c3dd7f56ae
SSDEEP 3072:oAd/6HbUZfGCBrE4ILRI4am8g6L2e3ZqjY4WpLp0yUQAHRuOs:oA+UZO2Unam8gp+D4gp8Rul
TLSH
T1F6F312319515FC59CD5AA1BBB835E188C753F594900C6D0F3E420AA97357BF12FB218E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  app.js
- Size 3KB
- SHA256 226230eebfa61b85e75c62839a6fa622390694eb3bbfb9b7848236435bd9d796
- MD5 2a8ea53de31b0019a638055f4b2c503e
- SHA1 2c486de32312f0ec3e740fb771c41108173df698
- SHA512 eeef6e15382e7017c241960752ed69fdfd91c19a238f9754d6b4d59398411f0dabb7ac38d37a4246603269fd1233e0e29fb953bbf25951a753510191fe60a855
- TLSH
  T11C81A746378262B449F282DC250B2106FB56F27695249160FB9C439E1FB2CE9C961FFC
- MD5 SHA1 SHA512 TLSH
Score

8^/10

execution adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2
- Target
  modules/contact-helpers.js
- Size 2KB
- SHA256 e9a549daf77b53d69cfd5a81ec21839d9a3d3b036b878a26d72d0e157cc16f72
- MD5 292f9fe07e77a77a6f8074878c63f356
- SHA1 d270742b55d1b1db6a520c24b04e3a1d774d9862
- SHA512 8380738187cd7c4fb45f242f96451ee6dcf3db3fbadf37cb5129fb2da53a056e202b19630402a6337a0d075750364e83829bad0fab06ae67543d4927cda40909
- TLSH
  T1824134CC3053B2A00B7005E9394B5005DFA6E3771A3B9165F5ADC6052B66C4DE776CDE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  modules/markdown-helpers.js
- Size 2KB
- SHA256 342fe15bf77d442acba7add401979c10c22d573adce327c4b5222fc87eda02a8
- MD5 454a8d0e4ccc80865f4b6225f4ee30cb
- SHA1 6155ceabbb3609a19a4ae0567cb571c2a7fc8f4f
- SHA512 3ff7016eb372fecb70e2aee26a1a32628c850ef783f905bb333fc81715509d1433b2cafe20c44c62447e1e14888be46bd4252996270b683f34b47962e57c02b6
- TLSH
  T162417786FA84F23255FA06540B0B980BF626F27D24569044BEDD928C3F55050D5F3FDD
- MD5 SHA1 SHA512 TLSH
Score

8^/10

execution adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral5 behavioral6
- Target
  public/js/main.js
- Size 523B
- SHA256 724a3ed7096796915fe24f8ed3488c94a09cade842f116564c5cec0b70d67efd
- MD5 9883ad48bcf299ad344079f2b423a31b
- SHA1 885d96188863381a0ecb166cfe344bcd1f18342f
- SHA512 69473bbad12eb325efc4b96cc8908a9bb9e27ff0fd8b268f82a876aadf74a800d3197af7e7892dc473061b390af69ec50a324378a8337ee400ba71b4de699c24
- TLSH
  T1A5F059BF72060872C4F70666920EAF94F2240027650096067E1ECB480FB5C42B8B2ED8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  public/prism/prism-test.html
- Size 1KB
- SHA256 1f3babcab47e9ae719d574622edc22178ee3f1edd1c5e794ad44219693ca3beb
- MD5 951cb8839189eefcb75f59cbc9fa354b
- SHA1 f750f69c9b5805a36683aa7d2bc6764610fdc325
- SHA512 705e1d5102a105391ec47eb571aa58e21a150608a39e5f36c69a96bdb3ea37b52e4592bba6b924bc19a56b22ba61f0fd7d88967ca9e4b566c4047623f707177f
- TLSH
  T15F11CE3585C15638003642268AD3A5ADFF9F28CFAA4D19483EDC131F2FB2E44CC979D8
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral10 behavioral9
- Target
  public/prism/prism.js
- Size 15KB
- SHA256 2f5016a2c10a07c5182952f9801327503851dda682243d0b3a59e2b3426a1def
- MD5 5a92eac32a0448ee709c8b1fd5002bd3
- SHA1 3d520353ce035ae4504322ae5e17c3859e570abc
- SHA512 c6b94b2552d444e171bba2dc4022b34231c3bb7c72f6a4a13e5c4a3b1594df23677a1523008d312a6b20649039d9b8d7d93f80f9b21bc43893036f5522435fb5
- SSDEEP 384:LJ2XPqyCmw2LIYQDp0ZFtOIWzcBaCwOf7wuY8G:cqyCmwgQDCjocoCTEuxG
- TLSH
  T12F623AD576AE3C341793507A309F348CFD744D64E80DA842F328D1AAACFA88640C7DE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  public/static-page.html
- Size 388B
- SHA256 78d4b494e51261de8c8f2332c3938b2cffc90b2982644f5d676079d2a25d4838
- MD5 d8c48ad8d88201f4cd01740f3a2aa3e2
- SHA1 a33b0a8f838cd8008f7ad78b4a9a768c5890a892
- SHA512 cc3158fdcb6588da086a879b3e3f4583bfd11f9061ac987931a5ffdcd1c647bbc00a56959bb6832f038d48239954aa4bf36a6ce8ddbeca1499a7f741e26b5457
- TLSH
  T12AE0685628CADC4E81B06B38BC81B0ACD086E1C823B69D00B9DD643B2EE535489D398D
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral13 behavioral14
- Target
  views/partials/top.ejs
- Size 766B
- SHA256 d6b08c0f83560f92dc8a26d480610bfae7c1204efcb060604ab4f6454b491601
- MD5 da1f3407a6ea189f072e67d8c0d3d102
- SHA1 bce5cd31cd0fea6a2ebaaa4816088ef6942faaf5
- SHA512 d48974f2d0a4ac37fc494cc3086ef656d7df12fbbcf7d0b78602560aad0edfc82498621190dda35d63db5c885b2e774219ef6aa73081dee0cd87467c5bd665ca
- TLSH
  T1A6019C0B388C950F5232664FE835B168D4CFEC25B3B82C22707E657B2FE265A4D0A965
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral15 behavioral16