f0fd296366d561bd996d9c3691e4486e8814698342e486e11143e51da33d80d8

Sharing

Copy URL Twitter E-mail

General

Target
masterturnaround.zip
Size 1.3MB
Sample260629-peqv6aex4m
SHA256 f0fd296366d561bd996d9c3691e4486e8814698342e486e11143e51da33d80d8
MD5 d10e5ef67424173d0bd5e28c0a03857a
SHA1 fe43c46a783b0cb0acfe680b4195e25f9bcacbe1
SHA512 83bb4eb810bd6625b79d6814f913181c1325f768872b3ead2327621047f3801065c7e0d50aa5e34958a23b1157a9b138cb1c3edace92fa76669d39d034e8a02e
SSDEEP 24576:Ycc57sDynPPDrpgX7OiG4J844lOk/c6ZYSjGpG2JlequNED2lri34ygpdmV9m5ux:0VPHp2RMzYzeq+43Tyd890uLjoLy
TLSH
T1BF5533738B7D0502DA1F473251BE086EF9CE2BBFA5E03B1DC59B22D617869860D60778
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  masterturnaround/assets/fonts/fontawesome-webfont.svg
- Size 433KB
- SHA256 ad6157926c1622ba4e1d03d478f1541368524bfc46f51e42fe0d945f7ef323e4
- MD5 912ec66d7572ff821749319396470bde
- SHA1 98a8aa5cf7d62c2eff5f07ede8d844b874ef06ed
- SHA512 4f575d52331de91a2e32cc3408dd0eaf0cf25b7244d34b226314e3647e85ce284f86e3b7238c6c8b9022dc4e2787bf51620849290cdcd5d4c4bc905f289d2156
- SSDEEP 3072:PLac0AVfCwGzG8LY4kh53s0eOnz8WjKAOvX7LYvglcD4ZME8xYWDQqJpFDBl4qjm:hCG7bFv9gSS
- TLSH
  T17594C96CE9910B79CBDD42D5957D0E90132D81EE28783E1846BEA8F05D06B2A0FDFBC5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral1 behavioral2
- Target
  masterturnaround/assets/fonts/fontello.svg
- Size 1KB
- SHA256 3f59ae733eb7b5ad9767360b7cd08b6cad6bd938816d868fd85b8ce7056c3721
- MD5 f15fca6ccd291552072585fe76a03567
- SHA1 c643cd65ff58d7ca72bba498d2f99d4a87ae9ffd
- SHA512 43cdf7034389a3b02fe4027df2822a3535d790f07899004c0e408f11f6573fbfbc82ba6ab81ad9e2d1dc67ae2b7ce52ffc59846ed866033f3d34a6b23726a72b
- TLSH
  T1A821E2B6E2589E53D2E6414153FD1B140764E2FB53B83C4CA488F9B4884C7791369AC4
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral3 behavioral4
- Target
  masterturnaround/assets/js/application.js
- Size 3KB
- SHA256 f7778cecbd5910c1e8c1b77907972d8c33b9e907bf0afc8a7e5e350f42acb356
- MD5 4e59a4fcca6e155c05454348473784b5
- SHA1 bf6b9f29a0a16c0d2f64b41a16c75cc11791f8e9
- SHA512 2bb950527265f87a782c59ca4684d5ca93194002a9f30ee987a6cee78d8c73118f75a9ac6037b91a165623ddd5902c88bac2d61e8a5b5bb876cc21b77ecf56e4
- TLSH
  T19381ED007AA26070E07F302E8BBF521C3B79D2036804E96075CCD2945F69AAFF997DD9
- MD5 SHA1 SHA512 TLSH
Score

8^/10

execution adware persistence spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral5 behavioral6
- Target
  masterturnaround/assets/js/jquery.min.js
- Size 94KB
- SHA256 b294e973896f8f874e90a8eb1a8908ac790980d034c4c4bdf0fc3d37b8abf682
- MD5 8fc25e27d42774aeae6edbc0a18b72aa
- SHA1 b66ed708717bf0b4a005a4d0113af8843ef3b8ff
- SHA512 87d90a665c15d71ac872bd8bc003d9863964c7ec7ada6370b902b93c0bbd7770fe25730d946c7c6a465baa95efa74bc0e78af3f83aea615af35060cc8702a6c1
- SSDEEP 1536:EPpEy5BMibZGOj/bEe8v+/UWf4IhvAuCh/jqkODZ2D5N9Rag0MOIdSZAgtgoX5Yn:bIO/e2D5c4LgtImLja98HrK
- TLSH
  T1CC93E8D9B6D2706297B730A851BF510BB17698EAB80C4C60F058D8E47EB4E8D507BF2D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  masterturnaround/assets/js/slick.min.js
- Size 52KB
- SHA256 abc1f3b65bc7ecde54231a83c337e9f0b2dcf1c9eaa7f65b7b0e9e3ea8aeecff
- MD5 b87c79035aba5a8d479fe3bc2d382330
- SHA1 e0815d8dc17842aa0605fe87ee15aa115660637d
- SHA512 c0f25878af078987c2927ed5545c5eb0717bb539a5c05db1b29eba4684154444fb32e21e9d8cf1036b357f7dfb2166d36b146187ed7625f632b9d2ed1109dfd8
- SSDEEP 768:TMwCKEZ8pIWbWqEg9k0aMSYh8gS1T0pBT5VDEvm7K7qfpsrIb1DKNQwpuiL0ywou:SEk0j+074qxd3Mn4
- TLSH
  T170334206D6E12723859771D5A53AC808B3FAE73B9A11D8903A8C43D56F1C42CCAFB7E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  masterturnaround/assets/js/smoothscroll.js
- Size 20KB
- SHA256 5c3960c4ca9b43cc58dcecff47bbf168acab7f31a0a538ca43b9d9092851c090
- MD5 9638a17ec35782330badf9a58fd54dc2
- SHA1 93dc7cf49d7d8358b2aa2eabe16b651687870026
- SHA512 199569cff0345901de1ea44beb26724963ee97480916a9343dd1818bffac3bf3227ac6a24c9e776542a2512106abe5b3942d6a48c5f227d744e67995254de0e4
- SSDEEP 384:hTFP3DPRPJB443CLMa3yb89wuo/aozZmBAep2FOV4zxo+CFRez6K:hp/d44sE89bo/X8BrUrzeLMzf
- TLSH
  T1E7A2D79555E32C62166F613E97AF92C673744053110AE924380EBFD82FCCA7453B2FEA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  masterturnaround/index.html
- Size 10KB
- SHA256 d92d58572e0ff322d865618aa57f4490848cf98ca2747ad742295f87fad00253
- MD5 d3098a7f817427910efec9300225c12e
- SHA1 06859a26bb1d1af9e004f39a8f6de6e74696a662
- SHA512 dd1e55ae5a9fe91db1a776c095348f836b0df3fe3863edbfa68b7e7834fc38eb2ce2cbd529c026c90a7a122a1a224e4c2689ac1bb800c3102ffd59495aa86ce3
- SSDEEP 192:d+rkxJO9wigwtOhQKzylX0IMZb22zFiz73IJDq5Ixtx3x6xkx5xtxKxdx6/oOfpF:zxJOAwtO2KWlX0IEbdBi/Yg6xtx3x6xa
- TLSH
  T1CF22101161CD3C3B050313DA752137AE21FF8E35E6338591B1BF491A6BD3D81A92A9BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral13 behavioral14