5d39e8fbdf9c0fa3a2e7f1903562b48898290eaedf82116483f6129ae14308ca

Sharing

Copy URL Twitter E-mail

General

Target
namecheapsite.zip
Size 4.2MB
Sample260701-g3a6lsfx9j
SHA256 5d39e8fbdf9c0fa3a2e7f1903562b48898290eaedf82116483f6129ae14308ca
MD5 535572bb38225e5effc5628e6cd3ce0b
SHA1 0188cb60043396b7ff0699523f95f997c29ac9cd
SHA512 5e5ff862862732387c55c8935bdafcee0da4cc1c7f06ad20f3405101e6cdf1ff73ef7fb04932658df7873e189988b3f57e20544789138a933e52f0a105f9f8ed
SSDEEP 98304:PECVURx8xPo/+f7+OqCWfzoM1RSwR8sgfjruEb/bU1f5:PPVQ2A/+f7WrosS0hgfvY1f5
TLSH
T1001633FF52B28EDBBAA1473A64D91D1182B263BCF7BB9147064F53C25A310F4278191A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Home.html
- Size 123B
- SHA256 b3b8cfa5ca9f60eb1ca0586a08c61ed80fc2eeafe025aac2423de81bb87cf1c6
- MD5 38d40b1d0597eb4840938d215e7467dc
- SHA1 a92a0e0c5ecd8eccbbaf14e898f56a0bb3b2f774
- SHA512 0096fd5f4b75f3e4f7458fd3e347466060734bc820227700ce20de5a4d5659e058605b5e4b4c33d82707d7c3684598dd6e37241c2e337f3429648129ac3ea683
- TLSH
  T1ACB09BF65470500BD53177A05DC6B1261806B55674054D10F8D030EC54F571AC8433D5
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral1 behavioral2
- Target
  Home_files/About.html
- Size 2KB
- SHA256 88492bd7aa30284c24c6871f107654dd57b0844049d8bb7837739ea8a3fe6414
- MD5 8ef3b54faff6575e0e68131df98a30fa
- SHA1 1db641a4877252b08e1e48464683433f33aa9533
- SHA512 2d2dff3007d70e67c6c047a8f64caf95be7df1f94419f190f9144c38b3b7f2f756c230f3f67f6733693f25ab0cda194068de7afd1d0220d3744eeb899908eb55
- TLSH
  T1D841255B60E534126123F472F4C0F928B8D9A00783B65840F8EC42B99FC6FD9CA97619
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral3 behavioral4
- Target
  Home_files/Contact.html
- Size 2KB
- SHA256 7d0760682aaa16cd9369a36842ad3ea080e5f4f5c1b1165109bf11fc5aa904a6
- MD5 a974856b950cc0560e4e61304ac68366
- SHA1 6c8caaf9a3abdc1b87db259c922e4805d2fa2748
- SHA512 e1865bde5e1ba77f41d0236c2c2de7548eea64b86c3592ed3e41508c17fb0e793a3a9a88d4c490daf802ccefd7e29c7bcd28d09c5da1b817f9bc9b97cad04f96
- TLSH
  T11541135B70E534126113F4B6F4C0F92878D9A00783B65840F8ED42B99FC6FDDCA97619
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral5 behavioral6
- Target
  Home_files/index.html
- Size 11KB
- SHA256 397d34da1e478c83e51073c6fa3a07cf096f2ca0b09b8ea07219b4f6ec21a38e
- MD5 299ca5b2b9efb8bafc3db0e01355ff13
- SHA1 31c71f0e70365e206765dfb0c8070fb80df6cc0f
- SHA512 1595e0fded45b31c809591fa634a37622fcf73950d6a7c09224b48f5b39977a5c859d31a084c923c2d713391b7c24cc5d79f7a3dbd724b8362eb8a117e5e3366
- SSDEEP 96:5Afipvo7wRgEGGNy7NuWykAlT8nXE92uI9EeI9f9I9nqI9c+idqDVjyN9yDVjyNt:iiUcE9jeU+9y+9BAvUO9aa1ZlIQZaSqR
- TLSH
  T17D42951271B2291B251796F1B4287A267C98B88BE7674D84F6FF03748FE6DE2641330C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral7 behavioral8
- Target
  Home_files/intlTelInput/intlTelInput.min.js
- Size 28KB
- SHA256 f299312893a0a685a1b250f962a9910d688bdf9c4a5a0d63c152376fb50990be
- MD5 06f4a5635b15be120882f95cf91d9ca8
- SHA1 30b05f1d0fac34ae5210e3d41af3bec8fba25825
- SHA512 5fc4456ddaa1e3458830c71b45765ff6695e9ed112386a5eef8bd8779eae9e17c0be4eaf6178939343e1c65ba72faf48cac52514601ad78a4099176600e3e4d2
- SSDEEP 768:awqD7GzOoS+D45YdR3QWG6UdC8OxgtmKg3vTpzaDPCYBJ:8fUQWodCjgtmKgNzaTCu
- TLSH
  T14AD20A9973511237A89A90A1687F16472EBF30015A84CC8CB8BECDCC1FECED9A175734
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  Home_files/intlTelInput/utils.js
- Size 250KB
- SHA256 db13ea66b60fe6a6d1610fddc5deddbb8facf3dbe2af53890d8ea140f12ed851
- MD5 529f2ace653a8d9767caecad095b3c57
- SHA1 8de4833be40135dbeaffdd7d70f3f13d4bd3566f
- SHA512 91a919edc5dc404f9ddc19839febf015e211c38690d72a72c25905753a487070be06e4b8dc3e2251eb2b51c8edc2574f9970594903da5cf2ad72b8fc29ddd59b
- SSDEEP 3072:w5s0a8VAZj2s3OwPss3MwP0yhSPKWBvm3m4JGYyHFZmM4xb39oLW9a7Q9p00gjqC:w5sIWxXqBvm3m4OF3
- TLSH
  T1D944BCEBD63C9736A1D87B35968EB3CD1A8CBC93C848567836DBA54F53788E0706C205
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

execution adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral11 behavioral12
- Target
  Home_files/jquery.js
- Size 87KB
- SHA256 f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d
- MD5 dc5e7f18c8d36ac1d3d4753a87c98d0a
- SHA1 c8e1c8b386dc5b7a9184c763c88d19a346eb3342
- SHA512 6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516
- SSDEEP 1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
- TLSH
  T1A993F9DDB2C6702257A720BA007F510BF236199D6C4D8450F265D8E9BCB8A4E827BF7D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

execution adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral13 behavioral14
- Target
  Home_files/nicepage.js
- Size 431KB
- SHA256 527d0312ac90e0af7f0cc0aa69cd025239594673d4336a37076938ea5343be88
- MD5 476174fe05e55f997732a0d184122bd0
- SHA1 66004ed935870fd2f8e03485452a39c76b12bdbe
- SHA512 6235a4966cdff65951b49c6319ba5ce28ae12acff4bb3acf5e605a0c706b0ab020d2e17a92c10009bb2674b44899dd6271ce779cc48076ab03ea0f579c577e6f
- SSDEEP 6144:Sm7GllnOJ6xNuvihCS1JQ7BQg4hYRtG4C1RhjcfPmb++5UIpe9GZHtHb7z:zc72i31JgTIpeYHr
- TLSH
  T149941A88F26474B903E721B6405F160AB23A7C69940A4468F56DE8E53E7CD5E233BF3D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16