8bba39c3598d3c98d8d0f63ab26417ed07780585ab96df485ae714e5f443cde8

Sharing

Copy URL Twitter E-mail

General

Target
bank-sampah.zip
Size 2.9MB
Sample260701-pe2yesdx2r
SHA256 8bba39c3598d3c98d8d0f63ab26417ed07780585ab96df485ae714e5f443cde8
MD5 3f7e27a1d580269f1117db8607549f30
SHA1 e10f6802644b9cd4813776ff0a27920d8b17c87f
SHA512 953cd3299a14496beb1b2b574031b22553889df4993a906f085493e085c6960855912b7d3c4e8986f12302be8acb0e1ba06fe49db6724a50dd1b3a1ebb0aa473
SSDEEP 49152:PmFi6VwgNWX9h27ugi2ZHlRrVNa7i8W04uSRVAly+xd8hdjbW9unMji:Pmi6VJwNs7Wuj78WUSRey+v2djSi
TLSH
T126E5333BED34C448DE6BA53C729F1C6DD35982313A552814FED04EC6B8AD88E5B093B9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  __pycache__/cabang.cpython-312.pyc
- Size 4KB
- SHA256 04a4bb8d04126e64379fa209bbc38d3528d5821153d1bb700426e302750649ce
- MD5 b675135460c712bf42ee0a79357d5224
- SHA1 97b0ba81fe35a5a855ad5f5185cc9a86e524cbcd
- SHA512 45621b0b20d818ec673617e24eb5cb004274eb566a37774fcec86c6aff935e74d261e8d8b6e14ccdd9efe1ab9740b9c9d51f60acde63a06d8164416054a355d0
- SSDEEP 96:MHZoq40lHJ+X2Hp9luuY08fHMUw1H6UwD:MHZVlHJ+GHpzF78fHMUw1H6UwD
- TLSH
  T12EA163BA7E00C532F624F0F81D1A988DBA6E86D677C0D3871717D8AC5D172548E909FC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral1 behavioral2
- Target
  __pycache__/db.cpython-312.pyc
- Size 1KB
- SHA256 069539668b2b0a6a96e372d671180db255e9e29560b41986b4ceaa6003b16d5e
- MD5 8f4297c32c3d5b6573dccfacf54db90d
- SHA1 8c5d52ba1f868186d4b5bc547a4e13595f54215d
- SHA512 194690b551a71c72e6613eb6774cee3cdacdb33369a0db45046f51c3d7f0ff4ac05d1b6339db73f5713f3cf1c3a02760f853c89d8920c54c9fde293fa6be3f94
- TLSH
  T12711E346B7C3DA37D15751BC6C90371212E1B1D67B40F30626A1A0749E392D0AA5345D
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral3 behavioral4
- Target
  __pycache__/induk.cpython-312.pyc
- Size 27KB
- SHA256 14ae79e3dc7616e75b8bc913a66b03e6da929eb5fafae77172ae7e910e8bbde0
- MD5 fdf5b108fdbb237397bd9357d034b5fa
- SHA1 74cfb97aaf51b7ecaf5075c4fea5b7197955b1f4
- SHA512 87b56e2c0ab6850bc899ec67ee607653495f53fe5e3d35e665b9c8ec4ada03b013a5c6a76c5fb574a9e109a17d9cc6ec848b619e714ef9eb34babffab5fa9c4c
- SSDEEP 768:ZJPzUSgxpZgeVuwd8czaiSLjp90fr1yYYEaE3s5:LuZZciSMTkYYERs5
- TLSH
  T13EC251AE3F20C670F660F1F65D1959EEB761C3A93680E203363B953E5E2B5489C105EE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral5 behavioral6
- Target
  __pycache__/jwt_auth.cpython-312.pyc
- Size 1KB
- SHA256 e48bda6d92b84862675dac87154263092dfd25c1b5ddabfa9eafb7127408d74e
- MD5 dac76b05688cf395dd5f8d53914f8c36
- SHA1 0ea047042e26a215aebdac48c2097aed41d6a02b
- SHA512 1e96f4fc8d652618e14969a89f47cc1bf6ac5ef678c18163164f56de4ee61895fe8d5b81007c4034b685da2132a496e0b42ad760f7346fe4471e673dc183123b
- TLSH
  T176316286E7D2C873DC5104BB91C63B3B61A066B8B6A092075A63926D6C6C192AC4375C
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral7 behavioral8
- Target
  __pycache__/login.cpython-312.pyc
- Size 5KB
- SHA256 78b73fa68964a072f2a0377835f50b98f6a2a80ac3a914da138f8173c0045b32
- MD5 4af676f08406b267f8e64b12e4a454d1
- SHA1 86d314d6a98be52f180892cf6424823baac34e00
- SHA512 7a8b618a8026aea30ce8dff0b128b0e65d030e4e5d94e03fcd886b7883114de88a03221155188596ef32dc9da86ab60b93d5675307d3ea76f996879896e8d945
- SSDEEP 96:BcZ3HHFcgFg59grcxqa9yHzdoOOheIUF0U0i5c6/1ul:BE3nFcgFm+ck+wWhgIUF02co1ul
- TLSH
  T1B9C173882980C837F9F0F6FD5C15014EB7F5C0BA3690D617292789BA0D5BAB29D984FD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral10 behavioral9
- Target
  __pycache__/nasabah.cpython-312.pyc
- Size 7KB
- SHA256 a272f60a1804a9a1ad880db5e20387f5056f84343a9510bf3659b90456833045
- MD5 4090eab83b9f38af7542de4c2e7fac53
- SHA1 068b52bc192a403d48a92b226e69451e2cd3fff7
- SHA512 661c6eba8b0c0a2841e5a772f46eb61d9cc199ad7cd43063dec8e5277c366129acb5455bfb302853bfad81bca3eb62b9284be00046eea9c2e91d46fe287d121a
- SSDEEP 192:gHWDO+R8AHpgR7H+1aZMzfdXHwlhxNHIe3zbJVljuSvGXHOA9N:IXopgT/KfhC/9pJVUSvOB9N
- TLSH
  T167F194B57E42C676F994F1F81D52509DB768D8E3B390E203392F855CAE2B5868C40AEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral11 behavioral12
- Target
  __pycache__/utils.cpython-312.pyc
- Size 1KB
- SHA256 946551875661ccbd92b9ff2924c8d47d2eb10a7547e142af3b519f7800816bab
- MD5 e37f5137d16e9ad3a654a891292d8067
- SHA1 aebd467c20f31fe5867341f708fa3a766facb5ac
- SHA512 9c7298c7d22e9eb5c76c47437d93db69846e86cff92883298bf11b9219eb3adb9d24f77002174e3ce057d555ec3c5cc4cf59a198d0aec8759d15c42d44f249ee
- TLSH
  T18D11CE507A06C427F294E2B40A96764EB3B29111BB0553234B77CB382E37555C8620AE
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral13 behavioral14
- Target
  app.py
- Size 32KB
- SHA256 298d377329f138d951742f42367d4dd51d9e7c6130797e3d9b6eb10cde6fa7f3
- MD5 55f0f682f65a477178baf5ab09315902
- SHA1 319377b217938b539facbafa65e09f405ac5eb4d
- SHA512 ef1e06361a0d0bbf2ddcd76b39e9e1163edece028ea0725baf62d805588253734dcfe9a776357f3d2d38a41ddd63798738ae8b9de10c2782ace70c53e55dd87a
- SSDEEP 384:N+8yawTwJZ5i/2T8c3M1W1Rq0z3WdvFND535pplpsporerBPDrIPSTcCiSjkVeuk:N+JcPA1iNiSwMNInMRLNZfzYBa96lo
- TLSH
  T194E274B47C4F60050135B5DC8C918846F70DB6A763AA13277F6C62982FB911AF7B4AF8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral15 behavioral16
- Target
  cabang.py
- Size 3KB
- SHA256 0cab6abe8c5ea44daa3749d3315d7a261b4faf0233b64fe97ca4bbbf014ca607
- MD5 ee2c92bc1fabe146b0c5c65ef0399539
- SHA1 b28a9b23d43baf143c1c18974f0e210af01d7610
- SHA512 4f1b0597d290198f5464fda677ed80049868ef3339b828bcbf8157481ffe3324ad17ba91dd3ee8135d649b01097482def1578968258690fe9da0d4d0f5e49e07
- TLSH
  T1B9811374AC5A985191B9699C0947D043F90AB7531668CF0B773CC0A8AF392C6FB687FC
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral17 behavioral18
- Target
  db.py
- Size 538B
- SHA256 13a9e830cab205a53d2827783ab2a59d3c4b2f7751be4979d5d7f531f25048ec
- MD5 86757be43eb0666ab105bb4300aa6533
- SHA1 dcaec8e35db270c5507efb2026c1445fec778938
- SHA512 8f558f915dad78b0efb344b8c0760c3537ecd9e83c12b73951a1979311a4eec6f3fa8dae5a90bc4ff85060f1419c81d3816a1f660fd0c4bea3295f1013d4b440
- TLSH
  T1E2F0271A5E5468528337C08C9507C043F11136331F253982BF7CC2B2EF35992A6D27E7
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral19 behavioral20
- Target
  induk.py
- Size 19KB
- SHA256 66ae8d9a4c45bae5466227f92151ad22c18bc5ec13ce38e031c6e5f52469f5b0
- MD5 c4a5899f7852f97a99f80f4e0dd4c6a4
- SHA1 0ab9657fed0bcba46581563c31a53cea6b344f93
- SHA512 18c53c5ea558bc51a3661a8c95c60845fcf92b8b2bb83fac736c9a4cb03f8e258d8c64ec0379283f8693f6b2e2d1623fffcddf6e8144dac39a668dba60c32d6b
- SSDEEP 192:J25u9WEpF0agrEa/t67ML8TyGX3/r9L0Ng8FI2vyVLsRHyzXT57dRthiW20K0NJm:AgzrUEBMLu/f2In57Xt/3VgcMF
- TLSH
  T14A922D70ECD72D334276A1AC1803D047FA04A713252E8A07BF7CD1986F791A9EB246F8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral21 behavioral22
- Target
  jwt_auth.py
- Size 900B
- SHA256 6b75b01c933b0ea767a1d88ebd66450798a2600da8041a1d0b4f53b0969276b9
- MD5 ed0a6a446a453b0a908207f487d59c4c
- SHA1 6ca51c0b0588516d10cddc8b6c337dec5bdd842f
- SHA512 88ab7bfdfa9ffa21732a15d17ee9bb34d653fc56fded3fc9de6d26c9aa1bc0853f11c53387ff5b110cf78baeb5b15b6885d00f0995e19964c7075129cd439e30
- TLSH
  T1AD11AF53CD46A48A8831711945964553FD28632F6FA829227CACC3EC7F34863E893BE4
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral23 behavioral24
- Target
  login.py
- Size 4KB
- SHA256 cc847d693405f19d514f702d272b5e19ca6cb8987aa533b2fcea0ecc551210a0
- MD5 03144a1f55dee4e19158655bfc236d94
- SHA1 11e17852ee2dd87f37a5dd9344a7650216eadd0d
- SHA512 747eb4a5e9faf2c3a2a9a64ded5e7a9476a678521238a5b01e0ec69b53ca4344d9bb4183ffff07a261d14300d06ade6e8ecaebb2bb31b491e000af2ea51605b4
- SSDEEP 96:BMF7Ju4NqNRtO5Bl6tOeop7g/ZOV6skjugbOod0XJZ:yuMsR4Xl6IBk/wVdkjBq/JZ
- TLSH
  T116A1EE68BCC768124B718AEC1D859202FFC9A123051D4D1BFE6C865C3FB9DA7E5207B9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral25 behavioral26
- Target
  nasabah.py
- Size 6KB
- SHA256 c167d06dbab61270d90017dfd8810d73089426ac08f3823e19591fce615c19a8
- MD5 2595098623bb64edfb3c57a052d5f1c6
- SHA1 bfce006041a75e086ba82c294f9924360a85806a
- SHA512 0283877c4208e8c71864f1e0e039874b10c78fbf28e11e3433766d37d5e00d7889d67f7fdae67d1f915b7fb9681020b67f83023e217481b4721930a645d27ab5
- SSDEEP 192:a6xq/66rk6TgrZhpXtuhL6eHME9iWZKKAo5VzaWIgQyjZy:2TQDLucmAYWWM
- TLSH
  T19BD11170EC8A2CB25676566C2943C003FE59B313156CDA06BB7CD1A85F38196EA5CBF8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral27 behavioral28
- Target
  static/js/exporting.js
- Size 9KB
- SHA256 5acef3de43bfefe0673be7cae73a57771337b631a3fd7bb0f9977fa2e1938436
- MD5 d5dbfe6e9bd8252f267487eb50a2007a
- SHA1 619e1a19c47763dde11f1fa2bde68c2091bf603d
- SHA512 300c4263b05f6bde2a2652fb8e89fbb435eb77b371cc378e76694f0cba032625bc6846ebbac1bf73c44e7d54717fb25e3484f86446cf09419b1bdfaf2bbeba59
- SSDEEP 192:ArXaV2/TjEoCgSfJymRLq8sybVZt/JfHUUsd/ymGOa2J:ArXaMjE0wJ9W8sybVZt/JfHLsd/ymGOD
- TLSH
  T1EB12299BF0016A9E98373399935F500D44B3C463A345C86477BE92FAD9B82CC2157F39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  static/js/highcharts.js
- Size 187KB
- SHA256 3922d7793bb023da29c6b06971c69e2e4f05a56292b776e0e05ed5dcfdcefaac
- MD5 fd8afa68ed74b20b124c7aefb9efea27
- SHA1 b665c38d271f3180657a23efcbad6c092e92b038
- SHA512 1c8ef9639d1f696c35f4b86fa53907464c3ed45b83d912cc36ad3f215edb59d7d2d22b198893c4ca40f920b8d5bb76ddc704073af35452c0ac5efec63ac7f2e5
- SSDEEP 1536:t5+2JaIhTp4LARsfoQiMv0+a2ORZWAmNJJT3FhT2HpikQ6L4A0QUeKCaZ0Zcw14O:ZaIFi3oQhPkRZWZJj77kJyg5dWZWb
- TLSH
  T148143B89F3513617D67732E5242F160F1137A46AA5898C3C7AB9C4E75E2884C227FF39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32