0e1c1f589599a73bf9dc20cc97cb1d3d9b8bd9e922f7e9b0987b8a0e4666d8dc

Sharing

Copy URL Twitter E-mail

General

Target
Kbbank.zip
Size 27KB
Sample260702-g1h4faay9n
SHA256 0e1c1f589599a73bf9dc20cc97cb1d3d9b8bd9e922f7e9b0987b8a0e4666d8dc
MD5 7318e3dcc4a1a77ea249b5be2e708bd7
SHA1 02a31498437dd1518416f1f2b4c8e94c093fce00
SHA512 90ac42bd64b85cae46f0dd2a62fa10344636641e4a07d95ced194e6f0fb0f9c61cfffed1a9500eeecbaa26078b74d78929e6901be34f9108eba3c4444ea2b03b
SSDEEP 768:0hDsWmvxCVsM6+sfURjULg5hKdGk5d9D1:IPEu6+uURgs5h6Gk/9D1
TLSH
T140D2C03BD4CD58A9E50FE7B090D74B8E75E996443A001D162481D32B23AFC507A7EF6B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  CONTOH/JB/2.html
- Size 7KB
- SHA256 59339c0af4592042a08b2832f18af1493d213c5669de7df4149df3f77334b829
- MD5 6f49e253a10b5a47aa34c4d4f6590626
- SHA1 84b91cd2082e2ead0fc21aacb2033e7082b3b393
- SHA512 160a2a6b724e5603c20520abf798a6fe4b6922235f48c318f2f4818cead10702646f59f5b316421e719399758d7db5ffc14a218da78a634a10421a2d045264d8
- SSDEEP 96:cudhjrbVIqflkEIpnSYXQzXQOwFLoYNQDPmt:VhjrbVIAlkhpPiioeQ7mt
- TLSH
  T166F1B66A61610D3C95B38274EBE2B65DFE596203E806D114F6BC95331F72D848A13FAC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral1 behavioral2
- Target
  CONTOH/JB/3.html
- Size 9KB
- SHA256 7eb1a87c189d3b9ffcc9d6c9773a021a3a42313e42aac34bce902c2ced093e13
- MD5 989cc2217d98774d9f8644c0e4adab41
- SHA1 70cae304ab6a8d228efdc86c3969c688d9b340ac
- SHA512 94831a15acb9d6d588430a5ec21cf1c9ecfd50216410e01d413145ee22bc65e1e5452401bd7a4ce551a96b349e55c22ab1885ad5a5046043e580d0429abd893e
- SSDEEP 192:dhgRq4JjkLAGfDpQozVOVkHM0WL9gCg6ROVyS:dKelfeK6ROF
- TLSH
  T1C412A72161B20E2580D34871F7D6B2242829D267DE49C51DFEBC4A529FC6F618BD7F8C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral3 behavioral4
- Target
  CONTOH/JB/4.html
- Size 11KB
- SHA256 43d77406808c0ad5ee8f4f8483d63405d7d1a973a03c60057f27ea3ea9f97e39
- MD5 06a360e8130c758f45f4fa4c292e4ff7
- SHA1 e97ae9761b77091b70cc1f7e0ff2d8a1155b3c43
- SHA512 c2b9a430462621a0fa8769eefd4d4cf93677b7a6dcef1aa28c0eb67dc911bfc55bb6c2e109100008b1c5ca785a9ff67a4c074723dba451a3c1d676a8f6a7cb62
- SSDEEP 192:hhjHb8LQlW8SbOCOhu1O9O0O6OXOGO8OqObf75SkN0kPm9:hFXx2OCO01O9O0O6OXOGO8OqOBSN
- TLSH
  T18D3296A8B1400D78C0B38B18FBD6B908FD6BD783E64A5454FB9C41932FF3825495779A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral5 behavioral6
- Target
  CONTOH/JB/5.html
- Size 2KB
- SHA256 68c893bfd187f24f4e777a0a9ac17612793908c8f24e6cd5c530cbef6b84b519
- MD5 3e35e9e4b6bf7511ed1d4cb73c3aec87
- SHA1 1cee40f21fde8769c007c1efc73f28895414c070
- SHA512 237fb400de424ea09176b3cd2712f72d777961c156463b0a2054fcd1240374278626a11e36cff5ea8c4a7d620d6a567b7c8c251bea94fa19e558021f72ca5620
- TLSH
  T14C41979610810C3D00B34765A6B1F71EFECA9243C75AD456B9ED5273AFB3C8489C3758
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral7 behavioral8
- Target
  CONTOH/JB/index.html
- Size 14KB
- SHA256 53dfe00154a17ef8bb027c95fa6ab755b5654a1d01d57b3e447589311ab8957f
- MD5 e6988c355a9212066aa270ea0086471b
- SHA1 e52252432d9d6c0236df733fa0c244d8d2d82a6d
- SHA512 96e9581fa87c61b50f277ce5a7d84349b95704ffbff4afd06d8cad4e856cd1317ff227116d403d45a65cc68c1d70647b2b1c60c90ae8f2f3acd9503068c8e457
- SSDEEP 192:s9tnLSQZoEUJ20EIgtKrO2BDGM+avBz6TRCrBW50UmJ3:s9ZFOyNEB7R
- TLSH
  T150624225A65115126137D3F46FA2870AFBA68013C702D6687FEC63464FBAA45CA33FCD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral10 behavioral9
- Target
  CONTOH/JB/run.js
- Size 154B
- SHA256 c7b8d7b59a57f7d5260a96cc87e31b83a2a16a661f0cad4f2206f3b0c50c1280
- MD5 1f996fc34d8828f2beaa0f44078efc9e
- SHA1 cc49ad6d94fdc51b0ab346ee6219af1fbbe8d398
- SHA512 0fde361e4106754af1c9b554fecbde3ef6c64a28e3e71c739afa343d2e66e1c8cc95845107f899762cd8e2b0622523e3c4017d0d5b7787dcd41d3742bdbff99d
- TLSH
  T14EC02B904382B550B72C81A0848DE8C338775CDD3C44B0CD3FD70A19A62E8334CE9BC6
- MD5 SHA1 SHA512 TLSH
Score

8^/10

execution adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral11 behavioral12
- Target
  JB/2.html
- Size 7KB
- SHA256 1063eb5bdd314d6640952114f6e901c7282f99563dbdc59152ed9ed9d718ae09
- MD5 306f7dbb61dac3c7b19e9ed3133325fa
- SHA1 5dcd62966889e1cbadfc86bf19e57333e1b4d329
- SHA512 3780cdf6726fbbcef7eb4d7b021b5fa3c80f47b7c327d8cd6fc88ac0969760b3501fc06a40fad1c5dd2364bd64242fd518be713336a18f66d9d44a6d9aff72c7
- SSDEEP 96:yuVhgRqJjfLSxhfXep4HqXQVXQvqF00Tk1ypOej3P3yo:fhgRqJjfLAhfOpJUdTk1yp9j/3yo
- TLSH
  T1F5E1D66A61F20E7C95934465F7E3B6193C59B203FC0AD014F6BC8A314F82E958A17BED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral13 behavioral14
- Target
  JB/3.html
- Size 9KB
- SHA256 7eb1a87c189d3b9ffcc9d6c9773a021a3a42313e42aac34bce902c2ced093e13
- MD5 989cc2217d98774d9f8644c0e4adab41
- SHA1 70cae304ab6a8d228efdc86c3969c688d9b340ac
- SHA512 94831a15acb9d6d588430a5ec21cf1c9ecfd50216410e01d413145ee22bc65e1e5452401bd7a4ce551a96b349e55c22ab1885ad5a5046043e580d0429abd893e
- SSDEEP 192:dhgRq4JjkLAGfDpQozVOVkHM0WL9gCg6ROVyS:dKelfeK6ROF
- TLSH
  T1C412A72161B20E2580D34871F7D6B2242829D267DE49C51DFEBC4A529FC6F618BD7F8C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral15 behavioral16
- Target
  JB/4.html
- Size 12KB
- SHA256 897ad600a9303dd948191481e16f9c5523810c7aa420c78cb7e1c1f1b66c535b
- MD5 969b8e293b45aefaf1e23166a75fcc21
- SHA1 b26656cbe5954052dbd3a972314e6627af10c11e
- SHA512 74a7ec714f25a6326a401ed2561423a2b1759a19fb483ddd26be6e4750b2d89769661da1ef9b5eb7d730475fd47a8d1906675d2a7d364a02e4d6cf3369788ecf
- SSDEEP 192:fhgsqJjkLBANCOHOhuGOtOtOfOXO7O1OfOGKfSFFGwsJov/60tW8lRRyc:fMKUCOHO0GOtOtOfOXO7O1OfOesC
- TLSH
  T17C42E868B0E10D7880B3891CB7D7B8057C6AE743F64ED844FB8C81936FC3B65095A39A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral17 behavioral18
- Target
  JB/5.html
- Size 2KB
- SHA256 effffa988fc6a3eb2eee0d6e57c31b6e7324478ec8aad57933068d9244ef31c5
- MD5 64a2bdaa3c742dfda96a77f635a67226
- SHA1 270212e762028bab2a02b0f7e3161a9ac752c79c
- SHA512 59402c91a1050ea0268042ba51e421d6c8eba67b690e85f203921a9b0f848ad541932bf6429caf53bc692c738f5ef6e299a7aa92ad50fb0963089ecd42e536ee
- TLSH
  T1E841659711F6053D04834561A2A5FA2EBCDAA353CF9ED845B5AE4232DF83DC589C335C
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral19 behavioral20
- Target
  JB/index.html
- Size 12KB
- SHA256 33c8cc05d2af467dc69759892b790b5056bff30022dc11d32288295d9c0a3985
- MD5 134317968eab64b664bfc55ad35331be
- SHA1 f506aa2459e31e0774662aa8617fa56ccc90a3a0
- SHA512 a31862f6f475094c98eb51d4672ae86b48b9a755c74c4075abd68d1405316193509173a02417afd732526c68bc81d99c20ef984f2bd2fa3f6f4f11d5552b4918
- SSDEEP 192:G9yLRK0hQeP9Ouf+vGc5odDJJlIhWI2YMwTZI0oQ5zr:G9wdyhCYMc7
- TLSH
  T1F842875666B31521681394E82FE757063665E003C506DD283FECA7588F8AE8D9E33BCD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral21 behavioral22
- Target
  JB/run.js
- Size 154B
- SHA256 c7b8d7b59a57f7d5260a96cc87e31b83a2a16a661f0cad4f2206f3b0c50c1280
- MD5 1f996fc34d8828f2beaa0f44078efc9e
- SHA1 cc49ad6d94fdc51b0ab346ee6219af1fbbe8d398
- SHA512 0fde361e4106754af1c9b554fecbde3ef6c64a28e3e71c739afa343d2e66e1c8cc95845107f899762cd8e2b0622523e3c4017d0d5b7787dcd41d3742bdbff99d
- TLSH
  T14EC02B904382B550B72C81A0848DE8C338775CDD3C44B0CD3FD70A19A62E8334CE9BC6
- MD5 SHA1 SHA512 TLSH
Score

8^/10

execution adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral23 behavioral24

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24