58339110a7a4e0078f0f9b09e7095d89d898bb0e08e591b443a4defd3f1a7789

Sharing

Copy URL Twitter E-mail

General

Target
eaglepeakconsultancyltd.zip
Size 9.5MB
Sample260703-alezxagy7s
SHA256 58339110a7a4e0078f0f9b09e7095d89d898bb0e08e591b443a4defd3f1a7789
MD5 31b06bdfb5ff01f6425a2ee1fc335fe2
SHA1 32a354cc09ec0fcfe1802507e8b0284c689323d6
SHA512 ed2e8c50518891f57f50241ab1bc23bb050943dfa5a97d01b37e654ed6417367e551a0df36c1c1bd329d13bc1a486d914b3c10077ec1683e0bc5dfaf22cb4fdc
SSDEEP 196608:05TTzoRgGoo0jG7lh39BVF6cs8O6WcDLwf9PjAix+CF/1voVu:MnoRgGoxgVF48O6Wawlz/1vp
TLSH
T1F3A62204FAE01414E457817865DB7A9AB73D8C03D209DD3D79EE32D8CFA97848A63B8D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  about.html
- Size 20KB
- SHA256 f3a14d8666d10b647897f98af8b472ab9576740c6a7756977a87f8f2320c12ee
- MD5 812690c72f7373f34f1f27f1ab89c9c9
- SHA1 53b7d6fac53319a6eea4d107b93ab2004d584bbe
- SHA512 947a623aa631ede769fcdacef38c6e5bf572ce9d7c50565445e1ba827cb6736cd615d54590912f5ee5b9d13618d9736df5ae141ba7bb9563c3a5bfcfe9826ad5
- SSDEEP 384:FLDDAWR0PTZFygeth5C77v04HKjInivV40ZbzNuf:FLnAW8Ts5C77v0oKjIne40ZbzNG
- TLSH
  T15A921C3468F2157B0087C4E42AB5AF1BAFE2C50BDA2B650572FC97C91FD3D428A9359C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral1 behavioral2
- Target
  appointment.html
- Size 14KB
- SHA256 ed0b8450aca69f57d40eaf3dafe94092239a1904537e6f30e043e620a715edeb
- MD5 8488b7fd6bbece716c7e31cf92e17a30
- SHA1 07944c2cd63303502c66fb4693af5715c9361233
- SHA512 b91d3f5a5592c0e64a5eb5114a38def42eb4ee31c1b5f9badd510587f8b8a11403af2a7d29ed57a3c5f1d92b5713ed1e9b765932fef7efa4961b6bbf0aa47442
- SSDEEP 192:XVNgR9MKIdhzpF2r5DWp1kGat3j29hj9nL7GbgfBuU:lNYSzekXTT9L7GbgfBuU
- TLSH
  T1E062DC24A8C0153B4173C5D86AB4BB1AFFA28007DA0BA54971EC6BDB5FF3D438D53A58
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral3 behavioral4
- Target
  contact.html
- Size 14KB
- SHA256 36d625720de913b7713a3935ab79fff56d9a0e44e9d716025d75a47207427eb8
- MD5 554cb4aef2ff18ca7dc8b5fef3fcb17e
- SHA1 94f08befb90240b96cdecf2b52759f65641f4429
- SHA512 0bda844f963ffabf151d454d3295ec18e523a8fbedb8495afc668531c267e446bd1e8e8473471bf3c77c176c56297343780208465d6c02ba89f95d91b0ebca54
- SSDEEP 192:b6Lz/7znjLy4edFDxIpYItff9udRN8ygvVVK+ZbzNup:uLDDAWttXgnsvVI+ZbzNup
- TLSH
  T186626229A8F1117B014694E47AF57B1BBEA2D507D90BA81831FC6BC91FD3E81CD43A9C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral5 behavioral6
- Target
  google96180f2e7d3f6911.html
- Size 53B
- SHA256 2d5765a74c8a1a9ac106044583c36bcdde8a21ead93e1532b1ea68192eb88100
- MD5 9a878cc36c7292d85198b6d4b0845631
- SHA1 345f944a7fef98ae6bcb0dd86a7e992bfd5e6a6b
- SHA512 9d3ef6220a4a1add27ad842ad9a5b262c317cdb4c8993249e6f4cafda55bbc2c2e4f19104529fe14bc6f72604f5da7108326028efc49f5421a56d9f1e2dfb3c5
- TLSH
  T14D900243BC0A65261F42815161D537543321090AD673100255924315D44034187122A5
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral7 behavioral8
- Target
  index.html
- Size 40KB
- SHA256 1a43c3ac5db764260f178fb302353ccfc6e507fc7bc4e6886d3798b4ac3118b6
- MD5 2a069809a2a75401d98aa11239b0ee8f
- SHA1 6d11c1c3350956d828a376fb779eda6f5a4c04df
- SHA512 7aa777e39214ebc800d3b2328c88c38228ebc2f854b42699da9efe138c7b32134746d3793c0d762768ee385e824bc399511ae3de438a08c9002e71b4e891952a
- SSDEEP 768:dLnARVWJaLAzDC77vxW04WO6D5nyoKjIj2BITMZbzNG:xARVWJaLAzDC77vxW0xO6MoKjIj2BXZs
- TLSH
  T1AF03EC3464F215BB008BC0E52AA56F1BAFA2DA17DA2B150872FC97C90FD3C46DD5369C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral10 behavioral9
- Target
  js/main.js
- Size 1KB
- SHA256 71a06c28e6b1e3b65a489864bff30cde2e9345f81b95043dd72ceaca45cd74f7
- MD5 b232103add3051435bf58c4a04683c36
- SHA1 2c1e61f0cc98ff205401d1c37c34f5dd95c2aaf2
- SHA512 d262a1f19ddccb9733bd1ab6badb66453f2197785f1e89a35f69af5dad9bdbc740e883dd4c156bfc52c22ed11c0402b6e613398e4f210541e72fb5402af682e5
- TLSH
  T1C931B80A70E2153108B7B4F85BBF52446A1C508B964BEE40BD5E2BE05F9523CBAB67CC
- MD5 SHA1 SHA512 TLSH
Score

8^/10

execution adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral11 behavioral12
- Target
  lib/counterup/counterup.min.js
- Size 2KB
- SHA256 cffc5847cc961e6d38ede0947f9e0e9650c92521660360468647d59944a75638
- MD5 d0ce5cfe7008eab4a73260954f06df68
- SHA1 4426c6745ebb31e834dcc1f9105e2e2e7402ffc1
- SHA512 a320a9173b43f215326bc396ee9ddd09e12af51f397b8beeb51b1630b32d1289e26143d2a2757dd19863c9356ac400a1e1a7605bab5c329e752ca1fc193927c9
- TLSH
  T13541BFB1682B288D2FF1E6AE769F73995336F9284400D81E61D554D01FD2B7F2382B39
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  lib/easing/easing.js
- Size 3KB
- SHA256 fc758d0fd781d707f1e87f34e9635bd2cbc1e303841e57c517480456da366e7b
- MD5 ec0a5208d6fa3bb72fe78c1cf3008600
- SHA1 df34999f53bba44a63e22cf120d05f96791e33c9
- SHA512 d98094d3bc1206b7a0f4d74ef965174316cb7a27ab5057a7a85d688c46aa8d8a670bd0863366253422265a51bb78a2dad56ea0c71fa025ddb865d55421472b16
- TLSH
  T1E6813A94B6FEA106532235B0490B400F62AD7642CCACBD6FCC0C5C947D68A37A6A7F7C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  lib/easing/easing.min.js
- Size 2KB
- SHA256 0ec98adf593ebcc01bec60b1f494dacd47522abfef9038a714101d83f45e165d
- MD5 adf739cca147aff5e39fd65e6e64f420
- SHA1 ce3bb19811c619220dd2329165eb8a8166094fec
- SHA512 91ae8b810de2caddf0386e2f69c4b2ccd86878804fdff623337793ef62a0ea7e3e3435f9b2d7fc0c0870dc4dc40561401039b30fd815de53f9f2e495628e9145
- TLSH
  T1D44107D9F9C3B75A935275E0162F200BB22E6EB000ED2530C66174AA7D3831D9D3BACD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  lib/owlcarousel/owl.carousel.js
- Size 83KB
- SHA256 84f62a9eaeb4e885739c5c33d4b5b479880f4b11bd3bfc322194fd80af4dbd64
- MD5 0aa8dbbc9beca33dd418f7b2a3c966b1
- SHA1 ef764d3a470454c1e440611539635118af1cd14e
- SHA512 dc9e25b9ab6be4f86819ff634232e83e919afadefc407cf0212d9a18174e66a8d199f6d9d3762c3d6bddfca6519bf16b77f7a1f7b6b3cb49cf932be675339e5d
- SSDEEP 1536:vPLoreUSWogMjVNPP88LMBJk8u9hKtPo6V9IYj1oJ0SQIOZ:vlHNPPdqJ9roe9XplIOZ
- TLSH
  T19B8383C5F36C261B422A31785E9E23CE713D412AD91118AF7CA4E9DC28D546C836EFF9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  lib/owlcarousel/owl.carousel.min.js
- Size 41KB
- SHA256 b394d33b2a7ec654a6b037ebfda6618341b3f897a362be624c923c2711b54a43
- MD5 b7b9c97cd68ec336d01a79d5be48c58d
- SHA1 1a99890b57c9859a622337ed0b2f989d6e30cc0e
- SHA512 968e18822c24c6c54827999ec766fe54750a9489d22b6a45b641854731ec00beb8fd93b9bda8823e67463f7a99ab587d333673821ae90cfdf7e92716ba050c4e
- SSDEEP 768:JBA7PMMFA0tdlXKNSR4vlGRep2lcwJeL+C2jQdc7/CORUQuFBt33:HAIMFFdYMxAcLQDV
- TLSH
  T1CB137346B3202D2A869B61A0663F160BB23A291CE414507D7D7DA6DE6D7DC4C213FBFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  lib/waypoints/waypoints.min.js
- Size 8KB
- SHA256 368daab67b1a5b2b2802edbbac79a2aa4ba992a2ebf9c67b98ad784d8004018c
- MD5 7d05f92297dede9ecfe3706efb95677a
- SHA1 56bdb149d9baf64474a4c24ae66445769a28254e
- SHA512 df25e4c654002bf66cbaea0917976f75afd9e16cb22d995f371de879d83d9334391bf9e921718995664da8fdd643239210205841fda0ac691b751693d505c759
- SSDEEP 192:mEBzxsMCm1nJDl6hj8E3aPEGnvfiaaLkYluY4pLyUcDWZPeGz+nrFr:mEFoWJDlC8eaPZnvGLkYluYTUcEPeGzs
- TLSH
  T155126189750134221BDF50FAD91F474AB337582CA80680BDB4C8D4ED29F152D676BFBA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  lib/wow/wow.js
- Size 16KB
- SHA256 da6117d0a04be3296acdb95a703244b34a66cfda1d67d9ef390d754db0f45e96
- MD5 ec605061aa84a17893e9b7cfe7d1601b
- SHA1 dd6f0d5d8346cca3477699121518dc15b1e5372a
- SHA512 4874608ef78f415a4a6e1971704df5643c68ce502245373e802aa990b116d9e88d38e115760c60fd8ab41fc7bb59941310bdcdc25d341aca60f6b9ff82539eea
- SSDEEP 384:bceq2V+NRODc3carhqGH6LB/fSRe0MN+3xBWrUiEl3/:bceNNcJtrYfSqN2xBWrUVlP
- TLSH
  T13B722F892AFB20609A27707E8F5F9101B574400B105EDD687DAC9BD4AFA093987F6FF4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  lib/wow/wow.min.js
- Size 7KB
- SHA256 1041568a299093ef168fd78f8b54c27d1cf0cdfae8e870de0769ba1174c6bc05
- MD5 3f3d63e2feea51da5ea907e80e74d75d
- SHA1 ca546ef8e982c4b9d1ad43ad38fc702d0cb1d873
- SHA512 20d9a51ac9b5ec340c4b9a5053fc35cf0c1e29514d8aa41d7f45f0f13270f64416f9652efe7aae63b0bef7bd4637f5d56667a8aff8ac0d61f88bb50fab0b40b3
- SSDEEP 192:tmEE6yAmu6qUxbU5C9nrr1GkEPIAeJ3KO4poIJ:EEE/Amu6qUxVBxGkAI///IJ
- TLSH
  T193F1BAA5374A70718E9B6176C92F0202A532256E74D4C8EC747CDDD4AEB4A29336BF3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  service.html
- Size 17KB
- SHA256 5b49233148a2f4fdd533342a07440f79f13ba71955d7d26a1ea64647fdb2bf18
- MD5 d3ff6c491a65ca568c29165c750548ce
- SHA1 100ecbff0852247b13e790272224813232399ef6
- SHA512 c54e8f0d974cfe34d282d663a746d263c65c24382f46a3132c66b23f46c07265ca6c8fd322d4f9039d61988b84dd3e259b8fe3be0e8071fd49b8bf9c7b17c681
- SSDEEP 192:x6Lz/7znjLydedFDHBIJNw2IqaPlDOBqlG0lI8GlZklRhR+IAvVVL0ZbzNuf:4LDDvbKrCjcB/d8OyIvVR0ZbzNuf
- TLSH
  T15382712A68F6017F0187C0E42AB16F1BAFA2C507DA1B611872FC57C90FE3D85D96399C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral29 behavioral30
- Target
  testimonial.html
- Size 13KB
- SHA256 8f5e01e77ab42a469bb965f7b470b270e0851202d7659b40e415ce3ff210d7a5
- MD5 6ea724714c7a6761f32029b03791c15c
- SHA1 d7c23734a5d8e9924ef58b32037bd314039c7e93
- SHA512 59ada02b53b8256b966911cd402d80d08b6b85a0808765450b5ed865596dbfceabaa4c86bbf921a56fb90ac43215759f252f30368bb0b69d9c0fe7bf548bfc44
- SSDEEP 192:W6Lz/7znjLy4edFDxIucZA9QwXZRfo2VN8ygvVVF+ZbzNup:3LDDAWBqDA+svV7+ZbzNup
- TLSH
  T1CB5283256CF2117B014790E43AB17B1BAEE3D807EA1B681871FC97C95FD3D42986399C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32