f3edab12e5c206a8253886f312d93a6e82b58e8a41f021d07de498a02b7e00e7

Sharing

Copy URL Twitter E-mail

General

Target
PANEL.zip
Size 23.5MB
Sample260703-ap1qsagz81
SHA256 f3edab12e5c206a8253886f312d93a6e82b58e8a41f021d07de498a02b7e00e7
MD5 e5737db460cd3e3e29ff0ddce509543b
SHA1 e51c14066a88e014be7dc6ab9f28536446ac2228
SHA512 644647981118b62af95fec1807a1367dd6fc7e43c286d3b81ee92f1756de12e558af9b0f7458dae0956720fca2cf71dab72ac1a8696001fa2e4f6389dad641d8
SSDEEP 393216:Eg7PuilJ2+fIKVXPEuPsk7ZjRfuKXMWAY2dbOZHCVbtfRN8IlbrnDAVpNuUY:E0uilQ+wKVXNZ1fu3WAjOZHCNtfRN84T
TLSH
T104473349CBA3A0F8FDCF88B9755CD2E8839041275F60B372976861896CFC8D959037AD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Targets

- Target
  ROKUX/api_urls.php
- Size 7KB
- SHA256 d821b17c63dc920490adfc0883cba3fb77eba91a532790c7a99ae3a9ca59f6dd
- MD5 7e4ce4724d309110f4d7fbb478665243
- SHA1 67b72d5b61fc1c5f643fc11f21ce53a5b76729de
- SHA512 5fbcc196a1fd1c8fcc23d0f2fd7c52c0faf27bac8645d2ad408db73ee698d9cc2b6111b38add4bfdb5a5f9d65e5d4b89cc3c2e85f43b37bec3d5141b4da45735
- SSDEEP 48:cSMvw8WyWfbj3w9zn9CrgT7VSNzVE/SfnNrgTIeHSkzVE/SfnqrgTlSbzVE/Sfng:cSUm2krS7VSEa1rSIQS1ayrSlSiaa68
- TLSH
  T1BDF16619718C95FAC173A765C73BAE19FA736007CF170600BE9E2A421F76C54A817BAC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  ROKUX/assets/css/index.html
- Size 131B
- SHA256 0ee6dff170c38f66cc1e9ef00cfb927bba75b30379af3281c026647c068a4709
- MD5 c92aa5f16d78423a983a5d7ae44428e4
- SHA1 ddabaf1127fe57f9c65e2cc83cd3443f4efe5caf
- SHA512 e6da7a7c4f00aa43d6683d254b31b19b63be2c5110de15aa27e2865499dc7cbac356055f6bab38ebed326e90b2157f295eb231b89e1a1da8d3990278b5133df3
- TLSH
  T1DEC02B4B310D1044036363801AC43760314303C040C309C40F87D113880051EC4C704C
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral3 behavioral4
- Target
  ROKUX/assets/images/404.svg
- Size 23KB
- SHA256 f3c90dbde328211118380540e92f438d9fe34540dfe66dc9043fb2df4377ac57
- MD5 228e4ee9247e1cceb504ad2281f14458
- SHA1 092ffa321a7541e70526b4584a98ef2f72240a41
- SHA512 abdf1a482f49fb764512269f251efec674ed8bf06639f834cf8fb0932efc7e0a66b98e8fbd7b3ca8772a6d83d9e44e046724b1195b583ca5aa923e0e61f24bf2
- SSDEEP 384:3T3pq1KzceAceFUw3IS28GSFWjtU8LxrATKdUR9SJTAqU:j3pGKMBIS2SsDxM2dUR9SJ6
- TLSH
  T1EFB21AF26320D2FB9D81C345CBE5B8DA327E20DDB2A162DCCB974659AC564F3416C826
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  ROKUX/assets/images/hero.svg
- Size 19KB
- SHA256 661c8b3e4ff75efe1a869d62594f0264cda1392e219da4e359b4120f7b926955
- MD5 4cc18528f363422df1a2f3ffec22132e
- SHA1 28374ab7c52df088e4c8ffb83e3082c026655e6b
- SHA512 56b2fa7eb0c7af188f574ef3aa367a87e88b5f110174e6318e36b41fc58c7b156d74b4b48e5878807962fa4c4c1fb4d7f525b6b3bce55e7130c4f41cf6a1b58c
- SSDEEP 384:ysTjXBGIzqLyh5ZSL1UN1rL8dAyyulA7Lvb4sFrtnllH5BJW:t1ZZSZsrLuYLvjnHHlW
- TLSH
  T184922BC6237C73FCF94247A50E2EB86625D634DF3601A38CD5D22B452A4A6F72C58E29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral7 behavioral8
- Target
  ROKUX/assets/images/index.html
- Size 131B
- SHA256 0ee6dff170c38f66cc1e9ef00cfb927bba75b30379af3281c026647c068a4709
- MD5 c92aa5f16d78423a983a5d7ae44428e4
- SHA1 ddabaf1127fe57f9c65e2cc83cd3443f4efe5caf
- SHA512 e6da7a7c4f00aa43d6683d254b31b19b63be2c5110de15aa27e2865499dc7cbac356055f6bab38ebed326e90b2157f295eb231b89e1a1da8d3990278b5133df3
- TLSH
  T1DEC02B4B310D1044036363801AC43760314303C040C309C40F87D113880051EC4C704C
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral10 behavioral9
- Target
  ROKUX/assets/images/pattern-1.svg
- Size 3KB
- SHA256 07f1059417e5b69417ac3f8042621c6a57968124885a8ace4e57e6bf802d96ed
- MD5 c5f472cdc20767157124436b485f2009
- SHA1 8be67383b0510b3c71e416719ff5995bfd27a62c
- SHA512 890fe58afb68a2e3e609bbd7a223bc4593c04a4c0d787ac06440d767537e64a01b773a32075021e06521d4d97b459efbb4f28b286a9f2d5335d8e6baf23214b2
- TLSH
  T17481739EC3D5C5B4A9DA0374FEB127822A2198A518E58DCC875F2D046022FFA32289DD
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  ROKUX/assets/images/pattern-2.svg
- Size 1KB
- SHA256 18eeda8c99bff0d06ba59e3656d9ed4f55ddb5da652419f2ec81e3d12ff2494e
- MD5 6a2ec58e90a41645241e799259e7e85d
- SHA1 af56f32fd7b296b492ee1533d8b0e55949cf0fdf
- SHA512 247e772f3fabdbfa2c2d6891958008845ade1043187b83e77a2f642e4de14c33869dcdb4a87a824b262dee307930a62e741cf2f0064a65be31cc8905e8c31b3a
- TLSH
  T19321ED25D354863DCE6A03F8DD1C90BF14AF6A8BB89171A9E070E9F03139CB6762C5C9
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral13 behavioral14
- Target
  ROKUX/assets/index.html
- Size 131B
- SHA256 0ee6dff170c38f66cc1e9ef00cfb927bba75b30379af3281c026647c068a4709
- MD5 c92aa5f16d78423a983a5d7ae44428e4
- SHA1 ddabaf1127fe57f9c65e2cc83cd3443f4efe5caf
- SHA512 e6da7a7c4f00aa43d6683d254b31b19b63be2c5110de15aa27e2865499dc7cbac356055f6bab38ebed326e90b2157f295eb231b89e1a1da8d3990278b5133df3
- TLSH
  T1DEC02B4B310D1044036363801AC43760314303C040C309C40F87D113880051EC4C704C
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral15 behavioral16
- Target
  ROKUX/assets/install/css/index.html
- Size 131B
- SHA256 0ee6dff170c38f66cc1e9ef00cfb927bba75b30379af3281c026647c068a4709
- MD5 c92aa5f16d78423a983a5d7ae44428e4
- SHA1 ddabaf1127fe57f9c65e2cc83cd3443f4efe5caf
- SHA512 e6da7a7c4f00aa43d6683d254b31b19b63be2c5110de15aa27e2865499dc7cbac356055f6bab38ebed326e90b2157f295eb231b89e1a1da8d3990278b5133df3
- TLSH
  T1DEC02B4B310D1044036363801AC43760314303C040C309C40F87D113880051EC4C704C
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral17 behavioral18
- Target
  ROKUX/assets/install/images/index.html
- Size 131B
- SHA256 0ee6dff170c38f66cc1e9ef00cfb927bba75b30379af3281c026647c068a4709
- MD5 c92aa5f16d78423a983a5d7ae44428e4
- SHA1 ddabaf1127fe57f9c65e2cc83cd3443f4efe5caf
- SHA512 e6da7a7c4f00aa43d6683d254b31b19b63be2c5110de15aa27e2865499dc7cbac356055f6bab38ebed326e90b2157f295eb231b89e1a1da8d3990278b5133df3
- TLSH
  T1DEC02B4B310D1044036363801AC43760314303C040C309C40F87D113880051EC4C704C
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral19 behavioral20
- Target
  ROKUX/assets/install/index.html
- Size 131B
- SHA256 0ee6dff170c38f66cc1e9ef00cfb927bba75b30379af3281c026647c068a4709
- MD5 c92aa5f16d78423a983a5d7ae44428e4
- SHA1 ddabaf1127fe57f9c65e2cc83cd3443f4efe5caf
- SHA512 e6da7a7c4f00aa43d6683d254b31b19b63be2c5110de15aa27e2865499dc7cbac356055f6bab38ebed326e90b2157f295eb231b89e1a1da8d3990278b5133df3
- TLSH
  T1DEC02B4B310D1044036363801AC43760314303C040C309C40F87D113880051EC4C704C
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral21 behavioral22
- Target
  ROKUX/assets/js/index.html
- Size 131B
- SHA256 0ee6dff170c38f66cc1e9ef00cfb927bba75b30379af3281c026647c068a4709
- MD5 c92aa5f16d78423a983a5d7ae44428e4
- SHA1 ddabaf1127fe57f9c65e2cc83cd3443f4efe5caf
- SHA512 e6da7a7c4f00aa43d6683d254b31b19b63be2c5110de15aa27e2865499dc7cbac356055f6bab38ebed326e90b2157f295eb231b89e1a1da8d3990278b5133df3
- TLSH
  T1DEC02B4B310D1044036363801AC43760314303C040C309C40F87D113880051EC4C704C
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral23 behavioral24
- Target
  ROKUX/assets/js/jquery.min.js
- Size 87KB
- SHA256 a6f3f0faea4b3d48e03176341bef0ed3151ffbf226d4c6635f1c6039c0500575
- MD5 cf2fbbf84281d9ecbffb4993203d543b
- SHA1 832a6a4e86daf38b1975d705c5de5d9e5f5844bc
- SHA512 493a1fe319b5c2091f9bb85e5aa149567e7c1e6dc4b52df55c569a81a6bc54c45e097024427259fa3132f0f082fe24f5f1d172f7959c131347153a8bca9ef679
- SSDEEP 1536:ENjxXU9rnxD9o5EZxkMVC6YLtg7HtDuU3zh8cmnPMEgWzJvBQUmkm4M5gPtcNRQK:EcqmCU3zhINzfmR4lb3e34UQ47GKL
- TLSH
  T14C9318DDB2C6B06247A770BA407F610FF236199D684D4400F169D8E9BC78A4A827BF7D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  ROKUX/assets/js/main.js
- Size 6KB
- SHA256 42d3e174f61bde0922d68c8b6bdd1ad29eea2bec7d2fa7bcf02ac1e5be615e13
- MD5 fd47a626de28b7ce1de6f209e789b3ab
- SHA1 65200b8a685d8b6109d2b8a7f9f36f6bf210e2fe
- SHA512 46031e41a3c9ae504517934dc46959536a45b2c4b917d713b140f7e9712b23ffbfb8615c3a901f9b6b47ecc1afc1e6d795048a8e3a41d72c108df9c9f50b6f6c
- SSDEEP 96:4Esxja4x2EtL2EF2FRdSDeOx/qRLVmaG2xMJLMjmkUmsGFtxth9:MapEtL2EF2bdSqOx/amaG2xILXkUUxtv
- TLSH
  T1D2E10F0A70B625A1007B73B94FA79808FB392117B00987D97EFC87941F72184D356EEE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  ROKUX/assets/js/scripts.bundle.js
- Size 3KB
- SHA256 c56e9257d90ac838e65087e91f1b984ac0904db774db580b81d7b4d8cf148ee9
- MD5 36838d32638e964452dc88f450a93a82
- SHA1 ef6882bbbfe6d7849bb84cd5acacaf3dc5d27b8f
- SHA512 6fbb08f92a545131c3fe4437e0515a9bd0c033ea56a75af1552346363bbd4c270f5f80125afb9c099e9dfa4fb43ad4f4c3d51116342edf8252ca063ef472328d
- TLSH
  T19A71590AFC6666F0907BF37A9B7FC908E7B604274101C729386C5AD11F7500A9A5DEED
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  ROKUX/assets/vendors/bootstrap/bootstrap.min.js
- Size 78KB
- SHA256 9520018fa5d81f4e4dc9d06afb576f90cbbaba209cfcc6cb60e1464647f7890b
- MD5 b75ae000439862b6a97d2129c85680e8
- SHA1 90d15036ef48fcb336a135bae812b45669f19044
- SHA512 8bd7047c9c14c158843c529d0b57a7cf86511818fc610a3a401c854c5f766171e2ef0682ab27b1bd10fbe52e4d553b12893bfbaca5aa1bd639785c6646c3a7d0
- SSDEEP 1536:p4SMTGR2t4n+3ifBHJR9WbUHk3j8YY+PwRM3CGJI9BqQM6kF:b4Fj8GPwRM3CiI9Bt8
- TLSH
  T16973C6593254B4770ADE45B68037420BF2265D98B24B802CB5BCADDE2A7DC863277F7C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32