140a1fe7f3a765376950cf5c94f9bfc6fffaad76fe09ace9cafbe7ec336ed841

Sharing

Copy URL Twitter E-mail

General

Target
dana-id.zip
Size 5.2MB
Sample260705-pfhaeaf16p
SHA256 140a1fe7f3a765376950cf5c94f9bfc6fffaad76fe09ace9cafbe7ec336ed841
MD5 cea62d1ef935bd256a1e5a13a37d74ca
SHA1 48083c9336cf90b97e425b3612634c0be5a81881
SHA512 399e0d13bed7c8123eefed76fac0bff33d98946690bef0e739a47c4b34cca72b7da8f23efdff9bd0942bf56bd06070e250358c27495c1642f77f839179f190a1
SSDEEP 98304:6oemvF28u4JXys+3c6zyKGhlbvF28u4JXKoEUxZ3sjecnkZXlif:Remv4kRyDlzhG7v4kR/xhsjeckZW
TLSH
T151463363FA417F24C33D0D3113B5E2819681A3BBCE4ECD86B1AA1719FB745819817A7B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  id/index.html
- Size 5KB
- SHA256 4aee4ea4761f2bd1aaaf82e2038a9e2e782d1b34fd6191b916a015cb5278ef6d
- MD5 c7ea42c89fabcce03f03bfd0b2b225ce
- SHA1 719e8e0f6e2a9c7ffd44cc436fc824772dc48c3d
- SHA512 f665497e3307b8df201b6a1c8eebbdb7af3f06579f487e7d2e6ebcf4d5b0d230176a2ca02d201afec6de2ef092769853142bf08d5c756319966874708c186d35
- SSDEEP 96:QuEkJWpDx6bIUiw2AmRZ3ApzCKJgFUdGGc+BjD0cbO:IAkDx6bLbaZQpmKJrBjwcy
- TLSH
  T164C123566AF32016B90351A42BF767562AB8D113C50ACE683BDD63DC8F82AC5CD63B4C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral1 behavioral2
- Target
  id/js/jquery-3.7.1.min.js
- Size 85KB
- SHA256 fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a
- MD5 2c872dbe60f4ba70fb85356113d8b35e
- SHA1 ee48592d1fff952fcf06ce0b666ed4785493afdc
- SHA512 bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe
- SSDEEP 1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr
- TLSH
  T13983F8DF77CA702247AB30B9006F550BF276199D684D4400F159D8E9BCB8A4A827BF7E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  id/js/jquery.inputmask.min.js
- Size 97KB
- SHA256 ae82f0addc0458112cf2428b7338db058b8c3a65d074b5d7f6b0213dcb7635f4
- MD5 48b42b4b7db4d176952811d4289f8950
- SHA1 866ea776f5845a5b7621989bfb09a971d2b7cc94
- SHA512 8d3801ab8f9d31887bdddaaeb2499414480c6399a9b5c6ea4b0dab9a139965226365b0f6c0cb741f99e1a96b657959320448e6ce27799f21113d234169f1b819
- SSDEEP 768:ACBIjX3CVaTd5bxf1hy5tRCsDBAG8AcxIzo56VNs01LdY6fjr82NzV5cUrZGM/6p:vsJ/bxfWdcx8o5ICy1r8c3GCimZ6
- TLSH
  T15DA329D57552B25287E370F440FB440AA236EB2964D9A040B69AF0D0B97DECB07B3F79
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  id/js/jquery.min.js
- Size 87KB
- SHA256 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
- MD5 8fb8fee4fcc3cc86ff6c724154c49c42
- SHA1 b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
- SHA512 f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31
- SSDEEP 1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
- TLSH
  T1069309DDB2C6702257A720BA007F510BF236199D6C4D8450F169D8EABC78A4E827BF7D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

execution adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral7 behavioral8
- Target
  id/js/maska.umd.js
- Size 6KB
- SHA256 e698f5510e68477727c3b0fd1b95a9e55989803e52f53775e46c990ea2e3315d
- MD5 7c09d20df9a3e589b69d93142ac85513
- SHA1 07ae4f2cfa3388e12ed8d9c42e1cee821cf51e8f
- SHA512 2d52514f50c768497fd0cf4ef69938263af7e940ad3346e8a4a4c420183021dc27e8caab273d508a5410700bf45d274d5398c1f04f9a863e98b315c93834d877
- SSDEEP 192:SOCVOp/zVyY3sbSr2Ns9mfcHkUHgWyF/dz8:SOCUphyY8bSrms8fcHVH3yJdz8
- TLSH
  T15FD16148739A614112F88DD918F60142F724BB2B68E8D0DDB4388FFA6E26C4755B7E35
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  id/js/snap.svg-min.js
- Size 71KB
- SHA256 8bec6c5682e97c3016bfad1c99634dfcd897b2f0885c40ac7fc5675ad9cd01eb
- MD5 32d2704535df56aa35cfa539613f4362
- SHA1 8a99608b87378603246d67ba3051ca5b5484ec97
- SHA512 aa9ee91df9510c3359052f97ef301a8fc2609273e9fd5fece69d1aa01fb4615a79db2dc36c1dfcd7c3969d4017381c88944fb3a444f16ae3c5360757988e1aad
- SSDEEP 1536:7zpyINSK1c6sPm0kHcVirOtNj49Zm1hDvKUgfGLVnFt6nL:7zpyINS0GViCtNjueBvUinO
- TLSH
  T1B363E6D976C6B02A825231F968BF4547B03E89D5B90D4CA9F14DC5D23C38CA851BBF3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  id/js/swiper-bundle.min.js
- Size 150KB
- SHA256 985f1224c0eeec99d367a9db35e58e44b21e7eb9ce45831b15b4c108e41fd97f
- MD5 6cf353c3b8738cded0ecaf2100e7da1e
- SHA1 9fbbee8565587f0a3a897a84045d7a216efa3a64
- SHA512 b9d13adaf4af1e21d923ac1ab3e69f8bdd755c9b984c4018c660470c7b7dd079f100c72f7b8215f64cdbe632990cc416e88542b4f170194610b5e685b4678da5
- SSDEEP 1536:iKJqLfGmNQ2X8NFb4uvEOUjF3j7MtOBlxvHlik3+AkNk7yGCdmFiBnyOlV/TDQr/:nJebsNy1ikuGeBnR/TDQ9chHdN+ui
- TLSH
  T1DBE3E789A221B67646E3169B93E4C211B3B50544B80AC4E470FD4C9F597EC9C13FEEFA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

execution adware persistence spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral13 behavioral14
- Target
  id/login.html
- Size 14KB
- SHA256 7ac9058e3fa9637ed1d7caab2c2029200ccf518e56793ecaa0b3b1e7a95644b8
- MD5 1b68dcfc9b9248e81529189a107ef1a8
- SHA1 b5d8d5fed1ad1c4832e125d640d2b2422ac422d0
- SHA512 9275214b022094a8130d9b9231fd8c01e1ca5096f2ab7cde2f6e948b59e14ae79b5c527ebca950434d7a489ae3e34298bca788ea7197c96cae1baac956b89896
- SSDEEP 192:1s4XYmdySxdJlj2WKv+i4tUVgVx9oUEtvzG5qKMV9LaJ7DLKLAc/LCiPJPohdVC:1VnB2Wnb3nEJ9ajaOiPJPMu
- TLSH
  T1FB62FA5978F314611623A0A8AAEBA70B3C72530FDA04DD50769C47B19FD4F2C8DB37A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral15 behavioral16
- Target
  id/otp.html
- Size 13KB
- SHA256 322c3c22147155c09c64d97955abd36df94b590781f0e60393043097593cdd9c
- MD5 fd61b859461d609ac2b26492538fff7f
- SHA1 86f90c9855c6e16253fe1eda63e6a3f06d26aa1c
- SHA512 48b9e705e416128766dd253db2bb4cc4217290fe83f71752a6037aa0a134b6d291279f1ee718d3dc6100633cdabcad8cce50b3608e38dbaed40aef3c0edfa10a
- SSDEEP 192:ljaXZIuvhj9rf0BlgD1v1ijjf6TPokOLlVWY3VxSLqF31hZyBq8HgjpqD5KG0PYg:MvRMlGiP6bAJCWWgja0R
- TLSH
  T15252852A36FB202301F3A1F57B9E560539218117CA46DE247DAC8BA04FD6F91DF2369D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral17 behavioral18
- Target
  id/pin.html
- Size 10KB
- SHA256 f7936f3c5b97c81b5e12fe762f7e4cdcd11d9a098c5223a1739c001deed9c66a
- MD5 33bd50d40ca7ce5e0b426029b4bdabef
- SHA1 062df4c31a46f39890972f9d5e39983020dd2573
- SHA512 258e5f058cd1c9af82a1d63a4e275ecbb29e66b2bf8c97843e85898059de674bf82d650f557a180e310e88e48082f65ac442a2ee979432bc69dc383f480caa60
- SSDEEP 192:80zAC/ICoqRQSCc84RF8fAjRTwiSyiMpgeHtCs0PRJq:6J/veyAjKiSyiY0pQ
- TLSH
  T15D32A61B44F20935112341ACBAE2EA071C73530FA7086110756CD669AFD4FAE9EFBB9D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral19 behavioral20
- Target
  id/tailwindcss.html
- Size 21KB
- SHA256 099d59d4a80929781d4f0369644cef55d83c25a24f118c2f0a092887296b94e5
- MD5 9122fe906ed7ebad32021d9b384672bf
- SHA1 937639fe23c4d84e3c2433f94c3c47c2908796a5
- SHA512 2f0f9be25b52d336e46e973c42187ecc04cf7a88c8bafefb6634ee16f9742eeeceb039929ce60514f765310833dffe4be2eaf9d87bad6b43dca0283e3aaa9c4c
- SSDEEP 384:NEFrh3l/QnofkU8tMU23X2g5A0leqEeMPMe8K8qzJQhOXI274H4VoFSZFBsE9Pya:mFrh3l/QnofkU8tMU23X2g57lqSKR2O/
- TLSH
  T197A2110703A4A7BAFE5E465CA6E6284970E0DCD7A038F1D5736B0029CD4C8E4A95D7FD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral21 behavioral22

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22