d1c2dded76f34964512325a75f7f76fbfb997b27171bb5f73064b24f1ab674b7

Sharing

Copy URL Twitter E-mail

General

Target
storeback11.zip
Size 687KB
Sample260705-wssegaex61
SHA256 d1c2dded76f34964512325a75f7f76fbfb997b27171bb5f73064b24f1ab674b7
MD5 df2384e89db9c854405467dbc5dcbc3b
SHA1 407afe2415c36ffb841ac1d8f8a794547a92d756
SHA512 059f6c9e8f9e1a03c22cb53630dded836f384e44a7f403a9bcb96334388e6ebee21f1239f241a995d8638b9dec9545f0289a326468d39476e2105d1ce36f665f
SSDEEP 12288:hqziz8bwZAOq5iWfTvoDr7Y2nQfWsqziz8bwZAOq5iWfTvov06Se:VzswWOmiMTMr73nK9zswWOmiMTzje
TLSH
T1F8E42387A2271071E4EFCDBCE04E572188F37CEA52EA59629E3358239F48D960F5D14B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  store/icloud/index.html
- Size 2KB
- SHA256 f7486b09c32d320527ee2dc4ecc925438900072b7abf105ef84fb0f758e3a83c
- MD5 ec2a4cbeaa2428c6824bc8ddf9072c55
- SHA1 643973c6173d04abd6bbaf4e4507e783f529e317
- SHA512 7a255620e8449e4ec280dea01d4194bd06e2113af730ed7c1cabd82e52a12b190e35828c6731edd7ae2b386ec56cb5a3f0a8240262421793fc2fe6c1405e9b60
- TLSH
  T1F94184A186F2487F0052A2CB949577083CE150ABFD99280537BD1B341FEAE2A8E2761D
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral1 behavioral2
- Target
  store/icloud/process/account/download/index.html
- Size 35KB
- SHA256 4d3af6449865d3ec9f6c0ec2be34d21607810e87201622b505cdea43baf924f5
- MD5 a5ff485f61083508e3be450d16b57fc3
- SHA1 422e334c7d85476be828bdc146ce680965a0a45c
- SHA512 76d03202d1a5a4373c7ea9781815cfbd09ee67b682d98569eb2f530a11ecaf616f8981a9dae5af7b5b129febe71c5f9a6bb1ad054dadaa9f4ab796bea8fea923
- SSDEEP 384:RxArnDH3+FFNfRcYRcJc6xUgU3/KqgegIsfhMxQxATRjI+1iri4imimifiIHleI8:k3yFNWvVEsfhvxAdkOV33aI9xdp8swvz
- TLSH
  T1EFF2F86192FE107F0097D05ADF5A670A3E6F903BBB1B82013BAD47282FD3D94C527699
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral3 behavioral4
- Target
  store/icloud/process/admin_sidebar.php
- Size 4KB
- SHA256 0ca8cc96bffe4606a05e85b1ac9f66e4fe061bea4fd06587e04f5b0c83b6b027
- MD5 e5d90f1916059efd180cf95f787cd89b
- SHA1 36b68c0c104dcaef3c8399855955b869d3fdb2f8
- SHA512 c2d12fe1f041d09540a1c7b6bf06b1f64f1268852630a63a325d5d1ccdef19cb4eb73e290aed3177d02c6e8af150198d8aeace30076a2000e05407dce07549c8
- SSDEEP 96:ARiT0F6Iznzlgg6c6mxYzsMr5Y6r7ZdOL/HhrIqhLKw:+qMznzWxc6mxYVr5Y63c2iLKw
- TLSH
  T1A5A1976A26D018394273822542E2B774FC3C84D7DB079229793C918F1FF1B48C857EDA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral5 behavioral6
- Target
  store/icloud/process/src/app.js
- Size 3KB
- SHA256 abbd5581c02c25e1c163818e58cf0862b02ca5ddd7499683c0bf4955e66db801
- MD5 84770ff3b9ec9105049dd8ec61ac15e4
- SHA1 d51c7aa2efbb1b546d206d7afb6d11ecc27deb13
- SHA512 e7e72e3bfef4402db3452d7ffe38370b56df9e075c43076e1a72b0255b1d6cae20655d747c8d08b10ce77bdb74ef64dbb2b6bcd71489820a4ebaaba05891e411
- TLSH
  T15A8183B631FB04B20AB7A5B2B1879000393150373D93BD413A2C414C2FDBF65AAB632B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  store/icloud/src/app.js
- Size 3KB
- SHA256 abbd5581c02c25e1c163818e58cf0862b02ca5ddd7499683c0bf4955e66db801
- MD5 84770ff3b9ec9105049dd8ec61ac15e4
- SHA1 d51c7aa2efbb1b546d206d7afb6d11ecc27deb13
- SHA512 e7e72e3bfef4402db3452d7ffe38370b56df9e075c43076e1a72b0255b1d6cae20655d747c8d08b10ce77bdb74ef64dbb2b6bcd71489820a4ebaaba05891e411
- TLSH
  T15A8183B631FB04B20AB7A5B2B1879000393150373D93BD413A2C414C2FDBF65AAB632B
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware execution persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral10 behavioral9
- Target
  store/index.html
- Size 25KB
- SHA256 94ee87281dc1475673a32f4d251f1ec04d91a4852369f214d3b28389855f8bee
- MD5 0d5963356506ee215e2196f23eb7c761
- SHA1 7d8b24a39f7856c96496aaac357e50600f005b27
- SHA512 c36b464b0b5da105b96cb7141f68318e75b974a45856720f16b37a1b30addc45134baa7f5f89874b76e88bd6a0f238e8fbc64d24dfc540ab6fef1f0b5c0c68db
- SSDEEP 384:RxArnDH3+FFNfRcYRcJc6xUgU3/KdnDH3+FFNfRcYRcJc6xsnegIsfiMxQxATRjq:k3yFNWvVx3yFNWJsfivxAQ
- TLSH
  T144C2E97255F970EE0093D11FEE26670D2E6FA1BBBA66424136AD4F342FE3C90D913818
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral11 behavioral12