General

  • Target
    APPluis.zip
  • Size 74KB
  • Sample260705-wt8svaey3t
  • SHA256 fb94b71c628b51cf98531a3dd07849380f2c9b894ef7c48e81feb861e1de0484
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      include/DBConnection.php
    • Size 709B
    • SHA256 12ae25d99860ba0a2032337e968de031ee0c307b21098022b1980e4dd993048b
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      index.php
    • Size 5KB
    • SHA256 87ac3e857f836bba8702cc146aeb4093f8e8e90ee79d297bb9393374d06edad1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    4/10
    • Target
      js/jquery.Rut.js
    • Size 6KB
    • SHA256 d8cdb282e113df20dc1113bb602a70f229f130db73d7315ad502d9c0901084a2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      js/jquery.js
    • Size 54KB
    • SHA256 d548530775a6286f49ba66e0715876b4ec5985966b0291c21568fecfc4178e8d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      js/jquery.validate.js
    • Size 23KB
    • SHA256 c8262a5b3f98b9da9d425bf593b9dabc0cfc10a9afb233e79d99f679f41a911c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      master.php
    • Size 5KB
    • SHA256 5d164de1864094bfa541fe779182db6ba0699cd8da68f1dc05938c0f148b6ce2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    4/10
    • Target
      registroempresa.php
    • Size 6KB
    • SHA256 5d1ed03c85f785cd4e799a59eeeb9b6a7e2f85dc6a2900e98d9146316d042c45
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    4/10
    • Target
      registroequipo.php
    • Size 5KB
    • SHA256 26e6b00d90a0978deb7630d0c0e6f93b3cc5ab99185b6ea323883989bb6727d5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    4/10
    • Target
      registromantencion.php
    • Size 7KB
    • SHA256 1856d3eeabc45db504ef181f9d4deb9908106bac980186bff5a96cbd679ad1a7
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    4/10
    • Target
      templates/footer.php
    • Size 2KB
    • SHA256 1c96f5d1a2e9ac63ff5290ee0a3b4a9488753e9ee598541350466977be5babfa
    • MD5 SHA1 SHA512 TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      templates/footer2.php
    • Size 2KB
    • SHA256 d4153a544d1411737393209f3135a0336f428a2daaaac34f7e6dd1f69e6a7934
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      templates/footer3.php
    • Size 2KB
    • SHA256 a9d9bc54472d333fd1ec34affbbf0fa6a967fd536295ae1999147634cd4e1d2b
    • MD5 SHA1 SHA512 TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      templates/header.php
    • Size 2KB
    • SHA256 9ba19bf648997e98d8a366151a34722697c387197084f943253622989453b177
    • MD5 SHA1 SHA512 TLSH
    Score
    4/10
    • Target
      templates/header2.php
    • Size 2KB
    • SHA256 88dd25b3490d0e223e2d7ee3c0ed9a5f83c2e86e125704755c05058331d8e54b
    • MD5 SHA1 SHA512 TLSH
    Score
    4/10
    • Target
      templates/header3.php
    • Size 2KB
    • SHA256 7cce28b5a6916596781c18b4e3fd720474f3e9cb7cb7a68e512adcd4e0c0cc62
    • MD5 SHA1 SHA512 TLSH
    Score
    4/10
    • Target
      vistaempresa.php
    • Size 5KB
    • SHA256 85c346aa6f1b2c82fd33b9ba096779e012af015c0199f286ace5337e29673e05
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    4/10

MITRE ATT&CK Enterprise v16

Tasks

static1

Score
1/10

behavioral1

execution
Score
3/10

behavioral2

execution
Score
3/10

behavioral3

discovery
Score
3/10

behavioral4

discovery
Score
4/10

behavioral5

execution
Score
3/10

behavioral6

adwareexecutionpersistencespyware
Score
8/10

behavioral7

execution
Score
3/10

behavioral8

adwareexecutionpersistenceransomwarespyware
Score
8/10

behavioral9

execution
Score
3/10

behavioral10

execution
Score
3/10

behavioral11

discovery
Score
3/10

behavioral12

discovery
Score
4/10

behavioral13

discovery
Score
3/10

behavioral14

discovery
Score
4/10

behavioral15

discovery
Score
3/10

behavioral16

discovery
Score
4/10

behavioral17

discovery
Score
3/10

behavioral18

discovery
Score
4/10

behavioral19

execution
Score
3/10

behavioral20

adwareexecutionpersistenceransomwarespyware
Score
8/10

behavioral21

execution
Score
3/10

behavioral22

execution
Score
3/10

behavioral23

execution
Score
3/10

behavioral24

adwareexecutionpersistencespyware
Score
8/10

behavioral25

discovery
Score
3/10

behavioral26

discovery
Score
4/10

behavioral27

discovery
Score
3/10

behavioral28

discovery
Score
4/10

behavioral29

discovery
Score
3/10

behavioral30

discovery
Score
4/10

behavioral31

discovery
Score
3/10

behavioral32

discovery
Score
4/10