797bc0e4e081953925beb63684cdd966246c5d027cf2b6f371761f2dab846f1e

General

Target
content-analytics.zip
Size 41KB
Sample260706-pfbgvsay3p
SHA256 797bc0e4e081953925beb63684cdd966246c5d027cf2b6f371761f2dab846f1e
MD5 96f39e1935af59ab0ae27e55b1183719
SHA1 035d8e0ab25256d2cfdb5318048e338bf9010404
SHA512 5411346968473da288c9d6b07489a160c49f94142353223dfe28ce8446a030fb57ef6656a8cf700dc148296986e46a28d4eb74e1f2d9d691498c22e080959407
SSDEEP 768:vs2KYzYC0ZZPHRK3ek5J4Md2diN+xj/cmB3Bj4+Ir1MiFjL7T8v+:UlRpYMBkmB3xOrxjv4v+
TLSH
T151135CB293891520FA0FC63681845B5AD1B68A0ED5C796FBB814135CDBCB3993EB7313
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  content-analytics/admin/js/content-analytics-admin.js
- Size 6KB
- SHA256 d8d1ad782122e2993913a5f2cde711807aeaf3b471ec090c878bcb54b9914b6a
- MD5 a402b5fa4d139c1b5a3ee65183e98629
- SHA1 e97b6c36ca71fc535cf84ca03ee90b92ee2ecff8
- SHA512 84810fec8b080d38664947ce8c959aad0ee7c2bb4de5c9ee7a60682b8f99cca5920989ea70c5ebd7f86f8b3dab7e00ad14e9375c386e24436beb9e9231eddec0
- SSDEEP 192:n0iHK9KR4vLNuZj2w4GXroq4deelyqKH7ZeGVJmi:n0i6uUuoi
- TLSH
  T106D19349FF9D180AC13220EA5C5F39D576FD42328680C92ABC61C22D5BD9DE4663D8F9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  content-analytics/includes/class-content-analytics-loader.php
- Size 4KB
- SHA256 bd438f66d5c3d58ca850c863b33ca5f3b93b4fb5402ba0277ffc7041b65baa29
- MD5 897ab85da36af5b9cba88d44ffe22915
- SHA1 88ed2871aee8b8987e1f48e9a5500a7b653f40a5
- SHA512 d65196862ff3c260ec8b1915d5ba5ef555a3b6eedda7552e09379ec3a1924b384bf042ef766fa7b5cd032b72e08afcb5b7784f98efb2c9018b8ad3d793e2d27a
- SSDEEP 96:gyMKjxu0lLMjx1Tc7T8TcbTlQbTcJNPM1CZ4ipTcJ17M1Cs56RJMmT17A184TQ7Y:gyMYu0lLa1TCT8TOTCbTcNU1CZ4ipTcE
- TLSH
  T1BDA1E06AB682B37349D7F2719B9FF241C0B88028E95A54D1304EE5F42F136BCC3B6885
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  content-analytics/public/js/content-analytics-public.js
- Size 838B
- SHA256 57a50c99a31ef4e89e86664e96f6dfbdde163a2eb96e88b3b492c49aa4be2f37
- MD5 49cea0a781874a962879c2caca9bc322
- SHA1 72c1650de2b93ef320d2db873fbb473fe360269c
- SHA512 7ebf5da4637794cdab0d199e8b0550e9230a1550804a4ce7fc723a8881e16d12327b9c40bceecff54ece29dde71bf41e63e8510adf0827c4cd13c2392e6250a6
- TLSH
  T163011ECEFBC22622C0337AB85DEF739873BA902581D66EC42850013C562193F8067CDC
- MD5 SHA1 SHA512 TLSH
Score

8^/10

execution adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral5 behavioral6