ffff5f80e7fee2030a071408a3da3e23ebcdb2e46ec5c8d4149f70cbd59e1abb

Sharing

Copy URL Twitter E-mail

General

Target
lmng2026-main.zip
Size 13.1MB
Sample260707-wevyfaa19s
SHA256 ffff5f80e7fee2030a071408a3da3e23ebcdb2e46ec5c8d4149f70cbd59e1abb
MD5 ddd2fe34fb057ac36b0f298b06b0b77b
SHA1 d911dcfbfd6d9ad8b050123b436f2e57ab1e6daf
SHA512 af17c73fbca3277d353e8ab19300023a4d52f2b00bcdc7c788cee2014073e082c32e9bd32c977a6eb18f184f8a15d45f121d70872b3d8154f491ed9c2c24ab64
SSDEEP 393216:d++USdvggrqizG0e0SBq+uSUqdKHgfVs/HNVYBl9dHW6nfikLd4:d+xSdIgs0uq+xU0KHf/NE3HFfik6
TLSH
T11CD6336533AC0D8EE50308B2B0BCA6E7A3875863EBC5946C1B671B9449DD14E4C37DBE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  lmng2026-main/backend/app.js
- Size 5KB
- SHA256 56dd9fc8ac24eff0b2ac16a09df93aa327e9abcf343994753dda56fa35d8ecb8
- MD5 82f49d6467b9a29f3f733e071df56e5f
- SHA1 99d7a59b0a7d4ad13a2e5ffd4ff8e303fe08a520
- SHA512 c781c0767aa29053f35d69b65c17ba9c2b2c58786204f46e5ce0550c52f1dc8f889f138385a3827d71c5857f83cebae114211aa6abbd4ecb11ac9504f71998d1
- SSDEEP 96:kFRdkTEAxm0K3FjdPFECRnqLptmWX68qPbEhF8fZvK:UomLBVnqLpLePbEmZi
- TLSH
  T111B17312DCB5282626B3D095EB8FA402F942F5033344EE11779CE7970F875A8952F7DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

execution adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2
- Target
  lmng2026-main/backend/config.js
- Size 248B
- SHA256 2bfa30aa2f3c41f75d6f924f27d5258dfd33f7185f526513a1118a6207f75076
- MD5 9956b6fa2eff2252d3c81d4be6970950
- SHA1 6c6edc562711a0cd0fbff028868a7ab035319257
- SHA512 ee40b8367a6fc2f6b8ea32ac4b59ccdb54f1a1c82aad810156651a67e68c8a2e20d06f5ef73eae194c44b8ce75ffd7a01ff777679851ec1006807b988024e088
- TLSH
  T170D0A7E15115B04507C4129291DF5D413190E1970C44B404775CCF480FFE82D52B492A
- MD5 SHA1 SHA512 TLSH
Score

8^/10

execution adware persistence spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral3 behavioral4
- Target
  lmng2026-main/backend/controllers/TokenMainnetBSC_ethers.js
- Size 10KB
- SHA256 3f99fbe757e76fd5c0b0ccb215bdd16aef3e510555dd891afa859c4a35adb620
- MD5 dd6ae9bff724eec934b092b40ea6617d
- SHA1 d56cbf85282951b28a1ac485dccd51d8efe76a57
- SHA512 3be7fc7072d70f9824908f53bd45c971d8520cc0b9c631fcdba038c1335bda6518c70d3bcd95f770ff823f82989a99d665ed107aab03695335d81aa896167e1c
- SSDEEP 192:TOZejWXP0MFXuXlarEG1jiyuXlwGv0vEdW0YEdFjiJXlwGM8pFsU9/bc:CZj/ji1zmWwlY
- TLSH
  T188220F8511ABAF2C44972BD948CB5714B461B5C392CCCD11799C8EA2CFDD9C9C8AB38F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  lmng2026-main/backend/controllers/TokenTestBSC_ethers.js
- Size 9KB
- SHA256 237b5f39a0562e431412e8f76be8f4d812d56d67410911f9680851aa6fa77ca7
- MD5 a7ac6eed384f9354011049d69bbc59ad
- SHA1 167c680c1258ff67b7cc6afeed24e321497baeb8
- SHA512 c69a07e525ccbb45de7b4b770b6fdd525b3648e0e092d586298e159e1b5cdc6ac7b3b05f861c6fa664c005d1c1e97043278391a5ffc012cab1e05e915eed7471
- SSDEEP 192:v9rilC2udWP8xEMjUEm3xEjYeIG4B7nQLvZcCMlS8pFsUL/X1C6EURm7+cc:1f+ce
- TLSH
  T131228CA41C3B607B0896F4C458C68F67B664D1E3818C8D12764D8A766FEDC2AC48F78F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

execution adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral7 behavioral8
- Target
  lmng2026-main/backend/controllers/admin.controller.js
- Size 4KB
- SHA256 44f0bbdbc544f9b3f040d3e474fc2f9166724bfa5c00901cfb25630046c72f81
- MD5 a8fae19b3583ec8a64b09854d3eb2118
- SHA1 c9b49d9225381675336d5c9a440faea3c5f17667
- SHA512 729cda545b642f4b12b9b5d8269dfc66265f4fc7509166b6b1c654f2e09fb8bcede1377c0a18ec035d896350f22f7f79d220a661e6c785dd7589e4bec7827e3b
- SSDEEP 96:a2oSi8tHM8yGHFKr8RG3WX6HI/3gh3O1N:aTvnzG7XfIAv
- TLSH
  T178B17CCB19F7A4B456F7B52A8D8ECC107B52C983540DA910FEDC06505FCA86AACE23F4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware execution persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral10 behavioral9
- Target
  lmng2026-main/backend/controllers/auth.controller.js
- Size 2KB
- SHA256 ea7d30d730046789dfccc3cabd4dc227cefa7b89204af19f6caa6a27f66eec90
- MD5 011fb9699f0932c010af5aed93de3a4a
- SHA1 e43f6bf9e433d0a9e9d346817bce300de6d3cd63
- SHA512 457ae7947a55f1c2c377d17c24e8acdae4ee1fb23044d85ed15307bc29d3e82926b60194b57cde0412080fca1098815a12f85af3dd67373b9039a4bcbe84f853
- TLSH
  T13551218A93F7305446EB50AA8597C8121F8AA4D3B06C8D90F5BCCB041FDDD7CDE927A9
- MD5 SHA1 SHA512 TLSH
Score

8^/10

execution adware persistence spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral11 behavioral12
- Target
  lmng2026-main/backend/controllers/health.controller.js
- Size 191B
- SHA256 9066af674bbe72cb06b8bc186abb9812c67853ef522b7ca817176c97081f4c1e
- MD5 badb1ceb2984edca7320d060b7dbabfb
- SHA1 c82198ceae86347192292c22f7376e6f58a4728e
- SHA512 8a9a7944cc360a23aa2567952ede93931cc0d12a897cdcdc8d1e4d84e7f327d07287bf7a1566eae7b197995fd8c58599779c7a47994b8a8ccb919d071a81b319
- TLSH
  T178C0C9CB62F6610009E6B6049800D6222E8CDD72500D08A5C7682A545AC04AFC4498A0
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  lmng2026-main/backend/controllers/notification.controller.js
- Size 653B
- SHA256 26aebb09af9be225d0085af5bb53e236ddeddedcb8c0291f671f2f9c28c0a2cd
- MD5 274b28ee7406477bbbbe0349fed8dc5f
- SHA1 77d821e0ea9683f5f7b8ccde7de9aaaa66a02580
- SHA512 b13e8bd07879a85af8f5f0408f8efba6061c26cc7dba5000591a244ed3376a68dbc364b4380b72ac9b91c7b0444c737330bcc24fa8e8c1036c8059ba4ffc0092
- TLSH
  T14FF0D1CB32F754A057F7B04DC92A88523B53ED8BA40D8D65F2F906601F8D929C8A15A4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  lmng2026-main/backend/controllers/plan.controller.js
- Size 428B
- SHA256 fe5dcbc72949209d90b6c4a37c96346b99fef54d5d77405d2404575a98d2b1e5
- MD5 8bba0749dbf9ec309f547a4f42d1e158
- SHA1 1bc361dfad69bd645cc9e599b68037b605c2929f
- SHA512 9aa23cbf4ba498bd82c591581a79d64e05f5e7bc572182bfb9d76805d1b8d4b5597f93219877e17b014a05c2d7c2e0593e00319dcf8ed65f017b5f876bb430a2
- TLSH
  T1E5E0E5C736F7919416FAA28CC50AC8222F45E893A10C1DA1D3A81A416FC4479DCD06A0
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  lmng2026-main/backend/controllers/referral.controller.js
- Size 459B
- SHA256 dce5cd1d5f9d4d30b27deed278e32b52b1ada3528357ee5581f300c496ae24ba
- MD5 a447705c4f96adfe45f6ff4eb4399320
- SHA1 8be83b2ca8433fc095956ecce4ace57157b07495
- SHA512 4915b889a009b10ff154d7a673c32db371da6b773e6d9349f38f378e4ca14f1a7deaa11a6f6700098457c7f255eaf2a11e6a61a874c0ee2cae6591848232e976
- TLSH
  T1E6F0A7C732F791A006F6B18C842688222F55E893A15C0DA1E2B919516FC587998D1AA4
- MD5 SHA1 SHA512 TLSH
Score

8^/10

execution adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral19 behavioral20
- Target
  lmng2026-main/backend/controllers/register.controller.js
- Size 23KB
- SHA256 906a5034d481f36ed3a6bdff0825ada411cb56432febeb0fb235278bda18cbfb
- MD5 421526f37bb8beb5db96d18531248cc3
- SHA1 6a877f798df4c2c07046b7ec9e55dc84a7b5eadd
- SHA512 df3ed1e7e2fb35960bb8a46b5433c449cbd18f78077f0befd8de2949c01963f8878437bbf6e518cb76d1c620b325a6e7ce89b46e28ba07128871640700e06c8a
- SSDEEP 384:W8AHtI3oYlpwmq2T8DlCUzrWS41snuLZx4wmkLH:heeLXTF
- TLSH
  T14EB2004559F764A405D7B16A8DEEC9007682D8C3901CAD10FEAD4A606FCC97DA8F3BEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  lmng2026-main/backend/controllers/staking.controller.js
- Size 2KB
- SHA256 73d03c77e5dec0ac199120abed5aa3960bed899c123a2d3fd33ca5a0a0246cb2
- MD5 d5450d860aa9f5a4073beb3ec9b238c9
- SHA1 73cbcf13706718fd70492c49d344bad23b8403c0
- SHA512 04b3a4a923df57fa9307ae7aaa156b4dd80657568968055a247894b6dcb79ba327b0729ca030b8ea432eb3bf56532efef03fbc8ed184c0e0a124be1a19392dd9
- TLSH
  T1BA4159C321F3606007F2B28CC96A8D223F91E887D10D8D54F2F919906FCC529D8E7AD8
- MD5 SHA1 SHA512 TLSH
Score

8^/10

execution adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral23 behavioral24
- Target
  lmng2026-main/backend/controllers/ticket.controller.js
- Size 1KB
- SHA256 214c4ee97b9f7b15204da6fbc8341b6d346b658e6d87fd8813aa6378dd637952
- MD5 44d948180ff505f5f7173fab16ba7a37
- SHA1 48d641b087bb94127bb99ae9208edb73ec1d8218
- SHA512 342bc758332cf5d3fd085dd6f3c4b957452933cbdeba38284a8787e80058423c59559f34b0fbffbaf41f099bd9705cc60910ef19ee61e024a50837cf21970c5b
- TLSH
  T1803145C772F7B46407F3B04CE9A69C12BF46DC83A00D5961E2EC4AA16FCC569C8E5AD0
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  lmng2026-main/backend/controllers/transaction.controller.js
- Size 1011B
- SHA256 acf509f1eb0b1e9b5a5b66033ea239cec775e6684249f2e16b4c9b1bf41b0c5e
- MD5 3160106ed9e473b5c6eacd6f657c2f4c
- SHA1 561872701f333d1808df184c3281e663bfd27eba
- SHA512 e5a01a58a4d12d85955e444e0f97778dfefabb6030f3a2a6dda9811ea9422f70a7f0e5b1a4cb0409aa5047c25b51d6afe505819514f7281eee395f4256f6d964
- TLSH
  T18B117BD721F7A06447E2B24C952A8D613E66E8D3900D4C45F2FD46526FCC07CECA1B94
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  lmng2026-main/backend/controllers/user.controller.js
- Size 722B
- SHA256 be2caf53c40eac051e36eeb3ef2a23260f63ea5d870f893d2ab530762a99fb9c
- MD5 1fa27acd777451604b4f01fc68ca5f26
- SHA1 bbe226e0a839057bddf965623ccd8abe2bf1ac7a
- SHA512 b24a633e211d4df4c6c53f24db93b88c54078f1c5a21fbe20c28eddf0b580fb8644d8cf8fa171d6b26effc282eb2b8b02a5540387c9ffe090b6f7ab752684bac
- TLSH
  T12B014C9722F7A0940BE6F048846BC9222E99D9C3E11D9D71E6B95A511FC183EDCC0A9C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  lmng2026-main/backend/controllers/wallet.controller.js
- Size 1KB
- SHA256 ce87e4c73d5908b9a37f24ff8a5249ee31fe9fc41176155fe7fe0c374d6a04cf
- MD5 38cc0e4fbe98ed28f515c278e3b380be
- SHA1 43337e5d0987baf2e65baf06e28e8cd9c27a82cf
- SHA512 8d728c0486a7d2dbbe345646ea44fafe74cd4d898c8a7b3dfb14aae9a1c35ddebea7297d0ad59e91152e7129b6dfb4aeabc249fa5b49eb69802390bdda9296c4
- TLSH
  T18421F3C723F7B2A043F2A20C855A88627F42DCD7E50D4DB5E2FC06615FC886DDCA19A0
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32