Overview
overview
8Static
static
1api.js
windows10-2004-x64
3api.js
windows11-ltsc_2024-x64
3app.js
windows10-2004-x64
3app.js
windows11-ltsc_2024-x64
3icon.svg
windows10-2004-x64
3icon.svg
windows11-ltsc_2024-x64
4index.html
windows10-2004-x64
3index.html
windows11-ltsc_2024-x64
4notify.js
windows10-2004-x64
3notify.js
windows11-ltsc_2024-x64
3sw.js
windows10-2004-x64
3sw.js
windows11-ltsc_2024-x64
3webpush.js
windows10-2004-x64
3webpush.js
windows11-ltsc_2024-x64
8General
- Target booking-calendar.zip
- Size 34KB
- Sample260710-pbqe8aaz9p
- SHA256 48210945e14a2bba9e71195f5f6e4de573e2221ce447f369a7b253dd1d1cb79f
- MD5 0ea1129c8d4fe1303561a9f171397001
- SHA1 264c7a54e7c675aa4ce1ccdf0a816b83ea158630
- SHA512 3eae46f16cae1f5681510cbe9a2512f735911ae0b697b7d1a33f24167d3fb02b7a45e0cdd12856dcc0452ba7bb47e245e492d859cfa8838c24332650df9ab110
- SSDEEP 768:xg/UV5AhSR/J3S/jOdGrPBcwBjKeDAqET+Mte1:xg0NRRmZrPBfjL0qE6we1
- TLSH T124F2F164E38C6F59E12E85F8368F668DA9F2D2F10BC5EF071E2095447C0F2B70A43582
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
api.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
api.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
app.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
app.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
icon.svg
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
icon.svg
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
index.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
index.html
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
notify.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
notify.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
sw.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
sw.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
webpush.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
webpush.js
Resource
win11ltsc2024-20260706-en
Malware Config
Targets
-
- Target api.php
- Size 4KB
- SHA256 6b92b06bb71758795bf89cb7caec626b066c79b0f80173edb2f9ad220aa11046
- MD5 94393589a41e075773a52fc9347d2049
- SHA1 38e9ea890b6b51b20d00725bb7e12b2a097c740b
- SHA512 9e18f734a4f788e0ee6e9e75316bd486b941181adbd169bb196523db294da95ee00f171b54050b64ec0e0a1de37ced6fc360844eecf0f09a2ac214c53f263cb0
- SSDEEP 96:rDyaRWT1RJyCX4WpIrXBzxZ1Z4xcYNrVd7TwjERz861mayngekXxQesQ9r:r+iWZy0pITlJQRJdXlV80UruxJser
- TLSH T1CAA1103879E3952493B3F13D8BC2AC5C7B61407B02E28625BA8D32903FD4671CB38B16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target app.js
- Size 16KB
- SHA256 b6d72e08f8a23ce5c486f28a8e9c924a677d3d715863cda5f68203bcf1cfc920
- MD5 f82b27573bf4545943bdf6493aaac60e
- SHA1 8796df149fdf03eda45d4a1a59eaeb80898ddff9
- SHA512 df5f39429bcd3dfe4e608f389e685e0ce2664df18071790f9c5616097873ce73748731ed1a864c1ea7014041eb172e8a349bbe2514a3912f4bbde14a5f525878
- SSDEEP 384:rXlpw/Xr0MBXMmNISwuoXIKyALs5/2U799ZHcY:r1a/h8iISwuoXIoTY
- TLSH T10172413A22B704663163F17ECB8F66092A2570673246CE51365CBA082FDC524D6B9FFD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target icon.svg
- Size 691B
- SHA256 ddb8ce783bca79a71ba4232bc58702aa4b8fde0eb1a39e320a98313ef8cd016e
- MD5 4b62c5f00dc602fb57218a9ee9695111
- SHA1 45e29c659979e7b8c2d35cb75f54d1926d4728f6
- SHA512 b21d50c3610fde4b6c68357d4270a36181be0bd991c55ceea6f44cc375383c9d969b0a120b697b87b93869ebaea4fcd443f136d415907dac8e0a9a1e14a72d7b
- TLSH T13201A751E24C440DCB005B5E061C75F6302BF1D9976D0205FB44B99AAC2A5CBBC7B6DD
- MD5 SHA1 SHA512 TLSH
-
- Target index.html
- Size 4KB
- SHA256 f0568916dd2c3a6a584b696165da385be6544b38340e306569634df8f0e60c58
- MD5 020a545c61efaa3042db6c71dc83c62e
- SHA1 1a752fba5aa3638d537ad23857bcf17f128027c0
- SHA512 e58277078ef54cabc75116cd637e000dd255376aa8432e5baa1d967747baff56be6d8679d17a6624d866aa7342b0804274d0f7cd8fa3fcde8e2f475aadd37d14
- SSDEEP 96:LpJ5GBtv1S0EDBbYfgO+W5zvvsESRB+8YW:1Xu0bYfIW54ElW
- TLSH T10691EF7691F959B74122C1CAB5996B4A7CE2843BDE9A1601B2BC1BD50FE3C91F50F00B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score4/10 -
- Target notify.php
- Size 2KB
- SHA256 a850d49d6312f766b0eb328595dac4623af41d10ff4d9457b4ab221c4d275757
- MD5 7818163028ff30b1814ffffa9309284f
- SHA1 9ab604eb890bd430eae22b997975616e32d28d28
- SHA512 1e42052fc7962ed46a180f1a3b230d35da1653a3c4babafd0e81222dfd682ebdca0cf6392dffe3dd14a5516f5c892037eea80609b9285cbcee90c3d4ba5a5a86
- TLSH T12451424624E7D56D0256E03A4D12A88C3D63442B1E86FA027F7C9798BFC0735CA7D2AA
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target sw.js
- Size 2KB
- SHA256 29172a7ec13e8b658eb2913638bf646c374e62c32c28f8dca557ec4203dd99b8
- MD5 3a088b61d0beb6d7d1834c7362d08df0
- SHA1 8f2d562cb656da3f53791449c701ad8d7802f1c0
- SHA512 786e5a5273643001e6c83e737fb9625a9f967c557990402f53d07c9daf3b2c1124ddfccbdfb845313e514ce3e615246997941691a835f9a7c5240bcfc6b68436
- TLSH T1555122B567B900312222C21CD94AB50F2E17701237CF8D64F99C3B646FDD5A881F9AE9
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target webpush.php
- Size 7KB
- SHA256 b32cc0a2ae323678f83a72b8a22f324b70412e7beb8bafcdade005d29b38c247
- MD5 07c34b537154cae02a8ad76217464c98
- SHA1 69badac4f406fae5db573f6742215492d71b5bbd
- SHA512 a6a97c88aa190afebf89518112873d62754c07f8d6107fed753e2312b934f68fe7376d0a2968d1c2294df164d9bf2e0cd1d0c970220ac3b8885eecce5e0cf15d
- SSDEEP 192:G+nB3nJ1fGtC4HMzI1/z9mKkufsUJ8911NV94rD+Su:G2d2nMz68UJ89nce
- TLSH T168F16130380791113823E01EDB96E925A8A934173A5CD961FF5C71E82FDC13C9278BBE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.