83f1dbc050989a916aaf9960337e098d2d2573b702a16e3072ae830c4c9779bb

Sharing

Copy URL Twitter E-mail

General

Target
DHZ3CI2022.zip
Size 1.1MB
Sample260711-ahxesaaz5v
SHA256 83f1dbc050989a916aaf9960337e098d2d2573b702a16e3072ae830c4c9779bb
MD5 2202f5570f7f8e552342be526a378f93
SHA1 426d52fc1729025f954cdcb0c1f14f39effeb579
SHA512 76b9678ca7be4d9294db48f1716a1dbac9c3b08f1e6724d232e02ce380b8843f4b081b84cfa8b4fb099470f0052528ee077c2019dcfab20d3b905b20f7a5d2af
SSDEEP 24576:nM9L2CaeaqoOGkSwjRtFehSLrPDN1K9pydRoDdmOoFWuO80Sgq:nM9L2ya1aghSLrDNipyfopyFxOpq
TLSH
T10835233EA1642D1DDA1C643764AC811165FEC1BFC33AE58F1CAC4E76CB36042AAF55AC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  DHZ3CI2022/DHH/dhl/files/fonts/flat-ui-icons-regular.svg
- Size 18KB
- SHA256 e13f2778dfc4caf1fabd4c64afa9a296caf50a1f8688b85612fe6cf864c7e0d1
- MD5 4d7e561a51cc211cffc364643e0a2258
- SHA1 95f8719cee93530ae5e31e2373e9fa041c88ca64
- SHA512 6c3be2e592fc4c0582295238ee05c4c4670a2a5a3ae188c6a50390ede662cc792059bf8177196ab276bef7be050952854ca6c9a8dddb569b0ee7576c19cf358a
- SSDEEP 384:TLaJ/kg07UqLJKoXKXPHB46TBdibV74BDf5Q7zBTE:TLaFkg07mo6hTBdibK9QRTE
- TLSH
  T16A82C8B7A33F55FDA282FF0975F02311393E195E3F7C55A0DA05273A091A18A84A8ED6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral1 behavioral2
- Target
  DHZ3CI2022/DHH/dhl/files/img/arrow.svg
- Size 311B
- SHA256 d8748acb2eead2bb284ccec7029faaa404c1f2bda9cbeae2d777b9033e473a9d
- MD5 bf74c2d1662a63c8d94a749fc1a43de1
- SHA1 ee52ec790106e30c1ebb94dd04d672436a38ec08
- SHA512 c50e80d61b36842d1e1edc3dc5eab334eadc503fe8c2fe94fd0709ad91b1badcad2ababe840b03f9025f7629e143b460a7ac37cfb888a641ab548020827c10a9
- TLSH
  T1DAE0267C413B560C83174678E32245E5221EE0D4B001C090695F2131203A44AE0DB8A8
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral3 behavioral4
- Target
  DHZ3CI2022/DHH/dhl/files/img/dhl-logo.svg
- Size 1KB
- SHA256 362bcaa42090e36611031bec6bdaa0600375ef847092cca195c58d3bae9b4419
- MD5 3fecc9db35d5d2a9e6e71ab4b02d22e5
- SHA1 628ba2f505b480097445aaf08649a08242bd6847
- SHA512 c0d70d0f914d3d9f29366c9886f174580675334ec79ba77158c4cf184075540dd7d25b3f35f7129c1fae764527574daec29f5fb8434817ccbef6951b332cdd5e
- TLSH
  T190317C570394E6EA9D018740473C52D922D1E9AFC87064C8A9F33C27EB4CC5848B86D7
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  DHZ3CI2022/DHH/dhl/files/img/facebook-new.svg
- Size 1KB
- SHA256 43027752f5a04142e6518a4fd8ef54e7e73cfba7820da9c03c1ad38835f04fe2
- MD5 259d8928a7fd5329b3d7fd80eca2ea2f
- SHA1 a6337de5ff5761b39a319cd7ec3f8b10f201d066
- SHA512 0f2ccd1de7d98434e1a4c76d4d6f4ff64107f6a40e9ff849401ed226acf93344e4af7d0544b10b763bbdc42d31014685b036b55c1c90971e4234b51f139575a7
- TLSH
  T1AD21E0F803C84DB60201752A92943FE33E915CBB3984D00CD9F69491FA159B745B5787
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral7 behavioral8
- Target
  DHZ3CI2022/DHH/dhl/files/img/glo-footer-logo.svg
- Size 11KB
- SHA256 5162de2ee844a80d76b7d7514c02ab7d5de72a5966113323d80eb56bf6ded038
- MD5 d1b0e043744fd642282117a03d308b17
- SHA1 d8abe7a0887b804e516c45a344c542e291a1a84b
- SHA512 cb1fe08ae27d8d9203bcb110287cd73d478f4b6bdbf83353867a156e56ab86a1edcc9c28ef3b8dab48568abdcf2f1529b2b1c9c1ed031abf778783af3a0cfbb2
- SSDEEP 192:lSEQBzaQwAkRlXqYz2AJ72o8hya55PUiaabxle:lSlVwAMT2Ah2oXat+
- TLSH
  T1D23253D161F4624C4ECE969DFF7C90D49E0553EBA3E619C2718D4B60BF478AABE02C60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral10 behavioral9
- Target
  DHZ3CI2022/DHH/dhl/files/img/glo.svg
- Size 1KB
- SHA256 7b7e4adb65aa53b1bc731f15511c53d5beb73f187d5c5f35f19ebbfaf0decbbd
- MD5 2675cbe725f294695cebc4a0aaa74505
- SHA1 79f51edb2edae65bc9247438206c09b13512c2db
- SHA512 9047543753f5b1ddb6b1b511b7b075a01ee05d9d43d6e0fccb73e37e9cfc2d76bca817104a983f1ce7d8f306d281640b7dd8674286e4c09587f97c1990aba6d3
- TLSH
  T1BF11D0024384D81DAD040655A7A458597360E9CBA175F9C8FEEB18B7E6AC0C4D98D7E4
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  DHZ3CI2022/DHH/dhl/files/img/ico2.svg
- Size 2KB
- SHA256 e9afb18f5022f01c0c34078dbcdb65f4c7f3e63061e30c57c48554ae45495fa1
- MD5 1547d00ce898b8303105e0db88e28c0c
- SHA1 37700fddf5f1c746568a19123880f0887c63ea02
- SHA512 ec06f06bada2b03e754a77d58143600beea5dd6745cbc3c97c45fcf04bc09299773b4b14af8ea4418e345d6df913c0dd466bfc4a4228a5805b1e8970d89fa5fc
- TLSH
  T1D641E28A4258B5BE6C2086C89B7A4DD771E564ABC114E1D07CFB3C23AE5DCD008A9191
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral13 behavioral14
- Target
  DHZ3CI2022/DHH/dhl/files/img/ico3.svg
- Size 865B
- SHA256 221b3ef115664191a95becef8b18b71a9def577e01206ed2cb89775e915303c3
- MD5 abd6da31b4974c86f62cb3b1492c8043
- SHA1 21d3b74e0f661a695b75036dd289ba0b4781bf29
- SHA512 0890d3861b1818a9784a923b6b5253530db8b9a558820ca95890a2240a9e5504b0442a50d33aa0d605f417fd5478c567521a37a9cee1d3091ea60d2f9834b04d
- TLSH
  T1E11156C4B7A452DC1913EA661D3DB0D17F0ED2F176D1C5626EAFB79206012E5D047811
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  DHZ3CI2022/DHH/dhl/files/img/instagram-new.svg
- Size 4KB
- SHA256 f01c2e1870fcd75ceca3b4c42c3110cb0aa4b933b562cf3d2c7ddd20ce03c7ee
- MD5 056511aeb5282ecaab9fbf10ed2273e5
- SHA1 fc29c2c37c4b4a31ad13e80356371e338aef5894
- SHA512 c758606b6749103990368038c74aec1822442cb097d159400286992997106f24653fe740acaca91a9aef52e671019c7295af7d14e64502bbf125383e3c140615
- SSDEEP 96:00s7QepJtXJ8o7QZGdUo+AsfPiQ81PY5EEoyY:js7jJSo7RUol4P+1Q6EoyY
- TLSH
  T12D9177F0031CD5FCB1024AFFB9A5C0C2ABA61CD1BFA0C049D4DD799969230E909699AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral17 behavioral18
- Target
  DHZ3CI2022/DHH/dhl/files/img/linkedIn-new.svg
- Size 1KB
- SHA256 c32f1a0f5b093b6b2c8f5df0bf93856359769ee6bbab40975043cd133711d528
- MD5 43efff953a2a3baf6a2ef0528f55dc07
- SHA1 b510bc0512da7d96cdf29a0f1e343319095776de
- SHA512 888d52ed5ae93f30c13e13bb6d561d51e4437754158c71f0a2fdf58fde4d1c0786f00887e0849832e9d709a9a34731ed3961b2a8754b3db3573ca0c0fe9f971a
- TLSH
  T1B73118B117590F6EA700C29EF3783839BC6810967E408964D5D5247F7E1E4F70697927
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral19 behavioral20
- Target
  DHZ3CI2022/DHH/dhl/files/img/mst_p.svg
- Size 10KB
- SHA256 bdd8021a19b4ebaabe1fa41fa9b4db34f53d5e8afe0b01bb37fbb65ee24760f0
- MD5 2e27f5d819b1a7774f5283763b63441f
- SHA1 39f61cebf3874fde03c453876b58ba2108bfcd51
- SHA512 809162f9dc698b181795a887f00553aedd902cbff328a106e0f2a04c65557e733469aed5c3a0a01dd4ce12d347b3874b78b90aeafcaea4d4cd9b6898a4e65a01
- SSDEEP 192:WQAHBDhnHuIRJf0ptea7hvcdPne9goIh7yAbS8qi3c+k/sC72pdE:WQAH1hnHuIRJf0nJlvcpeSF2M53c3J7x
- TLSH
  T1A9329585733DA3F8A8940B7A8AB026933BBEE49E7831C288D35575772D46BD57078D30
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral21 behavioral22
- Target
  DHZ3CI2022/DHH/dhl/files/img/vsa_p.svg
- Size 6KB
- SHA256 e34473fa42a54330c804c49ad6e38f7cb05b59f3d00cb2a64873af2a7d072f8f
- MD5 997637edbf31a313d50f80ea7f490e61
- SHA1 d1bb656fdcfb9885a77c03f76cb7c23b8739fbb6
- SHA512 8a528f635259bb59ef9aad7c8b8c6252498d839122138e0aaac57b1411c3320b1864b5500cca94ad5013e3748d0d5c1875a6a9e2ad9d27059087dddd9bc3ebb0
- SSDEEP 192:dkWtTC4x1sKiL0VXZSUT3YkrvrF7Jy4LjvkFShAc:+WdD1sVL0VXZSUT3BrvrF7Jy4LjvkFi5
- TLSH
  T11AE15456D23844E8D10E12F1EDF11619721578A3E2500E24BBED94B1AF3B9D0B75CF9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral23 behavioral24
- Target
  DHZ3CI2022/DHH/dhl/files/img/youtube-new.svg
- Size 1KB
- SHA256 acd3eaf2b608fb48f9915964c36772b322ad91106508c4490e2a72122db4d347
- MD5 376247a0b06e705c758fe04978ea9df5
- SHA1 90d50c682c2ea23a9d26926c6eb3d849b7b94661
- SHA512 ec36520287fb862e212ee66b895bed8b39b41136df8155ccf8a591ec3ec9c8851cb931127f83b411a4205485849454411fe33c292895546f4ece88bd346682fb
- TLSH
  T1AC2169E413E596D5F080C13C52B8B621FAB576CAE8B04830E4ED19D6261F4FF5A2974A
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral25 behavioral26
- Target
  DHZ3CI2022/DHH/dhl/files/js/jquery-3.6.0.js
- Size 281KB
- SHA256 1fe2bb5390a75e5d61e72c107cab528fc3c29a837d69aab7d200e1dbb5dcd239
- MD5 2849239b95f5a9a2aea3f6ed9420bb88
- SHA1 af32f706407ab08f800c5e697cce92466e735847
- SHA512 9ffe201d6ddab4cdd0a9171b0a7e9ec26a7170b00719a0e3a4406ee3165de3b3745b6a10fbaabba1cdcf5ecb6b2585dc6cd535387750d53ee900ffa08b962ef2
- SSDEEP 6144:rJshNVlG+TCtlFhTzeKpzcYmD2zK8E1JEjPx+WK+978FyW48L/dCaYeNzIPfTvI4:HjzcYmD4Y0Px+WK+978FyMhr+PfcA+up
- TLSH
  T19154A3D9F78D112E423231AAAC2E12CDB77CD171560458AEFD4D597C24A083D83BAF7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  DHZ3CI2022/DHH/dhl/files/js/jquery.ccvalid.js
- Size 7KB
- SHA256 ca83477931d09aca84c55e779bb2e6ef502b1af1bef668de771b8209a43eb11b
- MD5 2f24b339e94eb18fdfd5cd5a60e82546
- SHA1 2abf52df7041eac55e0f59bf867053d4cb29891a
- SHA512 2f7d845049efd0b09eb757f4dd37396d1d46670cc4abaf6739e5c87955c5cdf959579199797466f6397a4da71bcc82d77d9a82ec80fdf96d7104d43b88db3478
- SSDEEP 192:ApEqFsy5wEq/DSUx0oTYpOiaZfsmvNNiV0UV9QRVjiwSyRabjsafHEaoJ:J0WNkpO
- TLSH
  T127E1DC9CBAF331945913BABA0BFF5503A4788447510CE946BE1C63605F90B7C52F9BD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  DHZ3CI2022/DHH/dhl/files/js/jquery.js
- Size 84KB
- SHA256 8603b20b548270423fb03c2138c16f5f863ead4c48eb0999167df869e2eef8a6
- MD5 af4078402c5e090d3f81d1abd71e2250
- SHA1 9592732de681f4365e9b7016dc5cf76e2a55ee9b
- SHA512 eca4b61514cbeef0379a6dbe613df3ffce2f7dbf87a985b3223e6d785adebca6ac8447f2d34c55dd763a0a978b7b1c4cdf0bf62fc42429eb37c12897793fe8a9
- SSDEEP 1536:+LiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6tv:qkn6x2xe9NK6nC6N
- TLSH
  T1F98309DD72C6B06247AB71BA00BF550BF2361999684D4410F129E4EABC74B4E823BF7D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32