60d51784e65f38d5835ce64b23b0be191df091da082f66e91defa5a4d83314ae

Sharing

Copy URL Twitter E-mail

General

Target
YOURLS-1.10.4.zip
Size 5.8MB
Sample260712-petxtabw3z
SHA256 60d51784e65f38d5835ce64b23b0be191df091da082f66e91defa5a4d83314ae
MD5 89d9ec601bec307a03a773d5b4409b6e
SHA1 3634411e6eb9d902eb3c1435df1cfe098432b806
SHA512 ad31575d19f785bc5880ef7d1cfbcb4c6019e2162e39886c171e61a307c0645427fc627fe9e5713185737d4103bbf817d4ffa2946935e4e086c68e194818f644
SSDEEP 98304:vkkd1/67mVJuhmUt2jnMVG66R9p+OEYY72X1k5e7mSldGllo7cvPlrHYDUUQ2UCt:vlB671FGb9p+LyH75MZYDUCUXfMBEtij
TLSH
T1FF562325CF64AB0AF5CD2379D80B9E52A3D9915081072C03C99D0E33FB6E7658D77E29
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  YOURLS-1.10.4/admin/index.php
- Size 12KB
- SHA256 cd18e9be53677c32b0a9f647b26bda80d4d2e553bf169be30c3bfaccdba22516
- MD5 37ed9681e5c61341632cfd23d83e9c41
- SHA1 e632eb7c97aaeaceb7768be557d570312be0ef98
- SHA512 a692452bd962e5f9658a60b1cdb63087d8a35a0e761a384f2d11691f7f7cbc291e7a253c929bdae11cc7e795f4279ab0e5f0c38ec489cca0c7863932b97296b2
- SSDEEP 192:A3IZxY4iZmcVpui36Uu61ldZe7SDnzmvTnzDaGE8TnebzKECUPNaiIg:AG24ith36UW7S+E8kPNaiIg
- TLSH
  T11242779DB4E7F53B4CA7F468AF99B95032A849037189BA4DBC8CC3C04FAD961C4B8754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  YOURLS-1.10.4/admin/plugins.php
- Size 6KB
- SHA256 e8cd320966ef6cbc3343dc4bb7fad9524925bae9f6ead361f73dfa218359aebc
- MD5 daa91399a02323c61b341cad0d6cb0f0
- SHA1 415397be4b89a89c953332aee60197c3b2668b2e
- SHA512 7f59795c6c3457e0a2789d9396c788d6e0837dc61f0d0126cf00a25fb45c985b902b89938dafa6626e603dd52238ba823347e8dae80297d6a95ef93369b7a5ff
- SSDEEP 192:u2pcpOZn5+SEn+9EyDyeocesc2CCizC3Gso1AcZYWRz:ib+aKyiW2CCioGP1AlWRz
- TLSH
  T195D1741AA0ED723B4037E87B12E59DD336CD92D76200F854BFAE06805F70BE588BB645
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  YOURLS-1.10.4/admin/tools.php
- Size 14KB
- SHA256 f7d8e97ff5ead432966a0414a44d26bec43fba2476ea953b0c3e054360c6742e
- MD5 a7a4832c9512d6af62c248fb5177b0b8
- SHA1 3ddee67f96dfaf357adb494fa4fff2e8bd3b5346
- SHA512 606cecafcce5fe96573fdf1b82f43a3a06f38dfc1e60e6f7419196db9783c245d533d1e98c3b9c479a0133409161c435da91188a5e2e45a2aed55c65f7b36e65
- SSDEEP 192:pi/olvob7n5nlztxD80L58pgqPU9x7KA9rmyjDAmcY:pi/olvoPb58q7K0rmyjDA7Y
- TLSH
  T18662B51FD2F1732EA066586B8BDB9E5418C1D847190868193A3C02C81F7CB6F4E7B3B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  YOURLS-1.10.4/images/accept.svg
- Size 1KB
- SHA256 6426e1ef770f7e4ff6e82c54ec5f11f3885adfd9da47e0ba003b0c8993fc8282
- MD5 c5c74dbb463bdfb293e4fec9b8b06d1a
- SHA1 171a3796e0dc6739caa150b95dd016cbecb691a8
- SHA512 3a076d38aa227b6ef81f190d5ea2831626471188f2c527e8dc09ff01c87539f86bd0e0003c7068a751f21d2dc0550e516cc77baa7454abb993484a479984671f
- TLSH
  T17A31BF89F1A758D6922C86502DE6A916C31AB0A3C2980D5ABDAC4470EF444C3F37E7DE
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral7 behavioral8
- Target
  YOURLS-1.10.4/images/asc.svg
- Size 1KB
- SHA256 edb15e837fa421629ee44640ace4235ba2cb6cd71e898bd0091a91b5c0ab2fc9
- MD5 6d7568ebd564e0b07878392fac409d19
- SHA1 7697383e103814d797261c44ef08a829371d382e
- SHA512 2699fcc04139491e675b82df022a5058b9135b337309c0cd11c4ebddcfa7e6d062378c8e8032222d161844c064803d049b78117ac6ed6c86ff4e7dd80ac47b70
- TLSH
  T1FE31CD95F1A748C6922CC6512DE6A916C31E70A386980D5ABDAC4470EF484C3B37E7DE
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral10 behavioral9
- Target
  YOURLS-1.10.4/images/bg.svg
- Size 1KB
- SHA256 6c601394389c1bb7d0d71a6f7c3b2fc21dccca61b47431f3e8f4085a588dc7f0
- MD5 bc251c363ad18bccda787481b8b4d94b
- SHA1 02f4af9294f8a90aef66149e8ffc75a6f27add61
- SHA512 4a19bfda695aa53746f11c139e0cd166ff677c2463d3048f5ae89379b0e67aa9a50aa9772d8fddbf5d89d150800c026eea99e966d092817c62ac52470c97f615
- TLSH
  T1ED31C096F6A758C6922C86502EE5A512C31EB0B387980D5ABDEC4470EF444C3B37B3DD
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  YOURLS-1.10.4/images/cancel.svg
- Size 1KB
- SHA256 dd7e7c4082e7503d06b2497145e03b8b9e2d20779dc4e90d58158e731113217e
- MD5 56f00c3c244d6d25d9b824a34f768041
- SHA1 a4db2b3827389e2653ecb501f7df226fe2932727
- SHA512 6508c0363f8e16fc022fea32a46130d11a380517521f1b9a492361d5a7bfcb148118a51205d16422df81b2d7da37076d6b7bef17400580cd065e213995fadcd0
- TLSH
  T1C931F29AF56658C9922C83502DE5A516C31FB0B782890C6A7EEC04B0DF494C2F77F7DA
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral13 behavioral14
- Target
  YOURLS-1.10.4/images/chart_bar.svg
- Size 1KB
- SHA256 4dc264b6c73da2bd14f8deec1d2bfd54b6b9314197d726504c1e75c8604d63e2
- MD5 4c5ed3f50c956a6d205abc2b6651bc5a
- SHA1 9c867180084dea14edb7e20cc4e568101b52908e
- SHA512 52634237c7cb2efe9a1f2528cef3ac388843f9c98acc20147a18e348b5a6718ac4c0a9223288590ca86ca66e7556bde19a080bbae8ab4e34e799e178af36aadd
- TLSH
  T14C31E085F1A358C6922C86513DE5B916C31970E3C3D80D5ABEAC5860EF444C2B37E3DE
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  YOURLS-1.10.4/images/chart_bar_add.svg
- Size 2KB
- SHA256 62c149df4ac53c832319225e9e909102f443ff8280f8df820578f6b0b9f93bc4
- MD5 f7245bc70cd59deab11e83b5d3204ddd
- SHA1 8742f97bcfb15cc62b039fc4a52dcc16734fb833
- SHA512 b6259579554a429434b681203be9b21b1a1d2887c9db21c73e35c26e06b956d8116ab0da14ab49ebf7af35df3e1bcceafe0d7bc8ecbbc454aadc66a29325ec7e
- TLSH
  T164514585F2A648C6812C85A03ED6BA1642197093439A0D5BBEDC4835DFC50C777BF7DD
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral17 behavioral18
- Target
  YOURLS-1.10.4/images/copy.svg
- Size 6KB
- SHA256 7ba104446c553f02b241964c7582823741a578fad9eb149afa784254eed22377
- MD5 9e49653312297fce6cae7a651a191eea
- SHA1 b13e565e9050fdd645973096a93be7ad3cf2a562
- SHA512 6bd52fa684ac710aac6172c7fa5de31cf9dadb761dcc0d034b62add54cc55892062ed49c369756a8aabbd9c74c92bc99bfa90b2da05f49638d15a6ba84bc09fd
- SSDEEP 96:VkoIanLXDzJYfLuEwmB3OaXnxHTYJ1CkYB8L9I32Q93a:Vk6GRB3OMxH+Mk5yz9K
- TLSH
  T1C9D1E892F36940C4316E0AA0BCB739527208A4D753159847F69E4C34EFD79E173AAB8E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral19 behavioral20
- Target
  YOURLS-1.10.4/images/delete.svg
- Size 1KB
- SHA256 8e4878f9c1bcc3cc4b8932c7d1501ce066fffe91ec3a55883ca2ba90e05d89fe
- MD5 810c702b83d4074c9ecaf9780a099d08
- SHA1 ba27d83fcf808500b4ff38bdcaa51990caeb7816
- SHA512 8c3f89fdff3d54d35b757531d3015ba5986cbaa00a3b43d25a475795af1eea4cdb8653077f128b4d33853aaea507208f06b6a3c888b1add15ad598d7ed00e238
- TLSH
  T15A41AB45F1A244DA922C82657CE6A509C21960538588497A79DC1C60FFC54D2B37B3DF
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral21 behavioral22
- Target
  YOURLS-1.10.4/images/desc.svg
- Size 1KB
- SHA256 baf55c58a1cdd952ec7aa8b944803918b3cf071c21a168efcc45fd37bdc1ebc3
- MD5 71826a4b58b2a5033dd98830b9a8f4cf
- SHA1 a4ae19111e60d1029fe070969cc901193ee9d2d6
- SHA512 55dfc26c6ba715052085c20aeb5fa43607ad765d7876006fced0ba453d563b88f66b57e1c5b3e39ebe22b90869ef681b37b5782b8fb653b9fd34286ef6b4de3a
- TLSH
  T1DC31AE96F1A748C6922CC2512DE5A516C31970E386980D5ABEAC5470EF444C3B37F7DD
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral23 behavioral24
- Target
  YOURLS-1.10.4/images/error.svg
- Size 1KB
- SHA256 8e60653c1add32984a73a7922df38ff85bf8c390828133683f6a20ed66707301
- MD5 62f74cc4b01f3d61a8b83799304d9cff
- SHA1 c67de05ac192bae806a0cd8d9685fe9f1b2b7a9f
- SHA512 cc18e30c03b25299fc20a70dc9e8121bd962caad539297448c9bc0a8ce066168302e1bf9b21fc068c213e95f0c87cee9a0326b030c181ddef736861b9aacac87
- TLSH
  T16F31CD85F1A658C6822CC6612DE5A916C31A70E382980D6ABDAC1860EF444C2F77F7D9
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral25 behavioral26
- Target
  YOURLS-1.10.4/images/facebook.svg
- Size 2KB
- SHA256 4df65c61b00ac5673220c1e970a1041a9aae62976548d3b9c9b0aded48678ad8
- MD5 dda396ee80580649feb65195106ea1ee
- SHA1 a71dc44077c16bd6adcc6be63d091f1459293dad
- SHA512 2acbc38fd4af9572c60180b8c0d52385a46e26ef81c03f400f6ee751d9745b1702eb923bb7cb6da00f94cb5dee695a10ec78800d2f940c2b55567231153451d4
- TLSH
  T1E841B9CDF56D08C9512CD9503FE2A606831A78A5838D0DB779F880B4FE502C2FBA97C9
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral27 behavioral28
- Target
  YOURLS-1.10.4/images/favicon.svg
- Size 6KB
- SHA256 da81854b677df36c965d6d49e6d3a9fcc5016ece5a0f42781b9a2855bb1f8058
- MD5 a4c05ab7236d050bca68906e68f98ac1
- SHA1 df213cf73e426ae0bbcb85d61fdccd7de5f38b01
- SHA512 4fc10cb831f78d187e1c0a0ad25bf388b05ccd49a46539f85eb7b38678d6947d865948014ff41be43c912df8506ce5646d867b21a91806453e73e3ce25b75ff2
- SSDEEP 96:VkoIanLDRX79+yhYfLJoMLHV3XDwLBB0PTbBTr3EDcRv8+H9H1v8Cbma:Vk8IyuVHkLmTbeQTr
- TLSH
  T15ED18141A39D90FC626F4A245CE774021B1E68B33311290A7DCD6870DF591E6E62BECA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral29 behavioral30
- Target
  YOURLS-1.10.4/images/filter.svg
- Size 1KB
- SHA256 58caba346a3257daa7c87fb0132dce8abb4578843f098a378277e12b88525f43
- MD5 2ec00e70dfbc9ac5e03409b844233c41
- SHA1 4f47f365cb6b933d93c9f6ce5ae332c8684e45a9
- SHA512 c1832b69261e5cc3a52dd312cd4b2797d642e3e14cef77a7c2ef943c89a35855dedcf2e9d93920af10545a2e16f8c97632e65c5a81f60f1b2887984e20ab598f
- TLSH
  T1DE411049F1A648C9921C86606DF6A612C71DB0A382A80D6A7DEC1470EF450C3F37FBD9
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32