80ac5dbe3e66590917f41bf0d73bf0eb79381ac237cf982bf6ed76816cf597f4

Sharing

Copy URL Twitter E-mail

General

Target
cgi-bin.zip
Size 3.9MB
Sample260713-w4e9aad18p
SHA256 80ac5dbe3e66590917f41bf0d73bf0eb79381ac237cf982bf6ed76816cf597f4
MD5 2571176ab77ec5e80465132bc142eef5
SHA1 b07d10b3273eb2d288f97cdbe3ff8a8fc3a068db
SHA512 ebe6e7d6f77152457933d9f0600e5f18587846d135591bdd2919135ccbad390a3e210fb7f3eac062fe4fbb66c2153abb0ba6b7cf581e00fe47926614000a94a3
SSDEEP 98304:DRKbEN4MBzmgff+R3z1KKqszc3dUHSRaSPuNA0i5:DwbxMVmMyjMlszc3+bC0i5
TLSH
T1F71633C62427FBB3C74D1132E0CEE99FD495ABEAC655C0196D3DB041CB7E11A3EA6212
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  Home.html
- Size 60KB
- SHA256 665744a16157ee3c17abae3bb5c26625996533e5cf74da6ed094f59196ffca27
- MD5 237046f0aead6ba2742be872e4edc00b
- SHA1 90a4bfa14bd675bd26f6e1c8de36cd624fbb4613
- SHA512 46b4e04d1221bf5e6d2c5694e654a9e1ad880d78e1902e2867bc15b68f1db743ae5e1dc4759cb8e45b3bd661b139a2cebeae2c7e4dc2d8ce7d962a72994eaf52
- SSDEEP 768:v4iMBzslOikahi6+mzidS9/LaWdy8km4VZQ1bZINKMFi7G86EZ:xMBg0ikahi6+6i3tbQ1brMFi7G86EZ
- TLSH
  T1E053F803537581BA314B64FDF51E36867B80E84BC7B79184F3ED8A208BC7DE61A2665C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  Marketing.html
- Size 60KB
- SHA256 e1789360f5d6c267fbb71aa9ba8d63944d47da7e0721b52bf5a4bd32ffd5b5f5
- MD5 6aa9db6e3f0c726b7cf904e70b9160c8
- SHA1 69e04a31aca33d39562d61226d0e32a2df56e941
- SHA512 67298cf16c32cd97ec84cd9b4fb335ef99c2b6d6f6e9e42d515b6d7244e56b92ef2b177928c35403561aff757b246944545ea5cc5e361b346cc7b5fcd3b97fc6
- SSDEEP 1536:YMcWAgQalTZEMM5fTBugQhKEEM8UJMz31C5SvP5:YMcWAFoTZEMM5fTgpmMPJMlvP5
- TLSH
  T15353C61243B100BB318797EDE6193A2A7F85EC97C7634584F3FE42A08FC7DC29A16558
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  consultation.html
- Size 36KB
- SHA256 c3cd42b4a8be6369b4a74f77c7d7e19590e2c4a5cf8c6c4f29e25cf718674e01
- MD5 6d050a84ab64e62f566da0b2c9324499
- SHA1 546d5a2b961e0f557890c1705398f747e7ca8579
- SHA512 ef5c5b2975eed80b2dd06a5264c118814d7f57d37239fc5e4399387ff0196030a33caf13cb3572b7ca97d74f43fcc03f9b741fc3605914ffe265219cac299e41
- SSDEEP 768:w4jMxMAdzj8LGFM4IEQrSnMTWD3M2tfiZZ:VMxMApjVFM4qsMTWLMSiZZ
- TLSH
  T109F2821252B201B6729395FAF118395BBF85ED87CBA35544F3AE43A04FCBDC28A2754C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  digithub.js
- Size 172KB
- SHA256 ae6ac475885a63acefebcced7c029dcd6a38b2f26e342364fb97e3c3c3cbfdfc
- MD5 1b9855c94f529f32addd0f98643268ff
- SHA1 78da96fe2854679506d7f8fe02b5a39a67f8b0e9
- SHA512 20a3cbaa3e47e9a7479b47a5898942600d66aff98da1b683f7ac1250af5334c3db98c9a4e733b0091836964aaf912a9a266fce2e19b926a2c804a0d673d881de
- SSDEEP 3072:0D06hPa0YBi4sg3YZq7kk2ys1c8HDJq5xEsn8:0DatI4z3Y8Js3E5u
- TLSH
  T14404178DF154707247D772F6812F5609B3322869A80680ADB57AD8E92D78D0A333BF7D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  images/beevy.svg
- Size 482B
- SHA256 88876c67276f7bf8832eb031a8bddc47b4ad62a3cdc19afc6c296b7ddc8b3fb5
- MD5 c6b8888433d3b9493329211dc67f004e
- SHA1 55ea78dfb6cdc692342f63fa60725494da03e92b
- SHA512 a286ca0f7a27b80082bdc35ec74c3643c1d2b5e5c1ecf68174e8a64642c1ebb9d9eda5bfa16a71a409770a8aa8404d0fd2dbec5c1516474dcde63cb900f3d23d
- TLSH
  T1C0F0BE65C30A40AA427D04882AA03F8123F4940FE1004B2CD8F988BF528AC533981EB8
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral10 behavioral9
- Target
  images/div holic.svg
- Size 618B
- SHA256 571050f9ff299384cbfde6e20d5bf635740e20ddff0f2e14c23acd1591b1c020
- MD5 e323736700c9c7572c0d73e8a00617f7
- SHA1 d63b7bbbfdc8bd15a6a669438235d8c02cecb5c9
- SHA512 838a82da2b80baa7c70499ff835bec21a2754fb7983ff30cf4508b2792ef47ec20f38e9755b03ef296fac90b8f7888aa3022b1eac633c745b507a977ce12b6c7
- TLSH
  T1C8F019A1CB0B40AA427D04D92AA13F8133F4981FE1404B2CA8F984FF6789C1339D1E78
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  images/gc academy.svg
- Size 648B
- SHA256 f0b732ded924b43034bcdc457b86df568ba3ed7b0c89a6344deb51b260ade1aa
- MD5 8af11e6464fb7850e821519c612708b0
- SHA1 e3b3cb26ea7dd3b0142f31be2b9ceae8383a6362
- SHA512 36c8488864c75b7fa15fc53ed9429c3c5e2eb5cc2115734dacaa3b68ceec475d7b7ae918dac394e39c58730540631f5170ccbb0ac3ab9e88a5a1f1de35930238
- TLSH
  T1BFF0BBB5C70B44AA527D04C92AA13F8133F4981FE1004B2CA8F994FF6789C133981E78
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral13 behavioral14
- Target
  images/good life.svg
- Size 618B
- SHA256 935a98d811daf13f7955ca053425f1a3084297bd2d6c25358a9e92d46c2e850f
- MD5 62e45dd38b31044ddfd8d9119271ebf4
- SHA1 2eac5d1c4556e3f3e1873887a50fc413ae5887e5
- SHA512 be3cbabd4aa01daf4a8552ecf377db0c04cdb1b48b0e0ca01ff905a7e2c6594deaf85c3fcb194007ab78ae1deff7341008360fea78f8248bfeff003c1c7c7ba5
- TLSH
  T124F0C9B1CB1B54AA52BD04C92AA03F8133F4985FE1404B2CA9FD94FF6789C533991E79
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  images/levers.svg
- Size 550B
- SHA256 8a5b19cb13ce9749c742fc8840cab964558609f8cc60188f5273f9d2050480f5
- MD5 cbb63bf65a48c820a6661b6afa5c1238
- SHA1 71f94a6f3e339ff2e070d900fd152adfd8bb8fb6
- SHA512 726fdebebbeb69caeb755186b8a55f1a6012d9629670416d05431c81734655ce2be7275969747b7a314452ef221009f569ebf439cb892c19ca7827444e8822f6
- TLSH
  T1FAF0F9A1871B90AA527D44D92AA13F8123F4981FE1404B2CA9F984BF6689C537981E78
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral17 behavioral18
- Target
  images/new capital guide.svg
- Size 889B
- SHA256 17fdba04fe19621917650ddc03d75a0c484f8a5beab93327fa86d470b8c8198d
- MD5 bb52b1df5de91f2c859d5dd19343967c
- SHA1 d19682fb18165516987e4ecc1255b34585ac4633
- SHA512 9afa2fab2a72d5df71add26d55487c84718b0e2045ef7a4d9adf52d01850f8252e04e632bd0d6a3f0df3176d8dbcf8b143297b056766f04d4c786cc9e6fb279c
- TLSH
  T1B01199A1CB0B41AA52BE44C91AA03F4133F5981FE1404B2CE8FD84FF6389C1639D2E78
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral19 behavioral20
- Target
  images/nfrmart.svg
- Size 550B
- SHA256 f4ff7dfad632ca9d9ef1791932f847a831ca5f0dcfe27d9aabac7f53c3d16569
- MD5 c1b3aab5dd827cde0dbd998e935b6ccc
- SHA1 993e98a766509e573f822222273d5bc6ed4bbaa2
- SHA512 fb61b440936ad93242d136a4581258d739a3f80b71cedc23221b555121c82fbf6f7438cc2489965d39add4801b090cbe9f236786fe5984f4f6f0896abe99ae3f
- TLSH
  T1F1F01DB4C70B40AA52BD44D92AA13F8533F4940FE1444B6CE9FA84BF6789C533991EBD
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral21 behavioral22
- Target
  images/qpedia.svg
- Size 514B
- SHA256 73a81cb7fd520a379a9a4b1af4fb48e3061d9008f289aecce9071b3bcd90832b
- MD5 fcbb0f68d9b263b844c97e7ce04887e0
- SHA1 6932aa50d8e6116ef4e248a9483f76d3a12ae635
- SHA512 6ef7f62f13aaa2181220444e00d668d65cab89003374e2e6e10bcaf936c860701633efa10bcdd389a1a9ef7f26e56b08fe3d36238b6c38f134c829e21329e0b4
- TLSH
  T10AF03061C70B85A9527D04D92AA03F8533F4A81FE1404B2CE8F984FF578AC173991E7C
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral23 behavioral24
- Target
  images/rea.svg
- Size 414B
- SHA256 05f47762c09573f67d009c35a6f7c89d613e8d0ad0d266d08d23ce22c84ec6a5
- MD5 883e4932d4865ce57aba5e631362ca43
- SHA1 3cdc2a34c7e8d07cc1652028ad4473aad5e53cfe
- SHA512 2f00a0c793cbf576c1972d977cfeb80ad5e3686a779d95343da95d9f83e95d1fa755d5e9b8a204f4a00800d8c66fe41075993fe6f16fe57d726f49f866ffec8c
- TLSH
  T19DE0E560C20A5459526844857EE13FD123F5940FE100476CD6F5847E5686C5336C1ABD
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral25 behavioral26
- Target
  images/shohna.svg
- Size 514B
- SHA256 d74b548738faeec48fbdc82681b8281ec88be9242c0f46010ac6e2f8b5d81e97
- MD5 d8fd8b2ca5ab298520190b14369ebf6d
- SHA1 5e2393fc1667a73068904752cc6499c63d45c11c
- SHA512 83f0d870eb79968b070d4cc725999854c62b04cced3781e6c6ea59d75255c66ccc5e4577abdd154a94b8bc263f455a649529e38c5206f87f88684108ac8c5cbd
- TLSH
  T156F090B1C70B809A52BD44D92AA13FD133F4940FE1004B6CA8F984BF5785C133991A78
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral27 behavioral28
- Target
  images/smld group.svg
- Size 652B
- SHA256 b7ff1ea7dac07782249a54214cbe133a3e0d97ad5ec07a3f6cdb2f71010aa59e
- MD5 2a04fc4f6441a6e6fc65ce9782ed50b4
- SHA1 3b1cbf11aafb5638c77b4a7c194fb40397cb9247
- SHA512 a19dfc350c37cd104e5781240f89405c96fde8152d02b7138c292dde3e250733843a1ad81feff94c29d9b9ba1d1f897bafd37e7293ca1bbb21e88f6bfd4b9da9
- TLSH
  T1C4F0FBA5870B44AA527D44C92AA03F8133F4981FE1004B2CA9FD84FF67C9C133982D7C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral29 behavioral30
- Target
  images/wooqers.svg
- Size 550B
- SHA256 9ac1c82cba4148f7cfd4017db0c70c68e72c16e8e4f4c39925675be06251c762
- MD5 c73c7cb6e4028cf4b07df7cb21189af5
- SHA1 8034c6bdf3f5d0fe1ab039e81b093d4721a632f1
- SHA512 fe63d84b784019cb7f1999fe6ef27f832c2f2eaea8b7f33e900d1c82406cee02f1ba74fee8bdbf4a4bdd4fe3cf89f1a912f8bb951d19b2875ab4c2295032809b
- TLSH
  T155F030A1C70B54AA527D44D92AA03F8133F4941FE1004B7CA9F984BF67C9C533981E7C
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32