d598e3cd476f57b3833a5659ea0bab841e0bb897b89792e9d4a91a9d33f26819

Sharing

Copy URL Twitter E-mail

General

Target
Flay method.zip
Size 11.5MB
Sample260714-anmgrsdt4y
SHA256 d598e3cd476f57b3833a5659ea0bab841e0bb897b89792e9d4a91a9d33f26819
MD5 0dddfec346a8997a20a742e09c0d8455
SHA1 0b2f34146a7af4f27681c7f4984404725f67148f
SHA512 41804f88428f82ef5305fdf80642ad7cea50d0dbaf424b2f0ab11f326e3f906318fa70d00a437327dbec409db245514b46eb5e94ccc2388aaacb8fddfdccc676
SSDEEP 196608:7HyyA7poB30ZmMb9f4zqAwIsMxAhRUgdL6gFjnGVnWiiN7OE3S479LFII0cZn2E:mFoJ6h4zqAUfMgdTjGZWJ7OE3r9L6I0q
TLSH
T167C633A0EF76A2C23591AA35E07DCED52FAF8A589893D5079DF0020F3E7FAE0B545414
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Targets

- Target
  Flay method.zip
- Size 11.5MB
- SHA256 d598e3cd476f57b3833a5659ea0bab841e0bb897b89792e9d4a91a9d33f26819
- MD5 0dddfec346a8997a20a742e09c0d8455
- SHA1 0b2f34146a7af4f27681c7f4984404725f67148f
- SHA512 41804f88428f82ef5305fdf80642ad7cea50d0dbaf424b2f0ab11f326e3f906318fa70d00a437327dbec409db245514b46eb5e94ccc2388aaacb8fddfdccc676
- SSDEEP 196608:7HyyA7poB30ZmMb9f4zqAwIsMxAhRUgdL6gFjnGVnWiiN7OE3S479LFII0cZn2E:mFoJ6h4zqAUfMgdTjGZWJ7OE3r9L6I0q
- TLSH
  T167C633A0EF76A2C23591AA35E07DCED52FAF8A589893D5079DF0020F3E7FAE0B545414
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  814.ffmpeg.js
- Size 2KB
- SHA256 39a26b1d35eaa2e45bb283b1b8a6e71718771f3b92876e0fa033f491deb0784e
- MD5 a510fae8fdee9cca0413b3b868755d60
- SHA1 a9e008cbedeb4e5bb17305388fbe53eb826a4f71
- SHA512 c211c90c375c581f9b50dbdf486d086313f65ec1f1bd1da6b4b746e7f8d38bb48dfcea417ff3cb3a9ba4cd4421924a98ee101f586e5b5c5906029f5ef33c1d18
- TLSH
  T18B51A88856B246E4032EC2B1E76E51B66C66C8FC9A0F4811719BCF39853C4C319BDF94
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  assets/flaylogo.gif
- Size 1.6MB
- SHA256 401fa34c3cbe0bced2849181aa493b41bc32225ed332cef65563850df5c62cf1
- MD5 2327c664536ed93d589b7944b4ee889b
- SHA1 e8347c814a9037da7063edb84a7f4b9bb46958fc
- SHA512 d00da6740d48ddb01f6837695a181f1361b5a68c572fa4ece1b7865e68aa7c1122ddd6e2a0d3f1d1f0f07443fd8120b8f75e4e6d1519bd215616b9e523b60252
- SSDEEP 49152:Y48gbZl2Jj9H5SX1tX+K3eS0s1+qfJj6w:3ZwJjDSXuKzdfZ6w
- TLSH
  T1907533EF821D8E819B3FA38D9C003400E5D19A09BAAC71A27CB5BC1255D5AD31FF6677
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  background.js
- Size 153B
- SHA256 261e467f799ab2f1ec872ef72e178a38856491fc5deca50cb0635a20c3f46013
- MD5 650711497868b1ea5896e91fadc7db38
- SHA1 9b23c5e6bb001fe02805a77ddc794ac31e0b49ce
- SHA512 4bb741a8e964abaecbd4022e9773ac72a3d15fd41c76a3d0fa29d13c9fa3d6961fcfd03f12815448282ae9ce3df96691c8333895a9061f36917d9d5c1393430c
- TLSH
  T118C02B494FE910BC3053834B2A32C32B3B0C023A00DABF211EFCABF513E0A3A0017126
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  core.js
- Size 15KB
- SHA256 4f984d6f88bfdbfe78c4c59c461c0baeff21dbaf83317d139270d9013b7c2b0b
- MD5 b20d16d3dada8a91a862e8d1723033dc
- SHA1 bcee6d56193d4aa612ce8e0a11403df308674ea9
- SHA512 b3b9a4409c0390ceef93cbd1ca6f6273475840963dd7380086d5c5af7b7d2fcb5ba747f418488db7df4b2ff4ae3f7898537b5e73ae293f36e4d01ff6bb58de70
- SSDEEP 384:M88rbBHhx3blJRV/qSpCYZ6ct9iv/3GOfMo:M88rbBHhHJ+SiO1o
- TLSH
  T1C56274ED1AA5A0260333707637DB982D67396417391ADA65BB4C83203F81961D7F3FE8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  ffmpeg-core.js
- Size 112KB
- SHA256 14ba8dc45e71634ceed3bb4e16f63ad34edef34101e751aeda5d7e2155617da6
- MD5 7eb408858bd0f2e77817fda299b40be3
- SHA1 a6221e60c289453c13ca32cd90ee6cb491e4c41f
- SHA512 c5a01b96cdd081eec35c73b36ba27afd4a64fd62bad658de31029a343bc2f75160d60ef23872b854ded8f6f3f7d74d599aefeecd873ddfd0ecad3d591ef5b9b0
- SSDEEP 3072:hZ3AqXOi7bh2Lwu5Rq24iFSOLCBalLoYstf:hZ3AAduL4o3QalLoYstf
- TLSH
  T13EB33C8479B930B687D67B78646F160AF2B59C63495C8008DA5DECE028B4F19E83FF5C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  ffmpeg-core.wasm
- Size 30.6MB
- SHA256 2390efa7fb66e7e42dbae15427571a5ffc96b829480904c30f471f0a78967f61
- MD5 895cb9ab6b2455190b57774348a9dda5
- SHA1 21dc9205b471d8f6684fa71bc87d4b05c192eefd
- SHA512 746b0607acce6306c88c11b7cc7c049c773b03e44bb9c0085f06d7abde975f98c8416195574491428e08d895840acd4a62dcc554f4932b2cbdf17090af797ce5
- SSDEEP 786432:phnniSJlkIbb2GNJ4MPP6aBtsQjjkgzzFztqPqNqzqFqPq1qbqdqvq9qDqlqPqc2:phnniSJlkIbb2GNJ4MPP6aBtsQjjkgz9
- TLSH
  T14A673943F20A5D67F8154272B68FD6B16B938DD4B0A0726A575D39EB3CFF8B01806B60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral13 behavioral14
- Target
  ffmpeg.js
- Size 3KB
- SHA256 42500ae32dedfb34b68c4731dde8f18ee45af631e69bb1144d461f20f64e0956
- MD5 604badfee128bbbf7af34583ab095716
- SHA1 b285c1adb6a0a6b440f66355ac77f30b33fd27ae
- SHA512 dc63e0f4f3309b6231bf5ff4b09ab92e58c081604c4e656cd122f620bfb06684dc5fabfddf62cb792bd038d51bf550452f53bfd32ed093a23839d2ad52fc6402
- TLSH
  T1BF8195A23650C420311E8372FE2D02B779623935C685046D729BDEFE8967CC518A2EFD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  logo.png
- Size 204KB
- SHA256 c28d8c435c02cb904ad3b0fb06e65deb1d8fd3988fefac5ae33e09b0004d6b3e
- MD5 ba4aecb9626f4d167631758d9f6a5c40
- SHA1 e875983ebced348a7e44bff6bc87d2a63740656c
- SHA512 c91974ea71dcb32c901693ec00437d16d0acc8d5b3a43649fd8a91cd318224d90b91b05398babb7a682e7f21ef64c0baab7af087e88c3ebba8a50ce9618cdf94
- SSDEEP 6144:al0Psl6r+N+TepuPZ9yqlhXHU7d0D7S88b+FYQ3:a5ls/TeUZlDOdeOb+i0
- TLSH
  T1CA1412FAA5310D94DF430ABFA1AD6183137930FA34916CF48A14868D6E77D3AB89F610
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  manifest.json
- Size 702B
- SHA256 b0d9ee1cb480c0f0700e376c00a060645dde13500c159cbd61dab771e62ed0aa
- MD5 0981806c7e194091d8f06dc3429fbe75
- SHA1 f8ed5b00a0c3608501b528106cd07f598fca2235
- SHA512 258f7e84228a291575f608651296686084c33899390519836727e0c7f3f14dc33e81335e9def8097cd1c1892d8cdb2c73936761fe93f40471e57d6b5141f5dad
- TLSH
  T14A014C59C86C486341DCD9245C772A44E1241A4BAA447C3D7AEE50EC8F9C67F49FD788
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral19 behavioral20
- Target
  popup.html
- Size 10KB
- SHA256 0a53dcee1d29f5876aee0239c6905add970f1feca2c7395ba18bf1e9161048b0
- MD5 75e07701561af5f671c9399768f5b8ee
- SHA1 03f0e6adc6ce76d82441cbbd0553a947aa97006e
- SHA512 f6c81278edc984ce5c1ff8925670f8e593df9aee36d949ee6416efb32d273ce85286ad28d7b770c7fcdff75f43fdef082f32a6cf3b19f40e5b5d243ceb9392fa
- SSDEEP 192:jJe2QMIj9uhwsccsgr4g/ahiAWB6aBDsZL97IYT0b4peG9Qr5lg60N2T/ZWeGp:0F2wsB91KTREp5dpa
- TLSH
  T1AD22522166E51224309782D53AD39B5F33B8D503E10FD53C76EB2194CFCEAEDC996285
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  popup.js
- Size 12KB
- SHA256 c72a572f981b4f829b5c4442f824f8d5bbc5b3d1e18c0a5a4f983af964ff085f
- MD5 d60fa3af07267b068e2701ce327c6abc
- SHA1 7f7decdfe4da01ee4c8cb641c7d8a1579385e8d6
- SHA512 aa176697e4dd0ba53b0ca89628b6c765934c795b64064a8e4f7c5e28b6169aabbda02734a9028bb5f9c7606eab78997a9ded04b00214a18d930357da7f745570
- SSDEEP 192:72HOcQWS8hVzhNYKVhAJshH6tJbe9yTMeWOFx+jUUNJ5MLVjWBzh/YedAj:7aSy3PLh/HUJKPKFx+bNZ9h0
- TLSH
  T14C42D7156EBB153501BF706E639B634937201003360ECE557ADCC390DFC1A98AAF6BD9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24