9cf6c330f33da2c686d24e903e9ee62c65bc201e338413ac87aa7f765a1a409a

Sharing

Copy URL Twitter E-mail

General

Target
coffee-cms-26.07.zip
Size 2.4MB
Sample260717-wpjm6ads6t
SHA256 9cf6c330f33da2c686d24e903e9ee62c65bc201e338413ac87aa7f765a1a409a
MD5 5b525b0f499986fdc46602c2b48f062c
SHA1 730a5852143f68b489bb20211830617dff4f2ab6
SHA512 0eff245b94ba5e77de16e81d6f933760b967e7ab7cd5e76e5c1315ebb6f811d6c186f5b1d999526192c968d3994633b74b7ede43ae6e09441610944e6c4c7e87
SSDEEP 49152:EX+ekHVtffOOeBf8Gif31REWRltAGShGjGTCS1G8/qafeOO/lyH:XVtffNeOG83FtksaCSDSOO/E
TLSH
T1ACB512E6E82D764AFB4FA2B05643350AE03CA167A65333C7BD3C439129794C64B0676F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  .agents/rules/coffee-cms-module-developer.md
- Size 22KB
- SHA256 ef481c08a74196623057f83c9751bb0760726111416374d9727ce4d4285b22a4
- MD5 7838bca528dcde4a5e826d7b5fe16763
- SHA1 743abc0b744addfb39cd6d224abd057959b7dea3
- SHA512 a2021c9f92ae869929e1110a018124543c5d9d81242937f7d7c578db03176cb08130e45b72b7b6f3feac6514feeb162ea23276a41e9389feac1f2047c40d1bc0
- SSDEEP 384:1jnBGuaDkOo4OefyHfMsPNuvod5AsppJK+uUGgxiM6U/:JnBGu9OYtH9PNtd5AsppJK+uULxiw
- TLSH
  T184A2316414FA50AA1016B816DD08B9083CA641FF3B5AA726396D3DBE3FE1538C7BD74C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  .cms/.widgets/footer_pager.html
- Size 242B
- SHA256 b4a2c1a1b788d2e7a1d624a8838934da2777ec0845d1c409265d723700d59790
- MD5 77c26f95c96488090e9e33d81c900673
- SHA1 2c49048c02602261c72cc95b5598a5cdbeacd3ab
- SHA512 e0dd8878b685058251d8607a198d59d7d66f26afbd5deaf5423c1f41d56f7bca0f865b58466d4b91c32e80de50cb93a5c1086e9614407de484be4fe59448ab70
- TLSH
  T1B7D0A73010F284734872E4E0A5A91B8B3C658527C10341213AEE026C0FFA802A837100
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  .cms/.widgets/search_widget.html
- Size 322B
- SHA256 322b93be20feaf7ec25a537b32e323ea0d1ba0eea0e0eea7712c0684173aef5e
- MD5 4d1d37e9c6ec9e72dc26579c7fc607f4
- SHA1 e1d12e0ff1fe75c6bd3252a05429ad4503546563
- SHA512 b8c127b73b58338eaefa143c95a0313e1172ab25cd507938360e90561d3ca285979cb896b117730f7ddf7ce48a27a690fca24a6eaf167bb25e9f78f6aeb886df
- TLSH
  T171E02B0101F2D563823180D405765F477E94C0A7C942501038FC12D80FFBC63E82654D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  .cms/admin.cms/html.php
- Size 22KB
- SHA256 2707a9a1eed17519ba3bfc0efada14af8635a2662d9dcd145da031df19c84d0e
- MD5 2d52f4ea4a1c68b3146c8c956d11bf16
- SHA1 d2c8ab4af4b0cb055f3e39e79537b9fc2c81f6c2
- SHA512 ec9e21d4f42b736c71f1e922f4e1090789afa1ec22cea86f1a4045d04059fdf565361720164e73f5b7e122b005a68a3a96479818df822ed34484c94b045e86e0
- SSDEEP 384:yy+54559oWtFo7dQ6dNztMDSo8S0P/6cUkc:yy+545XoW+pzqDSo8S0PyTkc
- TLSH
  T12EA2821618FE58231113BCA26F8924083C5A81576509E80C7E7E6BDC4FD9869CDFBB9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  .cms/img/favicon.svg
- Size 428B
- SHA256 0f77a8a89bf0ab6a2be055d0f41f0a8126b8020effe387f75c98226ed29d70fd
- MD5 01ab13a4d051885a7c0049051c39b5b7
- SHA1 5bad16f2951c4c66ae01ecc459ef4b5dc3f8b904
- SHA512 b668dcdc0e9608557e330da7e113d1857c97c321a12848a68de45f9586aac59eb4cd5caee36927c086765bd856cbc47e52fbbf919c43e5cbf23670000cc7a67c
- TLSH
  T119E0A3F5D55907FA21D64F7496D520C0125CE08671344ED6ABF154725A2C947289C643
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral10 behavioral9
- Target
  .cms/img/icon.default.svg
- Size 1KB
- SHA256 3ccd1b7a893ca5b1ac893b7662e9704d262e989a49944259afcf39310a791b15
- MD5 81a465b6c2a9e43757279cb37c24ed08
- SHA1 e8498d1e14230a50bc2f0e87149a79243da21a63
- SHA512 8f8746d5a0228ef7782323beac0870adfb38cce06633708968ee424bcaa21939b596f0acfaa74190056f7c7767a0ccd30b942259da35009fa2814a2e787420df
- TLSH
  T1C631E077939117B229C407100AC1622C393B151632F0C3EC5FEAD6AABD165F704BC8A6
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  .cms/img/icon.doc.svg
- Size 1KB
- SHA256 f5cba34bb2d8f4927b6f04c9ee9ac5fbdb2171200440fe5a99d312b71860835f
- MD5 541f105dcb58e564a2145539e9249bcb
- SHA1 696cb5af54ad502979f459265e1dd4d69b5b1207
- SHA512 6a9517183ed2f605ae1f4d0fc718584316f46a4c0d25c3e575edb235e3d76cba26e2589cddce9fd51d6b17f7cac7b156176b0af9ea31f2bac6bb4b641f2e64cb
- TLSH
  T17E11C971C3A156B2D94943520AE011183A3650B7F2E883E48FF981BA3C0A9B714B8DA7
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral13 behavioral14
- Target
  .cms/img/icon.docx.svg
- Size 1KB
- SHA256 2cdb485edcc7741711429d20a2f27d36b2cc73fbcdc0b53131e3620a6b5990c4
- MD5 404168a2e4b42cbbebd75365e39edbc1
- SHA1 29a21759693e1a08e6ff06ed03bb87ea769bf092
- SHA512 a88efac1cdb14c402d89ef334421cfe65a6fa7f5a98f9ce99bb14b3ee88dfc65ef53a8a936e360ee6a23f81a4aa13440c817f5536547ee512c6040b8deea35ac
- TLSH
  T12311EB71C3A056B3994903520AE011183A365077F2E883F48FF981BE7C0A9B714F8DA7
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  .cms/img/icon.exe.svg
- Size 1KB
- SHA256 7e1a4de31b615793ec4e01d901eb99a568b32bf199562e0970bdc3eacece26fd
- MD5 d7d64db443d1b28a18d897eba7b6bfc1
- SHA1 091e65a1c7cb8cee18d4cc94b5b8cffcc4cbc4c7
- SHA512 3cbd5edea19f8365a5862b34de15039e6de71d27dabfb77cc17cfc18e379287e8ceb88a8a69e50e8f81e8064d746b92d3984a08752f7f1d2b3f9b4bfd95635c9
- TLSH
  T143217CB3E34836B25740431493A1607421B7B625B37A45CCC386967EBE15A7345BCEEA
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral17 behavioral18
- Target
  .cms/img/icon.flac.svg
- Size 568B
- SHA256 0fc51d8a90cede08ebe683439c82ee8ef4fc03958a67cbb9a90ad9f0b90b2ea2
- MD5 8d576ee13c5ddae0c8b787c05a0e1f9d
- SHA1 1ab65dde840fd93e1e1f4da359ef49131d0de55e
- SHA512 c5c6fcdb4a6e17572add84549e879dec3569cc697f366ffdf8c44ed0823520fd724ef7d5f10395aa11f21e2c93991825279330c4baffddb279f89ec7679adf2b
- TLSH
  T140F0C037C169DEA6C2010338DE8B642074F1815667BC07456752A2B3FCCE5B2613CEE7
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral19 behavioral20
- Target
  .cms/img/icon.m4a.svg
- Size 568B
- SHA256 0fc51d8a90cede08ebe683439c82ee8ef4fc03958a67cbb9a90ad9f0b90b2ea2
- MD5 8d576ee13c5ddae0c8b787c05a0e1f9d
- SHA1 1ab65dde840fd93e1e1f4da359ef49131d0de55e
- SHA512 c5c6fcdb4a6e17572add84549e879dec3569cc697f366ffdf8c44ed0823520fd724ef7d5f10395aa11f21e2c93991825279330c4baffddb279f89ec7679adf2b
- TLSH
  T140F0C037C169DEA6C2010338DE8B642074F1815667BC07456752A2B3FCCE5B2613CEE7
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral21 behavioral22
- Target
  .cms/img/icon.mkv.svg
- Size 1KB
- SHA256 9ad25903012dfcf2b491801a3e57e83bc1d9a797f47b10557750567627c3d5f3
- MD5 a62a81df06b728571e6014dbc79fe11b
- SHA1 dffc305c16df33e9ef21c09882f82f05d6824a02
- SHA512 83c2fd8a0c747207b7d3a2ae2153cdf80265a160d91cb8fbc18ac7ca9ff4c41eba6066bb4cb3833ca68b6d9d8e19a1abc0f3757f3907833051b645d9b0f2ef5a
- TLSH
  T1EF219C3EC3AA72F9778543017ECA6DFA05EB901831E8F16C83E16191ED846BF04344AA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral23 behavioral24
- Target
  .cms/img/icon.mp3.svg
- Size 568B
- SHA256 0fc51d8a90cede08ebe683439c82ee8ef4fc03958a67cbb9a90ad9f0b90b2ea2
- MD5 8d576ee13c5ddae0c8b787c05a0e1f9d
- SHA1 1ab65dde840fd93e1e1f4da359ef49131d0de55e
- SHA512 c5c6fcdb4a6e17572add84549e879dec3569cc697f366ffdf8c44ed0823520fd724ef7d5f10395aa11f21e2c93991825279330c4baffddb279f89ec7679adf2b
- TLSH
  T140F0C037C169DEA6C2010338DE8B642074F1815667BC07456752A2B3FCCE5B2613CEE7
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral25 behavioral26
- Target
  .cms/img/icon.mp4.svg
- Size 2KB
- SHA256 9a8a35a9bf28c007c92baf7b76b91f200e49cabb9b3e82e40720f9c6465e17ae
- MD5 43a498cb09bf8a92168fb8f51bec5a9c
- SHA1 c78de602038336b508800dd0e141e4a52a89e1ce
- SHA512 42bb25b496ffcc70eb9749dbfc4856c430bb85fe3892ab805887be786a3857971804c0629433b49bc004c854129d87ae4858d59a7897e9956ac5b47fe08fc811
- TLSH
  T1FE4132BFC28905DED441CB54E2C4CA68517FA48AB29FC2958336C0F62CD89E373346B9
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral27 behavioral28
- Target
  .cms/img/icon.ogg.svg
- Size 568B
- SHA256 0fc51d8a90cede08ebe683439c82ee8ef4fc03958a67cbb9a90ad9f0b90b2ea2
- MD5 8d576ee13c5ddae0c8b787c05a0e1f9d
- SHA1 1ab65dde840fd93e1e1f4da359ef49131d0de55e
- SHA512 c5c6fcdb4a6e17572add84549e879dec3569cc697f366ffdf8c44ed0823520fd724ef7d5f10395aa11f21e2c93991825279330c4baffddb279f89ec7679adf2b
- TLSH
  T140F0C037C169DEA6C2010338DE8B642074F1815667BC07456752A2B3FCCE5B2613CEE7
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral29 behavioral30
- Target
  .cms/img/icon.pdf.svg
- Size 1KB
- SHA256 3d5f4778bc2ba5c6941dfbee9fb38d3516ac5bacff6c550f45cb0d14fbb3b98f
- MD5 baaf9aa886ef364cc9f6c529a8e6d46a
- SHA1 385a6ef16776d64441f2907da968ce11c693321d
- SHA512 fbac92425973abd80f9b025b47db16b960fd06325d3283a733ab291fc6f105d2f66b085559fbefbfab3f23af4725685b97c0699c5e6e4126865b02e63856e458
- TLSH
  T1AF31FC32C365A6799AC44711099121263BB5941FB2F0A3EC5BAF96A65C0A5F304FCDA1
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32