819a55bfaf6b33ed8daba1c245a5e2ad9fb169a9add080dbeb82b39eaca5c54c

Sharing

Copy URL Twitter E-mail

General

Target
cheeco-uat.zip
Size 15.9MB
Sample260718-gzv2lsdy71
SHA256 819a55bfaf6b33ed8daba1c245a5e2ad9fb169a9add080dbeb82b39eaca5c54c
MD5 f28393376301f27c015e3442e2c836e3
SHA1 7ec0b79d5161c44c3942b56ed8e0680893343e43
SHA512 99c99b4ce80ebe83ccda4f615399725d72de095d37b075baad310a52c4053cd0149b552d9b902d67e0e183af285490d59dc3c0f5d73116b5934e5eea374c71a1
SSDEEP 393216:loxbHXom0EUlwU6R8qacne/fxCq2/yaFK3WtlNV5uQhIs9Jv9kRS:2xb4Z6RZ7ne3i/7UG35uQh1/
TLSH
T15BF6F13AC33C6051FD0F9EB0CB494351D0978642A1526AF739982242DE5B5CA3B7E7EE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  app/Http/Controllers/AuthController.php
- Size 17KB
- SHA256 d6bbb14ec6b341893d58d0c69a9c63d2db036fefe9f0ba9510538dbe7a9cc2ce
- MD5 9d74bf4e65999b1ff5b13d5fa730d7ac
- SHA1 65ebb8584491b81a4322ec38cc493adf2d2426ef
- SHA512 aedb8a810bb5a784c0edc05d88abf02fe46aa48f22e77661c17470e1f38a13906cc76228f38edb52a6ed118f8bc111d6fd04a72a0ce1c8f4b68f7b07b9b71d37
- SSDEEP 384:OPGmbzi52k9/d7p9Qxtv5VLbekj6jyvjnj61Kj8fv+vZj99bN9RL9lQo:wGmC53ZTCRPeke2vDm4wiThbj
- TLSH
  T11B72659634DAD002451BD4BE8FC6D6087052C41338AFAA3AFDBC13DC1FE593D8AB255A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  app/Http/Controllers/GoogleAuthController.php
- Size 6KB
- SHA256 aa80b9c2d1c0befe97e11d2035fbd4889bb100f5dd2848652fc0492c40ee685f
- MD5 97e24e3254a3fd5747779ce8e8c67611
- SHA1 0ab7d5f9abcd99af977fa31ba88d8cacc491d2f2
- SHA512 8c595c53bf306ca6dbac96d17ca87a75c3240e4090feac934dbd4f15754fec64f82544bbcb241c55f9867659c7e1bdc243fea0ba5fe13a77f40e3d870fb18d68
- SSDEEP 192:Uw5eKuF67lwD1AqvJbGVCpD1AdvbdRlGvB:Uw50j1Aqv991AdvJmvB
- TLSH
  T1AED1104634EAA1135017E83E4AE7C50831A1C01328BF3A2EBEBC23845FF583C95B65A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  app/Http/Controllers/OperationalReportController.php
- Size 22KB
- SHA256 1b70cdc5679fc64d16d2899b8686c29a2cffe3b6df47212f7ddb382eee3b0dcb
- MD5 05074ff4e0ac3d2e86846b6b6bf66140
- SHA1 c2f355a5592baaa92066529f67b548b71e0f6d1a
- SHA512 2ef674c37ad684d24f344999c1b7e7a45e4e247ec793a7987f14d58aa7112660da9e97df1ea7e76bbbad5c6cfc8fecb51b08dd2fcf9d8d33aaea624ef6217ffd
- SSDEEP 384:0Xqw68OYpAshj26HK+b+Fz6iULYKAlQVybsYu+SvrARvJ9tB:0Xqp8O61hdHK+b+FzjS+9bru+SzAD9X
- TLSH
  T146A22056F8FF51902863F1FAE78AEA657A60240328C565B6FA9C21506FC447CCE7C46C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  app/Http/Controllers/ParentController.php
- Size 51KB
- SHA256 d515a617f11bbcad0caad4dfb4dc87db6890650e9f78589ff57bf1fdabd1987f
- MD5 b37cb04cb1cfe0a74a6252ca347d9f90
- SHA1 82647119aacc335071c6ae74c0b3fd993bf81da4
- SHA512 4962726df5f96ee01cfcd5f9b6de5c6a2a2465686e0e80652a0d8d6f0a10ecdb74a246d6c73ce9b3d4eee2718cc50530a13c87f5912a4c943dd679b8b1531d1c
- SSDEEP 768:fOqZb/osAhp7FZ7OHcImTLNYbSL+qSWzt9WKOVtgx4Fwn55wrtqclA:cJ7+LqLN8SwUt9WjtgmFwn55wrwclA
- TLSH
  T17D33545438FB81A23127AA7B5BDEEE407561D00348C67A66FEAC72542FD403C87B1A7D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  app/Http/Controllers/PaymentController.php
- Size 13KB
- SHA256 be587e1ab70593e681822f95067633b1abbfd91c2a1a0b084ea77030fb1242e8
- MD5 d19f9112f3770226fe6b4bf912786209
- SHA1 1fba697517f7023fd083d4a4187f112c617888f4
- SHA512 7bfeed139e7e7fc5d8547aa35ca2b97c2bfa245038cb6f8bcbcfb62026ce818eb38122762c6d86a6c1d698626b051d4e8ec8e0794ea43dd27037947cf8cafec5
- SSDEEP 384:7qoe4qRgFuWqRumDDhFUK7ruvO97LHEXAP:7qo6R3fRfTUKOvg7UAP
- TLSH
  T1E45232053C9BC111592BF61B89CFDE146251E5030ACA3A6BFB5C72781FF893C9AB442D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  app/Http/Controllers/PrintController.php
- Size 6KB
- SHA256 15bff79e2dd0604a7ec39f37dad5a58267aca62869c27e6302c3181b6ed8fd08
- MD5 aa4e83f74ccdb5ceed1053adaa16271d
- SHA1 6a865b765905b6b7e8b38e56bb5bc06786e101bb
- SHA512 6e224601502a9c21ea16ca99743b2a021a681c93b20bc0881888ac2713a1a9c2051c1a148854461aa7bacf754c7aa618c5f3d0f047e15829871976434a81096d
- SSDEEP 96:89uUROTebUEA1RCxxTyQOkhPwvAfpd5c9/rG9g6+194Xz0s2ICenRt5rV07ZPd1N:HURseImyQnZwvsJK/rG9K4xCeRtOfFYA
- TLSH
  T1AAE13C097CDBA5209117F22A87DBCE10A5A060231EDA3973FBAD31657FE403C9870F68
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  app/Http/Controllers/ProductController.php
- Size 22KB
- SHA256 f8beeceb9c7edaf2277fd28472667bb17d91141307df390a57bd40e94b7ec2d7
- MD5 8a6ca743285402540e7b6d04f05702b0
- SHA1 fa8422a57a826415844b762492d4d4d0f5e5d037
- SHA512 4197debed053b99cce8918e9d2aee2638a561aa57fdff605507d3c8647d75782dcf9ab86f82d5991a901481f18bd6b2d3e2dd22ee884009e50da7678c18c20ee
- SSDEEP 384:JVhIcvoDGO4Up+YbwMPfzB88bmlsfqrgZXOKFHaRH44fcpfL3f7wW:JVjvgzPf9pH3QY4k1
- TLSH
  T19DA26488A8F7FA0A5A23607E96CBD584BDA1A40305D6A762FE5C66441FD633CF37071C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  app/Http/Controllers/VendorPricingController.php
- Size 74KB
- SHA256 6e5de54d1be0a314ca0803d6cf0cad77d66570db7e2865ceaa82575a5d5441b2
- MD5 0415303c742c0440bd07a69540e05c7b
- SHA1 c45b9f979d43a210a330b2ef00aa311da32643a0
- SHA512 97717e0fc16705d5604325c3aa6a9f32fdb88cfa36d3bc1ff7b473ae928c7acbf498498320286a47b398f09dce33a82aac84757d717eb38affd54e05e05bc7f0
- SSDEEP 768:QJH7XqedkJ7sh7kgg0Q8NTyambsuWOGm7spW7WMzlJ9gJHd0prtJL8g16itg16KX:QspK7gB81tMnWxMwW7WDk0eN4IAzhSq
- TLSH
  T1FC7340E4E8BB55502D23A0BBCBCBE944BDA2610308C675A6BFAC71541FD413C93B993D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  artisan
- Size 425B
- SHA256 f91a517c0c5d3a904c3f390933964a5e08ec1fc68146882730daac4aca4ffcec
- MD5 e66bb13691f6184c762c196427d8e685
- SHA1 b8f0fc8820d5de0b4de5710b0184fa998e156089
- SHA512 fa3f43c9125e19995c2e8b17663396fdc20ca4007e1bda34cff35738d65b3b88ae1e31de1118ef116f00a8b2f2f25b940192f98a11f67d63f756b1659becc1de
- TLSH
  T137E0A3FB078C02A1DF9634DE164CD4031C5DC9177CC010A5F415395887C58DA77573E5
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral17 behavioral18 behavioral19 behavioral20
- Target
  public/frontend/build/favicon.svg
- Size 1KB
- SHA256 46320deaf5bfe06a633c550500afd3c0f405f9e329d006213547c6ea2a1d7835
- MD5 182fd2938953eccbda3613c114e94bb2
- SHA1 69f8947537d05773e7a2ad06583eae183e84eba6
- SHA512 de7d254606c54822015fe83eab0b4f4ce7c96e9d8d97e96c430fdcbfdd62df86cbedaa10eefff0c1ff19b0cd571e8ebae855893fca05706bb178de5ca0ddf70b
- TLSH
  T118116A1791D5927DE9D3C610EA6818A132D5E092F3E9D0FCDAFB4EC6CA464B4C170E78
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral21 behavioral22
- Target
  public/frontend/build/images/templates/back-template.svg
- Size 2KB
- SHA256 2111d792e07247cddc5678023b119f1b240ef5fc6ffe3b342c50574f7d1ff221
- MD5 7b4a53f4896400b8cc97dbf295b1855e
- SHA1 4f8824d2ac09ba8e8afa92153abaa8f534ce9a12
- SHA512 87d1994fb639fad45bf2609550c9de57064d4c32e76ebb25709511325ac8173cd9e48dff922f3915a81b7f205ee731fc6416efb36863d1cc851ac3849a705563
- TLSH
  T1EB51335B825C237CCD564711833E259272D6249BE065D2ECB7BF6F929B14EF088489B0
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral23 behavioral24
- Target
  public/frontend/build/images/templates/front-template.svg
- Size 3KB
- SHA256 eec0df26b4eebe9ef3206a04460ab5f71177f6c8cd4dff6b774975965ac0bec5
- MD5 74fad3f5e0e04ac7349daaa9a2b76664
- SHA1 5ac49ba7c28c009d96362253920abf142df57ae0
- SHA512 cf24508e6a1b4c5d49136a63339f7067fb09b25c12f02c88b135eca1505b5bcbb428878a5daf4db76e460161603f0ae0cf7fc29c4a98671a8e2650b2ee14329b
- TLSH
  T13F616257835D52BCC8528705C73A219232D6549BF070E2ECF7BF5B92AB08DF1C4689B4
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral25 behavioral26
- Target
  public/frontend/build/index.html
- Size 1009B
- SHA256 9420eef34b1f047562d3e23b637b7fcbf3549751e4eca2d8dd939a666b9b7392
- MD5 b57fa20f1e52060f7a310f1da7e016c5
- SHA1 9863a0da9fb92bc019049487c0cc35ccd29c061b
- SHA512 4e736055ec3eed489109fc0b21f7ea1bec631ec3b3a871ec4dc99c83c0bbb34280ad31d14c6be31e83667ea8226cb71a4b697e83969a62629392552c7164cd41
- TLSH
  T1D611E1725C04C04D633183F7ADB2B12DD84BA43D5BD1B894F8A900E685E0FB29E7AF16
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  public/frontend/build/static/js/453.20359781.chunk.js
- Size 4KB
- SHA256 ef43898adbd33395345f26aa7ca615fb3ea536f163da72a0bf10974c28c41b47
- MD5 4ae66edbfd906d2e8feab0de8fe11170
- SHA1 17c98700b6b80e62faed669b8547009bb074e3df
- SHA512 077b3abf58d75422cc382bba6ba6f84f918155e7305a905a56efe16b19efeda932d82f38560f93a5b5b005aab327ad7e9bb26839983eefa3a63bb225acd0a725
- SSDEEP 96:p0IhDSebvvwqX7loGQj0G9ABfjcGbTh+k0oV:p0Ih3TRX7KGQr9AhjvbT0o
- TLSH
  T13B9131CCF65035392AF3A93A316F630763772296A816085C1A3FD6C01D7C98917ABF6C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  public/frontend/build/static/js/main.ccb6e14d.js
- Size 893KB
- SHA256 51485d75b1a5db0a08ea73e05ebfc68fed4c06352ec6a9c04a3a741601aad13b
- MD5 6affa86bdf908a1459e858cf6c91a967
- SHA1 1804eb9d68555c62ef7084dc067dd5c4e7d554c1
- SHA512 c34255e7ff8a798aa6e536fe7935fe8a73d06eff83f7489a38841452f257f6c9d8c6cd481a145c6a28f3566992eb7043321334c12575be92dfd60e9a435eb954
- SSDEEP 12288:e7fNJV+/EZCumFc3r3hZzyo/b1KD2vnb7jRgk:QfNJV+/OmFc3r3hZzyo/bJWk
- TLSH
  T1C915F640F161FE9DBA3B09EDA07F440C712EAB4DD51E88B4A176B8552A0CC99774BFC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32