bd3e24d71cf621452c3cb5928f772f2f70f4e797864b7fd11553c5552acb6cee

Sharing

Copy URL Twitter E-mail

General

Target
star_elevator.zip
Size 45.0MB
Sample260720-pfppgsbz6y
SHA256 bd3e24d71cf621452c3cb5928f772f2f70f4e797864b7fd11553c5552acb6cee
MD5 a85d349aa78733155a39b7f145229206
SHA1 35be4462891c3d10467b740ec0f14a49cb715b70
SHA512 d8cc5c979473218dcb55d21b581adf02a9f7f574a4d1b2a4d8b8546c05723b5461a48e4c15fc79b3ef3924fc9d384c97271bce57e88371a0a19a4af7d1329124
SSDEEP 786432:8w+qPgpjjXkFB+EceiaWzmncAEquJ5TDZYAZh/wRhvIBg/1oejC6QbNck9pRrAVP:Wq0jcHi1iBEquXTDmC4bQBgv2TNck3WP
TLSH
T1D2A73384D9B8050AD2552F23C8D41D417E806A6FFCA9251AEBE474AE746F4C1F4FE83E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Targets

- Target
  admin/products.php
- Size 27KB
- SHA256 e7f220d268840e208c5541578ee625e28bf5f3f6563ab56fc05d8f930ff41f6e
- MD5 6bb07d6a1d954398fa24ad837e30823a
- SHA1 eb5ed186eb01c7c04089346006e5e467032b7253
- SHA512 c46757ce38e8ac4d3eee3debce908cbfe4dcc16bdbd9864616a6c3b9fc597863ee344c53010d4e90ee1006bf70eeadc4b2ecab1ccf3d02ca2fd9562ffd54b07f
- SSDEEP 384:M7OgqL0UEzaN0J+tyuSgI3FZCFGTUZdKU7L:M7Ogw0/e0otymI38ZdVP
- TLSH
  T1D8C2946130F8492620B7CABAA7115E9CFD859707D10386A8BC9CE1D34FB1CB4CD6FA49
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  admin/services.php
- Size 29KB
- SHA256 33579df05da2f50c652be7a350cb39d3f7ed7c07e503957c3374f6f9742c60d0
- MD5 dbf6408a4cb5cacc786f05e845d11f33
- SHA1 783f9e89bb99d2bebd57e86c479d101b4ba916d6
- SHA512 ce92635ad346bc7505ed3f3eb2a9e132a0c86c25037f8e2e687d6890baacfc773bdb194ca4a283149f0f2b76ee4addcfb6c6398192925bda3315019048cba6d1
- SSDEEP 384:nYcRfHpLnZaY/zZSC8PAPvVQuNMs5wTX5o0ZNX6Fdsh7HPK:nYcRfHJnQY/zMrPAPtQFTX5otsxPK
- TLSH
  T188D2852020F9893650F3CABA67411A6CFD569D178252C264FC9F92C31FB8D74CE9F994
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  admin/settings.php
- Size 13KB
- SHA256 26e914ee639970bf8647f7152b440e66d52ccfdc76e298ef155cc6799597f8aa
- MD5 49dab172433a556a1de43a6d26615fac
- SHA1 b22d8350f712db4c4f147626bb6084298362baa2
- SHA512 b455c3bfe41346c2d0de526abff3bd7710a8fcc1dbd2835612b757bd1e4dbe47493c293daf9b7e27af0b6b722d1586824e4271b2b8edf0c95c041ce4eabfe9af
- SSDEEP 96:ECM9sYj0yQDqgPjncnfsW14Fsq8pUCi9nhK9TTM+9TF9bOwZtw3E3l2Ja+r2Y8rB:ECM9suGD/ofsJrlQYuZES
- TLSH
  T1BC522FA82017596A54B7CAA5EF111B1CEF058B87C602C268FD9C52977F72C34CD8F69C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  catalog/Aloe Power Generator.pdf
- Size 23.7MB
- SHA256 dd65dbcfe08e3d28ffd79d0ac44eb383bbaf48d2f4e9307b00067e9a31600cd1
- MD5 4cdba438eab77647c9afb22a4f35b02c
- SHA1 1a1859b2ce9a36e3f51d46ba9d483eb17ee7229a
- SHA512 032657d60a141102a910f676c072b24bc6d4f549647af2e70e6771c293520d9518f518a80af3e790b6fa4303a228f8b4fb622b8fb76d5629aa95a387b448b85d
- SSDEEP 393216:2wY8maY8phXaiKU0NymMVyh0+++++gN48EGu1bf9XjL3U+fJhSrWqPHWA0q4GBn/:2wYZa7XvKUIIYh0+++++gN48E91bf9pI
- TLSH
  T1944790079C099B83A42C97E4FE075E9C2F166B1CE59676FF10224EDB7F642615C8E02E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral7 behavioral8
- Target
  catalog/BLT Catalogue.pdf
- Size 4.6MB
- SHA256 59f5f9035233c47f543d092a93ba938e036c704188ef103ac1b5834804c1732a
- MD5 58a3836fe1c5c3c90ac37238c6f530ef
- SHA1 a04cc55e7f841e1c4f3b159b20649c41cfa78034
- SHA512 5f5afdeb0e143b8791a3f4d553ba4a30e9d36a0fda7d76d8b5c4a8b70fd958f78eba5ad862c8615c5a84a1e8fa944499c014dd51c853baed21c99a0e17d208a3
- SSDEEP 98304:AzAQf8oEWITq2CCVXzQlNxnfGBDwTm81jv2:AV8rWITq23Xzywb4y
- TLSH
  T1B0269D3CFC514DE055AD970B79C9390A2A3327C3D6CFA8487DDF486A0F11EBA444B6A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral10 behavioral9
- Target
  catalog/Cummins50 - 62.5 kVA-1.pdf
- Size 487KB
- SHA256 909ae81530afde9ccf04c72605fb96de289df9dc927d20c57a126b4081e671b1
- MD5 b2124bf04a00c812727aafcf6140a213
- SHA1 e8539006485b6c1116a7e8b5c7525f6fead3a592
- SHA512 5baf7dfb44513ff16be45672f94f045a3bcc4ac6cf17f905086a536f7452baf96848b0b09a4594220b608ed00fabddf1f9ed3df30419186673962db3d01bd7a6
- SSDEEP 12288:XAuif9avYuGuTVcN01j11QmEO0X20rmzH/Qi/GVJ:XAX1Mh2NtO108Y3J
- TLSH
  T192B4015789489681872A52F03F0B0F5B768B7D99A5437AF31A12CCC77733E72588C6B8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  catalog/FG Wilson.pdf
- Size 201KB
- SHA256 b6e9844ee886899782241ee0252ad5ad5372bed837b741d06db06b5826a16a73
- MD5 1890c8d3d14eaad73fb74d183118ce4a
- SHA1 ffc00624cec57ca66245b7680accc51beb513864
- SHA512 48d6baa531f470c3131b4985ac1e2208bd7ca5c1d21e0f9fdde7c623ce127da59dd506c9dccb0f46f4227d1383470b5c1005650d2f054be3c971b10cecf37fa0
- SSDEEP 3072:40dWvBO3/FVB/ITKECY731j4Zn6TppqKgCElkXsEY0F4VNAONa7H3ayK4gs+rxy:4S2O3/mTzCAj286KzXsEY/4OA7HbK68o
- TLSH
  T10314023C887B5A98E453D63DACAD61281D22B5D26E401E8B31CDCF941F2A6E5F410EF7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral13 behavioral14
- Target
  catalog/GB-POWER-CATALOGUE.pdf
- Size 5.1MB
- SHA256 fc1211db382afcc106aeff8dabb008327291eb67a522563a222585470e17d7c5
- MD5 2c8697063d21f27774c96fdc1c02bbf0
- SHA1 79d88ac8ca38c3e9c9972c659c80ffca38e329d6
- SHA512 e1183fdedcaad2420897050ec26280dbe70fd5fdecac9173e52d7d15669efd6f5f84842a12e3f93297dd2151d39acd09c3da5abda3124ba553307f30ddf1af46
- SSDEEP 98304:jjTgGHjjlwR9599LHnpBKbkIxI9VXs+54XJyhzMCMHs:jj8GXQ599LHnpBKbE954XJyhICks
- TLSH
  T18B466F078D098B83A46D57E8BE131E6D2F4A2B0DF8923EFF05164ECB7E502665D5E01E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  catalog/WELLAND POWER.pdf
- Size 1.7MB
- SHA256 88ebfe717f15f71768195c9e1ce68ebb5f554affd8255612ae79ce70aaa7ad1d
- MD5 f3106d80c986b430b9a2250c61aa17c3
- SHA1 97dbed0cfc5c929e3eb3b857b320e5eeeededf0c
- SHA512 52f9a131ee93b4daac809dbd5e1cd0260c9bc53009f5bdf59cf81f7327e0a6018585ff7e73555726545d66dc7f018563c4aacf5ff63ec4a7b3b339a2c704954b
- SSDEEP 49152:NdSCu84Nv8YNEKCNRhNQhmiAdlgioGPmHQYM3ITC39:WpZe1RhSs9oGPmHX439
- TLSH
  T12B859B62BFF609A1C21DD2B50284388939CB35DBD6F02D4BFADE4EC1EF1495544CB68A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral17 behavioral18
- Target
  catalog/fuji_lift_catalog.pdf
- Size 3.6MB
- SHA256 15d4c65d822819b431f06a6411e848358bcc702921d1cac2ba6b64ea068907ec
- MD5 6398ffde51de020948f2e3284f700ed0
- SHA1 4c32db146bfd93116666e7579739e5a48f629bb0
- SHA512 bfdd44321174e88530bec95225b8b9d571a223df011655797d3ddaf8803d3c739d62c0b45423c67af6cc4d820d702ac4c87ad9994c4a89b941454164262c92f7
- SSDEEP 98304:EfRw/zaOJkn/ZEv+3rt03pkFTZh+MwD+5CJwO8Zfs2cRx:E5az/s/ZvtUpk1wD+cJwO8uFx
- TLSH
  T1770633E88C296903E08B5A403A9802DF5DF9ED313C5D94F5E53C8B964679E3058FDA8F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral19 behavioral20
- Target
  chat-ajax.php
- Size 1KB
- SHA256 6a627b80ce4dd727b0f551ee6d4c74a97dbc9e1f78d4585caf56bd7f0f7e85b3
- MD5 1b07cfcbbf7eafdad309fdfd624e0542
- SHA1 3ec179a2bdcd789f7aa29c043f107729aadaf7a6
- SHA512 439f368eecefe6db76c7dceaa93da4badbf07d36859077a2069a08cf70e9fbede8686495293d3705046fb7a06b3da7c3ab9e526ef8dedd93eae80f2b6d470da2
- TLSH
  T133310F89A43A4620D273B6EA17902429F9C69D570250E331BC3E70515F787BC92B9FCA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  config.php
- Size 1KB
- SHA256 5bb23b3acf6eaac61e629701cab4dc9445d0e12174280392b411bec917d39ddb
- MD5 ea47dfda2274380ef60ee6def44704a5
- SHA1 3779b3ec4acf3134d9f5e63eedde7ef321979333
- SHA512 fcb69d804581d87133087c55c38088e03f3f735c8e4c8774dba2d733286081622b5d088c95370bace44e211b3d6e1b1629efb2125a8f4b8eee71b12be1ef94d4
- TLSH
  T15C21DC42280968661633179B800F9581EB38F9A3C6554172B06FDF4B5F701F18EF2E8F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  footer.php
- Size 19KB
- SHA256 9197ffe793cc1bf2bdc678b9401ed686d659d839fa06f2eb7b17004704f517df
- MD5 60f2e5cfb3456781b645efe485c0d8c3
- SHA1 5c0f8aaff8789b3973c8e622ad0f68245e02c495
- SHA512 5e86388aa1155ce6edd6f9d7ee69022918f1e28da96a3fae084c3c8a9e15d741e39b590750c514b6915b055fe369f75cee2cd467c0ec7a41236b7950f1712855
- SSDEEP 384:zu1cKaipcO6q3aZhFJtih7XtpErnN4g4pT4OlMWz9wprMQzh:zu1cKaipcO6q3aZhFJtO7XtpErnNh4Bu
- TLSH
  T15092A43271D0013750B3C2EA67A2AB5CFEA8C247D1078958B7AC52DB1FBAC658D17E94
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  function.php
- Size 65KB
- SHA256 4c507f872d769c63d78f99063457a1b5cdb86ce6d2ad61beaf828c2d54375646
- MD5 f51935cbe27524b63e00753118d4ac3c
- SHA1 3e46d082da71e75988a28c9fe6f69ab8546b4489
- SHA512 5224548cd581b24c6e7d9ee880ee4d85aa994530fb9af880d989e52401effe46d6f476cdb5af61573d474e35e84d7566ae3d3635a4aab42e5e190526ce95f84c
- SSDEEP 1536:oP70oOD7Yl/AZHTjyhFCnWVoAGn7AN4Yr:oz1OnJHTYFWzW
- TLSH
  T11563C769382E902241B3A27E9B578458F91A3D1315888651FD6E90C07FF03B4D6BDFEE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  header.php
- Size 41KB
- SHA256 6f8ea6baefe877b1ebc08f6b417725b465841906ae42f9d1947357a4b493821e
- MD5 6e37984e1942ebd0c5b807f0c14728d0
- SHA1 3b91de3314a2656fa4b15e33c0d77a8a25598f79
- SHA512 079becc101dbc51911c8dc51aa9ba170217f7d2712d0b268dc7468b5875a7257c1a7d2853412f9e75bedf687f82e33d145355548bfec96b97974a12a6dcfe178
- SSDEEP 384:ru/lSgtO9AkAxUEZovv3dVk0XH7KE9eoucU14WrpC:rutBO95AxUE6AsH3ucUpC
- TLSH
  T15613955AB0A4113740778BB597E2AE5DFE298207E14389467EAC42D71FB2C408CA7FDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  index.php
- Size 30KB
- SHA256 ecb0a55a0ea1c63bd0f0113b6c4d2dd976d3c12e9243269703bd43779cd9003f
- MD5 0403fee802cfb7324c3fd6b5de0bee8f
- SHA1 217c1ef9ad0e61a3a5500cd5467b036af8a342c7
- SHA512 bdab9aed93b24371175d49c22152913faf02bcf5b262fdd38c5d580e6daf018f080c2e03e8d5631c46e731aaf70cc823a3a6943bed01359bf6227513e4165a9a
- SSDEEP 192:0NL4ISnqyJJxdctGfAP3DpST3laT7q4wLqyV9Ud8UzMy4DBFdo54K0w8IVVAUHEs:0zqNL9UdYD8HUUHIbmDdntsdYAkHo4N
- TLSH
  T172D2A52631C0A4B660738BF29A515F5CFEA4C60BD60789197AEC12DB2FB5C084E1BFD5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32