7bcddd9ef02f3f17cb3a1981f1cf2827d00c49d9eaaae8eea3a8b51b05e2a0ec

Sharing

Copy URL Twitter E-mail

General

Target
ROPTS-Venture-Capital-Production.zip
Size 5.4MB
Sample260720-pkpv2sct2y
SHA256 7bcddd9ef02f3f17cb3a1981f1cf2827d00c49d9eaaae8eea3a8b51b05e2a0ec
MD5 e12b399bc735aa19eea9e933c2d17232
SHA1 8c735becde19fe99672f4fc9d1b57dd16b1f17e7
SHA512 84f63e1311e8c71c287d46633c809435ce1fc116ee4193298c250694d33613f32e6e948e4b2204c5963942279dc0b8e73449a6b5ef93e4339251c03e46127078
SSDEEP 98304:gnL7uT71E0/21TYT6x9CMo4caM4e7uT71E0/21TYT6x9CMo4caM4g0IuszrGxHzO:WSTheC6xxNNOSTheC6xxNNIusOHSD2SF
TLSH
T1424633660AF4304ACCBBFB7A4BE9E4592127C8314D84B3FF18E9B7D6565F09024A364D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  app\api\apply\investor\route.ts
- Size 3KB
- SHA256 f57f72aa4cb28e65129878570af367eb8e7c1c5860531f02f3f3902f9781f7f9
- MD5 ed66b18f3531dd01231f8a6a3a0a8221
- SHA1 da0b137103cd0b2544239f7f2f429d2399ad6713
- SHA512 a998424ecf2cc41fc6592c632cfa21c91cd3f35d4d38fe27604c6c10b34e07362928d83fa85ce5223b6fbedfae2f374804dc5849bf30d196791763803c61f399
- TLSH
  T165717447EAA704204FA325A2280B7025693A56873F255CE5B2FD03797F4F838BF63249
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  app\api\apply\organization\route.ts
- Size 3KB
- SHA256 c92889425b0b8521f35765ae8d6afac1f8c109b4cf2d5c3c7b28ea7be6ab738d
- MD5 f2d4d0f6d58df89a6913f85c8d6fbe0c
- SHA1 787cad9e07635baa078e7fb73b184893890f1e9a
- SHA512 d70b3ebc5582e4d67aa31b888f460b61fb7d5319a0e051c55d5263f2e4cf19a39b65e78cf32eb14cc33519029ca41782a56944c256a7343be7bfec58f3bc2142
- TLSH
  T17961878BEB66055587B3A4B6240BB0157D3A814B3E6A9CB475BD02287F0EC3CBF53249
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  app\api\contact\route.ts
- Size 2KB
- SHA256 0491e836ddcbc02d2999f180e2d8b4092dc3bfe02efa4127e8eff47af83f3416
- MD5 d51d75e4b4f6a44c22bf247faaf251d5
- SHA1 18c52fcd1af64c6bc2a39c350a2148da8680482b
- SHA512 0756f7506ba60c0a717c65757c707bfee73d86571e2963e3f4ca1f5f9fcc91626696ca9f16d0fddd7ef19e2d5ed551c2146cd173aa464623a43c3c82fc19014a
- TLSH
  T1CF51454BF5B21955067260A1280BB0187D36D10A7F299CB675FD03A87F4E87CFE53249
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  app\api\newsletter\route.ts
- Size 2KB
- SHA256 22efd4a144f3ba879cabb773b9589d4b84ce425c6a97fd87ca2aab5f76f5c7a7
- MD5 1e6de0bd21a37dabe41cc0f97c9e895d
- SHA1 8e8f003612ea5f4b856448bf38c8e4673f72e291
- SHA512 af0b3a50b1d48e8e1dbaf0439a5ea360ef1f3312760e4b838a96843b883b3c8c404334eefb4262a9b00ed181e473361d988316c6ff7913b2933f49ed9679742b
- TLSH
  T18C416247E5E61B8007B178A5144FB02A7536A50A3F2E886532EC02797F4FD3CFE5704A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  components\ui\Input.tsx
- Size 1KB
- SHA256 d4b662333abd2cfdc585f64631a3bf9893e727ed0eb045e6df0f442e6cf81786
- MD5 1cf4286112973b93e81302265570bfdc
- SHA1 be4d4595d1121b99739bb19ceb9d5eae3429c911
- SHA512 ffb6aca2d481b34d05bdcdb25e0d28863e6b3194d71ea672bc5dac95f063d9dac5a40d5ba0325595737dc4b74aca3afeb134375aacc40c4cff3424b05ff5e899
- TLSH
  T10041323020F6054BA493C0B4FB9F5440A920C6278AB799A5FEFC12A02FC1165CFF639E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  components\ui\Textarea.tsx
- Size 1KB
- SHA256 78faaec0265df116a27c56ed5df2e4bb1c7bb1997620c866fc6f00f17c44c8dc
- MD5 7165ce8cc42d2a1e17d5e1bb8e6e83a1
- SHA1 9b48b9936899af803f6bff0b5de50945bdda4eba
- SHA512 6b8bd271846e6d0ea5efe02d6798b299e40c37644db2d314818a39c91a6290b48d4e77659be528a8befd7ae8dfe1cb34e952a1034023d03768c1707f346b3aa4
- TLSH
  T11741761170F606176483C0B8F60F5940E930D6239A7BD995FDFC52A01F81265CEF618F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  public\brand\logo.svg
- Size 179KB
- SHA256 97426e72a0eaf9cc72a51ca9ae356a7a4ecdbcb2d39e3f932426f9d2bb2134e2
- MD5 9517211d01c7bc757b6a838f700c6993
- SHA1 aafd9793080d6fc2204a4149311bb19d1429b385
- SHA512 b4e172d3fd2a8856839edd0e2c750c5e22a086a1f4159da80979d55a737d465607f4f354e18b3214abe73e79dbd71e7fabccaec97136014d56c679e4b13d95cc
- SSDEEP 1536:MPGI6lvWRY0TBl1zsOSh5uy/0jEG5uptuB4t9NV2+M:N6ZOuAAi2
- TLSH
  T1B604AAD0392840BC485A0B41CBEB5DAD453EB1DB945208E9BF242DC72D75A6F72ECBC6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral13 behavioral14
- Target
  scripts\axe-audit.mjs
- Size 1KB
- SHA256 0aebeb0d138d5aa757f1deaa22e3366846f7e4b8035fd4e5d32ac8cce6697474
- MD5 dd3785b0830341f961fb4934a7b1992d
- SHA1 24db4fb8f8dc2a0cefb96523a6016e9c37006144
- SHA512 64ff7579ca80af712728240bd8edcd78570383bd263084b16dddb2e1cabcb6b2186b6d480753199deda22e1968012dbc4b863abbff14e8ed516e6e9a451bae84
- TLSH
  T1D031316404761B74B13711D16322B0B93B31E3453BC1EA843B0D92642FDEC7ABF8974A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  scripts\console-check.mjs
- Size 889B
- SHA256 d60fb9905137792f1a0c91c8d0459a732889bd1d107ef8e975d1465f29636331
- MD5 c79e9e4bd07d504a864f0e8b41089c09
- SHA1 877eb808d8cb5a2f74fe7f055c67a172220189ab
- SHA512 62127dc6d532a2d207bf6db214c3c4c7341b876a3c5a4e756980dd91a7071eb467fe10626c681cadbeddd81d7a395b2da2ec392f53e5202f4b4a84929230a67e
- TLSH
  T16F11E38E4DBF153BA537009A2C5268372B7048147346DB4133FC14126DEED68CA6DF99
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  scripts\keyboard-cta-audit.mjs
- Size 3KB
- SHA256 ea83bbec925a7c68d28d8299b1b0948d264bd3aaa607c16ebb6729dc2436ef90
- MD5 a7699fc50f3c797f10e0046ad06429e0
- SHA1 ee9fcebe7e90daeac1e68f16919408a78bc3c105
- SHA512 58c2f388120eacbce4f99ad5a2fac81ae6f9759bb0e93fe403ba460d7e2b40d170836183a44da0949765f1cc016f7b6d278fb50bbb8c71daf3e526f1e2d9ccf2
- TLSH
  T199711D65907F1872B93724DCB62334702A51D28F3781DFA1BB9D86410ECF81AAE8E75C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20