c95dd02d7e1bd0aa1d1a46982c87aadbe97d636dca6f0b35761fda1351ac2da6

Sharing

Copy URL Twitter E-mail

General

Target
coffee-cms-24.09.zip
Size 1.6MB
Sample260720-w29ecabw7k
SHA256 c95dd02d7e1bd0aa1d1a46982c87aadbe97d636dca6f0b35761fda1351ac2da6
MD5 03fb75ec95494ff5c2eab7c51e61423c
SHA1 7f32fc15ff8c0a0c614763ca17f8774f78faf8b5
SHA512 878b99384b374fc0d9643ff0bedad6135cef443a600b23ca2baa9507366e49865707c32dd1451ab882e79746a0ee404359699de77dffeb96f33db51382d7aca8
SSDEEP 24576:MZ9R5QFVG0lak7opfeicoJOlCmLK4mPqer2c1NwZiHe632oZTWV73l4uJuB9/0xH:PGAak7ifmi4uPqevNwltf3lb4op49Xd4
TLSH
T1237501E2982C460BFF5FA6B57E87350AE43CA163665332DB7D3C43D429704D21B066AE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  .cms/admin.cms/html.php
- Size 16KB
- SHA256 85124f461f56c5015196e31bbba5bc6bc403c427971c46a6b70fd16f2a19697a
- MD5 fe69da3066e6e4954476d7f1563c044a
- SHA1 3d64fe4438800a0f24ad63ffab6aa9ee29c89624
- SHA512 5b1db725f2360d27974294c48326eab83ea55b1a04ef2cf670db587bcb441e5abe2649a08b347e9924a386bc693927334e0125a29d71a3dfaa336355383dd000
- SSDEEP 192:Bvy090B0J0j0Ac0Z00ayqe0S0q0709E9JQnIrY+Zx/DFZyrXJResRSCgFqFQzKXR:0OJo0/C7XSzepMS6Xy8U83uw8lqg8O
- TLSH
  T1F4722F2624FA59370017BCB12F8A20443D1682979509D80C7EBE67E80F89D5E8DFBBD9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  .cms/img/favicon.svg
- Size 428B
- SHA256 0f77a8a89bf0ab6a2be055d0f41f0a8126b8020effe387f75c98226ed29d70fd
- MD5 01ab13a4d051885a7c0049051c39b5b7
- SHA1 5bad16f2951c4c66ae01ecc459ef4b5dc3f8b904
- SHA512 b668dcdc0e9608557e330da7e113d1857c97c321a12848a68de45f9586aac59eb4cd5caee36927c086765bd856cbc47e52fbbf919c43e5cbf23670000cc7a67c
- TLSH
  T119E0A3F5D55907FA21D64F7496D520C0125CE08671344ED6ABF154725A2C947289C643
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral3 behavioral4
- Target
  .cms/img/icon.default.svg
- Size 1KB
- SHA256 3ccd1b7a893ca5b1ac893b7662e9704d262e989a49944259afcf39310a791b15
- MD5 81a465b6c2a9e43757279cb37c24ed08
- SHA1 e8498d1e14230a50bc2f0e87149a79243da21a63
- SHA512 8f8746d5a0228ef7782323beac0870adfb38cce06633708968ee424bcaa21939b596f0acfaa74190056f7c7767a0ccd30b942259da35009fa2814a2e787420df
- TLSH
  T1C631E077939117B229C407100AC1622C393B151632F0C3EC5FEAD6AABD165F704BC8A6
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  .cms/img/icon.doc.svg
- Size 1KB
- SHA256 f5cba34bb2d8f4927b6f04c9ee9ac5fbdb2171200440fe5a99d312b71860835f
- MD5 541f105dcb58e564a2145539e9249bcb
- SHA1 696cb5af54ad502979f459265e1dd4d69b5b1207
- SHA512 6a9517183ed2f605ae1f4d0fc718584316f46a4c0d25c3e575edb235e3d76cba26e2589cddce9fd51d6b17f7cac7b156176b0af9ea31f2bac6bb4b641f2e64cb
- TLSH
  T17E11C971C3A156B2D94943520AE011183A3650B7F2E883E48FF981BA3C0A9B714B8DA7
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral7 behavioral8
- Target
  .cms/img/icon.docx.svg
- Size 1KB
- SHA256 2cdb485edcc7741711429d20a2f27d36b2cc73fbcdc0b53131e3620a6b5990c4
- MD5 404168a2e4b42cbbebd75365e39edbc1
- SHA1 29a21759693e1a08e6ff06ed03bb87ea769bf092
- SHA512 a88efac1cdb14c402d89ef334421cfe65a6fa7f5a98f9ce99bb14b3ee88dfc65ef53a8a936e360ee6a23f81a4aa13440c817f5536547ee512c6040b8deea35ac
- TLSH
  T12311EB71C3A056B3994903520AE011183A365077F2E883F48FF981BE7C0A9B714F8DA7
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral10 behavioral9
- Target
  .cms/img/icon.exe.svg
- Size 1KB
- SHA256 7e1a4de31b615793ec4e01d901eb99a568b32bf199562e0970bdc3eacece26fd
- MD5 d7d64db443d1b28a18d897eba7b6bfc1
- SHA1 091e65a1c7cb8cee18d4cc94b5b8cffcc4cbc4c7
- SHA512 3cbd5edea19f8365a5862b34de15039e6de71d27dabfb77cc17cfc18e379287e8ceb88a8a69e50e8f81e8064d746b92d3984a08752f7f1d2b3f9b4bfd95635c9
- TLSH
  T143217CB3E34836B25740431493A1607421B7B625B37A45CCC386967EBE15A7345BCEEA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  .cms/img/icon.flac.svg
- Size 568B
- SHA256 0fc51d8a90cede08ebe683439c82ee8ef4fc03958a67cbb9a90ad9f0b90b2ea2
- MD5 8d576ee13c5ddae0c8b787c05a0e1f9d
- SHA1 1ab65dde840fd93e1e1f4da359ef49131d0de55e
- SHA512 c5c6fcdb4a6e17572add84549e879dec3569cc697f366ffdf8c44ed0823520fd724ef7d5f10395aa11f21e2c93991825279330c4baffddb279f89ec7679adf2b
- TLSH
  T140F0C037C169DEA6C2010338DE8B642074F1815667BC07456752A2B3FCCE5B2613CEE7
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral13 behavioral14
- Target
  .cms/img/icon.m4a.svg
- Size 568B
- SHA256 0fc51d8a90cede08ebe683439c82ee8ef4fc03958a67cbb9a90ad9f0b90b2ea2
- MD5 8d576ee13c5ddae0c8b787c05a0e1f9d
- SHA1 1ab65dde840fd93e1e1f4da359ef49131d0de55e
- SHA512 c5c6fcdb4a6e17572add84549e879dec3569cc697f366ffdf8c44ed0823520fd724ef7d5f10395aa11f21e2c93991825279330c4baffddb279f89ec7679adf2b
- TLSH
  T140F0C037C169DEA6C2010338DE8B642074F1815667BC07456752A2B3FCCE5B2613CEE7
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  .cms/img/icon.mkv.svg
- Size 1KB
- SHA256 9ad25903012dfcf2b491801a3e57e83bc1d9a797f47b10557750567627c3d5f3
- MD5 a62a81df06b728571e6014dbc79fe11b
- SHA1 dffc305c16df33e9ef21c09882f82f05d6824a02
- SHA512 83c2fd8a0c747207b7d3a2ae2153cdf80265a160d91cb8fbc18ac7ca9ff4c41eba6066bb4cb3833ca68b6d9d8e19a1abc0f3757f3907833051b645d9b0f2ef5a
- TLSH
  T1EF219C3EC3AA72F9778543017ECA6DFA05EB901831E8F16C83E16191ED846BF04344AA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral17 behavioral18
- Target
  .cms/img/icon.mp3.svg
- Size 568B
- SHA256 0fc51d8a90cede08ebe683439c82ee8ef4fc03958a67cbb9a90ad9f0b90b2ea2
- MD5 8d576ee13c5ddae0c8b787c05a0e1f9d
- SHA1 1ab65dde840fd93e1e1f4da359ef49131d0de55e
- SHA512 c5c6fcdb4a6e17572add84549e879dec3569cc697f366ffdf8c44ed0823520fd724ef7d5f10395aa11f21e2c93991825279330c4baffddb279f89ec7679adf2b
- TLSH
  T140F0C037C169DEA6C2010338DE8B642074F1815667BC07456752A2B3FCCE5B2613CEE7
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral19 behavioral20
- Target
  .cms/img/icon.mp4.svg
- Size 2KB
- SHA256 9a8a35a9bf28c007c92baf7b76b91f200e49cabb9b3e82e40720f9c6465e17ae
- MD5 43a498cb09bf8a92168fb8f51bec5a9c
- SHA1 c78de602038336b508800dd0e141e4a52a89e1ce
- SHA512 42bb25b496ffcc70eb9749dbfc4856c430bb85fe3892ab805887be786a3857971804c0629433b49bc004c854129d87ae4858d59a7897e9956ac5b47fe08fc811
- TLSH
  T1FE4132BFC28905DED441CB54E2C4CA68517FA48AB29FC2958336C0F62CD89E373346B9
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral21 behavioral22
- Target
  .cms/img/icon.ogg.svg
- Size 568B
- SHA256 0fc51d8a90cede08ebe683439c82ee8ef4fc03958a67cbb9a90ad9f0b90b2ea2
- MD5 8d576ee13c5ddae0c8b787c05a0e1f9d
- SHA1 1ab65dde840fd93e1e1f4da359ef49131d0de55e
- SHA512 c5c6fcdb4a6e17572add84549e879dec3569cc697f366ffdf8c44ed0823520fd724ef7d5f10395aa11f21e2c93991825279330c4baffddb279f89ec7679adf2b
- TLSH
  T140F0C037C169DEA6C2010338DE8B642074F1815667BC07456752A2B3FCCE5B2613CEE7
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral23 behavioral24
- Target
  .cms/img/icon.pdf.svg
- Size 1KB
- SHA256 3d5f4778bc2ba5c6941dfbee9fb38d3516ac5bacff6c550f45cb0d14fbb3b98f
- MD5 baaf9aa886ef364cc9f6c529a8e6d46a
- SHA1 385a6ef16776d64441f2907da968ce11c693321d
- SHA512 fbac92425973abd80f9b025b47db16b960fd06325d3283a733ab291fc6f105d2f66b085559fbefbfab3f23af4725685b97c0699c5e6e4126865b02e63856e458
- TLSH
  T1AF31FC32C365A6799AC44711099121263BB5941FB2F0A3EC5BAF96A65C0A5F304FCDA1
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral25 behavioral26
- Target
  .cms/img/icon.rar.svg
- Size 1KB
- SHA256 779b73c1516f2e90dbb98765233a67417aff37c36fb8e88c2d6429b126e1705b
- MD5 9abd95cea172b366396ad7f7a269458e
- SHA1 dbcf17e0856d72cc9c8fe7bab8b48cdf5b2745e1
- SHA512 f24a0209065dfc85460328e0d8bf078784dd78b0706daa688ce8ceee1408089d78241c8a469a17233b6699d23bac5502aa87acc962af6d4f6b65784cb3279e5e
- TLSH
  T14D417BF6E3F85A2650200319D784916C7225D14277A00A9DDBA0507FFE99DE3B8BDACF
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral27 behavioral28
- Target
  .cms/img/icon.webm.svg
- Size 1KB
- SHA256 9ad25903012dfcf2b491801a3e57e83bc1d9a797f47b10557750567627c3d5f3
- MD5 a62a81df06b728571e6014dbc79fe11b
- SHA1 dffc305c16df33e9ef21c09882f82f05d6824a02
- SHA512 83c2fd8a0c747207b7d3a2ae2153cdf80265a160d91cb8fbc18ac7ca9ff4c41eba6066bb4cb3833ca68b6d9d8e19a1abc0f3757f3907833051b645d9b0f2ef5a
- TLSH
  T1EF219C3EC3AA72F9778543017ECA6DFA05EB901831E8F16C83E16191ED846BF04344AA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral29 behavioral30
- Target
  .cms/img/icon.xls.svg
- Size 1KB
- SHA256 1492c50a4ec4bc8a056305fccde69d2fa61b8fb430a1f4a6352510001dbc9118
- MD5 6cbae940dceb7fc5883d66d7662673b9
- SHA1 6ec5a7c3ee7e532330bd04661d3336ea5a9cdf10
- SHA512 8de6c90e2e262906751bd9a2493bea0a39ce1a1740f19132ca0711eca06483c8e8101913f757ef7b7a261d528bbb9e52c35d331e3b5de30d67bdbbaf724558d1
- TLSH
  T1C921EE35C3A162719D0A430149D021243E764427B2F683FC57FA81A52C49DF310689E6
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32