b7dc25f8ccae86212f34125101b635015b0140903f692783efc2ba9de9c31775

Sharing

Copy URL Twitter E-mail

General

Target
b7dc25f8ccae86212f34125101b635015b0140903f692783efc2ba9de9c31775
Size 8.6MB
Sample260721-ss3nnaw1ey
SHA256 b7dc25f8ccae86212f34125101b635015b0140903f692783efc2ba9de9c31775
MD5 175340720f5606423b00c635c72079d8
SHA1 064bf561adaa873c56d2add03ba49e820a843721
SHA512 84c1b2969f0fc319b3e6e697835b8fdfd4e2ae982bf0f6591e8bc6610e83881545d403fbb04133386a77a132e10dc7ed4224981e13517621e86e0a776317f287
SSDEEP 196608:ZdDlc8FulI1csGESfOQns3e3N5t7ZTy1VWqKhoTwrlp4yuW4+b5pj7:DT+XGQsu3N5tZTmWqOoURp4yuWl
TLSH
T17D963369530D1D11C8F39ABE39204A42B396FA535B8ADF236A770A305DABC143F756CC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  Zelario-main/convex/_generated/api.demo.js
- Size 347B
- SHA256 e043ec60e29308fe7a98c099f117e899dbe7941272b3d2fea8a44eb3157112a2
- MD5 ae076b45776967bda1e17276169a7029
- SHA1 2bda948d3b81fe486e0ee5889b23f1b1985beb7d
- SHA512 49a6d434fe6ffbc95e4a2b715ab07abfc95c52e7bbb6b3ca8cef4d055d654be4a5de137151414d74f7c43da13bc669e03f15123be5b7f8e9deaab70489fddc39
- TLSH
  T1AFE080F5047F4144A626ABDF71B79201B951B18335081E1565F04B94478D356C0F71DD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  Zelario-main/convex/_generated/api.js
- Size 83B
- SHA256 49268790ab5842c250a7274cb339df19ef43d553ecb339de245afbef7c1411e3
- MD5 14836e01d85d7f4a6e7e9e353f5de30d
- SHA1 d1652073048174fc646dc79defd2fbeefa6b48eb
- SHA512 8c434303597e36ca0a9f7a6d8a49e45b24d9dea3ea930e7c0b5d873abade17f5259849c75e95f91f07b52295974187d4aff1d5ca7bf7a3bf4aaa717422095313
- TLSH
  T195A002171743174CD22868D00F66D10097B39383FDCBC99426B84F61EDD6090D27D35D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  Zelario-main/convex/_generated/server.js
- Size 3KB
- SHA256 aea87b3ee367e0e870f3da81ffce8babd8ea1aea695a1e38689841aebc09a1e8
- MD5 cfc7a4ed084119abac0e51d79f525f4f
- SHA1 b44d4785ccf4fdc61486f4ed0e14237737a56af4
- SHA512 00c2eb32e0ad5d99bae7efee4aef3d067ba7d592266ca4da55ebd392a7effe287ed41314e0c690e23e65564116e7893cd69ca80a2c0c85b0c2380a05a535f42d
- TLSH
  T12271BD9A31427377062315B2DB9FD2D9E374613733372084680AC3AA5FB61A853B7ED8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  Zelario-main/next.config.js
- Size 3KB
- SHA256 1caffe3f3cb6d39c385b8addc38678bb67409b165b48c070a227ec0aba39b13b
- MD5 50aab350dfbfc16da224f1926dd9b5dd
- SHA1 706eded778878d913b203b6abab49b7824c416fb
- SHA512 1742aa95fd9cce0651a68114c1d7e24a21318eb1c95ac7156bce42ec0c9798f6cea940d24bcb43cc3f283903f96303498354b28b480dd9a54950284d0cc0261e
- TLSH
  T1B0617C1AD898478B1C937134AA6738036A6C104B5D78B994772DC63E1F1C7EF01F2BAE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  Zelario-main/public/demo/avatar-alt-2.svg
- Size 503B
- SHA256 37a09fdda06f70802682c963bf71ebd1749b4101d53314154c899dc7e88b032e
- MD5 a1aa241c29415d21197505ddbe526235
- SHA1 6fc557360b136eb568dc1d0e98537bf05e6b2ed7
- SHA512 080c660d54cb254d0a35db5452c9cd1afe6222431c7a9bb15194dd5b5c0704c34307682dfd3c856fdfe967d3d0db77a674262efffc802f6449c1c3076d9b155c
- TLSH
  T1E4F09E25E19E4407D11CC349CF47E52C7315C0C382A58224F4565FCC7B190F7E50A3A4
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral10 behavioral9
- Target
  Zelario-main/public/demo/avatar-alt.svg
- Size 503B
- SHA256 56bf4bd7f96a74295285d260eb678859a1c3f296d90342bd46f2fe7fea287fc7
- MD5 abe49377e2cdf7256fcaed3914cf1278
- SHA1 2535a8f24323986e7b6328355f49a7088b8c12ba
- SHA512 57bb8e3dfdb873dd0f2f19754e6c13d6cc39897b1ecd0b31813ae010a4945d98200ce1ee248583977ab1f9ae2cef870ee1011a774f2a60d43df4a889aac6a544
- TLSH
  T176F09E26E19E8417E11CC349EF47E02C3325C0C382958224F5566F8C6B180F7F90A3A4
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  Zelario-main/public/demo/avatar.svg
- Size 503B
- SHA256 952a738ec5ab0530c694894ac0eb43cf700e8f0ede8ebd5de475aa8b326023e6
- MD5 c4baec2b514395b9776370976e4e1a74
- SHA1 edd71c951a1b4b9017058b5253175697e22065dc
- SHA512 bd4e2ab2cb798c75b4e3d9275964b04f5e0489b218921279bea178167788ec36e296f60f5bfee38a9ccabc831a69b0ddf59a8e3f38f0790252605a6460ce6ade
- TLSH
  T1F5F02E25F29E4407E51CC349DF47E56D7325C0D386A54224F5566F8C6F150F7F50A3A8
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral13 behavioral14
- Target
  Zelario-main/public/demo/banner-alt.svg
- Size 525B
- SHA256 4dfec0bc24c54f8952f4ed730206bc65b95044d7c3cd13f339fa78c4893c8186
- MD5 025308e799b93cab58361165f48d9612
- SHA1 060bf9365542ccdaf3077b23759d23e787b32972
- SHA512 eb025308b1b87f77d2a35f4608a319d7d65fa25bcd47ba5093a230e4ce083ae7a844ace721fba4a6ff3ef4473a2b322483ccd844ebb22a91849fbe647f207d57
- TLSH
  T186F05936D2CD542BEA18D3498600E4A42357E0E387698114F5983FCD17264E39C5F7BC
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  Zelario-main/public/demo/banner.svg
- Size 536B
- SHA256 c67b5eb48d76dfc480dca8e0c9eb265252268f69d8fec29f107b0ea4d60a5d23
- MD5 bc1cb16adffdb3f020feb67d12477106
- SHA1 f068c44c5626dd306b7e4d5ef01e84610ed612d9
- SHA512 e447cdedd1776bca2868cc654b70611e3d3ce0a3a961c0c46ee81bb4dadeaa281f7a9856d6ad273c126f100790697b20e09d923eb4d6f05710e40eba69ea74a7
- TLSH
  T1A3F0242BD6E99C17D128D349DB02E464231B90C382998264B5ACAF8E1B150F7680B7A8
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral17 behavioral18
- Target
  Zelario-main/public/demo/logo-alt.svg
- Size 299B
- SHA256 08c983013f1acc4ef1862206cc8cfb44d7942e2c1bf0e4f0edc505638a6b4a81
- MD5 8fcaf074129e90a188745bdc5db751ab
- SHA1 86f430691f12e284cec77723e46900032d2a9bfd
- SHA512 368a06be0ec2f27ffd071bafe3013878860f043d84b1fa0e203787da1c2d3ac3f365bba1f53de6f6de269147652e33379e4c71c8f6e465383f1f1d05cf871efb
- TLSH
  T130E0C2A6E388480EF7805B4A17646A9533D3E0DE07680024F8802D6922284EBFCEA1CF
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral19 behavioral20
- Target
  Zelario-main/public/demo/logo.svg
- Size 265B
- SHA256 124f2b476e9869a02855d676bf847cad9f198c5a5a75aa378c05137b4abc66ab
- MD5 dd53530824878f4ab7ac2c2e616686b1
- SHA1 90ea0c6f11a33ef1026e7c7bd40b5b8d74745b75
- SHA512 349b0d7cf08c603acfd64ca00743945bc04f331a88809124968dd79726b272f82875d091be4f4c73852fc2da2fb25ae4dfa6bf0b25ea99323dfc589e768d241e
- TLSH
  T1F8D02B61E14C4406FB0082861FDD78555256F0DA43040296FC511E5820985B7B8452EC
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral21 behavioral22
- Target
  Zelario-main/public/demo/nft-alt-2.svg
- Size 324B
- SHA256 ca6a7c4b77869359a0dda789b589ca4e55a9e9de7e5708bdd5bdfb4d2fdc2947
- MD5 132db7d4551aa35913b7060f8d6c733d
- SHA1 654d78ab3d0f5928c4a87b7ff0014d12148c4c46
- SHA512 25e23547ebcb77a73796137acc94999b86263f6029641acddef31b1202ddcbfb0624654b87d694db86abfe6a82e2861ff590ebc3a2eafff5fa952999a03af3cb
- TLSH
  T167E0CDF5E3CDA81DCB09871C2B44BA943307D0DD4B650148ED803F8996548D7FC2A14D
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral23 behavioral24
- Target
  Zelario-main/public/demo/nft-alt.svg
- Size 289B
- SHA256 81892092d7b03f7d6a7569fd327a99d09aa86b5799e35fedfad3e4edd7abfdd7
- MD5 59e14f605dbd608ad815e235b4646109
- SHA1 3e67a36857d34cc4b42cb37cc101b329b9011575
- SHA512 e76e256f214e906bc32bc20e63c38c7cd2f5c860a586cd3cd238c36bcbd772751ec7b6948bb668993610abc11d03fe46245e5cd8669ba3e331fce5fce15be932
- TLSH
  T1EDD02B65F2C8E429D610C609378C75843307D1DD435A0254E9807EC995049EBB83A2BC
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral25 behavioral26
- Target
  Zelario-main/public/demo/nft.svg
- Size 492B
- SHA256 68ebc6ebffd41167592c90a8e73d5303ee486f0bdd8ac2f566952fea7b50598d
- MD5 856dddd7a8d7e2c39c90f2de1fbe6dc6
- SHA1 2c3bc0ea6f101724cbf39cc383d116eba859a00c
- SHA512 74ec78811924ae645ab70b5992d7556069965c9ba60c30ad24b170797e0e238b7ed790b3e6f06f02587efbd5509205ad5b5af6dbbc5cf687af8e455886fc5d11
- TLSH
  T1FBF02725D2AA8827C02CC349DA4BB06D3366C0D343968154FDA76FC86F214EBD90B3A8
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral27 behavioral28
- Target
  Zelario-main/public/file.svg
- Size 391B
- SHA256 2b67812c325c199a02536cdbeea0c593a72f707d323b72ee3e08dbab06753bd4
- MD5 d09f95206c3fa0bb9bd9fefabfd0ea71
- SHA1 fb380eeffe87d50b597383664c02982964d0d28c
- SHA512 d98ec5a299d1e08a545fb1bcdb9680577719e2091eae990fcb03db320ea231436306ea44c35e76c07d926736c589defddb603e41fb6db1780ac0636d93368c14
- TLSH
  T16EE02BA6B28D9ADD280FC57C956F4B1653AD816A73240098989C066070424A8DF03581
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral29 behavioral30
- Target
  Zelario-main/public/globe.svg
- Size 1KB
- SHA256 b614b9bf183925957661ac851498fe1d8029fd43a62fbfed86f9e2624a57e7cf
- MD5 2aaafa6a49b6563925fe440891e32717
- SHA1 2eba23b01a46733bb8423e6d38ebf5f7e95abec5
- SHA512 e50d1bc4c4015915dc7ef46b6447946a23ec4dd66937b05197e4e2a80607fb1742bfdbe0e174f084d2336d74461319e9c23fc2eff3301fb8f3db0e9dd01a0091
- TLSH
  T1F711ABB54328464C3A13CEB8DBB710A0131EB67D328901F4DCCDDBB2A04B6A4D603820
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32