435e04f65772efbc623947431b5b9c6f31abdb1ca1da6e2a59ef2fc7f1338f5d

Sharing

Copy URL Twitter E-mail

General

Target
en-us_macos.appx
Size 18.1MB
Sample260721-vramla1epc
SHA256 435e04f65772efbc623947431b5b9c6f31abdb1ca1da6e2a59ef2fc7f1338f5d
MD5 a56abcf96aa1c1e43f6b1745b6da718b
SHA1 8a2485d14484c9141a8ea7ef97e6e6ab843e94a9
SHA512 811c85e6597ff9dff79c0abc0d27adced3ea9f173861ae8fc69f0c42e7f2734c31f2b5e3a5e199d17ab13195a39a8dc7df8c2f2833afdb041b6c3b5bd03d9760
SSDEEP 393216:y14idhdvmHRJURCszobMQieAd+4verYEBDpuN0sjkUbHx3hgahqWDDeY:SxdfvmxJURCwQiBd+RrJDOAUDx3eaoWv
TLSH
T1F61733F2C0E8DADEDD07A839D179355105E6AEF22F788114D9C6F1D929185F0238AAF3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  en-us_macos.appx
- Size 18.1MB
- SHA256 435e04f65772efbc623947431b5b9c6f31abdb1ca1da6e2a59ef2fc7f1338f5d
- MD5 a56abcf96aa1c1e43f6b1745b6da718b
- SHA1 8a2485d14484c9141a8ea7ef97e6e6ab843e94a9
- SHA512 811c85e6597ff9dff79c0abc0d27adced3ea9f173861ae8fc69f0c42e7f2734c31f2b5e3a5e199d17ab13195a39a8dc7df8c2f2833afdb041b6c3b5bd03d9760
- SSDEEP 393216:y14idhdvmHRJURCszobMQieAd+4verYEBDpuN0sjkUbHx3hgahqWDDeY:SxdfvmxJURCwQiBd+RrJDOAUDx3eaoWv
- TLSH
  T1F61733F2C0E8DADEDD07A839D179355105E6AEF22F788114D9C6F1D929185F0238AAF3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

persistence
behavioral1 behavioral2
- Target
  OfflineFiles/Frame_40c97c1e502f05ba5e7708517e189b7e.svg
- Size 4KB
- SHA256 920c205dad1ed4aab844fe4e16fe2fc5eace1faa409c96d7f0cee4018d6ed1c6
- MD5 bdf4fc768a06ecc4f1b9f6b01cac8db4
- SHA1 cfd84bb48699ac1145d1798e4d69b9444a8e5bd3
- SHA512 d102cc7d644a81190c7fca1be0d15621577199f79c182a1f56d1a7dd71b5d32a376214ba4585ba49ea5c04bb96e6a933a50295cd04ba5eddba8b6c5b9ad27d4d
- SSDEEP 96:XwbhXr67iUTWlOaSYzz/bmMH638nix+KMu05ZwsNf5Nbcukh:mhXe7RTWoaSYzzTmMH638nidMuOaN
- TLSH
  T1F09161E9364E85F5E413D7E9CA12347E254E60FD74A063B0C3E9EB11B8740EA1DA8DD4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral3 behavioral4
- Target
  OfflineFiles/WaveDecoration_9b1576975898e35b07a8534cf8964c76.svg
- Size 1KB
- SHA256 8fd6c71053cd0a02142f75b69d2662bd746ff94d3f851c4d93d19585b33bb05e
- MD5 273b02cc07955966ba9badfed61a9540
- SHA1 d4eb6e1b03dfaa94cef62c0d1c2d0b62514cdb86
- SHA512 d81f04f88d86cdb9d7dde817e43cfc1649e72034329a1e75d16b880cd681b33cd325864153c3dc72fdbcc93bd04e4ef51d685ee76c9b7ce37db42471aa3fc60d
- TLSH
  T1951125F93394C3705CC2967CEB3D51D5302764D926004995D2F66E2D38A0F26CC4CAD5
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  OfflineFiles/index_a91fa4f3e5c16f6b1658cf8f41b4701f.html
- Size 666B
- SHA256 b050789e517e05c1ddd96c827db6f4151faa3a872723ddfd4dc125484887573d
- MD5 43a0c6469bcbd5d89efade9f8013b562
- SHA1 b039bad9363f643015903f9f14b1f5ec538b02c7
- SHA512 43748bb7d748f7d6aad914b769f0bd9d4b3947c650052ed17e1fa38dc7dfbd4def3ce2341caa070684037427b8cc79d1a0b212c64f4cc799931799e369841509
- TLSH
  T1AF0199D3CDDCC4296A5129F4ACB1F00C921EA9857D5A9D14D2ED42AC0DC0BDC9E87E94
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  OfflineFiles/index_excel_6764b30e802ca2244cec3a6b89e025c8.html
- Size 668B
- SHA256 a10efa2f56191196d411a8bbcfb903c9e2738b0cb6c9fa3558fe5304c71dfbdc
- MD5 6aab87f71d6e03f929940be7b18fea59
- SHA1 ef738592fb9adb99649806c82344fab2298b6f4c
- SHA512 5c5364fbaaf7d6c67a68ef9894d40f57284baa32e505361fac2dec5d6b6cdc7764bad8f5a9d978ef72ee23877309d53472d12ef074921471a5acf3b2a25e2ada
- TLSH
  T1DA0199D2DDDCC42A6A5129F0ACB1F04C921EE9857D9A9D1492ED42AC0DC0BDCAD87E94
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  OfflineFiles/index_ppt_c342d1c6c980e7e6ac5a21d1e3cef37d.html
- Size 673B
- SHA256 cf533583c0a8e52f2235ff4ccdeeb34271e35b909f444dd543c5d0b623022ad2
- MD5 76b6739b820b7c191cd0e4ceaa2ca7d3
- SHA1 3900017e62df815bb70e25e76fb24612bd4fe8ee
- SHA512 6d7e65a9e8fa16ef6f623dc237c1acd0643d1d586930688ae8871faed88dfb093205d5a8b76d4ec60825768f65136b86b25dd4cbab46744b0d69164e76743e01
- TLSH
  T18201F9C2CDDCC4296A512AF0BCB1F00C861EE9857C9A9D1892ED46EC0CC0BDCAD93E94
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  OfflineFiles/index_word_83bb8ccc9c60e07aef9deedee21ec57c.html
- Size 667B
- SHA256 daceee4eccbca9bd1c9a5b483e4479237d0692359f0f7c1043152be9b735a020
- MD5 773e05ab3ee6bd3b608307f1ef41fbb6
- SHA1 2d3512193f3bc6613896d451c946dc6057f58e5a
- SHA512 65872d67fc8476b76ecccbbd8b710a5aee3655b3bdcb9c5985de04bb10a9bf838313d3d6fa417545e773e5583c123b9cf36f7e95822d3291c1aebda00d1fba17
- TLSH
  T1470199D2CDDCC4296A5129F0ACB1F00C921EE9857D9A9D1492ED46AC0DC0BDCAD87E94
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  OfflineFiles/loc.js_a4772f9b76e5e03d6c27d3849ae27d48.map
- Size 22KB
- SHA256 a1fe6b29fa7303e726045b1b8fe768274d0cd5cc47d58a47066d5fe3f44c1a79
- MD5 13fd012c23d0de13518a5fd3a58e6954
- SHA1 fee0229c69e178d41561da6b9d81d501af94423f
- SHA512 9c37f398bfbbd18ce8ce92b842b81a30c19decfea8fb7b8425a73712bff658a23274fff080a8b5e3b2ad1d90b5e8c1b20d82a13ce6a7ef57e84f646a97ef4558
- SSDEEP 384:fhKj5zm444h4hE44444444444544444444444444444445444444444444444448:JKVVLbPTSN2
- TLSH
  T102A25F022376F59645785E7AC9515A2E5DEFCCD83CB836F08ECD768C71CBC802A78A61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  OfflineFiles/loc_d19d44466f4d29b9723764d9ce92b9f1.js
- Size 7KB
- SHA256 c0c3711179877f6dee3101e9f5218bab8df16a101ed8a63489cf2eadc53e9af8
- MD5 2514cf26b4102a1d5e439a302372bcca
- SHA1 99f736604ee5c76b67a9c89355e6cb0394523a7e
- SHA512 409600329922f9789aa0c469e8e03d759b6e8da7624afeb3e21893214219e43031ab463702423534336546376d1a9b2547c36c833dcea1fae07e9bd1bed67ad7
- SSDEEP 48:jWGCnixzcEyoLSw4nk8YmildBgVyccQVPAGG2X7tO2cZgu1LJj0X7cWth6bHPYzU:hCiL2ZkXhfwsZIpAsg
- TLSH
  T120E1A2CB39E4D1CA4B36D5B39D4B758D18DA0C1471FCBEA286F57A84FDA698C1122C38
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  OfflineFiles/main.js_8657cf2aae34cdfb663106396c199903.map
- Size 96KB
- SHA256 4914d80445be76fa01bddc46531541bb239e120f315d11e2a3a8146a85962474
- MD5 07a8cdf1d6b1ac2f44e461c546fbc04e
- SHA1 f8c5e520c3b726f66c6633c1183c3fa6511e33ef
- SHA512 a2d1b462ea02c84710697bf7932767e64280d07f0f11d727750f6832cdc12e9bf1efa37385dae5442b481a5bf75ff825f244e161e3b4d6f52c7de34851b02b39
- SSDEEP 1536:JftnGXdg7H4CE8iMZu3bHNZ0LbP7ElRrr02ySnyc:JVGXZkbzWR0U
- TLSH
  T12AA3D8583F7FF6314E4726BA4E9BC045F764B08A22440091FEAC88ADC7C1F5D72E6A59
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  OfflineFiles/main_680c63f0e7fde24602a5a935b6951dcd.js
- Size 21KB
- SHA256 0fa20f1f6ebca8305d6771b09e1bb50c4ddb0f2ebf87148fd7144370413bc1a7
- MD5 aa4f63435e9f5e1c6b912a7746bc611e
- SHA1 2a75f2041018bd3a3be377b27be782f35c6431cb
- SHA512 5c8f446c59da4b4701b690124e6b04ed9d2e7aafc096ade44323f68b5ede8d65bcb3f2dbd0bb7207f2ea81079a83ad7c84834e5ee1bca00add7ec09f8fc12d38
- SSDEEP 384:y48fPoeYCdcvXR5rBozaBxyGNZRuZNiiENE0RDiU5c8Nfm3:eIeY0mR5rByQxXNeNUNKUe+u3
- TLSH
  T1D0A298C9FACAF465028325B1417F5007F3B63AD8601E4062F7AAE4D728BD44E6353B7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  OfflineFiles/main_ui_59d2f60ef57f749378746161416a9fce.js
- Size 5.6MB
- SHA256 22a94eb45de9db51d28629c31dde1b8ca6a101bb2ecde90f5f907c5890a94df5
- MD5 f2f010768b7f1e8ffdb62ad67b5add2d
- SHA1 055eea37b7ac08d5e1caa67c12771b6f9b4423f7
- SHA512 e75790def042474fd0e3fecb51dcf4e2d8544ec2ee8ceea2cb63d6f139a431f5701bb94f7a97aaa804ce3a28946d902f4af89f228f3a3b719128814047b24a82
- SSDEEP 49152:aDvpttZwJbhTJrSK4VxjPHRYOI+AmOkmMOkxriwu/2QsxEMBZWkmHiKn0MQYFQft:M2c7l
- TLSH
  T1F856D0D4B240B039975360AE807F6499F3393948BC4985E4F375D8DE28E498D63A3F7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24