0469fb945fc9ab72a82d739efbcdd09ee49ce31b6c69521fe75bddefec15767f

Sharing

Copy URL Twitter E-mail

General

Target
candy-collection.de.local.zip
Size 7.3MB
Sample260722-g6mc2sbe85
SHA256 0469fb945fc9ab72a82d739efbcdd09ee49ce31b6c69521fe75bddefec15767f
MD5 12be154e818474cb750cfe8819c02d76
SHA1 2196718d06b4e274c07e3c15dde62e1f204217d8
SHA512 51fdbf660cc13930e691b583e971c2e933a6ac354a4c502cb788f994904ac35a8ffccdd1604e20c64ad406c64b921def64a38825c9eae6c53e6732e8646af042
SSDEEP 196608:dKs+RuDF49Rk2Qh1pPz4Qvnch045kYO9KjE56gm:wsIk2QhXJfchrkB9H56gm
TLSH
T1227633147A7B34B6C27EABB0A587585FD33F21C80138D50E63345A045AABDDD0E93AED
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  candy-collection.de.local/034e9fa1ef020b3f6d5f86750920098c.png
- Size 8KB
- SHA256 f13a3de7e335701212891ae8f1b19fbddb4c67c63cebd73937c10ad8a070bf10
- MD5 41f2e870d1689d475d540c18c97ad008
- SHA1 9cc5aba4570ac3ac1521e816ef7169ac06ffd343
- SHA512 2f29bcd71b35364497e5e2f96bb913d602df74b7aaa70b3868ef2eb2d1ae8ebd9f1c443e0d6d700fcee2a10afea6f93f24349641243895eb5f4b1bcb140e6a4e
- SSDEEP 96:MssqFa16nTCZKMgLnIn6VkUPL7gkHmA28YJ3h5eN4gzCZ7nFvuzsrQNiMHKnTk39:MssqFa16nIynItC7gfVJ3hsEUvKgn93
- TLSH
  T192020AB7EBB9527D4AC5E1675037AC1B1B2877C042B3840C33A872B928196CC0DA1FB9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  candy-collection.de.local/1390b425cda2152086953a81699eb67e.png
- Size 12KB
- SHA256 ebb6306f7f61686d8b1f1c24f5991f587c5c52b2b35ca9edf81285be2470cf9d
- MD5 51efa5220894daf76bd0b80a2114182e
- SHA1 671e59d7e29db36c0313a48598cd4f1fb824b35c
- SHA512 903dc6e1ed1c39953ed8f83c770f16424d32a8fabdecc027123498d32ee9dd3cb060f89acbba9903d294c711d81ac3663471bae98a7706a4d404f3227fffc8eb
- SSDEEP 192:MssqFa9axfnvGOyyYPRC0YHqE+a3GNZ4IyulUfQH1ZO86CSCX+gxS3:jKWfv2ZZSD3GQeUQl1SGk3
- TLSH
  T1AE524C7BCCA0277ECBD592BFD47AEE3A83D23584C4E3840E259873496D4554C0722AE4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  candy-collection.de.local/2a1b29479dbb8ec91202537f54e6c6d1.svg
- Size 473KB
- SHA256 7cb9c670dc59c9a6d0efeaf9cbfdb099fd498727dea0d6603f0563c970cdba93
- MD5 2a1b29479dbb8ec91202537f54e6c6d1
- SHA1 954565d920d387b70930a6c1fdc9e24dab4262f2
- SHA512 6bc87b8a7dd64a62f18a692d6d38644305498ed88e7afcb184928a8b63b5e2b042deef480a3a0bf6030fb0e697c75761678d0daa442981a745c5cfa50323e0c7
- SSDEEP 3072:guVPK62I8dMfZR+MtuzleYPlFsNN5UloNe1+qwG:NGwG
- TLSH
  T12CA4A6EADF70A1F468CA2FADEF325C98355A74BF7E728548823DDD9455C3D888A08C40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  candy-collection.de.local/46c951ac66e69c3f4f8dd0624df95a45.png
- Size 12KB
- SHA256 7697e5064c4486b82e92caab8a5cfc46fe57b4fafea9de68ebbee75d4ad9baf7
- MD5 60951666f3db0652dc469ac5ea0dccac
- SHA1 eea001fdc0188b74e1e9d3a3cc57e6f0c34d1a6b
- SHA512 c86de10be0e7db51821700a7d4a0dc05ede94b340ddd63478e2e2907f6881955d69d093aca340f4286f199abdbf25bbd512a99f711e15854ff27fbffec65af6a
- SSDEEP 192:MssqFahxHOpYNQU1QlNMJdHnqr7PyHc9QVvuTejpYD3:jKxumNQFNQ5P89hQ03
- TLSH
  T198522AB7DCE4633DEAE520BF512EFD2B928136C8CA7385092095738E466508C0F60AF8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  candy-collection.de.local/73dcacd75d54951026ff8f7ef268b26f.png
- Size 8KB
- SHA256 e2fe5c20f3508e9b073495918cb66e1b3c66d1aa4b3dbb0cb30c0cee3bb3d8d4
- MD5 700485d95d4715280f195979a24fbe56
- SHA1 6982092e1680a3ad3041debe0b57d35443e28fd7
- SHA512 5108e15c46343146baabf95a8da70cc5e7c2d679a1a672016b79c107cbc31420c5c8aa87a39fe17d6fe745989feba0a8bdfc124afa1f60b6778faafc72b21db6
- SSDEEP 96:MssqFaN6nTCZKMgLnIn6VkUPL7gkHmA28YJ3h5eN4gzCZ7nFvuzsrQNiMHKnTk39:MssqFaN6nIynItC7gfVJ3hsEUvKgn93
- TLSH
  T1C7021BF7EBED5E7D5AC561775017EC1A2A2877C046B3940C30A87289781968C0EB1FB9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  candy-collection.de.local/77aa3789fec804f6ec26dc15365bdee8.png
- Size 12KB
- SHA256 59c1ac3dc1fbac0f77efebc5816d10aa17e059ad8e45dff39991233d19aa185d
- MD5 db427b7271b79cfbfb3593eebea58d63
- SHA1 dc74f2f9a692c2aa625c280e27a13c191447ff3e
- SHA512 725c10f483bb0c0ed430b9026a3b9cc5a84d15c5d9a9de4bf0abbf25e3e94e3e646e4da62421664ed88895c894284776fa240d44b3dba0ae3d5a48a90dfc0cc6
- SSDEEP 192:MssqFaPSwk4FF4TSpP8kkvfib1A2O2KBRZfzbxAUg/w98M+py3:jmLk2WKbW2HUgI98Mr3
- TLSH
  T1FA523CF7D8B8766E5BD560B7A41BFE2F82933184C5B7860A60A83389465B4CD0B11DFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  candy-collection.de.local/9886d3f03300d1dcd9f317a5f70552e4.png
- Size 11KB
- SHA256 16a735d354e47b18a17eb71ed3de37f111ead539be61efdc93be2868361d8f21
- MD5 67ffa4dab81b2da0a656b0b3fbb89bea
- SHA1 c09a92bbbf8b25607d5319af843ae7823d767e50
- SHA512 6f3ecdfc81af687f49bab717454958c43a8fa31b3c736f0158b2c4928f225fd22b77c549af1f2082209c01b9327ac18ee3ab19fc189b6916e3b1ab4f0184903f
- SSDEEP 192:MssqFaB28MMXtpkRvTiQParSgQmfr9wnPJLLJ3olAdo3:jU7uRvTSrRjGdL6AG3
- TLSH
  T1BD423CF7D56A535D87C8A22B605DFD78E6F57280C2E3480C32F4772454A19CE1BB26B8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  candy-collection.de.local/a47d012c0c65ac4681db10dca44a52d0.svg
- Size 1KB
- SHA256 a8b18499f884efb0a88bf520a4125c5fbec40a792a69e2882502732f6e37357d
- MD5 2dd3fc0d4abc2dcb267409bd0bcba471
- SHA1 155d5a8c772b1f719493776c70061be47f895789
- SHA512 3d14645680f71a38a03d689fdd0e0299958d16eeb1500b49100db68946d14b57e4e58910faeb66316d40563d7e13b9b5a1a6a0b349adfa1178f7dd832ccd711f
- TLSH
  T13721AFF557286934898B74B4D92FF10D56AD0480C9EF1107A27C998C78E360E59F3D5C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  candy-collection.de.local/about-1.html
- Size 70KB
- SHA256 d06ab9789579a002f4beb4ccedcc2e808dd9bf53c91fd3464e09649b0b8f8f3a
- MD5 068b20b352bf6eb87ead7c4e16519f2c
- SHA1 00c0170ff714e743348e070d90af9ebbe6350fc5
- SHA512 3cdc8cdff1fa8176b4015e48682a243c4042c325af0b1d2b3655c0f7697f661cd93548edaa69de81c8cf5db22f91742e1d76667b53b848efd145ca93515b89c0
- SSDEEP 768:ef3rnHs1aO4wkFHFTzeRbE8FP1zRZZgRXifq:+rnHs1aO4wvbEEfPgRX7
- TLSH
  T1D7631044F8145D5BB3B6A2D96F30B0F43B6BD279C9050147F0E8E68C3AC3DA8D6635A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  candy-collection.de.local/about.html
- Size 49KB
- SHA256 24b99bd2352759c80005b2c5e4b09f369f02a3bf33e4427c1c5cf30461bd42bb
- MD5 09723f09ffbb8a77b44fbd924bbbd788
- SHA1 e99407fd32639e98a60a4077c2a769ca0daa5e37
- SHA512 70210169e8e9429331b2d3dff13178180fefd89499c7c8d22a5e608dac5ea663d4ae77833f4fb87e94026878e4caa4cb09667a71877304090c08f026490eacde
- SSDEEP 768:1sy7dTaACKC4sy7dTaACKCCrnHs1ao47UFHF/ze7s4Pd8UR/jHlZfq:zgAcKgAcCrnHs1ao47lLJrls
- TLSH
  T18833F92BEA52212FA173E3F4F3057F53B719A32FC3456069729CD2B62749A7141CE249
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  candy-collection.de.local/ajax/libs/jquery/1.8.1/jquery.min.js
- Size 91KB
- SHA256 bd2caafb9a957d85457d9807d0e6583c5cea98642bb7e17b1ae8b0041be59b8f
- MD5 8d6c56e61d294980ae97f530db01a7d9
- SHA1 43faadd11f562c4d5522a7b55ac9580d375b9571
- SHA512 f8d8b8ad2275cf3aa61870eba82a118d33f650af24a86816164517dd06ac060cc660756a3f1555dc5fe62d474326f0c56073cfba71d77959fc065b45781a90ab
- SSDEEP 1536:rYUfB9bwh3Kbx8QRExoulFSW7bkwzy8FF8AM60HLFWC5iqhKy3UM4JOJSxy3j608:nzi3mCPZkweh8FPIKCG6HyUtCuK
- TLSH
  T1D093E7E972D6716387B730B850AF510BB13698E6B80C8C60F058D9E47E74A4960BBF7D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  candy-collection.de.local/app/module/webproduct/goto/m/m24536e7bc76c586c.html
- Size 58KB
- SHA256 7430a6f75d83dbf7ba76711991ea406d6eff1ced48910c86f65b0500ab721cb7
- MD5 842075d0aafc42d2d7ed08136cea2994
- SHA1 49ed4f0a1d85a759f6da6fd8fe08760d1c0a6a45
- SHA512 3ef64d75d5c05e03c921e9b6b6ecfa640a7dd38bca1ef88f53cdbcecef30ee6cf89ad80e2908a80570dc233230bcd0b5078b77d3c87967b1eac9ca3694408136
- SSDEEP 1536:hHs1f4fnpLhgL6LGyuW8Ltq9LR8q9Bfsc:hHcf4fplgkV8hq9Nv
- TLSH
  T1A943FAE1E17108EB407B82E4B1197792F6E1FB6ADBE0D648F6ECD720BB80DD5294118D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  candy-collection.de.local/app/module/webproduct/goto/m/m77c073a19dae3a58.html
- Size 58KB
- SHA256 7430a6f75d83dbf7ba76711991ea406d6eff1ced48910c86f65b0500ab721cb7
- MD5 842075d0aafc42d2d7ed08136cea2994
- SHA1 49ed4f0a1d85a759f6da6fd8fe08760d1c0a6a45
- SHA512 3ef64d75d5c05e03c921e9b6b6ecfa640a7dd38bca1ef88f53cdbcecef30ee6cf89ad80e2908a80570dc233230bcd0b5078b77d3c87967b1eac9ca3694408136
- SSDEEP 1536:hHs1f4fnpLhgL6LGyuW8Ltq9LR8q9Bfsc:hHcf4fplgkV8hq9Nv
- TLSH
  T1A943FAE1E17108EB407B82E4B1197792F6E1FB6ADBE0D648F6ECD720BB80DD5294118D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  candy-collection.de.local/app/module/webproduct/goto/m/ma467b6dce53528d9.html
- Size 58KB
- SHA256 7430a6f75d83dbf7ba76711991ea406d6eff1ced48910c86f65b0500ab721cb7
- MD5 842075d0aafc42d2d7ed08136cea2994
- SHA1 49ed4f0a1d85a759f6da6fd8fe08760d1c0a6a45
- SHA512 3ef64d75d5c05e03c921e9b6b6ecfa640a7dd38bca1ef88f53cdbcecef30ee6cf89ad80e2908a80570dc233230bcd0b5078b77d3c87967b1eac9ca3694408136
- SSDEEP 1536:hHs1f4fnpLhgL6LGyuW8Ltq9LR8q9Bfsc:hHcf4fplgkV8hq9Nv
- TLSH
  T1A943FAE1E17108EB407B82E4B1197792F6E1FB6ADBE0D648F6ECD720BB80DD5294118D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  candy-collection.de.local/app/module/webproduct/goto/m/mb0048735779d01c7.html
- Size 58KB
- SHA256 7430a6f75d83dbf7ba76711991ea406d6eff1ced48910c86f65b0500ab721cb7
- MD5 842075d0aafc42d2d7ed08136cea2994
- SHA1 49ed4f0a1d85a759f6da6fd8fe08760d1c0a6a45
- SHA512 3ef64d75d5c05e03c921e9b6b6ecfa640a7dd38bca1ef88f53cdbcecef30ee6cf89ad80e2908a80570dc233230bcd0b5078b77d3c87967b1eac9ca3694408136
- SSDEEP 1536:hHs1f4fnpLhgL6LGyuW8Ltq9LR8q9Bfsc:hHcf4fplgkV8hq9Nv
- TLSH
  T1A943FAE1E17108EB407B82E4B1197792F6E1FB6ADBE0D648F6ECD720BB80DD5294118D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral29 behavioral30
- Target
  candy-collection.de.local/app/module/webproduct/goto/m/me11ca1124aef82cf.html
- Size 58KB
- SHA256 7430a6f75d83dbf7ba76711991ea406d6eff1ced48910c86f65b0500ab721cb7
- MD5 842075d0aafc42d2d7ed08136cea2994
- SHA1 49ed4f0a1d85a759f6da6fd8fe08760d1c0a6a45
- SHA512 3ef64d75d5c05e03c921e9b6b6ecfa640a7dd38bca1ef88f53cdbcecef30ee6cf89ad80e2908a80570dc233230bcd0b5078b77d3c87967b1eac9ca3694408136
- SSDEEP 1536:hHs1f4fnpLhgL6LGyuW8Ltq9LR8q9Bfsc:hHcf4fplgkV8hq9Nv
- TLSH
  T1A943FAE1E17108EB407B82E4B1197792F6E1FB6ADBE0D648F6ECD720BB80DD5294118D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32