4a0e94fd646811f75feb171e27214c37b0a0c95a898b68c647d99b9c0fb5593c

Sharing

Copy URL Twitter E-mail

General

Target
Archive.zip
Size 11.5MB
Sample260722-hbw5faem41
SHA256 4a0e94fd646811f75feb171e27214c37b0a0c95a898b68c647d99b9c0fb5593c
MD5 9c313484719bb3bcc7ff7ad427bb1c58
SHA1 65ed1cf647edc47369785dab53ae6ee921ff897f
SHA512 85001a1d3ae579bd9950f1ea1056ace919bd1c336424565b67e0fa6d9b274cbbab404ab48c089347c4607e29deb111f89333d63193b20eb3b8a820552e802a35
SSDEEP 196608:ozxvhnk3pR1cefk3pt2fmwVBKxpmnzok1k9fIh+wpWSzeiuB9Sxp8OUhkyD5jjtl:ObnwrwCfWcz2fIh+w/eiuAEhBtjXCLY
TLSH
T1D5C633BDC91D20E6E60F4676A053A61D98C1249685B3E5B33E0E9634899E1D0333BFDF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  app/src/functions.php
- Size 20KB
- SHA256 ad2265f8bf0e681f0cf47ff47f310854dfef8387f0ac9f0b5d2f7c51b1d166ab
- MD5 df3d0c68b064347410892ae4da9e9f28
- SHA1 2388515caf7e191f34ab34e7dd5f0f876dd4b90b
- SHA512 f14cda457c3d90c6d151fa2a8ac3302ff8570440ac99bcd6adaece6e572261aec13d4e85167ca5c970743b2729ed08dc2369c170686a1cea8490e6a81355bf55
- SSDEEP 192:CqW13zVpRDaPRNy3AWSUJDHHFrdy8Ik6GDxs8EC4ZRmX0p3Z292KjIoBFCSYX2CV:/POAqJDHHrdljU4OGuunZMw1aGJPm
- TLSH
  T156A2A6C5F577526721DB88FB2FAF92C594368D0B8A48C6C4BC4D13C00FD4618D7B9AAA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  app/src/functionsold.php
- Size 17KB
- SHA256 dc1240f48c3c7de019873fdc28c9ff3ccbcfdd030d2a9fbce762223f5b79b3fa
- MD5 49571ff134528646be1b89ed8c5e86aa
- SHA1 38b8b3d7ff0c03abef2a6cb1f1c5019c45c12351
- SHA512 b6b3c7883ac195cecd2711e6b5e790764c601104f168b7139138870512258a3dff436795a2978411d18ba40e98e151812b52e9de4ed44f79e3b0cceb74b8787a
- SSDEEP 192:+bK1dILIX/Ng9pb8SToEQvFKqn1ASYm0FaVnMnLwda+HDmlmr:sK1d2IX/wIRGqn17VniLwdasDmlmr
- TLSH
  T13B8252C9E519566A21FBDCFF6BA391C5CC228E0B894083C5BC8D56C01FB0514D76AEBA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  app/src/sqlHandler.php
- Size 17KB
- SHA256 2d394d902f8df06ceadeb032a4819fabf0d603ee4f5609108486dbd8a330d932
- MD5 9706a9c2024acd4ceaf749f639123e36
- SHA1 c08a94515ccea95690afb9e50dac8f91745448b2
- SHA512 2d54b20c2ae76c39d0708e3cfa7bf09289a055d0c812ff9141b47e01821608858bb62bcbbc345d3bea4aac660d2335762f02a3305f987a331f14f256d34fcf67
- SSDEEP 192:KZvE4o+5E4o7Os90gg3qK/xE90JB3qKtJCTJFBy:K5E4o+5E4o7FgrXbCTdy
- TLSH
  T18F826482DBBC24713126A9381A7FF49399BC4577EF0808D5FA6D800B7F74021AE9D6D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  v1/app/src/ajax.php
- Size 2KB
- SHA256 48d2839a78bb75d7ffa09c92194e536dfc29339d2a9290ff7679e8804036636a
- MD5 9cff5b17ed74b5daa4d63ada8d3dc5f3
- SHA1 db3a02304b8bc57431a9ba3fe87926834dd494b8
- SHA512 e60c013637f4509e9c152d5fdd7d27f873075c13edfdca019f5d8a63fb843d166d66de293a2c2325f3ddeb4c60314fbb1bec08a0bcd111ce96ce5fb0cd9d55df
- TLSH
  T11751EDBA909E55E620734D0FB50F1D036C124AC72509A887799D1B818F8CA795BF6CFF
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  v1/confirmation.php
- Size 9KB
- SHA256 f676fbb54704f7c09f70958662f59a2d2103b2d3cc7fb7b246c9014952f369da
- MD5 12cbd9f0d5c7872d00f8a992217a5d67
- SHA1 922805d113e41cda36037ab0b77a379c99e87a9a
- SHA512 4c968de6862e837a3cee9fcc1d3d305583ea542cb62a0c20bd8a9cd6b4e7574ffd621091ebec7bbe185132efce014d32b077c0d6d2d88f169e848a7865ab6090
- SSDEEP 192:UI4ey8JjaFbtK846WkE5GC5dPCp9bYyy5oLtzrAWw+:UIabtK8GkYGC5VCDbYyymLtzrrw+
- TLSH
  T1EC12C80AEFF8493B10730856A83EAD14BD77887B83164C017EBF5198BFC0D549667A68
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  v1/css/upsells/app/desktop/fonts/upsells/DharmaGothicE-Regular.svg
- Size 214KB
- SHA256 97edbc861a37f97ddb80b6b52c14a9d57a585ee2fdeee8d58469e9ea44e1897d
- MD5 10193a44c79769a349b677539acfef89
- SHA1 c35ca65c4996b1c873815c2b2db5c4c2a6670ede
- SHA512 f3f8d395b3dadbf2d766e943d61429f76893cd690483387c0e7521e355ede16362a30deafc7dc1a34cf280648973b2446402139a24455bfb9e98b1e553885d4d
- SSDEEP 1536:nDqvoqMSw58A3kafsS/BJAw/A+vC4nyyGK6yXnGgjplgjOi1XNAsVDMGrCzMoTWz:nmWeDLGYmdf8DS/Gs7dC
- TLSH
  T1F0245B69C8EDCE64D2ED45F9721208B4293D42DF2B5A37197C8C6FB4CE112534BAA9F0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  v1/css/upsells/app/desktop/fonts/upsells/Gilroy-ExtraBold.svg
- Size 360KB
- SHA256 cc74fa4005d211ff836b52ae58aea06db962b55b658e6a8570e47fb0dcfff744
- MD5 ccd7277d867ce03bfd38af8b20eda863
- SHA1 aa5f51b2d330d52d06cf9b332ce9b14ddf266a75
- SHA512 24ebe99d7c5634e859c25ede26f6a499e3feffc2db2af241ee4a70b08775a1072322702484ee8a1ceb57cc26a1e3b926fccb19c01bef5f5e7406bf454b5e9d5d
- SSDEEP 6144:gATcNTyJK8nIbQ5B9bj96xHChfIApC5JtzI7C+muXEhw3Dzl4zkI+stg6OavP/Yd:gLNTyJK8nIbQ5B9bj96xHChfIApC5JtM
- TLSH
  T1657420ADADBECE44D64A7C3B5B960A34A79DD5CF1709350CF855B37A8E0017A07EA0C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral13 behavioral14
- Target
  v1/images/00e4f07e99be7f189d9eba0b9f723a82.svg
- Size 2KB
- SHA256 443ef61c833a834fcba8511b99b20c2804fa9b372bb2b3cd02ec9975625b3a39
- MD5 c10e54bac3622d4819e56f407b79b5cb
- SHA1 d2404d023a8703c2dc10f456d6166902d029d6ec
- SHA512 48be9b5f06a2f2d5dcd2b277cf4f6e4bade14677a0ed76733d8da16c4d274bd42a6a55a1ea53cec3297ce67996d711c7e539d33a675bf734e6df47d342d567d5
- TLSH
  T1D24104E5B2849AC1900BD778ED3569DBA9BF24F96FB563C451E4AF217B09089C880CE4
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  v1/images/041ff413eb1bd55b21ccb3397f7f6bab.svg
- Size 279B
- SHA256 8f9012c79cfcc9aeda604c9717a8ce47f91f4a336d580c59c6b014bc7e2f00ec
- MD5 9a21278e52b2a214d2bb177133aad778
- SHA1 47ab14dab70f0dd666571342e1e5cd42f10c812c
- SHA512 a3ac14187da90705e917da36dd8368941821556850f2a4415e17a26e6c365b73799e4e407a665633339d7a59a9357385be2059c5cf4f8d4da62e1bdfd4520a75
- TLSH
  T16DD0C2E292D8C8488801AA2C4169247945F7B4FEB1C8488993842242AB001EB2EAB298
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral17 behavioral18
- Target
  v1/images/064a640becc11b3146950bca8970150c.svg
- Size 356B
- SHA256 db56b1a921c942fa7a6d5c339f16fd4c1eecb455ddff937f014ea2cd54cafd12
- MD5 20fdc60d5c4cb3befd8d97ec9d867f74
- SHA1 54e49fe93b2c9de783b2d1a90c146b258af23a6f
- SHA512 aefa7b1019a1b46fef6beb0b53f39357d9b80e0811189d7e70da9f32e1462631c7ea1236f5d2eb8d41541426ec9ef8d26d97f6d88c470eaa30db1ec5054e9a1a
- TLSH
  T127E026E4600ECB48A566CA3F873D22D731B924EE7B8D051EA0A1299732640FB180D2B0
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral19 behavioral20
- Target
  v1/images/07e97c969ea570d28cd76d9839a37240.svg
- Size 3KB
- SHA256 63ae28305e2b39d5dffa59ad471b680adabe941077f69472c6c9932d9af3b743
- MD5 d37caf43b284f6a558f0fda812ad23d2
- SHA1 7e7c4d06e741ebec39eaaef3d01cfa0aee40912c
- SHA512 eba7c02a17bd6c3d470b4c70897ec70a9577e8f545d5ed8a2e8bfe04c93ffe9a32fd534b4d39442b77817e5a6e2af1e9e739b7146b81683fefb6f87f08e3e3a9
- TLSH
  T187711FD2E7A4F2E0D043E750DD665824F1EB38FA7B57CA958681AFD4B21419A88C9C84
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral21 behavioral22
- Target
  v1/images/10ea7bdb211b31c02231c7d23b4b6a6f.svg
- Size 1KB
- SHA256 0821e8d24339e8f433b439ebcc4fe6830d864ce46c90ddb09d7df2443919fd53
- MD5 c1a08cb36fc9190d3ed31c84f83e6d39
- SHA1 84db90aa2ad22d0067e335f6e5055c0d9f8a1924
- SHA512 5e238c81dc7ffe995e2010d668e23b037a50637673d57a808ce81f56fb09d70135dbb963e305ffde4e9e5064077a3b6790ae9bcb121523d2a0ec76922858127f
- TLSH
  T1402123ECE7A812CC7542CB72D938B896D9EA38783F9C474552A9AAE027411BE4C4CDD4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral23 behavioral24
- Target
  v1/images/10ed731f116e65c3ae5baae028d2405c.svg
- Size 2KB
- SHA256 8ef6439ded625efd9d8fc1da8f5bf09a470043d37ce034a38dc68214987dbe0b
- MD5 695271b0fb78f1583c07d16294d04ea6
- SHA1 2dc211a34b7b998ef0b7568e67ec68bb6bde6dc6
- SHA512 48c9613ae03c9afed3a0392a455453eaa0c1a976b7856e75b027ce85ab487ba43888291ad960fc42eac3a12bb6b120bb85fdbd93c6aff77dacb3e02586d79056
- TLSH
  T12A4162D8B3EEA190BE4DF3FD9612309A722B1CD66C05C0A492FF0D85D5008ADBDB5E24
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral25 behavioral26
- Target
  v1/images/1780d471bcf722fb39a451f6ef9adc64.svg
- Size 505B
- SHA256 b895636457eaf7b810218a19d2b1eb90bfb65b32e044ee16ec62e1d2036a3427
- MD5 21fdb0291a26e5e52511fb72f45f5f73
- SHA1 05c3e88877526823f169f470a5a1a020db8fa086
- SHA512 f4a3248cf9b4bea09b3a4b08031bcc758a031e0a6b0dbf83c2109219c9aa127596e67a8d6b09adaa88628a277f5d851ab81f3e1c75b0718cb5e9f65c007f6252
- TLSH
  T125F052B683081D1E781E4710FB16B331202A01FA7614AFA8C3A10F306D20A2EDA1F8D6
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral27 behavioral28
- Target
  v1/images/1a1359177305759c38de51211dc0bb2c.svg
- Size 789B
- SHA256 aa2c2b021865786c4bb1b0a276a8dd47cd24de808bc8990454d83ef6003a4906
- MD5 a68651a6eac6243311a829451494a120
- SHA1 7145f466f34486fec473faac5095f44da3904aaa
- SHA512 81d8630754e974cd4ff239f30846f0b4f0420f23ca9b35825e1b393a7ea5b3426606c6a0649842f5731411497141a98967eba379e4b44dbb73f81ae7872e705d
- TLSH
  T17901F6576FAC0441F705D3713924E066758134D41DBAC050C6CA2D29DCD457F96BFAC7
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral29 behavioral30
- Target
  v1/images/20706774f044e6f19617588bb4666312.svg
- Size 182B
- SHA256 8c8ab7f052d9b4693016e41473176f6da24be5a8cd8349b63658f892821a2f80
- MD5 a09ebd8000f9f231cd589794a50b9875
- SHA1 d369c20f3f998ea3ca4c0ce5358449ba523351ff
- SHA512 81bbb0afce7e469e423e004d689332b0f5aab54d86c0a045f40531da8faea068cfb453d4b36623d4704764cadc465ae5ab9481b7a4637cdfbbcbc18c25bc2a4a
- TLSH
  T10EC0806D51CC5D1CF0658610D7793165D47F5053028C11DCC9603535A15AD9F7C336FC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32