29cf52303f986456a2eb291c326fc81aad5d8e8a09864846f8ce30deefbf5172

Sharing

Copy URL Twitter E-mail

General

Target
SCAM.zip
Size 5.2MB
Sample260722-pgzabavare
SHA256 29cf52303f986456a2eb291c326fc81aad5d8e8a09864846f8ce30deefbf5172
MD5 67d1d299efd72d919e29866727de204c
SHA1 bb54dd1a94695df9c7dacb57c5ebf0beccf12c1b
SHA512 66996c08173f22d92da8eda2a5422a8a24c671e3da4c3aafe2f8e41eddc0e4076d3f99d5b6f187e479f1317055c544374f3c02b06096b904b3cdab3fadc914b4
SSDEEP 98304:8jk9JNog2lRLJrNR3c5zTlQPHMLNHk0Pp+s6UFenrpd/fsKmc:1fNoJlTrjs5z5DLaUkFUFe7mc
TLSH
T1964633DCC6132DE0CA75EFF418CC120A0639E04D9285E747965934B8EAA6BDF4D6EE0D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  AT.ENTRIES/CONFIGS/JOJ.js
- Size 87KB
- SHA256 ee11e902416a1d896f538103110337b39a0e2e2606bc1faf5cd0652914891127
- MD5 3e4bb227fb55271bfe9c9d4a09147bd8
- SHA1 156837f75f6600ccb602b4efcbd393636c33f35e
- SHA512 f7810ef9df875a7fdfa7228f7e2f95dd34e18b57f56a46383198ebcc591e32f633b0d73cc6b271fbc669347f7fdc114cce6a6b43681104b25084fe2a1e7bee49
- SSDEEP 1536:ejExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vN:eIh8GgP3hujzwbhd3XvSiDQ47GK/
- TLSH
  T1589309DDB2C6702257A720BA007F510BF236199D6C4D8450F169D8EABC78A4E827BF7D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  BOTS/BOT1.php
- Size 4KB
- SHA256 1f611d791e513bfcc0d0246d0901923a0524117395ae09d46352cca47b60a811
- MD5 7c09f6c2c70d5c5c6158e1bfca509491
- SHA1 01991ba0bc090e0098393918a25b2bf9c6bdb59d
- SHA512 83f360b5d1115d7ac8c0993ce79a4ded7d8cfa20fce62f8f657c8be1930e5ffc9abe9b3c83d6a32fae489bfd34829f0e8da6d143216cedec03203cca510ae693
- SSDEEP 96:vqIr2Jo54lMP3tbtok0j6d1m1ygLDiZojLfFiZojLSCmdeje27o5dMPE8G8j70G+:vzr2Joma3tb2iHLo+oiee27o8E8G2vW
- TLSH
  T117B1872FD4503B6B4BFC8A1652B4087F58CAC25B8522CF5DBF7D6B042B2C2147AD1B4A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  BOTS/INC/BOTS/BOT10.php
- Size 8KB
- SHA256 b63f056c49b678bb6abc5ea78a41c447185fdc94931492503d4770072111b762
- MD5 02e8376805299ff41a3456566c285c55
- SHA1 94d35401780a1a152aa2119b32d3289454b8a6a5
- SHA512 156f98f36ddee9b6d5407eb3b62395c4ca47a89d05069281fabdc8277613341e6a8c223075f369e7f248cbd495a7b0ddf57d9327ebd1500998023e2e52fc0238
- SSDEEP 192:DyeIR0CMhl4LQsdmIsK12rGezODH+ZS/U9HnBr:DIFMh+JDQrGezA/U9F
- TLSH
  T183025F3BF8C19A207AB4860942F4C85BE5C991CEA715560DBA3ED4C43784C3437BFB69
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  IT/SISTEMA.DI.SICUREZZA/CARD.X/index.php
- Size 9KB
- SHA256 aa209d52c34da1af21089b51a91ce5905d889e17a77657f4d3fdd394af37f52c
- MD5 e9fca38a20ed2c72869f4d4cd9e90f98
- SHA1 5a1fb4b37e7f3039b9a1c015543504526e8fc644
- SHA512 eadd9964dfb7833f1ba76b940c89dd0296627224c22151cec6517feb64c7b185871e2c9e57ab7d965602f674add5ae1e1f512c8d9b1dfe17dcbb9796c76322da
- SSDEEP 192:vNaQyTbbtKKU+fnk1gVKxV7gWt61BlsBXRME:vsQyfUyk1WKxNt61BlsBXRME
- TLSH
  T17D22A6656813EC3A45B794F5A0B15F49F1B08312F341A988B59F23E3076AD18CAF757C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  IT/SISTEMA.DI.SICUREZZA/CARD.X/vbv_files/saved_resource.html
- Size 465B
- SHA256 edca9e46928c830db5bb893356c5aa8b1b109d6a66fce793a090ec51dc081d7c
- MD5 a957d82fc710096674528a8ad9da83c7
- SHA1 3cad837ba69db7065587392f2dafd903430352ea
- SHA512 c72ba0729db18b4b501a0b08a1577cd4d69bf954358ca0c65606f9fbbef978429af07531c508c8c07da29c020f93a2ea225582c3bed2d51d23f41a2c07572fa6
- TLSH
  T11EF05CB6690B8CBB1520F9C2FBC4799457509C74B08D1CD5E44C344C74EAB95CD63B28
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  IT/SISTEMA.DI.SICUREZZA/CARD/index.php
- Size 9KB
- SHA256 5a3ebea2f5df70f4c3f81c797f503d8e39b4482f1e719019fac2cf122e113ad7
- MD5 8fa6e65204c4c5412a95cac6742a20ef
- SHA1 6bedf4fc3bdd3157378bb68c05bde2b9035a2bf5
- SHA512 4c3adf008fd497ae0a4e909c08a669a3537817835442a7dcd18d56a996c99c8d75fc2c3742db6d2ee57843125d119b127194d5fc826cfcd9888ae022a40dfb20
- SSDEEP 96:vNaLQO51LuqsIbtuvA1G3e7aA+3ClwdYo72R3c7Pz/zPiwPIa+g9VNYasxV7geJH:vNacGbbtKW+Tdnk1gVKxV7gIt619svRb
- TLSH
  T1D81283656812EC3A45BB54F5A0B15F49F1B08311F341A988B9AF23E3076AD18CAFB57C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  IT/SISTEMA.DI.SICUREZZA/CARD/vbv_files/saved_resource.html
- Size 465B
- SHA256 edca9e46928c830db5bb893356c5aa8b1b109d6a66fce793a090ec51dc081d7c
- MD5 a957d82fc710096674528a8ad9da83c7
- SHA1 3cad837ba69db7065587392f2dafd903430352ea
- SHA512 c72ba0729db18b4b501a0b08a1577cd4d69bf954358ca0c65606f9fbbef978429af07531c508c8c07da29c020f93a2ea225582c3bed2d51d23f41a2c07572fa6
- TLSH
  T11EF05CB6690B8CBB1520F9C2FBC4799457509C74B08D1CD5E44C344C74EAB95CD63B28
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  IT/SISTEMA.DI.SICUREZZA/GRAZIE/IMG/Italian_traffic_signs_-_icona_poste.svg
- Size 4KB
- SHA256 8ed11ad7f9f278532ddd13a0a5c0603e04461a1ee2c3d16cc38662e075c69a20
- MD5 5123ed2cd6e71d9c9735f3cf5ebf113c
- SHA1 74b9d76ae269438e32861573a1bda3d0588d1fa1
- SHA512 a0120395b4ef43757b5d7d2015ed3dd2a20915400457842de42e4ad84474ac2fda792bf19f2da3de384ec1a9ff4027927a87ad0fc1b52f860db1ec33aff5b1ba
- SSDEEP 96:VkoIanLXpcR0iYfLT1yKKwFSsZg3roJKyB6roZ0R:Vk8j/1yOOroJKyBkoZ0R
- TLSH
  T199A18505E1B28CD4620D02A168E06D12C21E78D3A5D58D767DAD18A6EF820D3337FBB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  IT/SISTEMA.DI.SICUREZZA/GRAZIE/index.php
- Size 753KB
- SHA256 7ddc72078e77c57f304c41f416ec4795b75dd4513c8edd747ecbf5a98f9dfe0f
- MD5 9b015dcd6b4f27ee364652211e2970e6
- SHA1 d4a6c9b07626031120c593f86336dc35f0b1f4a3
- SHA512 0f05d3c5a1519343a6e60caa07515970a7528590cf66666c5c94f9910e53ebe161531557887d4990dc7087db24ed52d07afebc325243de0de483342e217de8c2
- SSDEEP 12288:n+oDfqgnwudqgnwuk5a9/sbNWHQo6GW9H0d575jqEkpF2DG4hqqdH8GbelJG4Jy2:npkSkRMipWwvH0d575hwMKB
- TLSH
  T196F46C66FAA31CC67527C19A77ADAAC0377D6053D20ACDB8BA9E31588F4D5C60473B0C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  IT/SISTEMA.DI.SICUREZZA/LOGIN.X/index.php
- Size 3.1MB
- SHA256 57bad53a3b00599516c496884e51e61fca7a6ee171fb29c435a11471a561635a
- MD5 6dda2f675c2a510dde9cba5167c64eb8
- SHA1 540be9d670c91ad0ec1cea07295cb0a8d99cc310
- SHA512 e0a5b2d512992bd024bed2e3b76fec529b75911a5d1daac9f6140adbd3a006c97c7b5bb9f97f32193f65e3a998ff25ee1079a36d14593d0599718b7e9b6f21ac
- SSDEEP 24576:pKXq025C+4+kboZYwR6mHKy/lzpPiqdLxFLy2orpHFe8/ymWMQvH7EMv//c53ftW:RrF2oFEMv//c54Rtk+xszDYn1HJP805
- TLSH
  T146E5D1B32202BDD1263A0A4062543FD05D290C77C315F9BCF8CE57A6E7DD5A49E3E8A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  IT/SISTEMA.DI.SICUREZZA/LOGIN/Auth_files/acsAccordions.js.téléchargement
- Size 650B
- SHA256 2ce2dd34597ec07753531987cdb2475bd8e226478c32fd876438a78e2d34066a
- MD5 d3a3cc6a223edc91dec3f3f4b60be84c
- SHA1 135d7cf680abc2a02df1ce938e1fe0f90b1fac04
- SHA512 69f6eb397340bc7ae42d1dcec16078484b7e3a3c4ae4c0fe3c1eb95fb09e39747f8f7b224695382a967dd78d8f348470a5c5aea4b927a01c9e0f916b28cd0a95
- TLSH
  T134F099A5312C12D8C5EEA2080A2E22A8F8BA6812534474D5F93888AD2A74F8070D27B8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  IT/SISTEMA.DI.SICUREZZA/LOGIN/Auth_files/acsAuthUtils.js.téléchargement
- Size 336B
- SHA256 032cda402bbbcc0f1e1498c9eb7c7b4fa68a35297cc529100f63093994cf09ea
- MD5 cb9481c287dccd367abfb8cbf38c15d1
- SHA1 95ebab8ad349f5aa4501ef73d2c0167950a6e5b4
- SHA512 a7de878f894bef1461c21e3befbe29223ef4ce5c6bbcf5b8ce22ebc10dc767418bed46eef7a6861fbc219ecf9b8f5f33017b125e81347aca9d5cc45085c11e7f
- TLSH
  T135E026DC70580C2D8B6E712214B9E446FC6265338A225074E17854693160C54C3A7A1E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  IT/SISTEMA.DI.SICUREZZA/LOGIN/Auth_files/bootstrap.min.js.téléchargement
- Size 33KB
- SHA256 484081bfe6c76d77610eb71a6e71206fe5304d62c037f058b403592192069306
- MD5 281cd50dd9f58c5550620fc148a7bc39
- SHA1 dfb8410ffc10a57d69b81620087c5a0b6027765a
- SHA512 9c17bf30056771ad1b0889a68b6fd6cc9a060a069438c543b535c55d4731b8bb852d473714674ec7c2d1dbc5b1828714ba67780dbe64e4fa63ab3d4cd488f2d4
- SSDEEP 768:A1Rp/uRE672wlNgDMlb0tGe9+jS1s8ep0sEQUrXf848GfpZ/WQ:ceRx7oYlS1Wkv8epZOQ
- TLSH
  T14AF29546B27031A107EFB1E5415F020A72396A6EE90690BC38A5DAF53DB9C48317BF3D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  IT/SISTEMA.DI.SICUREZZA/LOGIN/Auth_files/commons.js
- Size 1KB
- SHA256 2da2729846948ccfd97ed924936cdc406a1037b4af9bf77d98027c1576d8f8cd
- MD5 43464502d4ab0ce79741ca489e89d7d1
- SHA1 c843cf7e3f1faac5756366f80eafbd38bde98926
- SHA512 7af71a311d2454be9d953a62ea9beb014e06cec87d7998c1e2fe7e27204832453e19b9ca7cea155d924e29757bae2e9afd12d426019dd0b222435a99ec18d55d
- TLSH
  T18821339864D324750E7E20F75B5BB1D5F66801478904C482BA0C4F88AFF8E76C6BEBC5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  IT/SISTEMA.DI.SICUREZZA/LOGIN/Auth_files/date_time.js
- Size 823B
- SHA256 c755ac1453166b808d71cdcd5ddce44e18137d626666e38564feeedfb7cdd1cb
- MD5 a1ea354a8333062c952f7c01637802ef
- SHA1 f9dbcff7f3dcd818162526d756b8248a93b4cc8d
- SHA512 dc2e1b9eb5802ea53b4015aa1eeb59a8bf65340217ad95cd43783d7e017424fb1ae0364e8345b9153ce60b8cbf43887cb1f0f9c093b558f944b79d6aeb83679d
- TLSH
  T1AD01268BA2D71520876B793DC7A2465C66B48433F146C810BE8C61512F836B149FCBF8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  IT/SISTEMA.DI.SICUREZZA/LOGIN/Auth_files/jquery-3.3.1.min.js
- Size 84KB
- SHA256 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
- MD5 a09e13ee94d51c524b7e2a728c7d4039
- SHA1 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae
- SHA512 f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a
- SSDEEP 1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69
- TLSH
  T1748319DD72C6B06247AB71BA00BF550BF2361999684D4410F129E4EABC74B4E823BF7D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32