9b08bdb5ebe6e486d281bd2f7e8c0684479112ac673795a962a7b9957dacf821

Sharing

Copy URL Twitter E-mail

General

Target
candy.zip
Size 9.8MB
Sample260722-pmc92ahp2y
SHA256 9b08bdb5ebe6e486d281bd2f7e8c0684479112ac673795a962a7b9957dacf821
MD5 890a89a6cba58ff86fdd4cb18d460c20
SHA1 f70b4f53217d1d0b304de1f1e3da24c739b97106
SHA512 d6db8769b788a26c8c6abba1e4b06a05f999bc068802c9f34dc738ee99bc3a0d54244663a227c3a65f2addaf36ddc184a4293665f03db2f131417ef10e1f5fbb
SSDEEP 196608:ZHn5IKinylCQna1SDOsnekKB73B7Gy0szBN6hbtpS/vZabhmGG5Yyj9ItsgU1HdZ:F1tlCQakDOsna73B90sFNgb/mvMbcGGr
TLSH
T104A63373E2B94A5EE06C9A7075AF4B854AFC1AF163436B6E89130191F9DFEC13903319
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Targets

- Target
  admin/assets/bootstrap/js/bootstrap.min.js
- Size 76KB
- SHA256 2aebc2552d7dadf4e3a0b80cc830c274e91146584dad8e29b04338b9ecedb363
- MD5 715756e65b9ff107f4cf927e3e8bbf76
- SHA1 f52210379974496514e24aeb07ecb6ef259063f6
- SHA512 3ea45e95a2465d5b90f3537ac2352b4507a508347bcfc46f286891f526d2c4a1cf22dd797890e6215bfd109830ab45ef83296ccec8f3bd0d3e5722365ad22c85
- SSDEEP 1536:itAs7TPR2t4qqDMi/GgSe7hyuvsnKjIx8L0Sem49MVcUzW:Yx/XIe0Sem49d
- TLSH
  T1FE73C5493254B8730ADE51A68037470BF3265994B14B802CB5BDADDE2A3DC8672B7F7C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  admin/assets/fonts/fa-brands-400.svg
- Size 692KB
- SHA256 36b51fbe6b87587541b9173cd79c16c6b359ad22a172b922204f9aa87411acd9
- MD5 d72293118cda50ec50c39957d9d836d0
- SHA1 29e6c7e5a4d63d2c9563cd208456cb4f8a357868
- SHA512 a1343d5329d718b50561171698493270eebcc187decb2669a9620187bdb4362c9caff7a56821d62b93b806577e57cf530dfc445b5918fe648cb38b57725ceb99
- SSDEEP 3072:VxoH0RzjIt6Gg3nGz0JTQrHMzT7yfUkLHQ6TzFa2Pxtxqpch1UzXmSDaM+z:4icqmP6U
- TLSH
  T19EE4F05CD3A4C2B8FB9B4EE8893A7ED6366B35FF39103254C278A56028727784C4D59C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral3 behavioral4
- Target
  admin/assets/fonts/fa-regular-400.svg
- Size 140KB
- SHA256 7ab8a39f4c48b743bd6acbbf5ea4c7547efcb62ad966e9bef3e41996afc44fd4
- MD5 d2e53334c22a9a4937bc26e84b36e1e0
- SHA1 1622937e49766e21eacf4ac7065b711f0fe580e1
- SHA512 f129df9d8865751e081281514ae609389f8baa42dd527fe51fdeb886e307837e89818b2387eda54b271e581577bda70d14de5ccd2325d1b52e1236e1f18ef7ac
- SSDEEP 1536:JHnVm/kykinvidEbqODs7wUgxWd9spvNp8mwm7+T7sVpxluvX0dPasP8CNVcQBSL:RE/kYqwnws+Xd4WnV
- TLSH
  T117E33359E754D6BCFBDB4B95853A7E90226A72FF35143260C778B0A02C3277C8C9E588
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  admin/assets/fonts/fa-solid-900.svg
- Size 829KB
- SHA256 eaf0f3d0cadad17eed1045cf68c30db7abffb4c8ef4ee9cb5f4026fdefc99a59
- MD5 7a5de9b08012e4da40504f2cf126a351
- SHA1 3a090431fdec61a25ed69b9e6f35a6656bde1595
- SHA512 6be4aa6d1c7d568dd91830e5d92fd542ff52cba1ac0a91046be626340ee8f37535641072c4f9e998a9ac493f0f5d953491bbcc567d93aaa941c1f29a1fa25589
- SSDEEP 3072:oAB2oBCyOFl74uDEdGTZWUMqmFLDK8/lrwHW8uxSylgJHL1cNgcGdYq9iw1w5+HG:tzkmfq6tj
- TLSH
  T15D05546CD324D1FCABC64BD58A397E61269E65FF36203128C278B5A01C727BD4D8E58C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral7 behavioral8
- Target
  admin/assets/fonts/fontawesome-webfont.svg
- Size 433KB
- SHA256 ad6157926c1622ba4e1d03d478f1541368524bfc46f51e42fe0d945f7ef323e4
- MD5 912ec66d7572ff821749319396470bde
- SHA1 98a8aa5cf7d62c2eff5f07ede8d844b874ef06ed
- SHA512 4f575d52331de91a2e32cc3408dd0eaf0cf25b7244d34b226314e3647e85ce284f86e3b7238c6c8b9022dc4e2787bf51620849290cdcd5d4c4bc905f289d2156
- SSDEEP 3072:PLac0AVfCwGzG8LY4kh53s0eOnz8WjKAOvX7LYvglcD4ZME8xYWDQqJpFDBl4qjm:hCG7bFv9gSS
- TLSH
  T17594C96CE9910B79CBDD42D5957D0E90132D81EE28783E1846BEA8F05D06B2A0FDFBC5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral10 behavioral9
- Target
  admin/assets/fonts/ionicons.svg
- Size 326KB
- SHA256 a627d9068c1235d9b3c95c405eb6ecb64a290b159cf5e926c0d96d89b24cd5fc
- MD5 621bd386841f74e0053cb8e67f8a0604
- SHA1 3f1ca28fcb042d2bcc6ee6a4e3dd817e5132eeea
- SHA512 37c77eccaeca00e005cf5b7787ab52fb1a45c5a8fc0b9e176e5eaf12fc080089a0e634f8eeeb7fda2b55c83dcf6b7b6a40281bad0ed9f248968e8725e627b9ef
- SSDEEP 3072:VuNxDz4hYeM1hf0xiEcY3YP0SJZYF63bCGiN7XR/H2WnlhzvXrdPwRJrdfh2CUG0:VuNxDkfRIZYQ34N7ZHrPwVdfhgG5/MvJ
- TLSH
  T1FF64F428D8A65478CAEA03C18A7D1EE4473DC2DF1A2D3875596CA2B00E0FF6D579FB50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  admin/assets/js/bs-init.js
- Size 234B
- SHA256 f8fcb7ff5e05c3e37f8418489eafc767db08673d5ea41180c973aa59ae2cd67c
- MD5 e2b0d57f2c4a9b0d13919304f87f79ae
- SHA1 4f8ef3da442123f013496ef1425f2e0978f45107
- SHA512 e37fd301f4c49ac254593be41855ee269b844cf8b630552dcd1572d80f67a3a240a5d5c19ea86615469e307fc25b3abbb7118496b53ea62b22e93402be3afa3a
- TLSH
  T120D02334E5AE51755373F377E54F7345153120567000C40F4428F47C1DEFD515052C95
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  admin/assets/js/chart.min.js
- Size 205KB
- SHA256 c4a7a8279d29cdb5069294310d81c3ee8ee1c5ed0b68e19e82e52275bababe2b
- MD5 bd9843d1866f45d1406a12f7de05f9ff
- SHA1 d28d2cf4d24d065584823593e2f6361f50ef2dc5
- SHA512 eb42b05ad64e87382bf38d26739ecc57c26a0d91c0c2cdf0eb59a12b8e4ab181e687234524a99f83833bfecd89b27e0f82d438521afdc48b52f8709b19321161
- SSDEEP 3072:Dx0dvJYobHHX08JM0BHmgu6cHG6+T4Ak0G1eJ:Dx0dvJYobHHX08JM0Up6cHdy
- TLSH
  T1FD2418C97382B126436362F4042F150EE23B6914680F8A98F6B5D5D67C7C98E60BBF7D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  admin/assets/js/theme.js
- Size 2KB
- SHA256 f6d611caffd37eb8877fb84d51a7c6107b62278038cc2845afc31c08fc4dcc7d
- MD5 79f403485707cf2617c5bc5a2d386bb0
- SHA1 d4b2a5ca971e7870f99259491e5a4ccdaee0db35
- SHA512 ba1c668f285ed191a63ad39b23665643618b7b880502ad44bdd2682d8cbfc9166a294b688a266e0cb5a802d36a3d2f512372e036808815e96fc36514094ce8e9
- TLSH
  T17941EF4529F0363120FB71BF578FA3D4B139545FA001DA2638AE8B5C2F90B7186B5AF8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  admin/deleted-users.php
- Size 8KB
- SHA256 539af58e8ba0e4fc4d6a45b95df1951ff7ec2d716184a076453fb549bdbabe44
- MD5 32da0bb7b7e09df1e75f8e36b5129f86
- SHA1 da1ca1e1b3a9bb2880c973be9b64b52044e42172
- SHA512 1a85f53644eff3102aeff164408ecc3d68a4c4e1a3803e3446bfb69955a93fecdbab132a593bdc915a21bb45d0d3b2914589d0f5bae58cdee0aefb32f0db9704
- SSDEEP 96:H5Myc1OLw5BsF+iQpA3iLiKQdqzTqchHUfqT9hJYpbimqTksuHbivHdrqTEC6Z+R:HSaws+FpA9KQQqcyq6NqY6HBqIC6Z+J/
- TLSH
  T17F02402269E5D0370402AADCBE647FB57E86642FD2094F1AB5DC06E61F83EB42C6F40C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  admin/feedback.php
- Size 8KB
- SHA256 4f4294fcb7be339924452e6c11db90981204da81bdeb15d1c8f8947ee2390676
- MD5 7de85d33ba5816f25fa15d0b2f5afcf6
- SHA1 fc515f19322274a865ab36d510e844c4bb2d78e4
- SHA512 435a1fec2c8803fbe396b629d9c6bed45e721ff36d4d382dc3a5e94415ed02efeed76c08acefddd21d725632b898bcc0c52c51d782e5feef064c88299e59eea0
- SSDEEP 192:HSk8wThIl2kmRSQqcyq6NqY6HBqIC6Z+J/:H/ThIl2kUSqHB+J/
- TLSH
  T12102222258F5D03B1402AA9C7E64BFB57E46642FE3094E1AB5DD02E61F43EB41C6F84C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  admin/notifications.php
- Size 8KB
- SHA256 4b24b74a7e77a9efd92437fc8b04e0ac04ec39e772ba0d7dfcac0ae87abe368c
- MD5 25a75fbf723185309f1430acf32bb7bd
- SHA1 9e06df0fd073ebb3a0b5c8dc565a7413e0be3641
- SHA512 05ea02500b29591842ad37e81aec19f00cfe3efbc4358776045b2f18d40dd13e552353a99e2baf3db6fe72cfefc7cbafb8a42ab52d7ab5c9f963f89cf9485641
- SSDEEP 96:H5MCciOLw5BBQCLVYgsOvOkBSdqzTqchHUfqT9hJYpbimqTksuHbivHdrqTEC6ZW:HSfwKkrl2kBSQqcyq6NqY6HBqIC6Z+J/
- TLSH
  T1D702212659E5D0371806AA9DBE247FB4AE46582FE3094E1AB5DD02E51F43EB41C7F40C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  admin/users-list.php
- Size 12KB
- SHA256 e0efaa6947946779fe9425a9246ded65428e58bf26ab7201682ebb322172ef54
- MD5 aec2f19c79f62135e535db5909237847
- SHA1 6dae3eac3d8526299bd260e652c89c5a578a47b8
- SHA512 7ac3c40fc60859bfd700b56c6227d6d11ee46bc701bd308df94117fb49c0cb0642cf5db4ccfc9eeb1a6668902e63c37192926d880003de93206cea7646aad394
- SSDEEP 192:HSS4hCAFfSdSRwJ6CpZGvZzURB5QQqcyq6NqY6HBqIC6Z+J/:HuflSdSC0CvGORbQqHB+J/
- TLSH
  T11342931228F5D03604269ADD7F60BFB17E86942FA7094E19B9ED02E52F83E746C6F048
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  admin/withdrawal-requests.php
- Size 10KB
- SHA256 15bea9d7ca064ec561ecec35e4c5ac6b7188933e32117b828c83b26c6ab2e840
- MD5 98d98f384fdec4a338c9ae434bef7cf0
- SHA1 43ab5133daf7083df7dcefa8b8cafe045a7221cc
- SHA512 8e104057083b54625e59d48f7e9b613f8f31113ad1754b506b6f3734d596253140b4a745d372b83fcbc8fcaf6eae4898e4307a1571f637412a739cef12fd4c43
- SSDEEP 192:HSmXhDfAfP8wLF80Lh2kSxhWQSQqcyq6NqY6HBqIC6Z+J/:HZpfAfH3h2/WQSqHB+J/
- TLSH
  T176225F2329EAD0771452AA8CBF207FB56E56582FE3094E1AB9ED01E51F43E752C6B40C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  frontend/js/bootstrap.min.js
- Size 56KB
- SHA256 0a34a87842c539c1f4feec56bba982fd596b73500046a6e6fe38a22260c6577b
- MD5 e1d98d47689e00f8ecbc5d9f61bdb42e
- SHA1 6778fed3cf095a318141a31f455c8f4663885bde
- SHA512 021e615983f30ec5477fd8b611e8c5045ac6d9900f9a9bb8649b56e0c7d282965a727f8cf501c3b7e1ddff02f5b44924d5481bcea7a926be8a9e166314a07ed0
- SSDEEP 768:5NYyDyKAmHVaS3m3Dqp0NwCkXDtdFDLmTV+miDNJcJiQMRqyPiYtB6UvcCg8YGk:5NTKktDLmTF8yJL45XtHjoGk
- TLSH
  T11243C90A725478B205DF9176917F420BB737688AE94AC16CB91D98ED1E7CC893227F3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  frontend/js/jquery.easing.min.js
- Size 5KB
- SHA256 f9b2277cb79f77cfa984fc713bda988da89f9699509a30eee234404efa79b32e
- MD5 b62c744f5635480a0eabd225a04b7452
- SHA1 e1fd1d78867a8171c0f69148f350c098e4d4c8d0
- SHA512 e6ef407ddfce56189c65c711a349002297d7eeabe85ca9ffd49b4e9e4f915bd22f93c3bae561ec61d366b0381eaec327f528ab24ec66b266bdbe6dbb0802fa1e
- SSDEEP 96:uBm7aaOr8uroJzDV6u3R3zd4jAzY4JTqhkibwERICsTEDW8:p+aOr8ur83V33R3hqAqbwgYC
- TLSH
  T136C1FD8D30F6A29D53D137F45066508BB25E9CB9160E2406ECF499C9BC3B66C877BD2C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32