d383cf47558d3bd61d835ce19fd4822bf1bf6accba89ac0fd9c24b081d63b5ea

Sharing

Copy URL Twitter E-mail

General

Target
mentor.zip
Size 14.0MB
Sample260723-g4s3tascpc
SHA256 d383cf47558d3bd61d835ce19fd4822bf1bf6accba89ac0fd9c24b081d63b5ea
MD5 839f32758cf132efd65a1266e62aea07
SHA1 c88f455f99c55adff2594aa2b0f53873c5beded2
SHA512 5e0c583b9e34ac12f5c9a8c5f34e756de5e77090b3c3517aefbe76543e753e752b6a3b193265104f957c333740bfbe7543f12e2ce897ddf4d228d2e866ffe111
SSDEEP 393216:uloE9uN2cE4YrFdRL4KvXwNyxqu6eJTeTpjs:ulz31lnvoyx7vZEs
TLSH
T18CE633B961182097DE69383CB01FCECC4AC573506565C72CBE2843A5E6D75A92F31E3E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Targets

- Target
  about.php
- Size 16KB
- SHA256 38c24997e218a148723e59d57bf16967d7adf76167071cac8559b6f716916cec
- MD5 320f8efbb7881e9bad042a40d448fef4
- SHA1 b7d98717de3b1b4405d2ec7872503d5587806f24
- SHA512 10171e7ca7d6f3d345965f900d6f86c97029986c10568aa7c5aac2b31d278751ce5b18d267781dcb86e0dbe538118070228fb7f0e872e12664935e080f329bc8
- SSDEEP 192:dyIKrXI26euLLglFuitiiIGxypJsN37DhS:dHfX/LTFfJsdhS
- TLSH
  T1A7723D20A5C525A700B38091AA716FCBFF958243CA5B9A5832FC6BDB6FF7D00CE17255
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  assets/fonts/lightcaseeead.svg
- Size 2KB
- SHA256 454c2e32f032c48fd7ea1d204f81aa59670e026fb2a5c46fd9247a76015d326f
- MD5 1fe4f32a4e348630899d79bea5143e75
- SHA1 58a7a471d9d64f97f0354947d724d2c38c1a5b0e
- SHA512 367301fc026c0d168675c25bbb40f9f7c22aa967819ca4d4a4d7163b0fc65cd551e7a0ba78245c416cf0faa7074bc7be60b60b7e9d9f36f6c3d57f8e2dd50794
- TLSH
  T170511C04D217505E8CFC87C30F66AA6A934F71BF322A1865EDDCE3F00EC12285A0BD82
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral3 behavioral4
- Target
  assets/js/bootstrap.min.js
- Size 78KB
- SHA256 05304a8f26373142efa126a87977201cbc22d408c573f151ee2907933e9099f7
- MD5 042c7b121492b284f48e2a815de85a7a
- SHA1 2dac85f8c54408276a0bf3cffa91dfd4ef7a3f51
- SHA512 0d2762b8d66d7d485e8591d7b62b7d49affcde2d3a6129ef4fc26cf1daf07645420cc937270a48c5d85fda8454072503077c20b8dda2033a1335fc4502ea86c8
- SSDEEP 1536:Nz3Bdr5R2tnuoJXGP2FeFx7g2v+CfYL/OVlMobdOFV:BxlPBYLug
- TLSH
  T16073C6493214B8730ADE54A68077470BF7255DA5B14B812CB9BD9CDE2A3DC8232B7F78
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  assets/js/counter-up.js
- Size 2KB
- SHA256 37d061d453b7a5c6b4880d91081b89533de50700e7d561fd6220fd96b9633273
- MD5 f5bb3a8cca0bb7ab9d4ed4b419eb9cdb
- SHA1 060ecb72b2a4d43a4e3eaea5711c0aa25f9b07fa
- SHA512 7a91da3b82415501c2b56f1c80f84527a428eaa15b822634ec17c33e15926dc488de3a77420c41b3b91f838fff41fcdad37e10d0b364d1e1961d4408dd91f34c
- TLSH
  T1BE519445BB0E219D8F9632B8D23D92094B5DE03400A7A0F8F46E10885BE4C5DE38DBFD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  assets/js/functions.js
- Size 17KB
- SHA256 4197829dd2f230ecf0c8dcc7afd97878a5842006733cc5eb7a44e1932199c88c
- MD5 d0ff304d2a5c6728bbf8ae2d903f0845
- SHA1 0b26e2ee37d247a7a1fb98317db1a4e5c5d632b3
- SHA512 8294eb1f2c20e53faa203c723307fcd7b2f38a513eaa34fcc7b228586652cd73e68070576711faa86f275251e6d2d1b4710f72241400409e2df5a288df209119
- SSDEEP 192:PoC57g4W7az+xlgTsPFRH5L4w5G5C5j83:PYO6Vvx4wwId83
- TLSH
  T19E822349B42410F4183B773A6FBEA700FA75132B8246CA12BDFC5A955F32094A1D5FED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  assets/js/isotope.pkgd.js
- Size 89KB
- SHA256 699713f69dbd2387b7c3b57204bcdc3d86d3ac350718a7ad65a5293e0d2c53eb
- MD5 8896e082b3fa1738e2e2f558a7fc1fa4
- SHA1 310a231a18550385297e140282428a06feb675a6
- SHA512 13fc8fe5488f5dbe957a55fe7452ee503fb5219c3f2b3eed3277054d86eda0d48275164f16818dde3676a76ed55311c49216cf88bb99859a55117c64f7000709
- SSDEEP 1536:BbbOfz4cm1I3UhTMVjZwTVr4PkLK0T+tmtwtK77XMkSjAD+yTS3vLTR63v2fngs4:kz4AbaXvHS3vLTR63vmdPUnQLhXghV7
- TLSH
  T1659350493FE221119857F1BD9B9F7109F2798017650AE94CB88F82D82FB142941FEFE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  assets/js/jquery.js
- Size 84KB
- SHA256 d30b6114fb9496ae46b2a8cdf59379c8ffdb957534bd1dd73e626c7c61c7e67d
- MD5 a46fb81762396b7bf2020774a2fb4d9e
- SHA1 fb5edd7a663dc8dda7ec10815a7cd82a30fc98a7
- SHA512 40759595b05808dd911075918bdcc32fb91362019bdfca24827043b8e54116e6ebe7362050ec72182b66481f1dc8d4ec4c8942c984fd597659313d71ad60dc33
- SSDEEP 1536:aLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6tv:+kn6x2xe9NK6nC6N
- TLSH
  T1378319DD72C6B06247AB71BA00BF550BF2361999684D4410F129E4EABC74B4E823BF7D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  assets/js/lightcase.js
- Size 50KB
- SHA256 246c54ddb680b7f35b23162fed0f4dd7ef973468670e2560d6000a20e8c37fde
- MD5 294a775090d6358d8c8979e98b97a28d
- SHA1 ad858902b15bb424acd38dbb2eddf462555a7188
- SHA512 a40020f4cf1fa9554555e777d3d11fa7582ce6fd82338f9edb9c964c2937f182108bbaf6b1b4ea02ade7f4a95d8cd7c5d29177b51e8cf5958ddef6282b408cb3
- SSDEEP 768:/7Yz+PaWO2Zr3Hy0jtxbMTKUTCTiRhF5vwp:TIWy0jgTKU17Fi
- TLSH
  T13C331DF8DB4DB155402B6059E8BC51CBE23C8432653D6CBBBCF1D664F580468CEA2FA6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  assets/js/progress.js
- Size 4KB
- SHA256 97a4b07ae76bbd0f67ed5d8ed7264480d73d722d69b88843191fad4ed827544b
- MD5 f467f0e35a729c39425c74b2c1fb9066
- SHA1 d93a8a0cf577456d53335640c49a7e78283783ec
- SHA512 1623bbd77819de29bea2591fa22188bd219081e7c2efb06b16e0cfbb9f0f31d16201fdcd868445cdb075d82f480ba16d95904ed301fcfd4cf94ad15c4953c34a
- SSDEEP 48:FwmWl7ttrHw0zZyemtweV31uUAlfvfSpBk5RGb6mZfFzmfBQPoMG49KEb0FkelKP:FmlpV4emRL2Gg8KOzOey3N88m
- TLSH
  T1DC8164DAB3529C066557B672102F12066333389C6D17C5AC783071EE5DB9F0B217BABC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  assets/js/swiper.min.js
- Size 124KB
- SHA256 a649cee6e108ce8573850cbc97b466309f33b2c73abc249a682ba0bb750c9c91
- MD5 701f92419163f83f5b4fffe2f79205d2
- SHA1 7560d3668129f1dd25cfd211943990f30f6303cb
- SHA512 77f072d97302fc51d9ff5542ba4a9ad18dfbd0900e28e141abe592c3a975f6040f4270ffff04477e0ba29f59b9587d317ee21dd643a94d7bc5f6c10be28c5b35
- SSDEEP 1536:IapNOiO5/c9XrYK8SnTLANcelWyVAyvK05Du1u+GlpuXvH7WcWUmcPqMjCE8EtO7:X9XrTrANcwQIl+GqfH7WcWUmcPquXbq
- TLSH
  T159C30849B35071E551E72256539EC601A3B66845B90AC0A831B2D8D7ACBDE8C03BFFFD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  class.php
- Size 38KB
- SHA256 c0854d18bdfbde863ed99fb63845f0ca97336e89281002be50e4f8a3eec7252f
- MD5 61aa00db1e7c50a3bbd63b92026c644c
- SHA1 2b9098bbce86a39cf6bf49455b7d403e2e77b578
- SHA512 46aaf63a18fdade5114f4003c6f03d465b40b0e8a711ad611e45c45605f5379fa4d94afef1674e6bdb128424ad7b6bec8fff0e0bd02a278018ed947158357b85
- SSDEEP 768:9QxnQx9QxkQxrQxFQxOy/vAuvC+IIb+u+:eweXUWOoZc
- TLSH
  T184032F3464D1246705B380E29A656F9AFED08243CB5B8A4872FCABDB5FFBD05DD17220
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  contact.php
- Size 6KB
- SHA256 a1d79c3421863957a4eeeceb0ef791e8a5ebbbe02aa947b55a562080f378969c
- MD5 a204f59f3de668578409ede5baf91ab3
- SHA1 13db0bd78c9955ce99fb5dc4c155853becbbc72f
- SHA512 469ef9bccc6a88b40c0443824e6aedacf6bd17f0ad235c12b0d6a697ab5fe0055d81c4f042289479168f32de2e248f3157d2cbdc2a05321f50c041fbb6419e0d
- SSDEEP 96:gxBAeItq2SyhTRs9DT3BtL5KzIO9prQsavBxBw:E1Itfs9HIjN+w
- TLSH
  T1B4E1AA2014D1256600B390A5AAA57E8AFFD1D243CB1F965436FC6BCB2FFBD89CE17148
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  course1.php
- Size 38KB
- SHA256 2a9af19ec802ccdeda1046044dcdd479d5586cd7379c2b9ebe386c8b2b68a7d5
- MD5 009796c3e7efe52e099fccb73dc453b4
- SHA1 98545f9c810749c51568c0dcc72a540817c5c120
- SHA512 7ef1084efa7ccffb8b0d7d9b13c0b236df1938e794c8e1a8d2d2f3305d4d88af46c896b088d4c8921fe59aca09ebabfebb285f4c1edd0e14422f749f2015427e
- SSDEEP 768:SQxnQx9QxkQxrQxFQxOy/vAuvC+IIb+um:tweXUWOoZU
- TLSH
  T13B032F3464D1246705B380E29A656F9AFED08243CB5B8A4872FCABDB5FFBD05DD17220
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  exam.php
- Size 38KB
- SHA256 8fd061de2260ff3ef89122a1cf340f3c867733441c9ab109ec932207116841d4
- MD5 fa3b91bc15f970e93f657db8262aa3b6
- SHA1 04ca03ddfad827dde5cf2ef99d7c58cb96edeefa
- SHA512 4ed7e4d0c8f2c0f8e9feef5149ce39bcec17bef4a1f6a12552528a258fabdd0d428fc60c1ed79f01d4fa5d99df6bba6971f7ec861a65837265f8157c136566ef
- SSDEEP 768:IQxnQx9QxkQxrQxFQxOy/vAuvC+IIb+ug:bweXUWOoZ6
- TLSH
  T16B032F3464D1246705B380E29A656F9AFED08243CB5B8A4872FCABDB5FFBD05DD17220
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  index.php
- Size 19KB
- SHA256 03fa3b4d2b764f9318042ad79b62063fc62efd59dee9bf8bd91e7d704c6d3c2f
- MD5 32f4bd219afdb0b4fcc34e2c7c48510e
- SHA1 a56a4978205f553c5f9313131385d494b990b8ba
- SHA512 6fcd20c210a5fb85ffd3b1e38bde935d759d810d088d64941945469a3a09d5f94c4b190bcf75a0fb8fac85f0c64058f68bb7030b774a93f7ee2c503d906b9c35
- SSDEEP 192:tIxit7qkZAnJkIdguxvfJhuwl21qX/mTf:aIE93XIf
- TLSH
  T10492602415E925A701B380926A656FCAFF918243CB5B9A4432FCAFCB6FF7D40CD1B164
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral29 behavioral30
- Target
  thank-you.php
- Size 4KB
- SHA256 7c8b0f705ade5f18d2f034abe965944d09f9edbbe51ee18d36407e0f2ad1916b
- MD5 3b5cf1516389cc78589a7844056eb4e4
- SHA1 2aa9b1dd95cb1e9ded586d66dad11b7125c7ed07
- SHA512 6c2cd96c84e592e5442519ae8ebf55a074cc873d7737f2898b8d4a78c189a4c4a2a8daddc85f1ef24f0717cad60c298ae0d7fbd8fd6250990b6e8a9f79237247
- SSDEEP 48:tcdxBt2lmKLqsPy3hUJ48VTem4h9j0VO+taMgDDdxBti:gxBcltq3SyITzs9j0QsavBxBw
- TLSH
  T14A91A92414D1253600B790A5AEA52EDAFFA59283CA1F425436BC2F9F2FF7D85CD07418
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32