357acaa722dd146d9385c159bdac0b3732b06ad3c9e507607d913806e942f033

Sharing

Copy URL Twitter E-mail

General

Target
sbyimanagement.zip
Size 4.3MB
Sample260723-pm36fsba37
SHA256 357acaa722dd146d9385c159bdac0b3732b06ad3c9e507607d913806e942f033
MD5 44402674c819882f6e47e1d8611092de
SHA1 fa643e15588b38acb1ff3593da9c47a08f764051
SHA512 baa1ad043f6432b88e76f85fe8e19478593ae534806cc619e123a099d235dbdca5f224af69a17b8bdac4d2dc531e105a75cd9667eba299cf828d71e1500c2b9e
SSDEEP 98304:bKj64jm79dyYznkQoWM6xlqprQyv93ryHKvzH9WM:bKx4TymBoWMaqpTyHqzIM
TLSH
T1B2263319F369B2BAED9E46B1387BFC26024B2CD1317850134D2959591DFE2C7EEB006B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  fonts/font-awesome-4.7.0/fonts/fontawesome-webfont.svg
- Size 433KB
- SHA256 ad6157926c1622ba4e1d03d478f1541368524bfc46f51e42fe0d945f7ef323e4
- MD5 912ec66d7572ff821749319396470bde
- SHA1 98a8aa5cf7d62c2eff5f07ede8d844b874ef06ed
- SHA512 4f575d52331de91a2e32cc3408dd0eaf0cf25b7244d34b226314e3647e85ce284f86e3b7238c6c8b9022dc4e2787bf51620849290cdcd5d4c4bc905f289d2156
- SSDEEP 3072:PLac0AVfCwGzG8LY4kh53s0eOnz8WjKAOvX7LYvglcD4ZME8xYWDQqJpFDBl4qjm:hCG7bFv9gSS
- TLSH
  T17594C96CE9910B79CBDD42D5957D0E90132D81EE28783E1846BEA8F05D06B2A0FDFBC5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral1 behavioral2
- Target
  fonts/iconic/fonts/Material-Design-Iconic-Font.svg
- Size 233KB
- SHA256 dcb3de1ca419903bcee5322ca91f2895b9c6482919423e0cce263d62bbe171ea
- MD5 381f7754080ed2299a7c66a2504dff02
- SHA1 8557b1551b91a0dba3ea6273b4aad98885ae77ac
- SHA512 fc49ac4e9712f3aa53d177af4db6b5a913193ecc8887850c08856a01d684ad96612f11f814b908a1aac296f0675949e2a80ae9f90bba91fad354a544bce06875
- SSDEEP 3072:lHP0ykqoNM/uNSmeh3G797o5hQcT/YvG/s:9IFNJu0c8vt
- TLSH
  T18334401EEAD00FB0CBDC83719A3A1D94623D461D28333DA049ADA5F45D1FB6D1A8DEC9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral3 behavioral4
- Target
  index.html
- Size 3KB
- SHA256 0adf54392840d91ce91cb47514b8aa75388a070eaa03ee82085341bddb6ca6ed
- MD5 2423cbc7882f5e7f3de6f03eec44ab2b
- SHA1 be044bafb2c754db4d1219aed0d534961f8d71cb
- SHA512 ca1a34b02f21067ef185f0c3a5b06226922ddf619c5914439a9e1338f2c6e5b8b4652446f32bf9ce3717455c88cfa6b350179d47eead15240e6daf980f0aad09
- TLSH
  T1DA712D0A760FDEBF81321697943B91AC91ADC800F7A5C170FAFB23330E91764681A18F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  js/main.js
- Size 2KB
- SHA256 e7affedb83e512a6790f2f8af4d0bbcf97289278d25ebc2d55d3f77b5236e541
- MD5 89895cbe4c1eae6ca0c9ca556f2e1833
- SHA1 01fcc96cfe05a58b2f308e08de4b2968e08fd4da
- SHA512 5bef6b517583f5c750f0a031034ce31ac53962d05d6cfc5bae675e63ade51ff8c8287236f074c80042577cd521f938b033d208d9ae255acf7a2da91febd50b43
- TLSH
  T126416B49A92246584DB2367A9EDAC008FFE6051B8401DB02FD6C98812FF07144F3EFEE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  vendor/bootstrap/js/bootstrap.js
- Size 108KB
- SHA256 d4b9a08cb76970294b39bfc3c10caae6a4dd82d405bd8c620113211c5a23c877
- MD5 23a49d81e87ad811700e6db0ac345242
- SHA1 0978bf924f1482805e6d89235768f5074fa22af6
- SHA512 977998b42656cc72e0ff03756f14c71f91f6f5fcc071fde993cbc923960bdfdbc8edce5a58612b36d6cebf49cc00db286f322a0c95aaa437f68c18dbd5595066
- SSDEEP 768:bVWSEXn4e+f7x5QrX8KnjYhY0BlzXbFHeo4e/ebEE51ALd9GMH4qqIayElb+kKbn:bVx3f7xuxnjYygay9GXeEscVmCLk
- TLSH
  T17AB3320A3EFA2492416BF03E8BDF5006F634548B5609DA047C5CAAD86FE453857ADBFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  vendor/bootstrap/js/bootstrap.min.js
- Size 49KB
- SHA256 0e25895d7caaf355a53d19c37c69a06198f668e5422b211d27597ed93983b80b
- MD5 baaadea4492b059f284187d75af46063
- SHA1 7326bf5e023f871afcf6ebb18cb89109f81a7708
- SHA512 b56367cd0554d9e5d12103e2be34e304433b898db5d78439a4e04845168e413d90875024e3c5583cde3ed8aa68989a5c7ab37aa51163e65fb72e7c50d1db587d
- SSDEEP 768:bVCSRfsdjHVpcKc2v5dTq7gBaBIzySppHcWFcXPv1mAaCcE1dLPmdwGmo:bVDROhicBaBD0pHcWFcfv1mrCcws
- TLSH
  T1D633970A725474A202DF6475917F050BB33B285DE60A90ACB99E94FD1EBCD8C7267F38
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  vendor/bootstrap/js/popper.js
- Size 79KB
- SHA256 a93f37c5c32d030a1d831b5023b6b29bc93290f5423debaf47c83b6444528059
- MD5 426ce17eeabd071e85b0bb50e5a18c6c
- SHA1 00e2321a61daaf93f57669a81f0484d75eca8158
- SHA512 d6caf3f84d60f0ee82475688f100c9e9488324f1c96fbd00dfab9eec8217333aa39bb08980fd521ce4c608a93fa9c97a1d091c508371db2790686254c662e556
- SSDEEP 1536:Ymx6gfJhMUENMZq50kQz2F5gPvhe3G0rJj3zNqOljDvO:96gfJhMjMZqzD5gPvhe3G0tjj0SDW
- TLSH
  T15383C75A35D9B2F245AB91AB429FA24DB2318136221BF41034DCD3A83FB1E3451EBDF5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  vendor/bootstrap/js/popper.min.js
- Size 18KB
- SHA256 5292e677fe712c80863414e9e73f3678d86d409f751392b6803b70a949fc1017
- MD5 6383a57baa1479e8490a42f4184b7f0b
- SHA1 a7e89fa1896ec8afca2a442b792c9aa29e5823dd
- SHA512 2c2358b3b8c7ece766a1ce9a75f96b860a6ad1c266abc7f0409ab7202081ba4f01285c00d0f2faa5581570a1677cd734749f94985a79b18be31be8e3961ee75c
- SSDEEP 384:++vdXksbdN1izO5GdN7fHw7FInxiviMduz+zQvDHlxGSjkd/9jPTcCen1cnMG:T17bd7iq07ftxivbuzGQvBx1jknrTcbM
- TLSH
  T1FD8282DC3290B06647A79067A06F960EB2335879604E9420F29DF2D97C30DFA927FD79
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  vendor/bootstrap/js/tooltip.js
- Size 16KB
- SHA256 4b22118fdb21a6bf7f59f9754bb90481032ee466b9d5ce1fb837a485b19d047f
- MD5 640e14f2de0e6051dfd1304dd6855028
- SHA1 5e68cebe67bd8ed9631aeecbacc63d14a008c1e5
- SHA512 c7bc6f028d936e2d1c6c585dab5d041e6aa5090edfc2acc421d040d4854a0dd95fa781eec4538871e9a21b4d95f47d9bf0559f8f697b8f7bff3583eed7dde0d3
- SSDEEP 384:YlEhivX5UWset+iK6lOUZzRFqWoa/OSFip/PQElrj7IKi/:YOAzsehlvxoMOS05PQElrj7IKi/
- TLSH
  T1EE72625BBAF322B14517307847AF631AB136815BA19E88347C8C93C85F68E34C3E79E4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  vendor/countdowntime/countdowntime.js
- Size 2KB
- SHA256 680d7dccae0057987af6da8d83e6a49dbbd0d66ffe173471c47d3ac3caa8f71a
- MD5 9f7c1f781d72385623259882bbfcf6c2
- SHA1 94f04b927588dc2362dfac9a66add708e6cddf40
- SHA512 bfc0c9b11ac693d14bdfcbf340744f45dee3052b454fae97ae67c5ea6a2d1a00e5c009efc841bc68f297653e71d985dba094111495069d0d7120a2085e882c84
- TLSH
  T11651AC2489530590ADFA77A78F6E0299E364932315CBC65974BDEAC01FB0944E48EFFC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  vendor/countdowntime/moment-timezone-with-data.min.js
- Size 180KB
- SHA256 14964e10b8309df411746f0a65449609882e7040837f8c3991f41d41219b5692
- MD5 e151e6df5d3a88137025e187789d6dec
- SHA1 56beca5d01b162efc76849bf97344281ba89946e
- SHA512 9f30d590508106e2ec94c3de1a8ff4f7dd0e9841626221d3ac6685191b0f3acdedc2e0c748f8990709bc28db2ce41487947f32d0910a2259996df94913d9ee82
- SSDEEP 3072:CLeUl6liDD/DCD/DCDMYq+nrHrrULekrlbupnDDDUDDeouSe0Wfor0o/khXGo56:6e1+xy20Wfk
- TLSH
  T17F048D281617BB44E459C08BFA3739C0CAA9D18A944B54D24F7D4BB75FA37E2DE98C03
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  vendor/countdowntime/moment-timezone.min.js
- Size 5KB
- SHA256 c2795fbf648c3d76b2f15cb04644622f9cf2b098709f663476eee98367e4a046
- MD5 815209b1a2020b5cf4ed070ef41a6540
- SHA1 5f189bd893458547f396225485d19db609cc6378
- SHA512 2dfb5a3305e4e833e7a4c805d2a4d7c2822b9ee92d23eb57353d9a72733dd40b60a57c06de82ac97cb92a5aeb351ed5884513665f54b1dca5be1aab0239661af
- SSDEEP 96:VfrfRNOZaUY4DctsLVEy42CtwRkTdUSNUG0TRBEkqebWf/FI5uQN0YTQEINk1mJE:ZrfRNaax4DEsL45wyZUojWDEkluIEC9n
- TLSH
  T1DEC1C59D33A0787A8B8792B4D1BF540BB67A75152A0CC024F92AB8D17C34AE54377E3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  vendor/countdowntime/moment.min.js
- Size 50KB
- SHA256 001564a706fd2bd3f1b9bbd1ac732493ac2659c207504f5e0713592d7610f389
- MD5 5ff1de69e6fd137a6dd511205ea7c49e
- SHA1 91a29a02cca99f32598f7b5764c610ab3cc89fba
- SHA512 419fa651f350826ebb4ef5f375352a504886638e1d1394ef5d18197ba45d8e48d12fc99596da7fbc7530ec23f6f46c81706c2743971724200da8f3f43c9af0a4
- SSDEEP 768:RmEj5IyZrV7dmUJ8/HhbmINN3vhg+XVspjiCumS5vcAKR1DC:wKxrV7d3g8ixXVspCmcti1+
- TLSH
  T1CC3393CA3646B112176622B5083F490BF33D5959680F0D1DF508E9E93979C6E827BFBC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  vendor/jquery/jquery-3.2.1.min.js
- Size 84KB
- SHA256 87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de
- MD5 c9f5aeeca3ad37bf2aa006139b935f0a
- SHA1 1055018c28ab41087ef9ccefe411606893dabea2
- SHA512 dcff2b5c2b8625d3593a7531ff4ddcd633939cc9f7acfeb79c18a9e6038fdaa99487960075502f159d44f902d965b0b5aed32b41bfa66a1dc07d85b5d5152b58
- SSDEEP 1536:YNhEyjjTikEJO4edXXe9J578go6MWX2xkj8e4c4j2ll2AckaXEP6n15HZ+FhFcQ7:uxc2yjx4j2uX/kcQDU8Cu9
- TLSH
  T14483E6D9B2C67062977730B950BF410BB17A98DAB44C8C60F158D9D47EB8A8D907BF2C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  vendor/select2/select2.js
- Size 164KB
- SHA256 ba439bc1fbf27cd926243a12a8600a272f3cc5bea4d6ed0b4bc696d7c82621e2
- MD5 5a192f8c7d95cefb13504e0d27c351e6
- SHA1 64f7dfe335bf8b7cac471da7778c4b6b64eda6e1
- SHA512 5994659a04d65660dcbee8e9294b0298da1666a635133a85ea54a8b39c538a02d56f5bf61a138481b47dbd1274d1e374768f6cf2e7ebf60898696fbbf05a85be
- SSDEEP 1536:zpur01RSNgO+z28b5LcjgFUo3JuM5vLc6EytE5MQQ182Qb9u97y:EA1RSMtNtE5MQQe2Qpx
- TLSH
  T1D3F30FC8695722748BB773BFDE5A640CE739526B900582127CBC86CC5FF24209296EFD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  vendor/select2/select2.min.js
- Size 65KB
- SHA256 fa659dfc6ebd4b8aad80fa304842c879502fefe16e2fcef55976a89605e7af04
- MD5 e87ca4c3554f7b9e693605ce12d3a234
- SHA1 fffd0bf48918d33bc612be1fefc120ee23b1a1ee
- SHA512 6e3f07135a4ac1c86860d8b3843e7b565e81f44c52db91f0db55b1a1013319aa4d3632d9d3e92044c127f4a4820fe8a06c4f7efdd24eef1e9984badd690e4fde
- SSDEEP 768:6o14fnpUZnxyUsdSQmUFkrGBokOl/NxYTP1aFe7MMpQeznipGmZlnU0RNly:HeGnwUsdSNJkOZWfXLEGAzNY
- TLSH
  T1AE53B748B9537235427F20F6656F040E2136BB7EB00A5AA8B458CDE85EBDD14326BF3D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32