e8ff7e52247910ba0961b36130437d496818eec7cfeb8931c8e86e8cfd49a893

Sharing

Copy URL Twitter E-mail

General

Target
WeTransfer.zip
Size 67KB
Sample260723-w4232sszhv
SHA256 e8ff7e52247910ba0961b36130437d496818eec7cfeb8931c8e86e8cfd49a893
MD5 9729eb15e8bacb71ffe934b3bd5ee7b6
SHA1 d7f4594610602fe54f89e9e6e22caa5fa3fc358f
SHA512 c5060959a54b8535f6d88433e31c0407bb8b9d4fc4047578553f204a34c3cc8ca94b4ad33da52dd68f7b2dfa05cfe0b8c37c3ff66a46d10d0d38d3f899798fee
SSDEEP 1536:G1dY1XwPuUkAdLPNCLg2A16EfeiwtVo2j6s58d8ZJQZGb:G1dYZwPuCb2Av2i2o2us58dEJQZw
TLSH
T13D6302B5886004CDEC4EA8B4515DD795C483CA6E1E802737DF68BB4DA09D72FF622ED4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  WeTransfer/auth.html
- Size 17KB
- SHA256 fc9de571c71b0f386288acc940b2fa83fc7ebb9d37ff6dd3892339a80db20c27
- MD5 634cd7226a70f45e1f17f8eea3f14bbb
- SHA1 d0cd2bb537d0d32ad9ae1cf6305a579600b313f0
- SHA512 861e53a9491680e3072779205054fbd08203ee3218c615cfbb7256b8665fa46592ffcf9709f1ea192aa03e39172c77a8ad1839a8b139a99ae290774b57d22823
- SSDEEP 384:yygvSkKOTVrtISgA5iX8OjpniuLjqUpcWX/jbfCBDYdMe:yqByUik/3q0
- TLSH
  T1D482B9480534172F4D769275B78B9418F793602B25139E8CBA5D82423FB2953C3AEFEE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  WeTransfer/favicon.svg
- Size 959B
- SHA256 9fab6ee4549971b6feb886d667c9c6280bb86b1e1aceee503e46e0eedff6168c
- MD5 f10b6d67b18d7559a26918ece17c4127
- SHA1 85976ffacae5927d24a2364642f0a22a2a182c88
- SHA512 6131327fa7e1debe2b41089dc61af9dd4af00f08be2f5ea074e8d941e142bbe35c28424065bca731904933b5c55c5497bbbd2bd3487ea5c670539612a9c35ab5
- TLSH
  T14111E5F64B789188428F8DBCFF54FDC9612F5479657405C1915AAF7CC803AC2F312814
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral3 behavioral4
- Target
  WeTransfer/mail.html
- Size 3KB
- SHA256 e693d1aef15b201a0f8f1c72ec831696a91a6c307ed6afbd85be73f5f282b946
- MD5 bb62083c59e81261100157980c52d9a6
- SHA1 378d5823735cd6c91aee0c562c9e1263d6415964
- SHA512 d89a667bb3daddd22092d4a9d6c3461dffec9ee0811f545fb659f8533dce735603b395525da135a47af1d35b47c34d730ec6855b1e519c21cdd24dfac63ba978
- TLSH
  T1EF61013AD588100761339274AB73669AFF969153930186397FDCA3878FB6904C963F88
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  WeTransfer/phpmailer/PHPMailer.php
- Size 189KB
- SHA256 01038c4104554fe7fdb958eb4653883c5cf93af76a3c8797794001c35c1bf553
- MD5 663025b83470cd6f5ea53164499c8390
- SHA1 8e08851092169c62ae11d794cf8cccf239477f22
- SHA512 88190897cf940623500346acb72be42f3da804e6a23cd64113fd6559c26a3fa2523e3baf120c47ece6f99ceae7aba902d39bd3623b0eca9b4893b29d72ae0c18
- SSDEEP 3072:VhgJj2Y1HwR9DQ01OgiDd14/RmRp3S5nbmsjhlIKlK/g6+o+iQvE6d35lUGcDkdx:QJj2Yxw0g41YwwIY6t+iQM6dEGcDkbMG
- TLSH
  T1AB14C71878E75CA1165360B9ABCFA040D13AA13F1578A852BCDD43B85FC4B3CDEB5AB4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  WeTransfer/phpmailer/SMTP.php
- Size 52KB
- SHA256 f7c8210e4047871f9f0b0639d7387d5574738fb9984f744d58d85378da77c68e
- MD5 154d133e89d311bc885d6af671c11717
- SHA1 5205cddd66ff05660c91b5ab65868a36705197ba
- SHA512 412b3115d168773387997001acf7757fd25d6503dc50dec57df21a62742cdfeeebf08f6eaa27f8586bb60aa108e667d68edb9f385bbc9a6f506ef3b1fd5663ba
- SSDEEP 1536:DSHHMZxzhdwXLF4aD7Wp+kQ/Vxcze8c4ybII3WU0:+HHMG/V38c4ybM
- TLSH
  T11233C94A34E71976122320B95F8FF044E33AA52B12299D85BCEE57785F4073CCBB1EA5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  WeTransfer/send_email.php
- Size 4KB
- SHA256 193c0eef5ba6c130271b478512c5646741949ac63cdc0ef6f31c70ac12665c67
- MD5 0a454dd1ff03d587286052a9bebf27bc
- SHA1 91570ef5bc96e3470de7d35f17c8891482e95be9
- SHA512 ec316304195c0591012d01fe97e077c2ab9d0433e176a1b40bf287bb9321ce300b39d0fe708f8090e1b2f6b223d5945f45ee508d442d8822934d37f47685993e
- SSDEEP 96:b8iRAQC1tB9TKXbX0XTZXLXlXJXqXiXbrX13X/X6XFXNerC6WM7IHgMKI9CqCqCr:QiaQC1NOXbX0XFXLXlXJXqXiXfX13X/d
- TLSH
  T17EA1E0A422501C520A77E7347B91AB14FBDB81271D4192927FDE4282AFB2D02EEF1D85
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12