1639e57e92f9931fa4b80859f88d6ea88773831d7e39c79f8df9fa6745909dea

General

Target
ftx 2.zip
Size 151KB
Sample260727-akt3fage78
SHA256 1639e57e92f9931fa4b80859f88d6ea88773831d7e39c79f8df9fa6745909dea
MD5 29f7af5a75d41226ec9bad2725c6ef5f
SHA1 3e0ca91861d9645c0f2fc69a9e6b77af013c8558
SHA512 f630de7d16d13bf9b1d26eb61fb801a893c506a3422a0c36351ddc95d7096df8e4a913542fdf294ba076a4c383de4672014642f552407b51151c0cbbcb239ff5
SSDEEP 3072:nkXLvYolprDqNykl6kUe8dBpu0h3mEiFC3D8970op5cMVVq1WaQi:kbHl1J5kU17pu0h3h98t0op5cMtaQi
TLSH
T18CE3027987891A82FFAA7DF1DE05D75DC0EE090C096A92607F8E0B0E8A7F1D097119DC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery execution

Malware Config

Targets

- Target
  ftx/error.html
- Size 1KB
- SHA256 f17376b0b7ade8c24d17405d6c2d2a8ed5d8aacf1ca16efff18e96bd2fbe0220
- MD5 ee48901d9c8fd41b99ca875d7c6b0df9
- SHA1 c2b548bba5e2a9215b80375f019bebbc02953220
- SHA512 e3bdd12d8924ba9d11cb7d36ab4fc1aa0710fc992e2024f46be2cf9a47fb631af22cf766d43b729600e8b0d29e82ac0764c8b020c0a0af435c8e541000d217c5
- TLSH
  T1F531B19B56E310027923A0A41FB667412B80C027C24FCEA93E9CB348CF955D6ECD378C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  ftx/index.php
- Size 6KB
- SHA256 723332aa6b9134407d73e0e57e3e0aa8b94e78e116d85507a5de3e7fb8946f09
- MD5 83b1325936086f8abe2a6e320da06181
- SHA1 917c45b1c51113ecd82f844d63a36a2e3bed47ed
- SHA512 8cb313bc94e6dc468ae6c27e20d99478c12259007bcf73d310a1909a890a9b2d15f753649887ad27a3e4a3118da620e4b8d39fb516a527236ff59199551a0eff
- SSDEEP 192:f51EHXstivR7t/2kMKAYXiyBhCCZHCq2BFbB4uFlOGJg:gHR92kuyrvSFmuFdg
- TLSH
  T1D4D19526B5B741244B67D898ABEBB195593A522B260CD1007C9D03CC6FD832CD3F67CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  ftx/page.html
- Size 13KB
- SHA256 ca75041fcc22c5362ebf31bc9c07f2aba0ef40adc638b18b8bd83aa47a473331
- MD5 44b5061ab1fce6c3ccb0665d3fb71b69
- SHA1 36f5c573408a778098712527a12937bf755536ca
- SHA512 e60a6f5401cc2388e1b717a360a5ab25349bdb280d5546604a88a795c44da668edea7ae902f3bf9f35eee5b329b361a642ca34e0569dd80aa5603374193f7324
- SSDEEP 192:vriiRK1phtc0LJ8DdwnUv9j9v3fmsDRcSmSvjcpf8N7YC2Mt6cFfU+RvVa2HMpe6:vr/aCf0cEEfU4vVa2Or6y1
- TLSH
  T1CD52C70B47B342356C07D27C6BFA2A443166E003D429ECA83FDE5245CF8D6D469567ED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  ftx/pdf.html
- Size 3KB
- SHA256 0881f9a5c0ec171e4edeef800421e4926bd33a12aadcbd33a5e902949e1e2d7b
- MD5 c366b6b51ba7fda989626d2423544a27
- SHA1 baa955077b6e427c566c97ba70ad6f590a08f86f
- SHA512 22f95b13b2af854a927c4e15a0674a0d8c4b14916e0f4b84cb1dc2eb5523696acba7dc52cbbcc74054843568665b630d14bc89b05c4302e3501c208524298736
- TLSH
  T10C71B86B7E160005A302D0D1BE83A745650B7517BF4BCCB6B4DF9279AF459B892623CC
- MD5 SHA1 SHA512 TLSH
Score

6^/10

discovery
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
behavioral7 behavioral8