a2aa42168ffe3f14a2301ef595ca0aff5f5fe0522c924d27bb1bba0b2ccadd65

Sharing

Copy URL Twitter E-mail

General

Target
public_html (3).zip
Size 146KB
Sample260727-ewbgpavgnd
SHA256 a2aa42168ffe3f14a2301ef595ca0aff5f5fe0522c924d27bb1bba0b2ccadd65
MD5 c69feaced9426af475dbcd7c73ab27a4
SHA1 a8b3d92736e64b2ed445049aab9000dc5adc97c8
SHA512 5009e557f10232373182463ca819bb3c9ffa2034257ce5c5e118aa0d3aa5aaa570f036dcba10031f3440f39f806b37688fd831bc44a866a72dae53e6db1ccb48
SSDEEP 3072:RWMwAcGQ8qLWCevZQgCansgIaoG8g93ulOz:REAjQ8SWCeZP56g93Ws
TLSH
T1F7E3CF2EC6642133CE5FED3E02DA874F42974249254C69CE1A405A743E2D6DC37F2BAB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  public_html/admin_diagnostic.php
- Size 7KB
- SHA256 807048365dcd004d67a5aeb6b1b1e4c56ff3764ed38be1135f45b5179fa74b28
- MD5 9aea865e7e617403b9ee9b9d829c3924
- SHA1 f95d353dc34b2dcbc5bcd22eaa7218268fe4b2a3
- SHA512 b052486a478817884b315b9c7ccae966cc92a376f950ffc4c966f72e687e25e61e9b0f6dc4964bef22a9ac127d1cd25e04984a684c17a3b1c183150c0a968223
- SSDEEP 192:7WG3B3hINqRM08unlOu4kqNgQVaD3QE46krm6BCaQJPKYyW4ERGYmYnl2:F8WQwGGFk/
- TLSH
  T1DBF1FBB169F216107253C058E38794693A828513751A5660FEDFA3B83FC1EA9FC3ED4B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  public_html/app/Controllers/AdminController.php
- Size 21KB
- SHA256 a3a93ac953f5dedca46de2c14744b716a3ae04c3f975ecf630e70d859c325ab0
- MD5 e462585c6b01704f1fc604d32fee1d77
- SHA1 7ce29dd7748b4168abcdc320b545b308f65d9a3c
- SHA512 fab488be914dd04bd22b0fd7d41e5396e76d5015ace2585bd3ba6c68e6ca4f595020b77df86f1ea37e07113b26b81da02675ae8f2c0ace883a7bacbdc302814b
- SSDEEP 384:Pxr20EzqptdIJ6irXWI9+/le+yv0iVU6EreeBuZYJxyrrAO/OmDTwWyzl+tOsLRf:ZzEzqptQ5/vrUhrJuDrFhD0sNRt
- TLSH
  T18EA221A038DB29B43463A4EF7B9785011262401758B7B5B1FBFE11E42FC4A2CE675A39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  public_html/app/Controllers/AuthController.php
- Size 12KB
- SHA256 9cd790f8f86a4640c70f4f37c847020d28f2a4bb147c15eafbd909030ff8b147
- MD5 4013d55ab43fbdeea2392164b9ec571f
- SHA1 269fb8c052725f93252fa36fee4c6bbca2809c61
- SHA512 df09e660227c06c8b84e731eb9a59238b22da508e4dc76e0b80ef4577c82680b4f5ab56490bdfb22ddec73dfc0d33f4287c7dd5af8e70e658ecb10418186fb0b
- SSDEEP 384:BFQdIJ6irXWE+Auew+/aRXsEU1ZL5l5cL5lqKIw:oQoJ8NL+Lcw
- TLSH
  T14E4200A074CE18623853E4EFA7D745015253802358736822FBBD42DC6FC6A2CEBB5E76
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  public_html/app/Controllers/HomeController.php
- Size 10KB
- SHA256 668fe0920811528a7dd019d1f69a577336bd76e1cb1b92560f1c7c6f582642bd
- MD5 104fba1bb4b4d38ea6b33f4ef9d487c0
- SHA1 a62216af35d07ba165bce24e89429c908208a055
- SHA512 af5818e0c98b6bb382dce8b535c13848f2409c9dacd841ddc46e04ea63f2f6ed410b5ed024ac330c0f47034c0fb73d3fb2921d4e06cef85e648e5af0ae5017f2
- SSDEEP 192:snsj2E4gD+/BNLDAdMljTSrMhVXyOSFl5C2s1+eV8ZhRO54NQfEL:ssj2TgD+fMdMljTSrMhVXydl5ta+LZhV
- TLSH
  T11F22722536CF05B0155325BBA78BE441815750172CEB38B2B7EE12A42FD893CE7B5E39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  public_html/app/Core/Auth.php
- Size 2KB
- SHA256 7acb6073a78f134af123abfebbd12ae5e61e94a22a780ceacbe3a574e262de04
- MD5 72f70c64ab0311a7cc914d59bee86d11
- SHA1 c08f3b9de4c28cc092f640b5093bfadae05d084e
- SHA512 5abdb41a81c892f91a9121cb80dd4eefad531e1b347c49615711b61fb74591d39baebe62205ab934d29a4456e675b2df4b0839056a7c4f4885e9921b261a01ec
- TLSH
  T15351CE2C60D768712253E22A068E86417225C01311AF9E61FFBE15643FDB93D8BFDA5E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  public_html/app/Core/Database.php
- Size 1KB
- SHA256 6438a717be4897ebd73adcbea0b1329af469dd04f69be48778289102538f285d
- MD5 7826253c514e56758eeee0b140f4c12b
- SHA1 a284ad103d42997a060294b4886e18f65caa8bab
- SHA512 07131f09ec02d03f003322f0cb9b6a56e9aff4b63af03d08c20df8889461e8fe8b0b43273015668a56ae3f34caf57309ba8e0ae1ca724ba0bd1227ba26a9cc77
- TLSH
  T1D831032B31AEA4960157F404C8CBD020A4779903152CB522FE6C9284AFF127CFD72A4E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  public_html/app/Core/Mailer.php
- Size 3KB
- SHA256 4443abad4a9bd12a16fb53e48159252699e4898067aa0861ab197077a2859541
- MD5 87f8b1137494655a83cb7c32c5489fdb
- SHA1 84a98e4095aef2fe03d1129bd6ea08aef0959def
- SHA512 8fa8a2d0d7dc59348eb6cdf5e2142cc819cc671a7f05458e4c13c783aebf9de2192ffa18ad738509500c6afbb22eb3fe34406bb56b99f4ff3e8e8e5287018385
- TLSH
  T11A81ED10F8BBBA0112B3D07AEFEBD4106A5444035269F762BD5C83CAAFD5308D4B496F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  public_html/app/Core/PdfReceipt.php
- Size 1KB
- SHA256 9f1b7c47f036dd40d34576b7e3de9fec8a9e30c28405441192a7ce1726c1f8fc
- MD5 9f89ac36b3d06a9e84e7cbd7fd56259d
- SHA1 880fe019c1692f718656f241682bb920e28b19ae
- SHA512 63c8b3069a771fbe535cf7031f7cd55124e554a03ae7f702df807ee887d6ae7286e06fe28453fa920b3657aaab45c27c4a18ee60b7fc04104190ff228e58b0cc
- TLSH
  T16841E124BDDB6D1C5997D214775F2435D62B2003805DE860BA9DC2CECFC0614D9E2A5F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  public_html/app/Core/Router.php
- Size 2KB
- SHA256 cdea83eef2faa69b0399e8ada501d81ea2f8ec156beb27ffc57bad8a15fd7d75
- MD5 b97e22b999ff99325a465d4c8f11c33e
- SHA1 e973ef72b14a1156c30b9ee56ee4beab6bfc9a76
- SHA512 34c1f82034618c78ff81b79f2e1d4472648af2d5bb976848791659c0fa3c5e6c89a23539655e6fb00ab0f0411849888c2593e94a4477b3a55f731283b5cfcf54
- TLSH
  T12541F14D31D32B2C549BB17883CB48541DF380EBB2BA9E54BDEE83421FD0068CE665AD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  public_html/app/Helpers/common.php
- Size 16KB
- SHA256 c674f1d5cfbb7979266d959c042bd6b49efe8d0632bfe72a3baa5250569bd03a
- MD5 bfd38b1860e5971684e24a190086b2d5
- SHA1 c7de2a2e2980bf2c64d68512e54df1f1270ca77a
- SHA512 e9d146b7f0a46d1292129401451dbae3a2fa16e25a4264bc0c68afb23f6f7e376ddd63c272de3c631b012284f318bb37d4ce49f675720c729fe5ed44e51390f4
- SSDEEP 192:bqRPNe+GcOP7KTLSsTqrWYkMuGJphFwE8L/aN7vhAa18fwUn+uj9pePQtibYOShl:HJd2T+YqqeJ5xIazuLKttDN9wZ8E
- TLSH
  T1597213597CEFB1138553B13A8FDF4048A43A0523056CBE62FEAD25942FE463C86B1B79
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  public_html/app/Support/PublicCatalog.php
- Size 12KB
- SHA256 788d729742cadc0512abc0a0f3dd7b395d7f4147bd8419a3628276a5ad8795a9
- MD5 a6363bf19bdd47057852fb83f2c5b550
- SHA1 292a87050287b4d2610c2734ccdb032266631aa9
- SHA512 08a4bf244b2fdd06ec130a212bd0d1fc18f3388d77b9a7444382983751265b09a7558eadc516388b1d6b5bc5c3a8ba91193f4a2a5dce8c3788c181a702797d2a
- SSDEEP 192:bgEiRYTXPFUID/wk+pvkdXLhBsGi60dswP7mRBEACrUt/q:cE6Y/wkRnBmQtq
- TLSH
  T19742633918FF71341613116B8E5FA048586954031DEEBCA2FBEE64042FED87CC2B9A39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  public_html/app_diagnostic.php
- Size 9KB
- SHA256 612b78ee06d0a1597ff27dda7f7c077a10a930465532300b94f498a37ee3e9dc
- MD5 5099090501bb278732b955ba1c70d95a
- SHA1 ddd6b73dcd6ac04813daeb2686e6702ba0da937c
- SHA512 1e1c20355b509208da42a61e66673b2ae1d4b313b79257eafef2daf712c6f7bad998703c802100345c384b5969a0896fefbb83473b6de762303a28b243233907
- SSDEEP 192:6Dn1w90EbjQejvIscgoyfJsX5FPtqwC4cH8kCKyCws45BgCKye3OgavSfeCnC/ri:6Dn180qIscgoyY9bZkmlOrye72QUyg67
- TLSH
  T12E12B87339EF04162427E04DAB08E5116F92480323587BD3BECE63948FC8974E9B7AD6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  public_html/auth_diagnostic.php
- Size 10KB
- SHA256 cfcac4b6d6824794d78aa5eb6c36f27787b0fbc7cc0d7cc65678d8487a8c891a
- MD5 c0bd9bd06447121f92ff28d1a840d0ff
- SHA1 5ba150f83592fe520548103329c6cbfb01219b17
- SHA512 d38a238d9d30ef5535be0e4c1b6743bc1958a0e92cce0cc9f21b6c83c09d91fe8de4d98c2f2491728b502ea3497a2fd055a188a0597eb2dc2e3de3d532fee00d
- SSDEEP 192:XDDmZPrOBaeNOga8SfoAs7X5wh64SRaYLnRt6BrV+YRhbqwG5Vo9FJpuIgMOt5ys:XDDmcBaeCwR6hk3YRgwG+G1Yzje
- TLSH
  T10F22E863A0F535256153D0689E52C6111B95CD1739287EA0BCDEC3E4AFC8DA4F973E82
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  public_html/diagnostic.php
- Size 8KB
- SHA256 f98d36df188d3504f2d4297dcd9721e5f0df109c429fda8eeb838ab92f4f8717
- MD5 bbc2a2bed24e042e18e765a8ef0cf9c3
- SHA1 91347c2db0d52fc4e721a0e3a22bc163590179e1
- SHA512 d1d494baa780ce36a2b15e30cad09d1e3200906fa3ad90061265e31348def81a1139a0c0ee6e24b756ec1413431516a77b912752b005c1ebee0d225290e39bc9
- SSDEEP 192:XD2FZ90cbjQejWcIsCloEIlmCFLVe3OgavSfAC08CVJFCK3dHcQgMOt5yQFPTKa8:XD2Fn0jcIsIIlmYVe7oeITGDBGW8
- TLSH
  T15202D79359F5100A2D63C45DAB2AD2213BC68D0F53941BE1BE8D52649FC8D78F2735E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  public_html/favicon.svg
- Size 2KB
- SHA256 7bda6e0134f49e023fed183f47d05a292e851f2ddb491836a8d8b219398ec581
- MD5 d72db132ff81ce2382896660944d254b
- SHA1 988734704bd62887766a705c5fd48718a92aab02
- SHA512 a37ab3262614323296ea2b986cd856ca82561390d8820d0ff7b4a0293091a02583457ad59027af25e2500d50d7efc73d192589687f6c9ee55c080a6ddbd119b6
- TLSH
  T1F4510079D66C8C3EF6198208DB587474326E50D797889250B02C8B7C5B382DA8C7F6E8
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral29 behavioral30
- Target
  public_html/public/assets/img/print-my-cards-logo.svg
- Size 2KB
- SHA256 d8242a24282008f940250a68435b7a0dbbd363b94adee7e5854babe62815a2d7
- MD5 2abdc1c95d3f2a4a3c8fa9fc465c3d01
- SHA1 8d8c704b2a9c6ad8c361da3019f1588c56dd568b
- SHA512 88833b04c282760a92579a21d733981e284c21915bd5b1b1abf7004dfabfd68abdc763aeaed959d0e41fcba3bfe6ab57729093915af52f8771acd01957a736d0
- TLSH
  T1BC51DD2EE65CA83FF609434CDF447134322E82DB97449210B06D9BBD5B285DE9C7BAE4
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32