d3b32cc136e6ec101b42b0af32f773e1538bd4d3f773c3209c3e865493cbd601

Sharing

Copy URL Twitter E-mail

General

Target
CON ADMIN.zip
Size 2.3MB
Sample260727-g5ralsxapb
SHA256 d3b32cc136e6ec101b42b0af32f773e1538bd4d3f773c3209c3e865493cbd601
MD5 49a7694725482b49f5144ba22ecec440
SHA1 f3831792916be0f3cf50de75dfdeabef0f128137
SHA512 7bcdf824333bd1281bd6a8a2c136632759e8ed4e593c88d9ee542beb34958551d7ba15fba495ecfed59708e72c3b558845496c6ab7ef6b39a9c2f80d92911bcd
SSDEEP 49152:jte+/l7aOcThbuJOKDGZmBQt9gaOcThbuJOKDGZmBQtDs:jA+aOsFSDYmiIaOsFSDYmiC
TLSH
T198B533705770C5BAE5DEE8775ED7870F718BAA058A380D26350221DACE0DBE8E9241F7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  CEGIC/images/stream-poster.svg
- Size 1006B
- SHA256 d69bbf28848abfea064dde922b1b911d55603fba6aba8fe91d4fbce107605f65
- MD5 a0170308b59fcfde5a8c1013aca25f64
- SHA1 49e40705670dcc56509922ad1af487fa490f9941
- SHA512 8142b1e9a22601f045132d0499771d60c0511f5c0ba8d9cf22d820360fc61b251f0e6f3f6e05e16e54af7dafeaa5d78b087e972eaa40d76c90816c0eacc0b1df
- TLSH
  T196119E76D288153AD11CC70EFB0AB63A330EC0CA4759D52071951B5A29C6CFB66EF39C
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral1 behavioral2
- Target
  CEGIC/index.html
- Size 22KB
- SHA256 29ac2fd05fa3ceb86ecb456ba440b6df44c488ed9450ae30acdaa1dff82153ba
- MD5 80f1a3ff092d1faf592fa01894f54b8a
- SHA1 99f569bea07a5cf71513ae02ef8f65044e3069a0
- SHA512 7daa0e8e2e3f14d4a8a291575a3a2d97f6d72aed0c36f545b2d33322ac370fe50459d62a6cac9b697b0e59b07c2c542aaaeae2bcc3adb38547c674a058a36904
- SSDEEP 192:69y94X8M0E6eIo8o8lGPqgm+Y2vZN5QT4j2aym4+W:69yWMho8onZm+Rf5QT43ym3W
- TLSH
  T1A4A2CB21A8C5107702B3E6CA19A6DB6BFDD2518BD75B4A0036FC27DB6FB7E049813057
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  CEGIC/js/main.js
- Size 16KB
- SHA256 0e63ee9f7da11d19ad9a3bce7d57ccc081274c20d07f716ae3382773532dadc7
- MD5 5357f3c8351f83fb6b047a1b4ef4ff34
- SHA1 abc9de8ad5ee35da1d640afb46ebc1800c737157
- SHA512 975916866a9ed955f3a8e915681a9564a9974a7aec0bb8d5da2dad25f30def45f07c9cb0c498b49376f955ceb391e91ea5457736a395519d4252bc5189a0ed05
- SSDEEP 384:ug9wH1bpw67wKSPgFkwWw4J1KZhTztGqjSb3OuK:uHw66BunWK
- TLSH
  T11C72A616B0FB143209B329DE279F61CA3924D1137445DE643B5C87841F9BE9A88B3FDA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  CEGIC/pages/agencia-amic.html
- Size 10KB
- SHA256 a7fc406813dff9b237d0f0a2d6b527469e34245c4c6085bffc247767b7f18942
- MD5 cc85a93efa4475c33e8238053ac4535c
- SHA1 d9915d502064a8df3c90dda9eac2be431df06f30
- SHA512 31f05e65d7227250ea8e21eca6f18364adc41cbaef4dcb754f72ce17660709a4476e38de557a2c7705f5d979ca3f1ab362a8cc5e9b27eefb4e83b988f2214f65
- SSDEEP 96:E9KzO15w4hstqm+lis+6+EiEjPGCVuxltmGZyMFHdeXv7H7n7m7m:E9AW5w4hstqm+lViEK/xpZVFHwXt
- TLSH
  T1942200166ED410A703A7778D1D81EB2E38F3409FDA2F8A4132BD5A8E9F82F44991355F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  CEGIC/pages/conafem.html
- Size 9KB
- SHA256 c361780765450528dadf6d9a722efa7f21ccead8c3dc81e31580edd0884490be
- MD5 819d78664a3352dc8eed862cdefa71eb
- SHA1 046dc611432d1b2fa8c46c68fe487068d4da6a92
- SHA512 a7ea8d19dedf400a54a3f378d32e44e10e559548791e9318f9dc42a06ee9b6f651c9110db9b76c38ae3fe0459f0c58e6b0d5a88429699b7bd1105e1132ffe18d
- SSDEEP 96:b9KzO15w4hstqm+lis+6+EiEUNU4dNHXrS1jGoyMFHdeXv7H7n7m7m:b9AW5w4hstqm+lViEUewNHcioVFHwXt
- TLSH
  T15C22FE166EC410A713A777891E85EB2E38F3419FDB2F8A01327D5A8A9F82F44991315F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  CEGIC/pages/conajuve.html
- Size 10KB
- SHA256 a3c4ed6dcf26d00c1f5f9e40985c6012c932c9ed29b53c4002230de4a35d2c8d
- MD5 542c4c4bf09e7a4ac15dad24a093bf6d
- SHA1 685373cbd0d57fc958d97099202e19295fb4722c
- SHA512 3ca3e4112683a32cc2eb5dc046a91ccb08f4a31bc712f60262246448434b8c2a19abf77e019b83833413b68d7555a319c1348f20a36b0f903bafe52187dcef15
- SSDEEP 96:jk9HFO15w4hstqm+lis+6+EiEd8C2zQ7Guy6GHRyDvV7o7I7L7d:jk9lW5w4hstqm+lViE2vuTGHIDv7
- TLSH
  T1E42200167EC410971377678D1E85DB2EB8E3419BDB1F8A0132BD2B8B9F92F04892315B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  CEGIC/pages/consejos-regionales.html
- Size 10KB
- SHA256 11be87d5eaebb8e73ab8e96296b05052735f1a522dd98365fdc08dd71967e63d
- MD5 717cd0a2a5723b844596c62b6094991e
- SHA1 83f3d27a36830bd7ea926f851b7a153c9afcfe44
- SHA512 0750b33a7cb9fbd8b27deb86ba4d5f4831cbb9e73519dc53856cd012b937640da1eef50dfef3910a260a2b3c26331b229adfa2af1c3a6b7e16cc559df4481879
- SSDEEP 96:z9KzO15w4hstqm+lis+6+EiEvrG6VuwHAIJGvyMFHdeXv7H7n7m7m:z9AW5w4hstqm+lViETywHAnvVFHwXt
- TLSH
  T199221F166AC410A703A7778D2D85EB2E38F3459FDB2F8A01327D5A8E9F82F44991315F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  CEGIC/pages/contactos.html
- Size 11KB
- SHA256 5b6ded802be169eeccaab3df14f4f654aad1fd9361c61a15350d0e1da41b3660
- MD5 dfb2f3f15ddb74fea32d6c9ffea83c4b
- SHA1 91e604bede18ee6353f87dcad8dcc3dc3eaa888f
- SHA512 341971aeac5a15e1a9adc3f90169fbc5be7f54e86fa9388c07ad529a5feae97c25bc034cd9d48c9e976e8f9fbf994ec8432faa527d213af7aaac36a00ed7a0b2
- SSDEEP 192:u9AW5w4hstqm+lViE3ji2jp4yJzRVFHwXt:u9fICjia4yJdLMt
- TLSH
  T1AF32201269C4106713A7B78D2E51DB2A38F3459BDB1F4A1132BD2A8EDF87F448D2315B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  CEGIC/pages/cultura-ministerial.html
- Size 10KB
- SHA256 581042c539a61569ccfb2646b8a17b1bd89adac2095cd1bbeec6809754948f49
- MD5 c3e6754db4c3b13ea64b9537ed1c79d9
- SHA1 58a6e11fa7097066c0215240ba6fec418a7d0864
- SHA512 4e71c15958a2f7e0f4b444f88dfb1d2690c290ad0bf67e7751435eaf2d6b32f267bded37effba55b84a7319f1e8d2c58e1b55ad323920757536a0b7db997e616
- SSDEEP 96:v9KzO15w4hstqm+lis+6+EiE3M5CVuwHJxXkr9G5yMFHdeXv7H7n7m7m:v9AW5w4hstqm+lViEc5/wHfT5VFHwXt
- TLSH
  T184220D166ED410A703A7778D2D85DB2E38E3419FDA2F8A01327D5A8EDF82F44892355F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  CEGIC/pages/datos-estadisticos.html
- Size 12KB
- SHA256 7f4ef9b9dea9d9e44092cdc3488f9f2158105a1586f5ea94bf1e749ff8fe2f87
- MD5 2c4a382937191443f1a96e88d5ebe1b1
- SHA1 ddba1879732e0af401e026f8857bde5cb8c54e6d
- SHA512 991f463c5a6d611932eb6a01b3d96dcf0becc144c3fc0503640d045a23f87f9ad4a0ef9cd1ab0c63cea9e0dc7362ee16149376055b7ee47fa3a280aa587827ac
- SSDEEP 192:F9AW5w4hstqm+lViEBmG/0D7bXuO0OKO2OjHyVFHwXt:F9fI+mG/0/aPDnDLMt
- TLSH
  T125424F1269D0106713A7B7892E91DB2F3DE3859BDA1F4A0137BC1A8A9F87F448C2314F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  CEGIC/pages/educacion-cristiana.html
- Size 10KB
- SHA256 dd5e58297e1f6e431a99b7dcb523efc09f2b66c5272e576c6444ef52b9a1ec7f
- MD5 31067ee4bf429a343240944515fd01e1
- SHA1 5af2fb8690128b6edad8d75b28dbce729dc3a2b7
- SHA512 1173563227d26d3e7fe21e3b6b3f0510b8845491cac1cd01ce0624f2daed4703703015b27ef72bc11243f84493694a9b68b0fcd204a1a0ea08ed29688bdea437
- SSDEEP 96:B9HFO15w4hstqm+lis+6+EiEVbP7TCS1LrS2G4y6GHRyDvV7o7I7L7d:B9lW5w4hstqm+lViE9PX91S4TGHIDv7
- TLSH
  T14422EF267AC410670377678D1D81DB2EB8E3419BDB1B9A0132BD6B8F9F92F04991315B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  CEGIC/pages/nuestra-doctrina.html
- Size 10KB
- SHA256 b612430f8d7346fcae73df868fd084f7317382148721d1ff5afa2db717355b97
- MD5 cbb49280cc41eab452849ffda2139f15
- SHA1 dde96db3af82ebdc363a8eae9c30f7f07ce503b9
- SHA512 d037f5910a5f1d4b3ccc61a0cdc18011fe730ac87a03fc728d67645a9ce3a621bef1257f50d274c6695f486e33e35ddf8c8fea493170de0055fe8c16c1429619
- SSDEEP 96:A9KzO15w4hstqm+lis+6+EiE/4WCVuwHDNRqGVyMFHdeXv7H7n7m7m:A9AW5w4hstqm+lViEgW/wHDNfVVFHwXt
- TLSH
  T18022FF166ED410A703A7778D2D85DB2E38E3419FDA2F8A01327D5A8E9F82F449D2315F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  CEGIC/pages/proyeccion-social.html
- Size 10KB
- SHA256 c47d8dae2fa6c88db347e134298ed38aafc258dcc11fff3ca370ce59fa0e4d4b
- MD5 d592cc7750a0e5a9a79738f6d587e239
- SHA1 83dfa15937417a932ad24cc028c1fdc46582064d
- SHA512 04d87948b9b2c236d9618f0de7615205a8b8e79af3ed9a8929353de103f4502ee6ca05ce337c605c759fe25f44d5048836614f02950cab1764b5131a98bc33c6
- SSDEEP 96:r9KzO15w4hstqm+lis+6+EiE96WadCVetcsxGayMFHdeXv7H7n7m7m:r9AW5w4hstqm+lViE938htuaVFHwXt
- TLSH
  T1F7220E166ED410A703A7778D1E85DB2E38E3419FDB2F8A01327D5A8E9F82F44992315F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  CEGIC/pages/publicaciones.html
- Size 9KB
- SHA256 17e6bc8758a6fcf5781d9be9a2e76cfc7f098ce0128dcf3c432e2d628ab5e6da
- MD5 9ab96692efe0340ed1b899782e988ca8
- SHA1 6cc39d3c2539a5e0d9454166a4eea1885bc9c264
- SHA512 bd97a1f95501fca9f4057c3623e2a826e6d49fb5954567a4c8e51290e14164213b363d338e38ff7e783abe1731b75b5d29a237afc6efe15b310505b10034ea18
- SSDEEP 192:p9IW5w4hstqm+lViEISjWtZf3vpBn1pv30VtWBOMD9fVG+:p9HI8xVwBOMD9fVx
- TLSH
  T1E82215122AD800E71367268D1E89AB1A38F3416FCB2F4A01327D5A8E9F86F455D2356B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  CEGIC/pages/tv-radio.html
- Size 14KB
- SHA256 84c62c48cdf9401e40bbcdf1aa2d1706f1b9bf1574fbeac76e68563f1874f5b7
- MD5 cc852b2a316e7f491830d184ddcf2be5
- SHA1 af285af97e25e2b90e41e0d73ac0cf0718679ff3
- SHA512 091e4257cd706eda1c085b43f1688731dd87942cc9abb5dad632fb9262479275c19c7f281f70a5ada61fb2a3140816cc68a4c6386645a825b0475cedf4ba8132
- SSDEEP 192:l9AW5w4hstqm+lViEy6J6sgC0WS/AwZehga6v61W6Q6Io6sZVFHwXt:l9fIccBmGALyG2eLMt
- TLSH
  T1A46262126AD0109323A3B78C2D81DB1F39E3859BC61E4A1136BD5ADADF8AF444D2319F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral29 behavioral30
- Target
  images/stream-poster.svg
- Size 1006B
- SHA256 d69bbf28848abfea064dde922b1b911d55603fba6aba8fe91d4fbce107605f65
- MD5 a0170308b59fcfde5a8c1013aca25f64
- SHA1 49e40705670dcc56509922ad1af487fa490f9941
- SHA512 8142b1e9a22601f045132d0499771d60c0511f5c0ba8d9cf22d820360fc61b251f0e6f3f6e05e16e54af7dafeaa5d78b087e972eaa40d76c90816c0eacc0b1df
- TLSH
  T196119E76D288153AD11CC70EFB0AB63A330EC0CA4759D52071951B5A29C6CFB66EF39C
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32