fa480ff15c6ee277fc972f11516c7d7e841a77611e4cf6f637aed3b05c009cd9

Sharing

Copy URL Twitter E-mail

General

Target
pvmenor.zip
Size 5.8MB
Sample260727-gz2jdswgrc
SHA256 fa480ff15c6ee277fc972f11516c7d7e841a77611e4cf6f637aed3b05c009cd9
MD5 162bf1cbc74940802e9a76aae44bfca6
SHA1 c83e28241c558efaac7efa62dc33366427c11591
SHA512 d47453b5313555c09ec472638d638298ba7a68d9af685759ff66d296ba6092a5d8fe5e4cad2957d8ebdb93c5d944cd00b7a84a6c52485bcec681ea3502abd6a3
SSDEEP 98304:pSuXvQ0vxhBYW51RTRY7Z8p4mCUAL+T2V6K45wgSoISVku5U+wlE7Fk4R8La+cV:IuX40vx3YWJAJhbCTS4vDNVhVwS77nV
TLSH
T1BC563338C60C78ABEF1BA374380FC54D408482468DA75996FACC4B489DBD1C5BBB5BD9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  pvmenor/images/fa-brands-400.svg
- Size 731KB
- SHA256 5accc59868cdb3e81386c2f325823e8a82ce3b553912e2d43fb9abb4cd5a1e94
- MD5 c4288baddb58256b65787bb746abd20d
- SHA1 0c82b8325e04c656d5cfca74c858912722d4e6d6
- SHA512 b8692610405d084d3bc34b7e5cbe4495facb335d53f02f07ed7957faf129ef99563172b93691d21e2f38051126586f9fbc9c27890e38f828b11ecae0e9c355b2
- SSDEEP 3072:M2x1Cqc5GnEVH2eq0AJT+H9M7mhiH6SKEmYHGeZDCglkQpALxYxDRpjj3hQR/a0:EVW2yk0xq
- TLSH
  T157F4105CD3A4C2B8FBDA0EE9893A7ED6366B35FF39103254C278A56028727784C4D59C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral1 behavioral2
- Target
  pvmenor/images/fa-regular-400.svg
- Size 141KB
- SHA256 2326849b6c3dfa217a0e9ecaec9553c910a4e2987c87315c85073d2b95a484f3
- MD5 0bb428459c8ecfa61b22a03def1706e6
- SHA1 8d0198777d4c6ff9c39a387f212b4ef732f70abb
- SHA512 736005210fb2287defd0836899964e020306d50e8fe3ede05911d540ef835160f4f3e145c75c95cab8654c961b214af294f306765d2b3c260b414a9afbc57636
- SSDEEP 1536:3vcVm6PMIRykxntAdEXqODsxwXgxWd9lpvNp8mwm7ET7sNdxlu+3Yn6eigaCN/cH:0EtyfqCnestodxsnV
- TLSH
  T141E33359E754D6BCFBDB4B95853A7E90226A72FF35143264C378B0A02C3277C8C9E588
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral3 behavioral4
- Target
  pvmenor/images/fa-solid-900.svg
- Size 897KB
- SHA256 fa498fb2596a5235c5c86d7b68a7fbe76e9855c01af4b0e5ab41c41047c648e0
- MD5 376c1f97f6553dea1ca9b3f9081889bd
- SHA1 33fe5758f3992d8da2635c4fa230b54376dd18d1
- SHA512 8086e1524cf173dde26cd5b3fee9002af3f585dbed52f015a1412fc4e491c0feccdda5b51e9b88048b6f75916cdc2dca78ba921303a7d2f0afa966b7ca515890
- SSDEEP 3072:Vii43t/Ev67ioBPy59N46EUw5ZtCamLqm5vK4KmPyduO/WylCAHGN+VmNthwiY9l:O91mzPjLr6
- TLSH
  T17615546CE36491F8EBC64BD58A357E9026AF65FF36203124C378B5A01C327BD4D8E598
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  pvmenor/index.html
- Size 152KB
- SHA256 c2aa4ca0c89790d55697761ffb5086b9070cd3137c55307491037da9725937ab
- MD5 fb6d95ba9b7056150e781754aebdde5d
- SHA1 f9ae4a42799372332641cd9344f5763e9fe4a7c7
- SHA512 4ffe8175267b195cae6a40813f8eae99d10584e0516051d96a784593e6ee2de1e1d60f788c72e2488687a120a04eff36b5897deaf9b00a45f3d156014e2cf13d
- SSDEEP 3072:oR0EM8JRdYnFHgLz6/rS5aIwux1ElxxYkMYs+dg+GpCQ:WrdfYFHY2e5aIh
- TLSH
  T1A6E384613E462825305F02DFA04B361C60D6EFFAE62275E0B4FA913067B5DE177E3299
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
behavioral7 behavioral8
- Target
  pvmenor/js/core.min.js
- Size 20KB
- SHA256 699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76
- MD5 da215ae12b95b3aeeb2047667016c7f8
- SHA1 480a7087aa74b5b47c47f05a11670e823a3ae4c0
- SHA512 d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff
- SSDEEP 384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv
- TLSH
  T106A2D94EB246380586F7A2A5402F521FB132E25CB105C8DDF468D8DA3C7EEA95173F79
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  pvmenor/js/eael-29.js
- Size 3KB
- SHA256 1b99f74b6f802c90af431588fd33f1f6e10351ddf39c1b4b177a53bd9e7ab46b
- MD5 5531ec1147f7bcd8b8d96e4ab9ffdd1e
- SHA1 efb8d000c1a88e313eefe6a8bc0bef40aafc939a
- SHA512 b5499f0a27bd6e0773fdabab07216eddd1011f59dffd887dc96c409c92cb071018974e2e6899b56ada9a248501723f77cb7285e0b0299eca6f03b59143f946b4
- TLSH
  T10A8125287188F5E123FF68A6012F9448B1224CB9056AE5D0F395C4F52E7DC5572B2FAB
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  pvmenor/js/elements-handler.min.js
- Size 179B
- SHA256 a579dc809cde287a3e4c63918771749c641702a4e1256bdc2ffaa5e7fd91091a
- MD5 eb14fbc161529fa03c8910b5e561f07e
- SHA1 df77c7eb4f07d038332e30bc0bf577eef4c9b630
- SHA512 9f9937a5fab900e1c7b5ec5dc598d7cd662329a42f3b0ab64004a75beb683cd4ff4ab52b6249b3df309b9a5b61fc2c5aa5b5c77a5b27148728552475615319bc
- TLSH
  T185C0CA8DBAC8B20D80EC008E0613320F33228A20A0A81A6062BA00183D30ECB9A241C4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  pvmenor/js/elements-handlers.min.js
- Size 42KB
- SHA256 41001cbe6c5d6ae4d3bfaaeb55fb070c91f1268db7ed74c992bd758582a20d62
- MD5 114d04e8174092abe2e6a86f86cc6998
- SHA1 12ff335a28afaea8387e39576b6a6ab7a5dfd56c
- SHA512 50231a4bcf51a7609abc6cb4487f99c2d1ba069d623f3b1e21cc6252917ab52a55abd68c343f1984dbfdc8554d971520328ef64bf2affcc3bf136415a8cdd8ea
- SSDEEP 768:Z/XscBD1+WE9A5yLce/gvd4dedEdkdPd2d4d5dqd1dIdMd/dpdedUdUdojPm7L+r:5sOD1+WE9A5yLcWgvGEeSBYWfQfOCZvf
- TLSH
  T1D013B55171AACA2941CF88ABF463164FB7215C9CF413F0DA7AFC8D82A564EC7A364731
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  pvmenor/js/frontend-modules.min.js
- Size 49KB
- SHA256 c66f47147d5fe3cceeaa47a93ff7440a328f859b049deec2f9d8f414e9137474
- MD5 a3543601e9c09c9b8554ec6f6c8a2174
- SHA1 8b05f21356996037f9d17fd012f43393238ac53c
- SHA512 3b5d80182a9b187171ceb59b4d384ad6b5e59dc0f5890cbdc0fb01109423a3ed847cfa88d67a0db8c84ed163985fb035b069f0530cf9b7a579c4ed47e67f56e9
- SSDEEP 1536:yCyQ5RSSYeAjA6c9CST+I83Fy0K4cR8+yhiA2pXSz2faNQAzeLHeBHmjkVziNT:s+uhIAu
- TLSH
  T17633D9853652F4B70BEB45DA902F440AF25718A8A40DF4D5BFE9DCE194B0D8E133AB78
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  pvmenor/js/frontend.min.js
- Size 23KB
- SHA256 c92344ad9573c169cf668d20b3c2eb4e9fdb5f8731eef9fdc7f287d8716026ab
- MD5 870e2980d69728c9a16e58548c38b567
- SHA1 eaa9ec825942ca6f1af3c80c00577eda4c6ac0b7
- SHA512 9ada928f2ec54d266f63f3a1d89a9287b2f9ec63b5ac63ae25f4b13e5157efd5bbd801274be60c2b7bd9258f650f68ba87e5cab5bd8a5ec1683362efc098c2d9
- SSDEEP 384:6twgZ+EVxFm6cKJsqdldgglQtHuaQkba/iZTSXDTZmMo7YtD/MHJiIVkoh/vF7Nk:EwK+EVxFm6cKiqdldgglQtHuaQkba/ok
- TLSH
  T1A9B2D9053163AC7A50CF815BE067420E7B374899B40570ED7ABC6CDBA5B8D9A33EA335
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  pvmenor/js/frontend.min_1.js
- Size 31KB
- SHA256 1842d6e4d3c7399fdb01ab4b0a7dd5c1d9c096110de0532181ed581f14e9e813
- MD5 1c6aa09d0faf7577c8ae64d43b8241ad
- SHA1 9d31e838cc042539556ca9223a635349f6e4af35
- SHA512 d754acb067d44f5fd9648cc63b6da0e95166a48d50a25dcfb378a6a5cd8c94334413c4466e598d01830a1cab6b183cf4812ac68500ac8e6d64ceabe45f5c46f3
- SSDEEP 768:D1c+6idHZRdzM4ZBOBTmduNFXaz1EfcJR8RjDKv//Dk3iHVgbpMYMLKEnzBc5Gkl:ZcURdzMMBOB0mFrcJR8RjD8/xHVlqEni
- TLSH
  T10DE208523296E866069F48A3F0231119F3775DD9B80AF0D5B2BCDCE5A471E877362B34
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  pvmenor/js/general.min.js
- Size 11KB
- SHA256 585917c6ed03b50a253ade6bfd34bd68ce059c29366b188e0bce4de3936791dc
- MD5 2dbcf7d4ee8fb0a1f97439460f0ad534
- SHA1 b3e0ecfdcc119b6fb5e58351352dfc7c6d8f8923
- SHA512 a23c96f649707b1cc1a769a2a7d32e26d6cb33b2505dc68442439039ec8c09df39e5cc8e9adac1d4a86978c2a6a82126bcf6787443a0f809b0ad484d2df38ffb
- SSDEEP 192:4v69bN3SLFNjilRm5ReHKj2H8gH+gwnmMQwco/0MbYrdpb9pPkx:4v69bNiVii2KnpcLpb9p8x
- TLSH
  T1FE32E988378776F056B36025947F761AB136AB74741C8850A21AD8E06DB9D8FE073F3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  pvmenor/js/hooks.min.js
- Size 4KB
- SHA256 cce388fed1a82ebd20ce7d9601e4b6c83a425ea201c333d71b1183ee887cc090
- MD5 55c5129ccd0fa8f383d9de82a91c5877
- SHA1 596918015fa62e4f18533b69b0e6822ebee3cb2d
- SHA512 956ab39b4bc0577f0ac50a842bc7f71ac1d5b6f7148f9ba9bdb2a84001b96362f077d417144dce171464de8aac71ffd6e639e35ca12da4de2d12fddd660e64a3
- SSDEEP 96:lu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2Cif:lGIhNBcAD0NRv8XlD3wXY2yH+EoaY2f
- TLSH
  T15CA151C43542B930E2B77027F0AB58D46175ABE1A82D8446D59CD8F12DA39CEE0E7B3D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  pvmenor/js/i18n.min.js
- Size 5KB
- SHA256 558ae0ec83cc88de0929fde86b87c231246aafa9c961ebffb3257b05f62ca5cf
- MD5 12ebec1b36678eb1da4412af6c65751a
- SHA1 4cb5d87353d9a06fde067063787a4beed692ba77
- SHA512 a1bbd93277a59086bf27da7dcc60434b717ac521bce0618aef7c914789497a22cf56441a7f300f1bb7a6de56ca624226883d048f6eadbcc049dc717338189bb6
- SSDEEP 96:IE7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMe:3hgws4WTBYNB1C9aNwAMPyd0R3SGaMSL
- TLSH
  T1FDC1A7C975DAF056235910A594AFB005E134BE2870DEBC00AAE0C4957EB44CDB2B7FBA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  pvmenor/js/jquery-migrate.min.js
- Size 13KB
- SHA256 5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89
- MD5 9ffeb32e2d9efbf8f70caabded242267
- SHA1 3ad0c10e501ac2a9bfa18f9cd7e700219b378738
- SHA512 8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731
- SSDEEP 192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp
- TLSH
  T19952C8ADB56679724EB721B8F03BD24F71B205DE560D8940D19CC4F6282DC6E812BF78
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  pvmenor/js/jquery.min.js
- Size 85KB
- SHA256 cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf
- MD5 826eb77e86b02ab7724fe3d0141ff87c
- SHA1 79cd3587d565afe290076a8d36c31c305a573d18
- SHA512 fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c
- SSDEEP 1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO
- TLSH
  T17483F8DF77CA702247AB30B9006F550BF276199D684D4400F159D8E9BCB8A4A827BF7E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Looks up external IP address via web service

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32