ebc529ff8a8a3199ae865e91e276290e632d38992f535d30e9c372f59fc0be88

Sharing

Copy URL Twitter E-mail

General

Target
data.zip
Size 546KB
Sample260727-plndlssbla
SHA256 ebc529ff8a8a3199ae865e91e276290e632d38992f535d30e9c372f59fc0be88
MD5 b5cd9de8c73501fff20114ede42fc158
SHA1 a74ab6508be62599e3f068bb8b1e258fbbdfcb33
SHA512 5fa879f7cd8c1bd1a20a7330e933c96c8e5b33bb213d680a45e7cbf1afe578964e704a3c2200328c53171cc3f9f70ea96862857a57b327c7b044e8188886a0de
SSDEEP 12288:8qUmRkFgnQ+Ka4iDiQ05eQyY004z1Q6hAGH566Ic9NW:8qUmSFgQghDiQfQgZOZCpP7W
TLSH
T1FDC4E1B2E2205535D5FEA434462977CBA0FBF1137901BB26681402EA97CBE4E7A35F0C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  engine/game-loader.js
- Size 2KB
- SHA256 08e7069a1f1936eaf4f49a3bea331e71914947506caeeae00dffd79f75923f0b
- MD5 74a018eb3504c66689ea1b9f870d8ac0
- SHA1 a454bc3094fddf31694901484fdd2b4429625cd6
- SHA512 69daa38d6b15d58d40bb78d355305d2ee7b9613e61542f48bcf4db6b2b8e5e3f6766f01bac8b0959add1a164dc70886c3c352d664a0a9423b890db91b2d16547
- TLSH
  T1D351FCEC81EB69B603B213B569A5364CFF51805345809E8439DC88873F72D8284F7FAE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  h5games/admin/categories/index.php
- Size 2KB
- SHA256 75289f883d593dcfffa1542620f232a434a40708dc60fa090f3881b4446860d2
- MD5 54dccb265319eaed6bc0e2195a19ba85
- SHA1 25000bfdba026e5f57477ac7993c30f893af38df
- SHA512 b1ab378616bd9eddf67eeea5e8064a0b058e7f7d402f64ee409434938387d5315e8cbdc818ea0c76bf1496e0363da7df2939430623d061e7c394cf40a7b72607
- TLSH
  T1D151C524B88C7E726C8324E261A13B9DB0D1C10C16275CD0A8BDE9A89B21CF5CE3E861
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  h5games/admin/games/create.php
- Size 2KB
- SHA256 e0f37125886da7487c71e5dc1a003a9f009695867ce6468d4a4c2e21691230f2
- MD5 09fe83581340698cbae47b5feb69e6dc
- SHA1 8e5af8ffca7fdf8e6676571e745ae60498718a33
- SHA512 89fb694e111bf2bb02c0c92785f7b5288c2a8abaf20a457efb9970cab43da35927f7862f21a8246eef5d7fc4c8976becf0cc673653a8b7facb2f49a290612e0e
- TLSH
  T15B517558E9C0F01221F704AA6A3070197FF18B3A2D92ED50E5996745AFD5BD7DC3BE10
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  h5games/admin/games/edit.php
- Size 2KB
- SHA256 c0c87608bb3ce487eb7b3104943a662c3300a6afddad3d990dbb2cd53b9a352e
- MD5 73cefb4b8df2d00021a071a7514ba9da
- SHA1 a821deedd570e23b41085f970dab1d17af0d5aeb
- SHA512 c1661e5fe70dc6bb2edb8b86096ec672953ebed7d0481396f8e94e16a4c03349964194f01781ba7cbf87e6dd13d1047a8888e96cc53a62a74009035d7e0574f5
- TLSH
  T154416399AAC4F55231F714B96930F068BFA1CB3E1E01AD20CAA157446EA43DACC7EF00
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  h5games/admin/jayu.php
- Size 2KB
- SHA256 0fb7112e395439d1973aa0727fbb30068f9832777aa75829e2b53ef5ac2dc109
- MD5 e040d5ae2f25967140edffbed5831dc7
- SHA1 45be7c8c3acd1f6423906f7245a1b7132c16e25d
- SHA512 4ef063674218b88929208f47c778059af53fb99ab842548ba9873c28af4dc1d4eebc489dde203571c4e67c978a2dc49e49804b42736a6cb6a63c6ef207a55dc8
- TLSH
  T1D55175616CE53F128043A0A9728A546135A9C10392264A50FEBED3DDBFC3D5F8EA47A7
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  h5games/admin/setup.php
- Size 2KB
- SHA256 0fb7112e395439d1973aa0727fbb30068f9832777aa75829e2b53ef5ac2dc109
- MD5 e040d5ae2f25967140edffbed5831dc7
- SHA1 45be7c8c3acd1f6423906f7245a1b7132c16e25d
- SHA512 4ef063674218b88929208f47c778059af53fb99ab842548ba9873c28af4dc1d4eebc489dde203571c4e67c978a2dc49e49804b42736a6cb6a63c6ef207a55dc8
- TLSH
  T1D55175616CE53F128043A0A9728A546135A9C10392264A50FEBED3DDBFC3D5F8EA47A7
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  h5games/assets/images/2048-cover.svg
- Size 1KB
- SHA256 196c9a8fe20c0c877454f654d4178398fe9342bc1c09611f3caa0a957114176d
- MD5 60a1860f1088fa8a87a89c9604c06616
- SHA1 4c2d82b018f53b07806e50b034fd2fb60779ab1a
- SHA512 0cfcffbc64deebb20c3c7756998c256ac40d3af3dcd56c7770b1fddec8314bbb76d5af9488fb254ca587beffa7cf0ee8af94be4579d10f74c8cf282168fa1665
- TLSH
  T12541DFA572D9992CEE040B1C934DB773315FBCC96E05CA0CF690923AE496ACB693524C
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral13 behavioral14
- Target
  h5games/assets/images/block-puzzle-cover.svg
- Size 4KB
- SHA256 eda1257e6a8c469ca6b7285e3b224170890284540493146f36cbedfb74b1c1f0
- MD5 a2954a48a0fb48b66f6c4373f806230b
- SHA1 e745cad69ccdb95e17bf63829ed67cc74245f145
- SHA512 492bd74b17ae178fbbc1064020812da01e11327b3cc4c1d196066ece559dc74ca65fc9c068fa904f7db8d726a87d0fa53fcfc0c6b2e0b0ded612cbb0e3a8f756
- SSDEEP 48:02rlnv4Q7kzb7P1v1stnpy5XYnyTGIO/Qt/9ZY:X4j1v1stpy5XigCQtlZY
- TLSH
  T1BCA18E10B2AE540CE7459B2E838C44E5719BE70A4B3B420CFE84F38ED95949B9C7D76E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  h5games/assets/images/default-game.svg
- Size 345B
- SHA256 50370dc2f7ee4813d47cd563ecc379f0f7660fddc159d4eb61876addd54fe65f
- MD5 7fa126547831479d170e0d8ba6bd043f
- SHA1 0c95c902b4532f5d9110dd453798a2e7cc577370
- SHA512 53f64b9344a0268716226bdff93f17971a49570a595013899ad8dfc0e68e33a8c19f2d56c4a8349b447ecbec8ac98db3426053f32fd95cc072c09e3089d29457
- TLSH
  T1A7E0C6A2A08C622CE0238AA51B0A7863370BB0CCCB42003CE6C02A09A1C1BDF70B860D
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral17 behavioral18
- Target
  h5games/assets/images/snake-cover.svg
- Size 1006B
- SHA256 a22f15e05e1c0add9bd449991bb96711914d58685d406cc420f0b7059e55ab41
- MD5 a726f0dab5c09d03ff194a9079ada679
- SHA1 453b140f50bf1df9a7f5213c72b92e30ebe6ab4a
- SHA512 a8e7f6bf2ab3f3e91efd5cd7c28b1056d57aa61c8b76058b30203feeddf8ab0ce69886c30f685c8772ca02f65a8faec3700b8d605b957d647e9f758baeb3bb55
- TLSH
  T128118992A20C8D3DD714C70CE30B7136231B51CA5B86C764E9501D3A949499F782E7E8
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral19 behavioral20
- Target
  h5games/assets/images/sudoku-cover.svg
- Size 1KB
- SHA256 29341f570803dc066c9345c053c536ce5d211cce9d5b4c54fff9dc20f1265b2a
- MD5 86994ebf050eba0058b6c5e88c83706b
- SHA1 a9ad53bb1e2ee507801888ff0c478331d2a8c0c8
- SHA512 9119b6beac22e060bbda52bd27954dc4a24ae4b1c0f899e0210e88709b6948de1a8f71cbfb9b7c2fc0a9d1dd1b907d890f7eefa686ac426dc5d885e58bd0d9bb
- TLSH
  T11221DF67A68F7D37F209473FD785B5F6531F69EB85D6C618E880472A6C809837C14128
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral21 behavioral22
- Target
  h5games/assets/images/tic-tac-toe-cover.svg
- Size 1KB
- SHA256 6cbeb4ea1cd037d2f05433151a49aba3b541bd197257a6bd601b462536c955f8
- MD5 28c6b961860cbf9a957d73734e569fe7
- SHA1 4377caf9a191941adcd59cc4897e943456cf0ad1
- SHA512 22b4981b1bcee125544716e4c7d1888150de8aff20cd9840eb7e19a92e07956c37ca452be62d8e2cad59650c272e8cd0ca48f88a90a1a3872a85ea3a36824fb2
- TLSH
  T16521CE67794EB93BF206C676E7126472031F62FB86CAC724E451593618043E77D3A168
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral23 behavioral24
- Target
  h5games/assets/js/app.js
- Size 2KB
- SHA256 9f9be4e31429831f00f0f2c80ae1df5b65a05f7fae2ea21bc104431e374992c3
- MD5 3f4261870ecde2158e6ba6c9cd74ca9d
- SHA1 12bf8fa090895679f08327bf032cdeca82f172ab
- SHA512 b0256ef6c8b3bd00d8384d62e216fc6b722d1e58e724215e224ad32691b4449cea7fdadb829e97154dc7af1725358af67b951823acab2d695f36b2fdd3d6af9f
- TLSH
  T1FA41612CD1F7A07A043700E9969279CA3DAF1703B0D58D80759CD9C41FABCA099EBC4E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  h5games/assets/js/frontend-v5.js
- Size 2KB
- SHA256 7c07a6bfde5558e1a9713550b31bf0c7eb772d70d612ffe8c7230bcb6e930367
- MD5 88d209e49be603fcffb1e15289b92f14
- SHA1 d8b460476e9f943b4fa0a963e89be7947a6f0cd8
- SHA512 10c46c27a9bb31c01cc153b4a0e44f2078227e064fe3f41ef376b32c9257c9fadfba19ec4cdf662403b88952a78156cbbb8c37edcc793afdab0a1583e769347c
- TLSH
  T1FF41309E84B70A39013721986FAF519834FA94173487F8413AAE58800F85F7601FFA99
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  h5games/assets/js/portal.js
- Size 1KB
- SHA256 7c2b5ebb7a847afcb14cbc9bde0f0d3725a0dd5e2da45a9bc9cfb9fc63c58ca3
- MD5 80474faba1912d0b88da63199c311d5f
- SHA1 85618105790dabdd4437acc93e040c0b41f94ed4
- SHA512 8f538d1bc22731f8be655227ab0519f456c12596c515d6a51108b2680ec23aef0383ba69da1c951d75dff5b1c78f086e803271f00e5802960491659210f2ec40
- TLSH
  T1F8311FDF14BA2D3309A3B855DBBB64103B230983A8C9AC123E4C91CC6F8D93F9473694
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  h5games/assets/js/v8.js
- Size 858B
- SHA256 4ca4e79d58e5f4e85a3d9d57b190a62401f3ec7e1730e50bf8c633f893ea4be9
- MD5 8755b88161bb36fb326f628cb0a9ef35
- SHA1 92f05f0f8e2f7e1d0346c0580a04494623fcea8d
- SHA512 88f675730a99e71f6385a23c76cb0287754b0e5d26cadee306d1de72086431eb85e484cc11cd1f6df2dbfb3a6cc0ffa8dffd385753649433c70c3d553176f79b
- TLSH
  T1ED112FB6493AB9750ECBE16392BF67C1186B01CBB89364A04ABD0CC51CC0DE102B24F7
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32