0ce7684cc795867192d5bda59c511bdcc81b356be15add82064a76a6770b8810

Sharing

Copy URL Twitter E-mail

General

Target
test.zip
Size 8.3MB
Sample260727-prdrcsep9v
SHA256 0ce7684cc795867192d5bda59c511bdcc81b356be15add82064a76a6770b8810
MD5 abab77195b0d039080b682a9d481f45b
SHA1 3b3ef01149b7fb772f8b0ab53b065e6c78742f4a
SHA512 3f296afd23fb8661a052597b269092b6195ee3068c1a24a12acd6555a6939c6d9a878b579c4497f80a92e662949ce73977afddf90c99627db36bb094105c9728
SSDEEP 196608:QwyIDFLUHC2mdTIkcmThVg9omi6wC4CljOjod4hBYkrbczx4:QwlUHC2KIe1+JECdOj83kvW4
TLSH
T10796337AD3181084DA8DFEBC6E0B4183C77EF1E62B26F5763B1912089E0AD6E1D37558
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Targets

- Target
  test/z0n51/app.php
- Size 3KB
- SHA256 848c69e154846ac83b3f6b212939e04d01e8c7e86d130cfd7c1cf83f203f3805
- MD5 4e77c9f66e5b103ac32fa973f94df798
- SHA1 7d6443b0cea634088521b2d89964bd86fbfe96d3
- SHA512 1197871f716bbcab22d135d3f89f6f6ffac126aa4c5d803d6a01d852185a1d395602f318160a47ed013b973ab54d033a8253af8f4d6b287e16e39bfea6074f4d
- TLSH
  T194519621ABC3291F5332478469A5BE49DB518207CB050D95F06C31ABBFF8D559CA729C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  test/z0n51/assets/buzz.js
- Size 3.5MB
- SHA256 7743668fc9b666bc5951cd413df14d665d514aa7149d15c22ff6c50841cf3110
- MD5 413dd97c5b32b80d124917e11730d63a
- SHA1 f4667080b04cfa5206473534c655e6247fcefb6a
- SHA512 8a505a1197684eaf8b6e07ebccb0b6f61cb0c8b4fc1711eefb831685e0a10b79f72697eda2ff9100970ed1f2bfca50a490df549bb1a56e81a1f09ae8f267319b
- SSDEEP 24576:8grnXnzphJbTCGLZDc/Udu/x6Qp5p7PgHtR4p:8grDphJbTCGLtdu/x6Qp5p7PgHtR4p
- TLSH
  T1AF062777B35C4C748BC616A45C6F0C4A7D6C141BF641144E7AECEEE60BB8DDBB022A1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  test/z0n51/assets/vendor.js
- Size 1.2MB
- SHA256 9a414f167680685383e49169c023fdff64302ca107df7d153a4aabc6b8596cc0
- MD5 b2b84597cdf050a090ef45bd53026879
- SHA1 348a24a1a82f93e256ad4be27790210ac1cd9e3e
- SHA512 cf1db435170ddaf884deab4ca629bd41468dd2074ad16bf5e80c1321e71c13cb517baa74cb7047c0bf781c692ef97509d4011bbe584d5d3e1e829becf91e1d61
- SSDEEP 12288:ompfZB49oHmDRPm6h0uxZwsNf9zVGpDqg/8lFkrplMD7WVqy:DgoHmD/p9zct/8lKplgy
- TLSH
  T1E05509FC72C1B0A653A321B4403F240BBE7A485F684D541CB669D8D66C7A98E523BF3D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  test/z0n51/assets/vendor/res/iconfonts/bbva-buzz-insurance-brands5c56.svg
- Size 59KB
- SHA256 86f7c65111c803698f986ab57aa58c897c9838c74b49ce1dd4a975f50659dc1a
- MD5 aaaede32c749e27517d7b1a93263c6d9
- SHA1 9c9c420555735074389f4bf91b8f76ff635e7796
- SHA512 2c885e0f1e0569f719dd26d9fb28694dffaeb7bd6e67f8c26d842faebeef2adfb645fc3a44515f56f26f86f71c748ebd80b37404b5e649d58ee4bfe7d0272b8e
- SSDEEP 1536:5+t60FMpzxajHI2zPa7S3hZqpM3KFkcNKulxIz/+p62a:5+I0mzkoSH
- TLSH
  T13B5394C8DB3092F889C9EFDFEB2008693A5B64BB3F735954C26DCE2859D3B494544988
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral7 behavioral8
- Target
  test/z0n51/assets/vendor/res/iconfonts/icon-maiden.svg
- Size 225KB
- SHA256 2de9407e845f5a0727da39fb90ce6ff2cf467f655770df98f67539e6f28ef591
- MD5 10c1e77136823ed204b6b15e3764f459
- SHA1 382397c350b4538591abb3cc23e0d76b9058c770
- SHA512 a93ff9cba6b07edc5ed34cda191bb9e4ea07ac999a2751ca9a6e9d52bf0a4c43675f9a45a8e6aaa638cc9b5581b4ba7042c69ef0ebd335fab840db3876849475
- SSDEEP 1536:ruoyFfco54a30KbI0gzS3Ax93z7odm88cDPOFLrVDXloKpALZ/hcr/o53gNKo+73:rokovbgT9FX7p4hS43wat7hi6
- TLSH
  T14E34B7CCE770A6B49CCC17EFEB340CDC3A2A94BEB4368DA4C63D5A690493D0866645DD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral10 behavioral9
- Target
  test/z0n51/assets/vendor/res/img/bg-menu-fiesta.svg
- Size 9KB
- SHA256 d58abff22e13df6c0386685b07e384f4f91fd9b24ef91f5f1168b2bdf43e4579
- MD5 88cf7846fac05d7161ffd365ab012a99
- SHA1 c157325db2d842907e2e136abb2fbce565a34513
- SHA512 95f330a73b7d5eb8d2c98a6c3d10c435b22e065e55ebb6cd769baf694705e31c369b7aef41892196151b094e76c0675b94536f05a81cd57623b1952095d559ef
- SSDEEP 96:5VI1ujqH/98Bet4H3YW4Mz+kgwNSgn1W8gfYVI69KhBPtNww/Gu0rgwJXOHaswR4:LI13qe4XYP4jISHWPQQasqFSoOgU7
- TLSH
  T1491242F060E84DC8D44B4BDCF2FD919D5E6A66DF8680060DF15D1B952F1328B8EAB2C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  test/z0n51/assets/vendor/res/img/bg-menu.svg
- Size 599B
- SHA256 c1a892da96dda2555afab80d17910aa3e9865c03a8c5ab1086364c0df94c1ece
- MD5 676371d65859a27fba67a17152513401
- SHA1 717acb273a95d1359b015e31442db07f7f5736ee
- SHA512 bec923e0f9002d0efad1f63952b76d684e3616f0f3be2ad074429f72f543516bdabaebf9e0f1135d40145639dce94e129b3281790acbf7b945e642a8413231e3
- TLSH
  T1DDF0F6F8C6A97C8940A805F89BF95684229B88CA83D4489BFD5157C26A03CD0AE675DD
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral13 behavioral14
- Target
  test/z0n51/assets/vendor/res/img/fractals-wide.svg
- Size 911B
- SHA256 5b8114c362e2587a82fc1a01e2fb4f99df0597111a137e72aad1a27d97c1f3d2
- MD5 218fd202d8dd4979ce41034ea79c0992
- SHA1 5d09082a9b5f19deed922658423dd50553a4b407
- SHA512 c1da3231a5ffdc22c5d3552d341effbfe190cfcb5b7c6e2c7be196f0ddeab8228b59d4ea8e5e44ae38ae11f903f73fb262487157460ad000c8029f53308689e9
- TLSH
  T1D611FDB092FE3881085D4221EBFC4A504B2368CB12D589CBFC1C5B407F05DE82C27AEC
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  test/z0n51/files/analytics.js
- Size 35KB
- SHA256 f8ef655ef916e39713ede9c6db56d7ca5618bd82cf5ac991dcd013f05e0fdfc7
- MD5 de39a19dfc75359d8eb0727ce0fa486b
- SHA1 85f77da7711ac89a15348be015119ed2d496b080
- SHA512 264e6bd5f0fb67241c8ed169e9fb446e618f52e4a2d4ceae70dad65f6093268c8a74714a3c1b73d24c651abde50ebd5cbadae3d143e4ae72b8584ad09ab00b69
- SSDEEP 768:/mssMiq0UmS9igUcSgogMenDV1mKPzvXowBZGgvAJ6Ges3Z3:usMq8SigjMeB1mKPLVA0GesN
- TLSH
  T1C8F2FBF9B682746AC39270E4403F150790BE9DC5F44CD4E8A686D6D06D74EAB01BFF68
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  test/z0n51/files/config_2530894.js
- Size 3KB
- SHA256 2fa954542e00f270a3a51409b8e455e7824f4320b150455184f4ea8f1dd990ba
- MD5 8c3a1f899251a270d3b642a6a7fae552
- SHA1 2e8f1ac3f13ec3977399188c8226ac5f7e467e66
- SHA512 530c9957f519e8fff35e74e7d5516a679e94ef30d5c6bbdf77b6ce3187423a712dd3099e0bc5494281409447a78c29efb7df2245aa1a63a324e8a904f4e90266
- TLSH
  T11B5112B34B8E50B393563ED66943BD6A910F1211E0E12A9C9A317F3C099C39C59DB3AC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  test/z0n51/files/config_2530919.js
- Size 4KB
- SHA256 52d18d4f8d67c79d10fde841498d21a1d9097aacc94d36642d18ea37b81ef80a
- MD5 23782d6a38139bf76f6f92a3146e6df6
- SHA1 0b71d227c2a009d9eb01b213391510dc84ab26de
- SHA512 4f0a730f9633429f680eed7f70144e2240a2ee91287a5340486c79da2d24d13a29b0d4cf30a63e2df4a7d68ce1b3fd515d19e2ea870c2c12e052514bdeb22618
- SSDEEP 96:QZqQVcQ85R9ng2Bvjwtm5D3w5V8um5D3w5V8hAIpttXv:K6B36V06VIAIpttXv
- TLSH
  T1ECA117F3978F90B393126ED92D577D9E96071101E4E12AAC9A316E3C488C35CD9E637C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  test/z0n51/files/icn_renting.svg
- Size 4KB
- SHA256 bd865d3b49087c4d4626aafddcfb4a2adc6c5109acc9f4efe64d3ab54fe6db56
- MD5 bd693cea45280bae8bbc0b27c843d75d
- SHA1 d031844b6f1216afa7f3c1f8908024c506b479a9
- SHA512 e965d1b57dbac2ecffa497086d9f058d39eec2160f163cd16f3fad81517c91419bd2400973b5d2ba114dcd6b6d8242fb6eccef641cec91e4cea932f516d0ca1c
- SSDEEP 96:wmJfLxzp1vzVc1HaRVo4orN5sYuWp994urwQGpD:lLxz7zV+Hj4okYr9SuwQOD
- TLSH
  T1D79183E49AE883F4610463A5A2552421756D34FB72EDCDCCFE8C9EC87F214ED905D427
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral23 behavioral24
- Target
  test/z0n51/files/iframe_api
- Size 740B
- SHA256 693c2d1bbe68a869a68cae8e411aa216ecdeff0f8ec841aa3710f93f8b0dafa3
- MD5 6416463f66b04b4d0e43640c43fa3a69
- SHA1 0d56e86c2f0e642f31f86ab487091af872ebf385
- SHA512 aee3ecb9f1e7e5ed9c614e3f78dbf873792774fdb29f4f5faa088c2924e5cceea97268c2fb2e0c2e67329872b93326f2bf225414f83b2fc4f27709dd25b2c13d
- TLSH
  T12101D0761E19542DE69AF094D2BFC9087611610CAAE08A92509CF08568E89CAFDBD47C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  test/z0n51/files/logo.svg
- Size 4KB
- SHA256 223a29738b6bb59e02e3a942f1471d53e53414e08f7b75f21d08b9073d92f57c
- MD5 ece25c57334d71e202f15fb8c03e34d4
- SHA1 936c722fa6e36b0702e34714ea74105ac5fda077
- SHA512 2e729268e7a531388d620ebfa9c90078b6828309ed0ae9d72ac533ec7b9f193545ac3ecd5239505530894d57a26f3cea12cf4f3e94724729370626b7c24606ab
- SSDEEP 96:h86AXqNysDF2ibb1XGHAu6H1KJYrUmJDGIAHju6D1Kc6CRRsntmbdcyvJX/IIA4h:h7f8FidnHwCrUMAVDwc6C/5xIa
- TLSH
  T14FA173CA5321A0DC59EFCE8FEE569A58763E50FC75A688C4A37CDB98C2CBD54D800D50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral27 behavioral28
- Target
  test/z0n51/files/supernetAll_170710_161546.min.js
- Size 726KB
- SHA256 bb5f0c36cf1c488246ab81b4cb82ee5c01923109967d1764e14b6004e988ad08
- MD5 5351ea42c883f662028b62f55d79a6ef
- SHA1 488b351d8ac825d6bd78c65ec1792f0c85594049
- SHA512 ff27c779b62eb77b1f42c8160a87269b0d63a0bd1bd0f887eb0e59fa22ffcf044498bbf1e8d13ca0b9b65893d7419f84fe4db813862983593c7a2695ca161de8
- SSDEEP 6144:xC/bDlf398HrlI34/1laKY4ez9KIOmO3YkM+EaEHUzf3WNij3nxi+3YBkvR3Vokz:qtOaf4eBKIOPhf
- TLSH
  T135F44BC8B2D2313682FF3AB9406F002975369A91B4044855FF64DADD2DB8E4891AFF7D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  test/z0n51/files/utag.2.js
- Size 23KB
- SHA256 1a31584ad3b47257575549863cf9a890f59d4a2f06e106813ad3c9d044b8b60e
- MD5 f1ef9e3457e0b7ea4d8bbd4f6f625a99
- SHA1 79bb61610b82c1e19374aadc1bc6bff4e3d12b98
- SHA512 f3e2c5e27ae611fbc97cf6c3c0542b43364b2e3ef85e7b64a85ffbcfcaecf903b6bde2f0c6e5fe98aa15b08c4516c13a23a734b3ded70f49c8eacf5ee7ad6643
- SSDEEP 384:gN4CfqnMLHTyXKjPkTgXHb3KkBPbKRRD9cHjbYYyy7n+IYFp+IYku4a94TIYsgfS:gNxfqnykU5jKLKlwn2Zs0
- TLSH
  T16DB260DDF2BC087E8475B764A18E5584F6303A4659C30C95B8A56C803B20E5D3BFBB9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32