4fcd6d657217ad31eed73db0b3c2446048e02b61b6bc982ef325b60e0fd5fa6f

Sharing

Copy URL Twitter E-mail

General

Target
IboGlass.zip
Size 9.1MB
Sample260728-an5ncaea72
SHA256 4fcd6d657217ad31eed73db0b3c2446048e02b61b6bc982ef325b60e0fd5fa6f
MD5 73cf1a7062fb4e95714f1cf660be70da
SHA1 f666c4da3646b257a152f1b8e41acca9a7b0d65b
SHA512 91a2ed18f6463c9bdf0cfccebf0cfe86d887f9ff580be92f595135dd3c8338b97651717e26b3375057197b754bf6802cb25fdb730688a358b1ad7e408b4f5ac2
SSDEEP 196608:AxX0JTwnoqBFeoC/QC8N9XL9nNTLOM/gjvI+WbliatCs/jIT7:Co0noQFzXpz+vxYlHCgIf
TLSH
T181A63318AA8A1D3FE74B857D950877F335BE48A0C34ADD3E0678D0F48AAD5C5E31907A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Targets

- Target
  IboGlass/activate.php
- Size 9KB
- SHA256 35272528842b9ea6e92c2acc1c4ac1a6ee9a5fab9dcec40cf55f3a8bcd138bf3
- MD5 e88705a06d6742088f9246990d2628b6
- SHA1 f42bda7b94dc637ad005a0b8e0c443cc1e57b5c1
- SHA512 7866dc9e103487ac22991cbb55915340cbf761730b105693b08eee9e3a0c15eb345a8bb1ee89fb4cf17db07f7ac13dbd684360b17204f059901b42e5a27a81eb
- SSDEEP 192:DZEdE5WRSfZKRUZTpJFgKW7i5GycacR9x3Chk7C1Z:DZMV+ZIU9pSKcRjy+7sZ
- TLSH
  T14112827170F2193205E3B8ED9BE48A423DD1C027E5529580F9ECABD58FE6C97CD22396
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  IboGlass/api/ads.php
- Size 1KB
- SHA256 b47aec3096f3a4de2732b28b2220146ced476932496bbfea660f598f943ca012
- MD5 7881cd85397dad1f727d25bc9166fe00
- SHA1 d59f74045bbda39519fd515d92384008b178d946
- SHA512 b15adc519848d660cdb5f3724968c0560bc702fd42ae9955308d054989b451942a5b76a7c8696e89c855cdd908bc50b946559a039d0ad7f46dd58884e7146d20
- TLSH
  T12211750510D63033BBBB71C9074AB4416887910B32DFD5803C95275A2FCDAE4DB61D6A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  IboGlass/api/device/activate.php
- Size 4KB
- SHA256 c4855b5bf25246fdf41ca9d7305e90f3414a2908cf2825df665e51214d8dbf41
- MD5 253195e520ad815b734f614c9dee0b96
- SHA1 b6808487462da6762b7efc539f043b2a1159f695
- SHA512 ca1dc8d0775c6875a71eb9a8810b70c688f8d41f3b9ae28ac45849441831791e3a097dcef114989ea53853a4a4859668bdde0f610f3396ce027e3572d232ad19
- SSDEEP 96:m/Z+ZxVUwFh6JXL7i0qqERIDDG3MCl/JS72lvE37vEkPj3qfV:sZKVtT65i0qqEYDG8Q/J5l8378AqN
- TLSH
  T1E3A1832C64E7093221EB217F6F8260C2B7DF94171494E6A2BD9D23407F94939CAB4ED3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  IboGlass/api/device/boot.php
- Size 1KB
- SHA256 72b13abed8fca02333f1922858e54a166675426d4d9f70cfb6e90e7baf18ce8e
- MD5 999514e0ba591baaa7136e101e775204
- SHA1 32e64653d753051aee7d1552d60ec9a41c15d56c
- SHA512 502e8192a30e612739692050be91f0c8a6fdae881ccf4b5dbf80840c04c94c80be66155ec4e27977715515f2222961b00b9d081e50831ad67e762d96943e318a
- TLSH
  T17141989D94E76C03023B39A91FCAC1C79BA38707115553D27C9E23A41F9095CD5239F5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  IboGlass/api/device/dns.php
- Size 1KB
- SHA256 a9e7739a85aebe6fa5a4c87c14a8095dbfd7886bfd0374f39be01a9c2396e0ba
- MD5 a94a7b6b2487069e4a570cb44e80d313
- SHA1 c9b9232876f10d09d7c9419033806681524a9ef9
- SHA512 c48e047b036fdfc6c000057bdde6f1619af113a5acfbc274143344d4f40082f6f7b4ac30ff0afa903e788e6137963fbfb05f973d4e922ccb1b79087f0cd11574
- TLSH
  T18011425555772123A6B73099CAD780802245C01B78A193E0F51E53E60FC85BDCEA699D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  IboGlass/api/device/login.php
- Size 4KB
- SHA256 07279dd43479e14f67345bc0d403d814a808272a97522d5584335dd7faff2a48
- MD5 18ffda4a660789ebe7b8359b5003d3cf
- SHA1 1a2fed195bf9888b9cbf06813702b7fcbd99a8e3
- SHA512 2c4b43ff63ca0400fb9db303fdfad5ac75c756b08e9e7e97ef6dda6120727d921c83927e953979eeea776867c24bf9472e9b9bf65a93839bfc0225482ea68335
- SSDEEP 96:ADxZjdztAJEDV2SzxyPBK9/eKjZKqfKf5IjD8u1x39at/fSU/h03zvHBvEZiz7uA:ADxDztAJEDVFlyZK9/eKNKuKGf8Ax39b
- TLSH
  T16681621854FB5C2316F770AE9FC680C2ABA7C4131461D3D2B97E63952F69838DA319E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  IboGlass/api/device/name.php
- Size 1KB
- SHA256 4b213da1cf1bf0a2170e31e519e4c4f8e5859700ba86a839cba230cafbc4d904
- MD5 3f25e65a9ddfde710a943a58ae94e68a
- SHA1 dd2a308646afedc8d22718c2ea7a6bcc170ac434
- SHA512 3c4f06750be9a8876f7c77881f026f473ce5e584b498009903061caa1b2085d8deae968c0a5b7016061cb663119ccc16db6a808edea5f630b00e75e28fc91267
- TLSH
  T1BA215F7800F54432A2BB309D0D8880C07BD7889726D517E2B99C73507FA5A64EF22E19
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  IboGlass/api/device/parental.php
- Size 1KB
- SHA256 8598d00e5ef861663da54587934574ea21175d423d6b5a7ea6100f1c142a9e10
- MD5 579aa10004999af4b476d6fca06a7688
- SHA1 e59ec028cfd780f3ed3581e0f5ba19fb6a7a5f0d
- SHA512 b1bd09dcb646f4c09af7af5ecfe8ab1c1be1f1ec2eb3e98a9ae3557aa14ab1964d6e6a765915a17edc2453945a6dbeafa435ee648dded92806a58e9bb32e9e4d
- TLSH
  T18531743854F90432623F27AA1E45E0C23BDB841F00D013E3BE8C72017F959A5EB32E69
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  IboGlass/api/device/playlist_add.php
- Size 2KB
- SHA256 acf200791f91b8615b501fbf51a30d41e4ced88cc53083cc2116e39167949a70
- MD5 12526a9da76568d8c40d788fe728df82
- SHA1 ebe91ac2b5bd8c9de1c5fee9fdea894649893d12
- SHA512 40c4239117de7e0cac4c4ed6c68fdc7901a05c2fe4aff7c91de93672fe0f97db41f5a18a89c3a9979e5f4e1f6512d5d8aa578cc07f935f0e0d4aa257e33e0d80
- TLSH
  T1AD51503C20F64C2262F7609D0A86E4807FD7C42315959BA23DED77913F56919CA30B9A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  IboGlass/api/device/playlist_delete.php
- Size 1KB
- SHA256 d98a050f040430d7bece4cbc296c8302fbb323f997688df31dc8179e37654216
- MD5 e1c4f0980bffb264dffe1cf0fbd43f77
- SHA1 c9d36773d6153ce91daca95b46394b1068ff1ffa
- SHA512 fff9214a6075ec32a1f59073fd92fca4636499fa822a6075f3c872d18d5efe454c38e0ea0580502947336da051b1e52e87a14b5c599cdbc57f48fc5e7d3b7d2f
- TLSH
  T19A21CBB800F5483261FB319B5ACDD081BFF6C45619D15BA2B98C73123F919B4AB32E56
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  IboGlass/api/device/vpn.php
- Size 1KB
- SHA256 2dfbd22be913411f715f6237c01a83d72e06de55f6f27b11aff237036571e074
- MD5 3356a472a812d5284c682fc10093b18c
- SHA1 fcfc5955f7d300c57e0494a96d87c1691727502c
- SHA512 10b93e70357fc9707b00ddf824552c476bd8894cf297c56f354ac063822bac4ed862349ac0ce01d68c4428938b9a4bf37025a3f480e99001b986021de2f7f74f
- TLSH
  T1FA315339106B11527AFB31CE0ACB444022D4D1232C72A6F1F79E23B44FD896A9D3EE95
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  IboGlass/api/sports.php
- Size 1KB
- SHA256 b797d8b6349c1c0401179cc46e2862531276cb5fcdd6f24f164578c2e5ac60c6
- MD5 b3a2c4f37eb5bd73a6311dc0a246b1f2
- SHA1 17ae6683de61d385fe9fbb623463b896cab0bb83
- SHA512 b1e80bea23f6bac35abd2ab20e912345e37a372528218e81b10df5f48915cf72b337d4b43dd66f843c530896972c5cc999572b7ec05cd02a48fc91479f9ef4b0
- TLSH
  T1AB31420610D90423D1AEF798574D6C432DB581473A5AE188754CA7693FCCCDF9B62C3D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  IboGlass/assets/vvveb/fonts/ionicons/ionicons.svg
- Size 1.4MB
- SHA256 bc2d3c8487aaf7bb1db38c32b0456f28e6fcf7168f08c01a1a9007eda8a4fcf7
- MD5 e319266c3a5440c584fa4c226df067dc
- SHA1 16ca1099b27ab6b267e7f64b8ad830501af04331
- SHA512 b1c72df9ea22896589e47f43c14cd4cc03f4ad96ebd30095f492120d6ffd8d3d4c165013b0849e3baabd0ba254bdff0facaab37dbfeb03ccc594c7f10e110c0b
- SSDEEP 3072:UF+u0kHq6ecC/N9KjvXAX8X56jkJqkIx7xkoq3GIp7cdQdnOw37ZqrZwwDVsJT3n:1cC/NgoU8MymIq
- TLSH
  T19165B8E8E770B1F478859BADC7381DB8394AA4FE7A71492C933DDB645583A4D87088CC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral25 behavioral26
- Target
  IboGlass/assets/vvveb/fonts/line-awesome/la-brands-400.svg
- Size 905KB
- SHA256 4da18191698677d856d44067a8387cd279e8ba5d0cf9fb4bffe47d59bdac1f13
- MD5 9769d0a6a42cf73df12bc63a7a994131
- SHA1 267fd761d38caeb1b089a2b0e9d4a8ecfc46fe6a
- SHA512 3340cee267543237f9d578a6a432ebecb69348ce4f61dd5faa6b56c547c477bfe63a607affd4f3b8aa7db340c2e8d271731f7987f0379bd7b5c077c2f014306b
- SSDEEP 6144:2hkc6FqauNYpc0PnQcm8CS4MqGQ1fwV7FLEUGhuQBF64u0exXGJQJpo60fonVyqh:fR
- TLSH
  T13D1540BDA384DA8EE74EC7925D10B49D364FFEB35BC219A4D086CFA581631BC4E4D482
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral27 behavioral28
- Target
  IboGlass/assets/vvveb/fonts/line-awesome/la-regular-400.svg
- Size 110KB
- SHA256 884ce19c1a9e7c1c496cf0cdeb5bc26e27c4ddda94f03b239a63ed2835f31d6d
- MD5 55c57a74937e6de260b67c62522f7ea1
- SHA1 0f7b48ddc83338ca2b8925e6336ccdd8b33f82e6
- SHA512 84d13e82988f0316b0a5286a8ac9b57ce5d4c3d1f7399aee3a2e90f9fee5c3c8d9a40b540a0512ebfbd1f278a83da24be35a318f7b17a58c3532ea3851971be0
- SSDEEP 1536:O0aLVwXm7afOIcnDHrNlhSQ82kBU68MMN+MlMJ3E9:LetlXK+
- TLSH
  T166B344BEB355D58F6B1BD7C19E10B1EC324FEBAB468628A4F00DCFA947221FC5949441
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral29 behavioral30
- Target
  IboGlass/assets/vvveb/fonts/line-awesome/la-solid-900.svg
- Size 901KB
- SHA256 0ce0cc403ccd09a2d55dce9f91791f1d8f848ac0eac485ec9be366c0b9d96677
- MD5 79be4e9fcffc796ec3b2cb9a1f46d39e
- SHA1 e8aff2133506e1e2ed5e37b0819dd35cf2e9044b
- SHA512 cc083f187cd15cb8d612d4ec8180f1c66eda7ef5112c403a996b1114427180866ea828c95862d0e4ebd7425169cd25cf6aee81df13749535e3ba3b2ce75b1833
- SSDEEP 6144:65zXPERYgjdTLz7KxV1QRnE6jQP2MmdYtHK95sGHcDurJ+AdGQV3Td:FbJ
- TLSH
  T1431502BEF349D98E6B1FD7C29E10B4AC324FEFA7468518A4E049CAE847631FC9D49441
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32