9257db84adf4bea7298e9c23068162bea0d2a3542da6f78fa43bb78cca7e93f6

Sharing

Copy URL Twitter E-mail

General

Target
tubefetch.zip
Size 396KB
Sample260728-ap826aeb55
SHA256 9257db84adf4bea7298e9c23068162bea0d2a3542da6f78fa43bb78cca7e93f6
MD5 029cb24f0d58ee5762acb5c98bcc409e
SHA1 3eacadb2e6fa4ef0b589924c45eedf338c80aa55
SHA512 57ec82c0f8621e38140da5f0b6ad7822a9e6b5590bc1288a02496e7ee6a5b72be36329dab90c9a69f0a395156cf7099d1b127c81e914952e139b670290a94ca0
SSDEEP 6144:tVDVoxgD3YD2lcgrbm/BHn0jO+oX/n6uAMy3igWUFTegu3up+dLWf/vya8XqzflZ:tVD3lHr6HTRX/tEigVFTBAjXzXMdZ
TLSH
T13084137BC75CA8A4E74CD8B069C91C1A00C75B1B40517D9B2E3E160EDF67290EA729BF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  yt-downloader/api/download.php
- Size 1KB
- SHA256 f2ac66bb500a1a6c2da13d885e38819dd4b5ee5378e6c54b1f3362f72fefc8f9
- MD5 10f2a3174ce0bc8cbcbed133aa6147bb
- SHA1 1d868488046794d8318b86ff1c103ac5d1795f12
- SHA512 050c98d261301f49b160e0279e6d45b2cf6bf78e1b3fbb74cdce2b1167740160f6ec2a801cde84a3574f027bc8aac0ffb8d51c7da3c1c7417fd9c62310e4d2aa
- TLSH
  T1A141DF5D4CEAD8326FA3341F2A8F8450606462031AD5DE227E9C42D55FC51BCFFA6B72
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  yt-downloader/api/info.php
- Size 1KB
- SHA256 07c5943a5f9f9edbd7cb77b6e107288ed61e037c05bc9b63605ef3e019193951
- MD5 3127a179a445434033d199d37e9ab20c
- SHA1 2573d78e566480dace4a82f9677ad3e0679f553b
- SHA512 3b636d72a9815ee3a98b7ce755564816e2b55836fce497d3583619fbbe9dd9f50381bb7379330918ebe3f8f1a874c2cdba1805d0596c3fd8dfa6c03eb914de5e
- TLSH
  T1FC310F0A18F11C4319FA719F6E8FE9547458D1172BC8EE21BC8C05D11F445A49E72AB2
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  yt-downloader/public/assets/img/favicon.svg
- Size 232B
- SHA256 0391671e1b2f7d7af31db7728b81a6673fec2d8274393a56fc5cec847621bcc1
- MD5 7d493c570903275cc220033305a4a46a
- SHA1 73d48f00125bc7d12e12f30ee1556b51a9471a12
- SHA512 fdcf53c0d6bfa0c16f3ed9e41156015793d8d6dbf68e7914cd7ad221698a5b295ba25350f0abd4475d228c9210ce4cd308d79ec6af6d118b2a9b92dca2372dfd
- TLSH
  T16DD023D5E11D9D00D5108302B53CB579207DA1C49548844AF5C16F08B54C5FBEC936DC
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  yt-downloader/public/assets/js/app.js
- Size 11KB
- SHA256 214a8ff3f9a111ad935c71cd1611566455979775b3b5c2fcc3409436f2eb28c9
- MD5 df01f3a957ce6a588847bb610e097768
- SHA1 6d6fc9ef1b7e86edf80ef5e547e8a9f748300f5e
- SHA512 69461c89c83888343948a92682825f4d99be40886653b6cf898440a0765cb077f09c22dd977ba4caf417801fe66529d41444433f29ec58375698659484162130
- SSDEEP 192:EldVFpCC7WE39v40DcUDQ2+OQSinECNhdHrAY0RRt5hdyyCkM9fHY1SX5BMC8m:EpvUYdknECZHrItFyyCk2
- TLSH
  T18D3263BF24A71436856B605A0FCB51063E3AE203758ADE047B8C82945F99C74E4EB7DB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  yt-downloader/public/index.php
- Size 13KB
- SHA256 70d43a315f06f61b2658416d96d7706bab7d20967b63aa234ec6730e68286cc4
- MD5 8868c81d559611ea7c89f1a97968652f
- SHA1 897fa336c48db597aa70ca4e40460e350a103fe6
- SHA512 760980d4f25275158ce1860df4cc67ddc1c553ea8d5397beab9dd05d649030c14f4a2392a225f8ca560da5de3d0ec2890d64cb6b7ffe7fd3c5dff36bbabadcb8
- SSDEEP 384:eafRVgCS3fQagQzLDQwVu4UIO0tpW9uff/rWH9uNSJzE/y78RN54e2JT8MvG:gXVuvhaXFIJzcyi
- TLSH
  T13352643250A08D17341B996B2DC2B1385D9BC20B7E8909857EED1B491FBBF368C97E5C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  yt-downloader/public/terms.php
- Size 4KB
- SHA256 8969d682999483d063f48c8ec87c4f9c43cd0e175e2213da7b29b09731cd6801
- MD5 e0e88d46a109b9bc90d70c860e3bf904
- SHA1 76acb0f8991277068ee72b1bedf8fd7b7bbf3fd4
- SHA512 aabc3e2b66b85c208e57ca08f5ec9fe63f8920ca0128fce7d548da5fcdc10545c9aa6d9cba3966f8512c9d557d68764cdd532ce8106b37ace0a5b1b75b9f9e5b
- SSDEEP 96:DcMtHxifrjH6x7RbrJ+PkRw5a3SuvaO/MOIkROIpdlcG5NfJ76vpXJgOweHpD8RR:Zu4RhXRw5KSuvfUeRrVNfZ/0yc/2
- TLSH
  T159A1422301A04A2BB412899F2E92B638649FD3077F0C19887DDE13592FB7F694C57E9C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  yt-downloader/src/Playlist.php
- Size 3KB
- SHA256 883404c34cae504985d47bbbe10651b6843ad214b814bfd1e41f66cdf0aefde5
- MD5 2ac09b34d736a2c838088cf071619ce1
- SHA1 668f4eff24d652eb843a63e24de3f42d73047123
- SHA512 5d8f605b1397d1edadb639891cff990214ad1737654fce155dd44a75453c2a025f19c2bc086559aa0556943bec5c46adbf8e2d8b8ad706b35516ecb5f37f3a00
- TLSH
  T19F7114A828BB1209A567B12F0A8A884CA31581237CD57437FF9DB7E11F98439C7F4E24
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  yt-downloader/src/PlaylistFetcher.php
- Size 9KB
- SHA256 ac47fafe7b29798076cf1780c30423b8ffe236baa07457f30571bd0971a9c4d4
- MD5 1bb2b6d6b79cce3e30634f2d8f636de9
- SHA1 bf9582685d75c007d18dc19d84df3c203b47a3c8
- SHA512 84a858bbd446d9b42a8ecddacd4d794e8b71e7586c3b603f3787704cc88a8a50864284a0e7d7ce16ad1f96e99e75c5764675b99ffeecdf9fb035e93f3cd13fff
- SSDEEP 192:9i/T+v9IkV4NR51f/v5Iyx65NyTQdjgCv0y3JGCvhyuxZJKXNMJgJACOCi:9qTo9Oi5VKYaAxh
- TLSH
  T11512855424DB312A41A3B0374BCFF404B639C80B6E9CA651BE2E45446FD413DDAFDB99
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  yt-downloader/src/YtDlp.php
- Size 11KB
- SHA256 561bc81633a6cdbb845724726f476fcf2359a14a645b49fb9e01ed2734105aee
- MD5 13199dd3557f43a63065212b84cccbf4
- SHA1 3b32bfc96e40ca2a853befd81c1b038ba85193b6
- SHA512 6ceb0f265600c8cb812ad234b094fe561cf1d7bff4a8e5032650a47bafc0ee5eaddb183ae2fa48e022570666c153563b193fb24ddc254c80c382d6554d72225b
- SSDEEP 192:wd08Qqg20u3Ob7q8ViONLNtEIc+pWHH0EJ6BU1scth5s1fJyzU5dVPQDasHR53u0:wd0f20u3NNONLHEIc+p0Lh5sxFVU53f
- TLSH
  T1C632886E38DB502185A3303F0BDF6108696390031959EEA1FDDE66D42FC453CEAB9B75
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18