76ea7f69a65b4d69ec9b2f9f3dadc19c22d0bd3ac5775a733441c033c27c26e6

Sharing

Copy URL Twitter E-mail

General

Target
تا بطاقة و حظر.zip
Size 4.9MB
Sample260728-ap8rdseb52
SHA256 76ea7f69a65b4d69ec9b2f9f3dadc19c22d0bd3ac5775a733441c033c27c26e6
MD5 6e89878e5eab857320b7951f6f7585dd
SHA1 849720bd6295f77b09ceef0276a9b8c321c6b147
SHA512 ae010b2a658cba25662d3443ad21f45827671adc151c6f8f81b45db9dbfc4b0c900fe600f89367213b6717804bd21c5a9bc066730ae86cc084ea0abd9f30fe47
SSDEEP 98304:JNH/r+czGzT7GjaSgRfWVkHzr+cuBzTobt5QtTJ+D:TiccCUROC+csg0J+D
TLSH
T10036233D93245985CA6FDC39C67BA266E0EAC7012155B8AF1CB9237C9F141E913B2F13
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  public_html/StepFifth.php
- Size 10KB
- SHA256 01ebd472190cad9fc7c71f1bc6f55515628710500c677fc87e08e122ba8f16bc
- MD5 902f4b2bff57061fab5bbc7f6b0ccaa4
- SHA1 f9cf93dd7db59575ab18c349544d97bdbcf01dc8
- SHA512 d4a3b12912f383913be9ff95ed1275a72c19d933d634f789f5fda08c2fe8fdb10c86edee35d7ab68f45a4e309b28b9f7d07dbd93dc301099ed0f030accc26931
- SSDEEP 192:78UvwQcwrR0xixFwP5+PTdM/FhHFGWUFGy+KUsYnyoyqrXFjX+RYH13vgv8Q+lG9:oUvu4ZFmMbdQ2Q1F9AGa
- TLSH
  T15D32C55965B354663813E09427BA2B0A72A1D803D60ACD263BDD2394CFC5AFCC5F33AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  public_html/assets/ACIG.svg
- Size 25KB
- SHA256 28f9d3632c663f8931433ce4be2f1c9a83885206582ce8633684e4eda80cc2df
- MD5 f8b208bff5878e214fa8cf670523a6a3
- SHA1 d777d6f82a13871d433c4a6e12fe0e5d1444d8a0
- SHA512 fce320d7c771b28fde23caffdf0bd0456d279f32a0482037ab3e62808c001957104ddbc3329206c4fcb287a49a1a67188045cb60ecec8026f2a045ec8cf3422c
- SSDEEP 384:PN5YkNHpTGJMcJPRfIi/Oy2wP6qSYDcjEn6QsOpSNThIR+TU:zYkeMen6RE
- TLSH
  T12EB28E3B93075AC5D98DE3B55439A8487AD8D4C7B86490E4EB363D2EDCC88A37C7C294
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral3 behavioral4
- Target
  public_html/assets/AICC.svg
- Size 15KB
- SHA256 3b7067de204d7a660535360e71495a80c2a8e6bb4ffe73c4e9bae146c10187d8
- MD5 0fefb09f068ff51fcadd4d04dcefcb62
- SHA1 5c15b18de77e09fe4babf4666707b4a5a4a9d892
- SHA512 2d857e93d808694c467b152b348cb82cad2b64ebfdaaad356a254a8dcda470a25c1bad5ad4c361fcbed205f93b6353c17b773d98ee1a1e49eeecaff0c65c1018
- SSDEEP 384:9k2g6I3qgZW1EBSx1hXxOn07pwHEBlTx7KK:9aSx1hXxZCEPTdKK
- TLSH
  T1F562EDF2990DE5AC1447CA4CCF33C5A0270F94BAB66AD3E48D9EE3B5A0179D4E643C24
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  public_html/assets/AXA.svg
- Size 10KB
- SHA256 5e5d500ee352ebe842e90ebafea77da90b9cf8584a9b8b09e65b9bccfa641ee6
- MD5 f8bfd50ff7cdd49b29770a032dd863d8
- SHA1 98bf0192364fd519e06cbd2bea40a001e6c53904
- SHA512 a88095350b377a247c0298ca14f7c553e9d6418572aec58232ce96f2b9f87b7801ba25364743e71de02ed93d2340ad394ffd4b5e70c62944e8f73882e805133f
- SSDEEP 192:yuSOLw+Knb+o+K5qs/MBbhU0oM3H3lsFB/nmorGfaVA8IwDmJ/CrR6:ynPnb/5qs/MdhU7cO+orGWlIwDv4
- TLSH
  T1DD22DB07030CD7BAAEED053D99342889BAE9DC879074E0D4B7AB1413D59C8E4F19CAED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral7 behavioral8
- Target
  public_html/assets/AlRajhi-1.svg
- Size 5KB
- SHA256 61ca10777de938cd7d3e39b2b9b1dcdc346d8653cd6528c14051f7181a3a2b58
- MD5 49d727f74b9f673e551c2992db3d65fa
- SHA1 2685a4ef88a2c6aaeea66c2c3eeaffc70bd191f3
- SHA512 55cce66a8e5dc79dbf28cbb00882fbe0c6f9cbd0656e99da29bf199e1ca3c02dc3ad24dee3fa8acb519c7153080fe303853f37ae671ea5e56341ebcd3992a237
- SSDEEP 96:wbLKTZcnWq7nI51xbxkxFGZXbEBlk12+74PXnYVDhdSS1pUH9PBCPnPz8sqPIZwX:2wcNIVbxkxYZgoUbPYVDhuVuwX
- TLSH
  T12EB100F69B4C98EC56038A98CE3746A11F1E91FA370A93E0583DD3716067BD8E943854
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral10 behavioral9
- Target
  public_html/assets/AlRajhi.svg
- Size 5KB
- SHA256 61ca10777de938cd7d3e39b2b9b1dcdc346d8653cd6528c14051f7181a3a2b58
- MD5 49d727f74b9f673e551c2992db3d65fa
- SHA1 2685a4ef88a2c6aaeea66c2c3eeaffc70bd191f3
- SHA512 55cce66a8e5dc79dbf28cbb00882fbe0c6f9cbd0656e99da29bf199e1ca3c02dc3ad24dee3fa8acb519c7153080fe303853f37ae671ea5e56341ebcd3992a237
- SSDEEP 96:wbLKTZcnWq7nI51xbxkxFGZXbEBlk12+74PXnYVDhdSS1pUH9PBCPnPz8sqPIZwX:2wcNIVbxkxYZgoUbPYVDhuVuwX
- TLSH
  T12EB100F69B4C98EC56038A98CE3746A11F1E91FA370A93E0583DD3716067BD8E943854
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  public_html/assets/Alalamiya.svg
- Size 14KB
- SHA256 f468bbaf6d6db387840aa24b4c98c404d8d8454d5f5f7528696f05247c345151
- MD5 c7527e85fe593d8830bcd4156010e832
- SHA1 67fafa7e8242bbf2f617afcc926f739c621ca279
- SHA512 ede382daeedc50efe89263c95376d02299ae5597e7348b91fb087ebd4e7c5270ea93bb8e4fba2ac2ef31110eee520a8b2b5b9f37452b8169c12979445b4bf0fe
- SSDEEP 192:soi+kXNHu7NcHTqyj9LockxsHjWGLWTpZcfU1BuVHHTzGOZXRgxVlLo+XI9kJA:sw882qyj91k6Hj36cfC8HGWXRqjQ9kS
- TLSH
  T183629B070311E7EBAEE8456CAD341889B5D4D8C7D470F1D0BB6B641BC09D8E8B56CBBA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral13 behavioral14
- Target
  public_html/assets/Aljazira-Takaful.svg
- Size 11KB
- SHA256 f57a8c3ad1f03a6341ff7f837d7dc611635808063b685ecf6fe8160edb20713f
- MD5 bf6247853d362856be7a88e2d977ae7f
- SHA1 d003b8a40ccf296693883d2f4c520b2499dea2e8
- SHA512 7e9cfaa2af7c65d77d6e8215266eed9a734466d1f1aaeecb7a2dca0c2e223d5950bb09cbb1092b9032e4f024cbed7692a2868df3bee52ecad39ba5f5e7a93720
- SSDEEP 192:SYhmuEZP54IvmvXVKCRA5jqHi8F67xRw6oBwHZKJyxYgylibhiOjjdiO8hJeuiq9:SeECIv/qA5mqQJJyxYg3PndmDrV
- TLSH
  T16B32E01B1308EBEA6DED04599D380495B6ECEC97D070A0E0B77B2827D04C5E4F9ACB9D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  public_html/assets/Allianz.svg
- Size 9KB
- SHA256 ed9a7409d967e18cf6d22b7161eda26b4ad826d6eab9e06faac251170c402e79
- MD5 46726fc2ad592669c2f8a6307986b315
- SHA1 4ef49619d49b442d062adf54ddcadf40aee0d09d
- SHA512 70dd53a6ed2388eb4a5a02c98289e30e51c544c0b1b204dc44423ece29923fa8fb85f6e99043dd2e735bb77975b9c8c1fbd35c07735a96a62bbdce2547a38707
- SSDEEP 192:Z9JYdhBmkDdsgV4wFyFJ8xiifHWYAlFuHpM:ZgXBmkDdsclfHdQFWpM
- TLSH
  T105223179D328197EE5531F8CDBC988C5346DE1C2F36542ECA76370075A229BB887CB1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral17 behavioral18
- Target
  public_html/assets/Amana.svg
- Size 4KB
- SHA256 ce74b0d9a5472764ce92145a46ae8f1c8303e284fefba7f5e7c560809c46b646
- MD5 69790f5c7a953d99b2b0e30157c600ab
- SHA1 ead1b49d81e1542f954360d16d7faafbba64e71b
- SHA512 5d5ae5a1cda87b1684a3eb21a6dc2aae71862bc4275e69917da0eb0b35fc068803b986cbc629568079ab38331d87e62310644a1229e9ddb02bbd00079d09c835
- SSDEEP 96:b1pENfsBgrogbKcVnybinuXz2QEvK5WJGnuiTGbuaTmLtl2hYP1P8:b+9QESYJG5VaTmLTq
- TLSH
  T17FA173B5AB1F85FC2653CA88DE3B8161BB1FA8747B2B02F0285CDBB570535E4C297914
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral19 behavioral20
- Target
  public_html/assets/ArabianShield.svg
- Size 8KB
- SHA256 8f33bb1a59dabe3928c98b78d4a92c03fda45c19c55681ca0928fc37f42dde77
- MD5 7b83474b13a400a92369aeb4926148eb
- SHA1 f27e69aa17f3505c7d1131b961a69d9285f8d207
- SHA512 c7d9b0c36757048006e8205e8ee281ca7124b93e54a0f22dcf211f6ed4b4a9fc679d9ec00fd3faf543ae172af2e20052b21538099268c6230ea24460ac09bc09
- SSDEEP 192:47C504Sfb1ftu6KBBHnzQT9THMXte8Ul3UMYt:l504SRfttcHnzQ9s9Ul3UMYt
- TLSH
  T1E20210E69A08D67C1903CB88CE3AD1A1371F94F9B26F93E4659FD3707003AD9E543924
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral21 behavioral22
- Target
  public_html/assets/Bcare-logo.svg
- Size 3KB
- SHA256 df46c0aef3d60ebc3fda0b1fb22007b87a8c29457a1a174e49fc8fd622b4da67
- MD5 cadf64a4f54f60cff872ad4e8ae760f9
- SHA1 a26d1ccc1ff9ef468c897d9d454c8e3bf0012aba
- SHA512 635bbdc9e075503153c113107d470ec2164f65ca5d0c69d910d71ba1f4e4dc3b7bb61caa2e221df628d10e070774bdc808028b8fb09ef30ccffd9d01281da074
- TLSH
  T1E17120F322B9CAD8A9A00700DFE469D55379E1EEB43215E0B35D30274EA51E770AFE21
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral23 behavioral24
- Target
  public_html/assets/Buruj.svg
- Size 33KB
- SHA256 8c2375b6f65ee81ea71bf8e8c136bd77c768842df2afa4061006af92f1892488
- MD5 289910cbef2d1af0468533ace1a5e107
- SHA1 e216524208a6c045eafb4ee7ab87c6ba681a6702
- SHA512 c4cfbdd691fd69839e9e3f1a267771569624ede8737d1d6164b8b19d5274eb5ac9b1c4d27bb281780fdcf0738e4eabb4e4ec74893a5450f003c75de32f7ed275
- SSDEEP 384:kLxuje+MEQ4z+X50x1n/IH6XKIBU3LeTi2/EzlzLqMFQhhQ5dTFoYLR6IeDf7uxq:YNFX0euBYeuVlEQvLcIeDfyx2Zc5m
- TLSH
  T140F2261B0315DBEABFED1418A925284DB5E0DC9BD4B4E1D0BB5B2016D09C8E8F96C7EC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral25 behavioral26
- Target
  public_html/assets/Comp.svg
- Size 1KB
- SHA256 26cdca095e4cd8c44d96bcaa60125fc6d661d63eec73013c225fc60e9eaa20d1
- MD5 e02fd7d790003e8ef0d925d2230302a9
- SHA1 af204cc96980273a88aba595163f56f15c1439e9
- SHA512 bef915046e460ad79ff9d122821366fa6021f4fc9d221efaffdca645d3f2fe7fd8d26b5a9f8a4b9b3e21be62fa0b78514ca213c1bab408db08bd218eea14632f
- TLSH
  T1C221E117D386BD3FD1168169D1B4B66523B861D7A684CB898273377FB7578D30049388
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral27 behavioral28
- Target
  public_html/assets/GGI.svg
- Size 45KB
- SHA256 1c1c36cce773bdb406a252661fd8ed9c6aa48f9df5cad0947bb241db8078f752
- MD5 9882ed00745be9d9b2db741193d061b4
- SHA1 564d4b2ab5a17e31aec2895ba62e1c0f7f27faf7
- SHA512 02ac0f24bb3caa56c5d0a3735d93ede1f4f012a8735e02465185a4de78dd24f8f2519d18f85c087a0c613671e0e6a891b5fd88a406370436e8f2be787abf6d96
- SSDEEP 768:4cogDBB7/+Wh+NzLBMuSEbOnJP+2wgAkxYl7JCfo9Y7R0l:4cow7/+I+NzLBMxE6JPy7JU7R0l
- TLSH
  T1582348B6AA4CA1AC1547E389DB33C160374F94BA767FD3F04D8ED3B5A0079A4E697810
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral29 behavioral30
- Target
  public_html/assets/Group 6518.svg
- Size 1KB
- SHA256 6a77f00800580e1d815a2eb9134ebf75838a4e7ebc7c783edaa7492adcd9c3d0
- MD5 cf23760142fef05b5e5ae2c6c173f00e
- SHA1 f2241aca8ad3f4becadea146d0d40a434365f380
- SHA512 bb72e5ac5862600fa7678dbf4b44c7d892e4dca56ad5b7a0208a0c6d4013ad7299620d547597c3c3408da4c32e42efea6192e39bd44f65a5f496b256f04e3120
- TLSH
  T16D2142B713448D8FA9E10BC0F5D06505073DE9A6F5B3C1D6B74B28136C2B973617D426
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32