ee2e21d39da6b51fabcd32a54e4305eb196a5fd68c6631db2b5f580aecca2767

Sharing

Copy URL Twitter E-mail

General

Target
wetransfer.zip
Size 69KB
Sample260728-g56qas1set
SHA256 ee2e21d39da6b51fabcd32a54e4305eb196a5fd68c6631db2b5f580aecca2767
MD5 8be8000e30dfba09d0a22418e038159e
SHA1 c3b6aa0b385bdc8e6dda8d550d56454ae4b86642
SHA512 89a835d834fa8f69195161cf1e2bcb0a7a08d31d7dfec731847d4f87605bcf6a1682232f86378dabde440aba869e3d53b02bbf293dd40594530530b4c2d04f50
SSDEEP 1536:6E8RmwWZWS+/n4zgDRz0TecYRZLXgQKvexqB7WQhxtKcE:X8kwWan4YeyHoZUAFU
TLSH
T13B63023BDD1C98D2C1B2283272A65F9D8334495287A79A4F1690FB9F36384DC64F0DB6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  wetransfer/check.html
- Size 16KB
- SHA256 e2fba248d5314f260761b600620391a41fee60479f5ce1e4fbd75542934de516
- MD5 97f4938bec896ece60bb4a37cb7f2c15
- SHA1 42253cd49425f7c993a6f77d366c431b1a0d74fb
- SHA512 6411d838453ccf323666ba2acbca113bf930fe45d5552ea26e7158007c93341b0ea0c55acac1b66fbc48e14cc1dee98e89c4ad5f499efe401aefd17a71b8f45b
- SSDEEP 384:yrTQISgA5iXVOjpyuLjqUpcWX/1bfCBDYdMe:ydKiUik/Fq0
- TLSH
  T10F72C8480534272F89769275A78BD418E792602B2513AE8CBA5D82413FB2553C3BDFFE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  wetransfer/favicon.svg
- Size 959B
- SHA256 9fab6ee4549971b6feb886d667c9c6280bb86b1e1aceee503e46e0eedff6168c
- MD5 f10b6d67b18d7559a26918ece17c4127
- SHA1 85976ffacae5927d24a2364642f0a22a2a182c88
- SHA512 6131327fa7e1debe2b41089dc61af9dd4af00f08be2f5ea074e8d941e142bbe35c28424065bca731904933b5c55c5497bbbd2bd3487ea5c670539612a9c35ab5
- TLSH
  T14111E5F64B789188428F8DBCFF54FDC9612F5479657405C1915AAF7CC803AC2F312814
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral3 behavioral4
- Target
  wetransfer/logo.svg
- Size 5KB
- SHA256 48a40d5cf5f37004aae591264ae24d19e680f3c3ab52998a1c8a55ed299d3705
- MD5 49f17692c906e370cf34f0d50ee19562
- SHA1 3e7e63898138bc7de158e673e3dad40ceb943b97
- SHA512 0dbfe9ba775df2fe9c547c3d91bfd32dd844024eb0ca1f9beed0b235422ad2319d2c5033acb697e6e2fbc692134b82358cfbeec66f26a1753b3e53f82180288f
- SSDEEP 96:sAi8qmZn+AbQSa2sBshQpscxJlCYtO7miaJAbCzplOtiPy1ZsaI6/s+APPgC0+:sX8qmZn+AEEsqxcxyz7aaWzplOAAsaIH
- TLSH
  T1DCC1D9DD13F412D4EC06C7D3B90194B8B056A9FF1BA182ECD2469E1CADA103E8D09ED7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  wetransfer/mail.html
- Size 3KB
- SHA256 e693d1aef15b201a0f8f1c72ec831696a91a6c307ed6afbd85be73f5f282b946
- MD5 bb62083c59e81261100157980c52d9a6
- SHA1 378d5823735cd6c91aee0c562c9e1263d6415964
- SHA512 d89a667bb3daddd22092d4a9d6c3461dffec9ee0811f545fb659f8533dce735603b395525da135a47af1d35b47c34d730ec6855b1e519c21cdd24dfac63ba978
- TLSH
  T1EF61013AD588100761339274AB73669AFF969153930186397FDCA3878FB6904C963F88
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  wetransfer/phpmailer/PHPMailer.php
- Size 189KB
- SHA256 01038c4104554fe7fdb958eb4653883c5cf93af76a3c8797794001c35c1bf553
- MD5 663025b83470cd6f5ea53164499c8390
- SHA1 8e08851092169c62ae11d794cf8cccf239477f22
- SHA512 88190897cf940623500346acb72be42f3da804e6a23cd64113fd6559c26a3fa2523e3baf120c47ece6f99ceae7aba902d39bd3623b0eca9b4893b29d72ae0c18
- SSDEEP 3072:VhgJj2Y1HwR9DQ01OgiDd14/RmRp3S5nbmsjhlIKlK/g6+o+iQvE6d35lUGcDkdx:QJj2Yxw0g41YwwIY6t+iQM6dEGcDkbMG
- TLSH
  T1AB14C71878E75CA1165360B9ABCFA040D13AA13F1578A852BCDD43B85FC4B3CDEB5AB4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  wetransfer/phpmailer/SMTP.php
- Size 52KB
- SHA256 f7c8210e4047871f9f0b0639d7387d5574738fb9984f744d58d85378da77c68e
- MD5 154d133e89d311bc885d6af671c11717
- SHA1 5205cddd66ff05660c91b5ab65868a36705197ba
- SHA512 412b3115d168773387997001acf7757fd25d6503dc50dec57df21a62742cdfeeebf08f6eaa27f8586bb60aa108e667d68edb9f385bbc9a6f506ef3b1fd5663ba
- SSDEEP 1536:DSHHMZxzhdwXLF4aD7Wp+kQ/Vxcze8c4ybII3WU0:+HHMG/V38c4ybM
- TLSH
  T11233C94A34E71976122320B95F8FF044E33AA52B12299D85BCEE57785F4073CCBB1EA5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  wetransfer/send_email.php
- Size 2KB
- SHA256 49a5aba2dbdafe879b49b1189350ec9d80054aef707fc6ffe1fe725571dcd904
- MD5 e2e1b53a05d2879273f37b6512a4b6c7
- SHA1 33f3ed42563ae384cc5882d98a7163e67c6db066
- SHA512 4916e511e244bf80003d23412f142863cf6635d02adc8e8c4bb5cdb3989cc7c4db9773f3d87a5c2f101466cb255302c874c7128b5a43bf658ded57d0b2b532c9
- TLSH
  T15E51EFA470811D916E76D3397B602114FEC5C20B2F4166A13DEE82869FB1D13FEB258B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14