ddcb7c4e554f574584539ded4e32b7ba929108bfa1ce3d016242311be77cb387

Sharing

Copy URL Twitter E-mail

General

Target
iServerShortenerSINGLE-UPDATED2021%20%281%29.zip
Size 1.5MB
Sample260728-w3abmsseld
SHA256 ddcb7c4e554f574584539ded4e32b7ba929108bfa1ce3d016242311be77cb387
MD5 4200f326e158bc1cd997cca47484e8d8
SHA1 5a587cccbd67e0199648f6843773520f1b52a6d0
SHA512 9bcb8116fee54ceaded5ec8283d4300d59a01d6df1fdecfa9396d8674aaa39752079c3b825da6e672307e1c12073181bf425453a9da224cfd48ebc6e2dfedfb1
SSDEEP 24576:yDxa03WBsY/O+HzUJNiDRdnXrfWGOUtuBsyJL16LW/VloayMIlPtlVdPq/tXpHpE:ylaDbmeOidxOOIsYBTlnylPtlVdKX3YD
TLSH
T1266533AD83650278DB0FD6B1541B509AC0AB433026269BAC71BA3774A647F443E73F6F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  admin/assets/js/bootstrap-notify.js
- Size 12KB
- SHA256 c86c0d75f76e08be15cd3a790993947cadfef993da009a4db714c25f58f43b93
- MD5 9ddcd900afb5c1814cfa581930ea932d
- SHA1 c813c8957c44e82d7846bb9b9de781fc7f3df4f4
- SHA512 337fde48dd9218f83d6dc8739af83caa21397b88e78c65f7a27a8dac5b539c2e38d5b313b01d6eebcd627485fc97084869eaa2146b04de35bbb90e3692a5791f
- SSDEEP 192:iNynenoyvyPo8vpCCCbOiSOmWSMCHgwwTuQY4Vgh8SFJThMqbWLdAJKAMfw4JKJd:iyeXjIeKNCPB4WhrdCLQa
- TLSH
  T100427699F39D2155426B316AD80E12CAB03D5233D82AB83F3D7AC4D869F49BC5317EB4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  admin/assets/js/bootstrap.min.js
- Size 35KB
- SHA256 4a4de7903ea62d330e17410ea4db6c22bcbeb350ac6aa402d6b54b4c0cbed327
- MD5 4becdc9104623e891fbb9d38bba01be4
- SHA1 6c264e0e0026ab5ece49350c6a8812398e696cbb
- SHA512 2b5aa343e35c1764d83bf788dcceaff0488d6197c0f79a50ba67ef715ad31edc105431be68746a2e2fc44e7dae07ed49ab062a546dcb22f766f658fa8a64bfa5
- SSDEEP 768:r8iUD27UwlNEMl9RqNuCqNjhqg8epm5VCoFXflR8Gf3ZsbQ:4875vhqKGvlp3ZsQ
- TLSH
  T116F29606B23031A107EFB1E1525B020A7239696EE906907C78B99AF53DB9C48717BF3D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  admin/assets/js/chartist.min.js
- Size 35KB
- SHA256 d7b19f83d6bce543b5aa4883019648768e0a99b88edb3e7dd51be7dda1b5cbf6
- MD5 335721a48c2f6c89aed401c9a0294847
- SHA1 9ba85882b40af9df8b4bf93422eed55f5aa7fdf2
- SHA512 85a29c887755d3c0d329846c23f652c5c5c82809fac4c2d988900296f0f5b13b1131717061607122017878a15e2a9c1c5f297fd1520624ea3b7feae327e2bdc1
- SSDEEP 768:ObZKSGQ9KocYAsc3c4ZNbXtTwfy2rRB04rcBba6GUFeVnEb0shwQAqil1U66lTkn:oyQ4VZNbXtTwfy2rRB04rcBba6GUQVnZ
- TLSH
  T18CF2E988F666BA16866753B6403F010FB172B5E9B4488868F49CD8D0BD78DBD1277F38
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  admin/assets/js/jquery-3.1.0.min.js
- Size 84KB
- SHA256 702b9e051e82b32038ffdb33a4f7eb5f7b38f4cf6f514e4182d8898f4eb0b7fb
- MD5 05e51b1db558320f1939f9789ccf5c8f
- SHA1 c72c1735b4d903d90dd51225ebefb8c74ebbc51f
- SHA512 ab3ad9a98fe431508461ebbf8029bc536f34d16cfef8b4c62b8a62b56fe2b30a426e3c3186c994c2578bd585da1c89a9b421c6d2f27053b2f2ed13b0dd9428c3
- SSDEEP 1536:3dhEyijTikEJqRdXXe9J578goJsWXdLVhNLKz4DTAjnWotoZqwsRmKKH7UggYiTv:2Qcd5hNLxTwn3t0iUHiTDU8Cu5
- TLSH
  T14383E6D9B2C670529B7730B850BF450BB17A98DAB44C8DA0F068C5D47EB4A8D907BF2C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  admin/assets/js/material-dashboard.js
- Size 9KB
- SHA256 c2c99cb1cd56c128e0d7f9acf827f8326e620945b5c9d0a6115f95a26f55896f
- MD5 5aa617a1cabfae7fdac18eab4b95f0f5
- SHA1 3a3b88484705b6bafee67eead9aea9f92b4a85f9
- SHA512 c4dc53614fbefce5cdd0f81df224b8de8e95b86a3eff93fa5069fb88fa7072e079c91436ef88190604e8239d8f1e3dc1733e9cb021a5d61d9b34c3ce7a4d9b42
- SSDEEP 192:/Hh5C8V3vH1+Q8JAROTCBWhotkitS8n6QbH9iN5Q3E7tWLTC:/TRvE3h06KnEWy
- TLSH
  T1D712EE4AB4B33526117BB03A9BFF62543A25542BDD0A99227D6F12D80FC0245B3D2FBD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  admin/assets/js/material.min.js
- Size 7KB
- SHA256 de8d6ba66f96564b7af750dc791c0b9a1f3d70295a5000d050b6dcacf291e7f3
- MD5 bd26a69c4211d42518ba6dbc8ea67da7
- SHA1 3763f38dce199f52124d39e13926c43d49367b8f
- SHA512 b951ae566fbf0badca49b2973a5dacb3b48ab288d5d5b7fe01b295abd6558087f4420f7bdc120b92eb6e32b89c43426fa1e264cccdd2d9cb0fb93cdcfec39fe3
- SSDEEP 192:kNvBZvXvTvZvpUdVUeUPNeI9jPCB0bIuSXIBq3wkc75losM:kNZZ/rBhUdVUeUPNeI9jPk0bIuSXIA3H
- TLSH
  T115F1430CB521334352F791F451EB8A4F613290B4D919445870AFC6E45ABEE8CA2ABFBD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  admin/install_assets/bootstrap/fonts/glyphicons-halflings-regular.svg
- Size 106KB
- SHA256 42f60659d265c1a3c30f9fa42abcbb56bd4a53af4d83d316d6dd7a36903c43e5
- MD5 89889688147bd7575d6327160d64e760
- SHA1 de51a8494180a6db074af2dee2383f0a363c5b08
- SHA512 c2e77eab327af1469097c31bc0daf820c066b0222059d8ff0ecebca974b62b7535e96f1f356643b2b62763a924d040e4ac9b2097e1de2c22226411fde8723743
- SSDEEP 3072:jY+spjSP0yD4zOPqGGUG0kSnouoxvKDHkPooe4Pqo0CjmFIudsqi/CWEI:kRjSP3D4wlG0kSnouoxvKQPooe4Pqo08
- TLSH
  T130B30F1CE9940B709BDDC3A25B75AE54231C418D72303CD04AB9E5E0B99BF694F8E9CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral13 behavioral14
- Target
  admin/install_assets/bootstrap/js/bootstrap.js
- Size 68KB
- SHA256 0abe8deb334de1ba743b04d0399e99eba336afed9da72fc4c0a302c99f9238c8
- MD5 fb81549ee2896513a1ed5714b1b1a0f0
- SHA1 3b965a36a6b08854ad6eddedf85c5319fd392b4a
- SHA512 850780aed292053275b1e8118f24680e1e34f6d77bd0ba32eb6bac041dfe3b1e59d5a922b01cc2a195a953df90fcde4605b81427a5e8d5f71d1600c3211ccbc4
- SSDEEP 768:IOND1D6XlVY92TiQcAyK0r54Xx4oGhLxGiQpQsBd8+WvbA:oVWiDXx4zsbLWjA
- TLSH
  T1B4634F167BB820618B5B30BA8CDF514C7238951B554BD4283CAD97D06F50B38A2ABFFD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  admin/install_assets/bootstrap/js/bootstrap.min.js
- Size 36KB
- SHA256 53964478a7c634e8dad34ecc303dd8048d00dce4993906de1bacf67f663486ef
- MD5 5869c96cc8f19086aee625d670d741f9
- SHA1 430a443d74830fe9be26efca431f448c1b3740f9
- SHA512 8b3b64a1bb2f9e329f02d4cd7479065630184ebaed942ee61a9ff9e1ce34c28c0eecb854458977815cf3704a8697fa8a5d096d2761f032b74b70d51da3e37f45
- SSDEEP 768:o2rGy27UwlNqMl95qNmCFejhqs8snmi+CSFXfbx8Gf3Zq7Q:Jg73zhq0GvbJ3ZKQ
- TLSH
  T1B6F28606B23031A147EFB1E1525B020E7239696EE906907C78B99AF53DB9C48717BF3D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  admin/install_assets/bootstrap/js/npm.js
- Size 484B
- SHA256 c7aa82a1aa7d45224a38d926d2adaff7fe4aef5bcdafa2a47bdac057f4422c2d
- MD5 ccb7f3909e30b1eb8f65a24393c6e12b
- SHA1 e2b7590d6ec1fdac66b01fdf66ae0879f53b1262
- SHA512 81bc329ad688d411fcf3decb28454238ec478c192b6ac19a3ee07e9939556cf15df91fc7e689802927bdef0362483fbf1659a7c92f877bdc625a56983967cf2c
- TLSH
  T1A4F074E49FF9AC543B5209AB105E1B677326E985A358D875D02E08FB59D89CC0B85CB0
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  admin/install_assets/font-awesome/fonts/fontawesome-webfont.svg
- Size 382KB
- SHA256 8e3586389bb4cd01b3f85bb3b622739bde6627f28bba63a020c223ca9cf1b9ae
- MD5 d7c639084f684d66a1bc66855d193ed8
- SHA1 c0522272bbaef2acb3d341912754d6ea2d0ecfc0
- SHA512 cd4c1d6756aa4d8e98ef4f7549ef2d73cc407bbba17a22ba31ddefbf74cd51de8a5c51a200db7f99e408f38988444a44156e7dc1136775b5cf6376972770ed29
- SSDEEP 3072:pnw+ubvqC7OzAIvK+jRwXxSbs3xErNKyOAXzr3tmq2OEsunSGwoyH2BODH4qjvl+:AMlFykUBj
- TLSH
  T198849568F95107B9CBDC42C09A7E0E94532D916E18753E68067E98F05D0AB2E4FCFEC9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral21 behavioral22
- Target
  admin/install_assets/js/jquery-1.11.1.js
- Size 276KB
- SHA256 3029834a820c79c154c377f52e2719fc3ff2a27600a07ae089ea7fde9087f6bc
- MD5 3d93b072d14f2bd1ede58f4847f537fd
- SHA1 73e5d044bd153dd912930e8be433059454ce19cd
- SHA512 78ac19342bee3a1c5ca864d702e742f561f629429ff0877572a36831ce83299b8df2ea4bdb6c63dd990975c9320dddc68ec8b5407299dee8345d01d090644d26
- SSDEEP 6144:eOWehmnQcHCAkwxc5cr4OfXKDoZOVJFpq3aK182bHjI1fusA2rM3:etJ4OfDZ2Is1fLAx3
- TLSH
  T16F54B6D8F78D112E4232316AAD2F52CDBB7CD1B1561058AEBD8D597C249083C42FAF7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  admin/install_assets/js/jquery-1.11.1.min.js
- Size 93KB
- SHA256 540bc6dec1dd4b92ea4d3fb903f69eabf6d919afd48f4e312b163c28cff0f441
- MD5 8101d596b2b8fa35fe3a634ea342d7c3
- SHA1 d6c1f41972de07b09bfa63d2e50f9ab41ec372bd
- SHA512 9e1634eb02ab6acdfd95bf6544eefa278dfdec21f55e94522df2c949fb537a8dfeab6bcfecf69e6c82c7f53a87f864699ce85f0068ee60c56655339927eebcdb
- SSDEEP 1536:/PEkjP+iADIOr/NEe876nmBu3HvF38sEeLHFoqqhJ7SerN5wVI+xcBmPv7E+nzm6:ENMyqhJvN32cBC7M6Whca98HrB
- TLSH
  T1B293C8D9B6D27162977730B850BF510BB13A98EAB80C4C60F1A4D8E47D78E89507BF2D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  admin/install_assets/js/jquery.backstretch.js
- Size 12KB
- SHA256 711b581dfcec53f325f095a1ca72ec97776dcc2426625a491d2a258cccb6c521
- MD5 c1d3683aa2735ddc2f87426d56cfe495
- SHA1 93bfb4c254e3b76956986c84c5cca2cd0496ce44
- SHA512 8350dec8f2d1a62c918a342c0006454dc8d540e7d2a5eeaeea8e49c9608eeeda70048a5593e667ed0f9db21a46d02bf526c3923c48dcc715ea7fee215bce73bd
- SSDEEP 192:RKg7lHK/myoLSZB3zR2gfGoXtJj0hkcPeZRQqiSIGOzMpYPDuMbElqkJeL5a:RjLSZBDDO0JAhbZSHOzDPbha
- TLSH
  T15C42642B27F22063D92762A96B4F6645B739C027520ADD08BD1D83980FC1B3842B7FF5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  admin/install_assets/js/jquery.backstretch.min.js
- Size 4KB
- SHA256 579d9d9773858e863e7d802489f84b27b7f557b99900a3c6090a16ce8431ac45
- MD5 91d4cd427e3b6649cecaa8e689f284c7
- SHA1 8bfed4e534efe706b0b20898a9cfd0dcfb2a8a6a
- SHA512 8d674a1b4e434f2780c0158308486f3d58255753bc1d269ad61ace7af281b85fd07a594797c552126c8bb280110fee4f8240eeb79c48707bd0822a820db5d07f
- SSDEEP 96:2v1TdqYZYYkM6PNLYOM0CUWVJAwlY0OhO:6j5YYAVLq3K6YzO
- TLSH
  T15A91855B37623143D126E1E9520A4B05FA3518297807751EFABC9DF198D0D4D127FF38
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  admin/install_assets/js/placeholder.js
- Size 176B
- SHA256 78d0d5ed945e2fd267ab9965570096b217e94e25c40a396192747bd8c8de167f
- MD5 19f8276ccc253e035c9c46f6b502ab66
- SHA1 c22281122c74277fa4e71784c6f7632987915909
- SHA512 c181c48a864da2671599eed10d6be9f2dcc86b571e1daf0caa19073474a6235b76c50c9cbbb2b91c67584c84a87cde2e31bbd22c3c4fa090bb3e01c013ec7475
- TLSH
  T1ACC080697065968486833571073F9D043C317251401354447A1555B97FA5D44052159E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32