8e0020c18e5daa2e199c38c63a9cf15cee5a7d511fe8a4323986ea54d805de89

Sharing

Copy URL Twitter E-mail

General

Target
script5.zip
Size 7.5MB
Sample260730-pr4msahg24
SHA256 8e0020c18e5daa2e199c38c63a9cf15cee5a7d511fe8a4323986ea54d805de89
MD5 25cbe56e6f79f666935362632b90686f
SHA1 35da96b937e0a3040fba617264fa15cea88b2ab9
SHA512 4afd78028a445e48577b3ce14b5c716f80e66639ab7afc3b490a0d2bf53cabb65c446acf8aef56e4ba37e2d5a064a7b3500b2c6f4bd9ceaecd5a5ae4d4cb3ab0
SSDEEP 196608:MsMJJe+iBuium01HfvSJaxUF23do8WwyI/tgoOcKn3usUmj1W+GAvSVIKfFkFNn:MsMJJe+8uH/vSOU83qI/tgoOcKn3usUs
TLSH
T1AA761234832C1168DE2E5C36B94E00CA6CBA52503806AA7FA5F757A01F6FD5B3F35627
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  OTPC.php
- Size 1KB
- SHA256 d16233a0bc8f89141a4692f8682e9f67a3490a3ec1fbd3ff99bf6e0eeae9d9c8
- MD5 422377eaf74ab1705804287af25aa8a5
- SHA1 20fde950a4939d9f1f6c0970d457e9ff5483009d
- SHA512 e5a9b1a04b64d5e408e586cf69d796d253357b6fbff91fb59762aa0736a35e5e1ba88f2ebb36998a5e216405de46ead4d1dcd000c06ad7ae4758aacb25a34f15
- TLSH
  T1BD41320AF0422B478777A2748931A115FC22C70796026F2138ED14D67FF99F6A1B6FA4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  PASS.php
- Size 1KB
- SHA256 5f8f95b76bf5e81f3f3ef2cbe3dfa4dedc9eb7f703deadc83b42bf90b84e5380
- MD5 698fdb4bf0b5afb72dac8ef4f3aaedaf
- SHA1 c8899b3f354e98e84b060e1bbba938d552aea1f6
- SHA512 da98f1e8655c7beafd0ce4b98d473a51374b561d687436611c99e5fd5d3b5ffa49f87658720549e29eaae75d5afa55b97ed3e50afb79d248d487718051cddd54
- TLSH
  T15F31FE0DB4411E874376E178C422C526FD52C31391031F113AFD4A9ABFBEEEAA062F66
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  assets/img/tgram.svg
- Size 932B
- SHA256 ade1ddec66f6e98e30d8a56b01e7dd9d2c84a8f4dac51bc88d2ab5bc6e5d1a62
- MD5 67edaaf1408d2278db9f10fbc5690ada
- SHA1 5cf2b6ba80881a1a8d48963a094d0d410022932a
- SHA512 0b6bb33dfe2808ba5ee926e0452f879421c1a102b05e43dd01b6dccad5393082c5e2c9d675fb203a0eb5e1fae4be244a12ec4f482af7016b0f5962826d785a9b
- TLSH
  T1F41184B3937D917ABC57C26DEC5DA8E8A76B12FE01EBC61092CD0F506193CC7A806860
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  assets/js/bootstrap.bundle.min.js
- Size 76KB
- SHA256 120666e01d671db172cecd87aaaed5cb0feb2da24d971c291fe1b8e0f64b18ac
- MD5 52a78545b39d3c5ceeabbac8cbe46cc0
- SHA1 99e4421a2f4de040de5905bc15cd45d291ded586
- SHA512 22cde83ff9ed88611b9307db3ec6604683d958c3d8caf879220f60146ff760d60dd5769cc5accb9655e269c21c2829fab47ad0d57963714ad435a3c4db28fc59
- SSDEEP 1536:P+pbTNR2t4NEdiK5J2w8gGzjJVPOW7tI+r9ixR2nwZ7:u36WJr9ixF
- TLSH
  T13273C5493254B8730ADE45A68037470BF3265994B14B802CB5BCADDE2A3DD8672B7F7C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  assets/male.svg
- Size 1KB
- SHA256 38ba0ee78311d2adf74d95f0968ba359a47718b2b05fe67b0c652a2aea62cb1c
- MD5 3872b25f8d9fab99ad30bb229a24be24
- SHA1 2c5c4509f5aa139c645ad9171d55bfa1bfdff7f5
- SHA512 1dabf94096af2b4cee2408a55d266c59173f8c8cdd0fa9d6ada0bcf76c688c0ec543da137142ecfcced65dc48e288c6cf0fb32ccf89158161b333bb1269fa12a
- TLSH
  T13F41AECE137D92CD744E31B0D437AA827EA090895B719404E36FBC27A442EE27ADCB25
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral10 behavioral9
- Target
  assets/vendors/Bootstrap/js/bootstrap.bundle.js
- Size 203KB
- SHA256 0aa62c6225392967f5ac9f3c071f5aa9c9c0042e05e13b291e77f35b8fd63d3f
- MD5 9cebb08e94f529ab47928be6b27f0a3b
- SHA1 94c17f7e9ecddc169fcf938071e2baafe0fe3c27
- SHA512 70d1048a84b3c23795f3899c93eca38c16b741f9cde07204ce7ec81ce8bab6ca7a758e98a1dcaab0fecf8c979655cab54802a4628b32636c7c05d3ee9cee93dc
- SSDEEP 1536:nJ6vJK/mvAAsK/KfPlWyOGATiyPJ28YGL0JyOWTHfrMYQSK5uRd/UBBmnKqKUCWg:JP2cEaWTHbdHYB8U40C/EQw90Im779M
- TLSH
  T1911481093DFA2563446BE47E8BAF414AF23180472509EA447D9C47DC1FA9C3492BFBE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  assets/vendors/Bootstrap/js/bootstrap.bundle.js.map
- Size 441KB
- SHA256 20e96546658d9ab5df6a6d5407d3077db736c9076dd6a724164851b5df9194de
- MD5 b3e5aada63cd16bc2e30e453817d4470
- SHA1 2af06c6aa25299e98e23872bfca3f3605b3b0087
- SHA512 b0cf5b54cdccb08d7831a88a82441d96608a9d2abb897814382998b9bd1679f316e5e697e96e7683238cf2341e826669f5fde181d7e8b539c68bc3fbd37ee1c2
- SSDEEP 6144:/d7iTLwxM75D4BsL93473p2LQUyriEdzBd:Pk4
- TLSH
  T1ACA443132837D833265F9ABB289F4197FE24608C2A459600398DD644B7D3F3AF4EE975
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  assets/vendors/Bootstrap/js/bootstrap.bundle.min.js
- Size 78KB
- SHA256 a85b2fe307777c8eb47f06a1eec399fcbddfe83d252fd202d3e1358051fcf27d
- MD5 9afc1e0eba9521f29775ad2f6ace3f1f
- SHA1 77bcf0c882fa4be8fbead35052c39a944f9035e3
- SHA512 d532b8863098e7e13d1f7af9fb4e5b1066ca1b22b9d3a59a0cf7cf7b5b3f8a1c118ebe8eb4be37cc92f338543eff372238d11dfaca7b2f0adf3829f2ba43d2b2
- SSDEEP 1536:n4EMTGR2t4n+3ifBHJR9WbUHk3j8YYmPwRM1C+XIpBzQffkF:z4Fj8OPwRM1CEIpBu8
- TLSH
  T11573C6593244B4770ADE45B68037420BF2265D98B24B802CB5BCADDE2A7DC863277F7C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  assets/vendors/Bootstrap/js/bootstrap.bundle.min.js.map
- Size 325KB
- SHA256 532a50333e2b9962949972bba11c442456471b7a7164b4e6435dda9f29a059b2
- MD5 1c5cdadb36e7e305374a2c977f141c87
- SHA1 5f3cf3a7e79687828ed27f675ee760ab124204dc
- SHA512 8bdb3454ac33facff3153c9ed88b83c7f303f30bd30040f9d7f0caac35f00452a8a540dcc73468668370b1fbb9cd7ea3eac36b88f539d967f65191a7b5efde76
- SSDEEP 6144:576d7iTLWhw75D4BsL9GCyh+IOaFge3Z5VHQx:5mO
- TLSH
  T1F264F6123D6BE437075BCBEF9A2F4189F63531842502A120388D469C57E1F75F1EEABA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  assets/vendors/Bootstrap/js/bootstrap.esm.js
- Size 133KB
- SHA256 9cb683ba9ccdd8a73b076c6d1e9777a71c9a1d39db16b908c542fdad31b99b59
- MD5 19f094266bbda7030df2b99220d7b8cf
- SHA1 ea49c8cc2488db87984c4c58d5e81a9547550628
- SHA512 3ce16311dec1c2e6d3a845d869fd6cd48299cd2ce1b23528f1596d371ff47984a804bc77aa4f194f51e8d247f5f4f67455da0769735ef8ebea577766b6a61cc6
- SSDEEP 1536:n/SXRKXL/4w0K/C3ndey2oJktH5Sod7dDhEMCwx7w4tm1ubx6cb:/PDUgHEoj1JWubDb
- TLSH
  T1BFD353493EFA2833456BD47E9BAB414BF2254487350ADE987C9C0BDC1FA942051FEFA4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  assets/vendors/Bootstrap/js/bootstrap.esm.js.map
- Size 301KB
- SHA256 5469de94599d06943136acba34443a3bf432f79dd2382d15842671aab474d4df
- MD5 45581a9d7a3fdcf68f6aeda7fbccfa00
- SHA1 bb98b0e3375ed6b7b320dbcc2846fa0bae9c1d96
- SHA512 96a15e465c954877c80c35291036d3837492b9d2662ef80ce828434b52d0871fd5eeda6043532f9e80292929302d070c542d462727241f15a23fe94c16baa58f
- SSDEEP 3072:lYdey0675DfwBsL9hg4wlR8serSLoq0aThbMzf4bIG7:bO75D4BsL964MerSMq0aThbMzf4z7
- TLSH
  T1F3640C322927D837675F99BB289E0186FE3470CDA6914150768C858877D2F3AF0EEE74
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  assets/vendors/Bootstrap/js/bootstrap.esm.min.js
- Size 72KB
- SHA256 7f6eafb7c96978d55177d48ef2efcc7637d1aa4c513177294b8ba92c34c5dccf
- MD5 bf718da92661e1cbf7dbac85a568ae5c
- SHA1 8e3c2b7a7535afc0e048eca8bfac13505a15504b
- SHA512 f7c071ed55efee700bd93eb21e7c2537c304c423d95121aba74b2eff6eded3cb6e6d59d929fbd7f5ce39f85dc93821a98e5e38a5367b7f7efc05c9b9dcf80c28
- SSDEEP 768:nPEUoai7flVPtiCYh1UXEaV8UxuP5Xz84g0MTxIxiTxQelzxRfPob4f5o3aKqPU6:nQpsVeC2Wre4qt/khsP
- TLSH
  T11073F9467349B8730ADE45A651764347F31A2CC9B20A816CF86D6DDE2B7EC8131B2B78
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  assets/vendors/Bootstrap/js/bootstrap.esm.min.js.map
- Size 216KB
- SHA256 bb29b6b55a8dd493f710cf53adf60962691f77e1b7d8cd8f21cdd8a0a45ebe4a
- MD5 6a8aaae67052962755b493c4066f141b
- SHA1 a444de74f6ea2c42a7398483587ef0f9d2d39107
- SHA512 659187be33a834231fbafa4859c6f05c503393abfa66bf5f5a2d48e4519edec3129d86e46f488bf637650824b638e5348948c794a4ed4a7a0db6fc0e0a072552
- SSDEEP 3072:+h/QYdey0675DfwBsL9h42GpXA/g38wuHC:+hGO75D4BsL9+2GpQ/g38wJ
- TLSH
  T1B024B3023EABA4374B57C6EF4D6B81C5F224358939028164789C05DC53D5BB1F2FEABA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  assets/vendors/Bootstrap/js/bootstrap.js
- Size 142KB
- SHA256 73a5e7f61608cf4482983abbee40fb1403317c8bcf1565f122e9e797449569b1
- MD5 3ab45e34cdbeada2f24f8061192c6d35
- SHA1 ed2f4866d24bee61d547bc267429c981f8ccccc3
- SHA512 b15b6abbfff936df5ecc5c565c22dc623213529bc4dae8a7de6eb37829421e41df58eb218bbdf610686b8a6e2a2fb91ac12e62a7053fae6428ed98ab2b30ef7d
- SSDEEP 1536:ndO6vJK/DvAAsK/KfPlWyOQJ+/pSQdjl7hsEKohrwXljm7xKU9Q:MPrc2/EQD9ijm779Q
- TLSH
  T1C7E352093EFA2463456BE46E4BAB4156F225408B350ADE987D5C0BCC1FE983051FFBE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  assets/vendors/Bootstrap/js/bootstrap.js.map
- Size 302KB
- SHA256 ca8323f4e8c945035a7eb9b0f8a0b3236c06891d8358115dbc8235f346c6ef16
- MD5 b6bb6d3fe62c5dd82000ebdfd66b2c18
- SHA1 02c11ef052864484de9408d473459671c3ff7bc9
- SHA512 c443ec2d023165c14bef355f2bd130de59066ac56dc2c23b4a074d0f9d10e2ba55669ada89931c3c663d96cf58314b37534c61b3f025515ed9c78e80ddcc0cb1
- SSDEEP 3072:XYdey0675DfwBsL9hZ4w4Kcb30DyDWkqJPIj/0v2+O:BO75D4BsL934j302DWkqJPIj/0tO
- TLSH
  T177641C23292BD833176F99BB289E0186EE2470CD279141507A8DD54877D3F7AF0EEA74
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  assets/vendors/Bootstrap/js/bootstrap.min.js
- Size 59KB
- SHA256 90879f20631e90d048bc1e002d7795273add7e3a5ae1252bebe3c9e0179ca833
- MD5 6a599114d93cc36d2c8e127a24a97e0a
- SHA1 45be8ca0bae7e5b88244b718d4133c6aabd30cd8
- SHA512 bf2440548d08126e8b23f7d54affd6abf7742947eb837849ab6433e4595f111ebdb1fdd91e53abb0bae2366e3d1719e95069a1c7e4da24ac09f81c932ca4fe62
- SSDEEP 768:nZYN+vOLYGmObgUDZM8fW+l3sLaSLPe6CMhYVRK0H/9V2Vz/kq8GPnlvG/AD22b8:nu+GXht8xmwYYLsHPnAe
- TLSH
  T16A43A5563244B8330ADE85A78136434BF7295C98B547806CB5BC6CDE2B7DC823276BBC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32