88ed87fb475ed156757da58260ed697682dcca0800841861b4a4c402c5b8fe7f

Sharing

Copy URL Twitter E-mail

General

Target
mapka.rar
Size 3.6MB
Sample260731-3p67satalh
SHA256 88ed87fb475ed156757da58260ed697682dcca0800841861b4a4c402c5b8fe7f
MD5 76085594f359f10875a8494d557c6d53
SHA1 7bf06bec546ac274e393bb0dff531e1609f08df2
SHA512 fa35a2a8529997ca87eff7c44842479305da344ce9deeb15e22cd73e57ac9a83cb28902a394caeb6202dd79bb9f8b6e20d7412bf1115ecfed198babb648400c2
SSDEEP 98304:mTAAw2kJjk3OdfNHZmmbJdykzAXmQ457HIaaw:mVRyjaOtzbJskkXd45bIO
TLSH
T16F063387C71E5B4D4C3B53A01D3661C50B85B326C8E802A29F61FF7ED693C92A2BD5B4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Targets

- Target
  mapka.rar
- Size 3.6MB
- SHA256 88ed87fb475ed156757da58260ed697682dcca0800841861b4a4c402c5b8fe7f
- MD5 76085594f359f10875a8494d557c6d53
- SHA1 7bf06bec546ac274e393bb0dff531e1609f08df2
- SHA512 fa35a2a8529997ca87eff7c44842479305da344ce9deeb15e22cd73e57ac9a83cb28902a394caeb6202dd79bb9f8b6e20d7412bf1115ecfed198babb648400c2
- SSDEEP 98304:mTAAw2kJjk3OdfNHZmmbJdykzAXmQ457HIaaw:mVRyjaOtzbJskkXd45bIO
- TLSH
  T16F063387C71E5B4D4C3B53A01D3661C50B85B326C8E802A29F61FF7ED693C92A2BD5B4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

defense_evasion discovery execution
behavioral1
- Target
  mapka/assets/alpine/alpine.min.js
- Size 45KB
- SHA256 57b37d7cae9a27d965fdae4adcc844245dfdc407e655aee85dcfff3a08036a3f
- MD5 422c7d8cfa8b78375cc7a767d2ae5ca6
- SHA1 7df3f287f769c205f1392de3532517d602cd1810
- SHA512 0a30f697aff3d0fd675001e5fbf9724ba3705766e9da28de966d84aaa8394ee18cf3f49cf5688d12d51f2a6fc073b3a9a578ed8666404c53399e7abb3b210f61
- SSDEEP 768:DBCz6escmy5dIOT2C3KBdoqCHL6POK/5IKXqLWoOAUORrST5GUGz++u3hBpShpJ0:FCueivEqCr6POQDXmWomUtzMBpShpJyn
- TLSH
  T1C023F9E97396B13283EF01B190BB424AF33D2994150E5464F669D8EE383948D51F3FBA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral2
- Target
  mapka/assets/alpine/collapse.min.js
- Size 1KB
- SHA256 c7661d4e2cf0465e3cd693190debb5f592ac72dcc4cfe650581273767558b27b
- MD5 9c8363b44f4f4d55d36379db4a8d3e17
- SHA1 d0a27f2df0ac59f5011e4a8fd71391343c65e772
- SHA512 63fea6219e0920c6801a4b5ca40582c6e08efc2712148806394f9fadea2816a499e7cb45b315b82702954a1429ba2b01367afa7dfce43e465ce50e5113f05f52
- TLSH
  T1893112F1730531B0E3CA6E77D889D65C913A9849634AA15CDF1A6C15080E4AEFD1FBB1
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3
- Target
  mapka/assets/css/style.css
- Size 15KB
- SHA256 7cac48370fe9568a5952ae76b8e83ca829f86856e7f00d5223f78d5ad2201636
- MD5 8e1a2620b328bf02099eff7efd24f762
- SHA1 cd0e46681b48b2e4a61337a0581ab385b43b217a
- SHA512 69f885ea514cc8bb718ec361e21f8f41bb02c130022552d6f4398e9432d0941e32c0e01217b26ef097d7fe7bd4f5ecd0d47e9b617fbb2087404dff9882bf2489
- SSDEEP 192:Xr3Cl9bg+zzLlltvRDkMtbILTzjyzwOlhNqpJvkPbk9Ok06lwB4+Hi1jIn+sKdvE:XryXbLbRobSwiW7Ce3v930
- TLSH
  T170629362F5006159B137911D27D8CABE325DE003D61B2F9E7FDCA028C2CBAFB81B5219
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution ransomware
behavioral4
- Target
  mapka/assets/data/marks_part1.js
- Size 8.9MB
- SHA256 49ea246016a55b3bdb8749734cfa396d3af9a2e0df02b3cf5210d68c6a22a453
- MD5 0c7937db084cde84f6ccc53b506c93b7
- SHA1 ada42977638e3a0e1b956d5a87b303cf4b90a171
- SHA512 b6d8ff3526c59ab2b9838fdbb563ba40c2f956436c41b0cd5d07258391ef4105f6c495c18fc4f9c27fbccef9058e252b69cd0d7272e3d0e94cb5949b7a4bdd7d
- SSDEEP 24576:EYBh7E2Fd2BwuRSaETgkLPlJF1HWT0NrrrjXEtWvPdUKl1rem+WDWLdQzjMeeulN:EE5dt3jVr
- TLSH
  T151962070BDB5460369D2F9BA2F218D437BBC30292389588DFBFFC45541EDC6D168A12A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5
- Target
  mapka/assets/data/marks_part2.js
- Size 8.9MB
- SHA256 2ba05d61f623aba6b69bb0a5c85ff7a6011fc86cab5b0c4be5b9b7899ea5bf99
- MD5 f5db417ddcf0b0dac7202a65453186ce
- SHA1 6a042f9612edd9f991a71a615a4754e7aa6d0612
- SHA512 4a937ee46468bbd53d5d13c2befaaf010cd489aa09c2b11c444698e546baceedc501b9dbc131f1d96d1791fa75d787429684df4a74e0b5ac1805dad9e19e6d04
- SSDEEP 24576:oxVqI/ubmBNqFhwBZUzr52vlUFL/jW6eVhNDdfkvI9JeYYd6zPALewiL5kE9NV8f:WEF1sqylHY
- TLSH
  T123963F70BDB5460369D2F9B62F218D437BBC30292389588DFBFFC45542EDC6D168A12A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral6
- Target
  mapka/assets/data/marks_part3.js
- Size 8.9MB
- SHA256 baa308e6e322b052b26c059463c84ec0682b1318c1a04d26451da0f6e98800fa
- MD5 52e82992e3b062914b9d1625d29486a4
- SHA1 49e028a0127b2bd550a8662246819642b0ea2f0f
- SHA512 c1f2d76dc11bc1bc0a097b1770866951a8730653330431cb4f706c26cacd2e16e6796279ba976ae12498c43b4a5495b209bbf9d5ab1abc6a9d50826ba2b538e6
- SSDEEP 24576:uPOoNZiPOazA1sjJdp1ddzYdSYd2jDXL8gL0R03YuPt8dmOOQ6mpXM1KbD:KOoNG9lzu
- TLSH
  T141962F70BDB5460369D2F9B62F218D437BBC30292389588DFBFFC45542EDC6D168A12A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7
- Target
  mapka/assets/data/marks_upd.vbs
- Size 1.1MB
- SHA256 03025f5cd201892196f9dca30c4b984052ba88b425e4cb99c5142943ab0914e6
- MD5 df6bb49dbb88fc06d6920cade1a6c8d8
- SHA1 fa3d38b3f61fcb1a02968e61f686807abd64d9a6
- SHA512 375843f22e59a9a129accbf1df46df9263a3ed5157903554b23e9b6416511119182c8cb8dbdb83a2bc8c1a6e9d1b963846107eb3c4b3a25b36367d722aba8412
- SSDEEP 48:Xng6oHH96oHHbKTcUPHRAsjRg6zSWz5K9s6wbUnjivoFkHHzT6Ue6O2iWRTjwFXx:Xg9KAcgIRHqFc2IHSydQNMEH
- TLSH
  T1C0354BCACE5FE99DF692CBBBDF8DBB4151D12CF2C974857890B8440D5422A7C46CB820
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral8
- Target
  mapka/assets/js/app.js
- Size 9KB
- SHA256 1f2724a167f839a3f50b792844e74a1b0faa5856344b894260837ca3a1db4916
- MD5 5872c79c8f8425beca197154d2066747
- SHA1 5fb7db2334b352728ae1b56ee788c5b741142929
- SHA512 18bfd5515416427950e4823ce8ede73cf3dfbf8912cea408df4c3da1a53849bbe7255b5bad67a3caa1e961711851495b29b1abbf2cadf859fb5537560b51906a
- SSDEEP 192:w0SjIb5LvWDYQyjhOsNKV1ezkO4goE8zJhvrKfEHEpEbE1qEXEK3EGBErwEGkMdp:hlbEqOsNKHWfWXYEHEpEbE1qEXEK3EGn
- TLSH
  T15922E956A3E7313586A3505C1932CB06B37F510BA188CC497A8C50CEAFD9C665EFFB68
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral9
- Target
  mapka/assets/leaflet/leaflet.min.css
- Size 10KB
- SHA256 b570abbda963c60b4de4b4ff4b26f9326f53fb2ccf1461fdf0955ca094fb2539
- MD5 b8273795a6b677c24ba296c62ab1ea5b
- SHA1 a5aec2249df041c934f3884b9a405702d6a49dd8
- SHA512 87d15ca325a31dc39c984564c4e7d32e7999156207d22661653d47d936ceab9e71b2c4061091c46889be3e0a146996d1bd04cd4e5b8d3847dbd59472e83dc13b
- SSDEEP 192:eyqsKvELv2YgvUb1TxkefcogfMTaqxHK/45CGvd:eMKvwv1ff3gfYcKd
- TLSH
  T1BC222123B37D3368E866851FEAF096743D12A942D063CBB9B6DDB707C385AAD5C53108
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution ransomware
behavioral10
- Target
  mapka/assets/leaflet/leaflet.min.js
- Size 143KB
- SHA256 5c9aecfc30e4564519dbdcddcc53a418227dcc7568e619e9762ddcec7609ed47
- MD5 dc452946ac43c2df5d421678b4d8cfe0
- SHA1 576bf4234cd6f322e93a0e26b82479bf96b569e4
- SHA512 a6e256dc4fea5c3a98a7d21f840239e0124469621f96827b256b3b39e0f98baaee0bd2592f5804453d708edc1716587b0a313b649fbfbdc45946421821bea9e2
- SSDEEP 1536:VdadZpnfroqNf5Zl0vxo3/xYWX1eSg8a/edmjKnsxnbHkg35Ek4Tjiey8tmD:EZpnfrXlIsH0SsjEktD
- TLSH
  T143E3B68EB3D17A2642C36264013F210BB6326595A40A416CB53CD9EFEE7CA49713BF7D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11
- Target
  mapka/assets/markercluster/MarkerCluster.Default.min.css
- Size 1022B
- SHA256 b7df1ae0045ecc7d9b87aaa3ff8347bd2bbd97d60e9cdd315e3f1f4c3f56e3a7
- MD5 2b7de2f82fdea301080c1b52df8f840a
- SHA1 0f378bca753b8ea280be21220bc8798e54080fa0
- SHA512 7d8c99c14d7053441607862eb5dfcfbe1cb9275a16030157ba7d69b7e069b34e1649ee00abab721e54f8f8c1d22610fc2652df80bb82e026c29d7e4a1d28f20a
- TLSH
  T1E91127127A96020ABC07E27FA478CBE971B32944C83147B9755933A67B2758D3832E40
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution ransomware
behavioral12
- Target
  mapka/assets/markercluster/MarkerCluster.min.css
- Size 688B
- SHA256 5ea4d37ba829f27588ed3c9f85b156b03b23db14f70dadd4b48c5fe9f8370e5a
- MD5 cb942eb160be86a0b9bbacf749c905c6
- SHA1 39545c1d0eca462f4affeabeba638229585959b6
- SHA512 10dad35aa75d5eb2c9b104b603ce909af035ecf909d06566d5baa3e5a4e0a5e3007c328ddbe48838ba4a1bc47fe8a9229a78536fe556e6aa941c1febd7369182
- TLSH
  T1C5015A998B402AB1C433CBC893F4BB690A3D41B3793155CE920F1EA9CB136390437DAA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution ransomware
behavioral13
- Target
  mapka/assets/markercluster/leaflet.markercluster.min.js
- Size 33KB
- SHA256 020a517be9a15b99cf2033cd420b561e0f27b1b6ddd49cbb60a057f335327fb4
- MD5 7f83153708dee83f72c4f96c1544d471
- SHA1 f547e682c4d097475f899688adc4e2ff5ed75cc0
- SHA512 4e23166aa8a9162d95aade2e811cec17ca11a06165145baa222df4145c443cdc39f0ebfd98ecba2e00b4e72b1f931c0b134c55799b66afddb0560f6c88015158
- SSDEEP 768:N1Yp2KfalZTEc3L3t1UedkFAmwQ0jwUpI/:z7Kfhg3t1U0kFAQ0jhO
- TLSH
  T1CFE2C4CE32A41A266A82F373083E2D4F677204599584455CF12ED6DF9A1EA0E3377EF4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral14
- Target
  mapka/assets/nouislider/nouislider.min.css
- Size 4KB
- SHA256 9dc9155cfd6331d1f5629881ac0bc63928243fa4c1d83b17ce4921b5200be0ae
- MD5 9c515dc535774a0419afaab68e10afe9
- SHA1 33aad322ddcf94d0ea07b56b18db27a8ef25ffff
- SHA512 aaf78a9c6aef38285b4b301db52b3ca7af5ea0b7a0ca1fb587038c6e6a425622308fbae7e2826376632f58ebb24254ce6604e5640d0dd8f5c0ee203cff64d460
- SSDEEP 48:NSpK7cvHCjzgog6H2o3VG/WOCef9/e6/vdcq+ieHFVvrMklrLo9u9lS:N5cPo3QuEF/e6/lcp/HvvrVw9wc
- TLSH
  T1B591FD3208322F399226811C87E00FF97248C21F83733ADEB714B623BA57D9D159E689
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution ransomware
behavioral15
- Target
  mapka/assets/nouislider/nouislider.min.js
- Size 27KB
- SHA256 79222927cb7695f403144b58e31da6a7082d82e08d310b0cd776264d311abe7d
- MD5 a77f35ed8156d618e1aa9f589c1917b0
- SHA1 a26dd7a72b553860a8855365fc0c4cf4107956e8
- SHA512 83f7de022ce67a254a4b0bdf5b45e4dd91d9aafe59b3c3c45c404accbd79a4cd127af12fa17f1e278c8559ba9a92f463eefb70d50f7b6cbcc4a46d885565f432
- SSDEEP 768:EJlZsIZKPLyw8awtgiBtkekL2eVPZ0tN8btWK4Q0YSmHvSshtsWCGckxpqp+lFgd:2ZKPLiyhtkfCqbeO
- TLSH
  T185C2F884B15538760A633071901FE60EA2333750B94A89B8E675D5D23C78E6C4AFBF7D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral16
- Target
  mapka/index.html
- Size 5KB
- SHA256 430856afba0f358919727e7508394bec76dc5a447445e9fc0e4919e73c541e22
- MD5 a4bd0e05a989649827de0808586892a7
- SHA1 d7948fc55145ba3479c18ed88ea9ff1ab42f5356
- SHA512 76ed7bbd759b892eac3421bc509c080b39054ff62b30cbc275d21d3fdbd462eb52832d4fadf2d6613ea7297dac4267505b687eb44e82c039de1f8ea18e9758ae
- SSDEEP 96:bnrSJEx09mv74fSb17vqMXjq/OvVAAIS+Ig0T3DznOM:beQ00zB3XBaAv+CmM
- TLSH
  T11CC1652195F4492D1566D4DDAAB57A3F2DD4A507D30A8618B3FC0AB04F83D8BEC2B87C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17
- Target
  mapka/instrukcja.txt
- Size 549B
- SHA256 89af579881cfd3f861e731a52a4ce979fe0eec6478002570e77b1d33b2ad1227
- MD5 c8ed088ee124f81b586ff1b705ed5b0a
- SHA1 d20bcb69b4f63a373b71591f633c531366199725
- SHA512 95408a56c62d1c85fa9e1179c6ca86583307d8f06769cb3820b7f950a17bbec1f5f16629b8982e970df3cd86676dc62f9ff627e375a77a43ead0be54c0691928
- TLSH
  T119F02005EAB1C8024E9918DECE12332107DF04842959DB86068A408E4E3C610D2BA689
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution ransomware
behavioral18
- Target
  mapka/start.bat
- Size 314B
- SHA256 4abd4ab61a7f73945dc6a79e2f8656353ba879f44cf2dad0f502510833a4cb0e
- MD5 b426d298176be10ba7f6da4781ffb562
- SHA1 bbf693efe290c637567ff21f0cd3a28f5c7107d8
- SHA512 1f3b81ace6f25084091a79873b4bb62a4382eedadf1cffa8f7387c434f05740367bf35f4633525af778af08defd9ae5351c7fad1d52b499344040adcd70252de
- TLSH
  T153E07D077E78D85408620B27085B77C6368511C3C1114DC0A05BE1F5491BDDF745DE98
- MD5 SHA1 SHA512 TLSH
Score

4^/10

defense_evasion discovery execution
behavioral19

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Visual Basic

T1059.005

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes a VBScript file via the Windows Script Host.

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19