cc72510d60382a9baaf8178f6a762500a8666a111d868d243564e879609ed7a1

Sharing

Copy URL Twitter E-mail

General

Target
cbtmalela_l8.rar
Size 19.8MB
Sample260731-zzhema1epb
SHA256 cc72510d60382a9baaf8178f6a762500a8666a111d868d243564e879609ed7a1
MD5 29e3e1593e520b900ee9763a1a196fa2
SHA1 67b09f7f69d5895366f474a2d05b563b247e4b5e
SHA512 46a8a23e8d467605c8f604e91263caec1513dbd37fef43f01b5a16c4f7a1e336b31805631853749b85faf549f5b8e214fff280de25372e85915f1862c354e9bd
SSDEEP 393216:K70Ai9MWut5yZ8r3TtHdjbNnAvVOo1KteKJjDbxTCv+NiexoKA:E0AqjEc8tHdjbNG1oe6bpB2X
TLSH
T1EA2712AF1E9CB3D1FF13AA60DB218B20582973C93813F051B19E5DA291D58481F6B77B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  cbtmalela_l8/app/Http/Controllers/AdminController.php
- Size 33KB
- SHA256 d609047bf9e56a7d1fb6edc14755603845acc6297a60dab8671f4d40a3f45169
- MD5 2e9520b6b9b3856480b6c34bf2cc8f2b
- SHA1 6c3bbf3247545343d0a406cd2afc30d7aff4ef2f
- SHA512 eb5b1bc1dbce65d5f8743801f07cec0624a9a2d2c520c59787b4bcd982191b47646dbaf67f11aa99f1c53b12bb97afb6a206e676fddcc5cc65c6066382568521
- SSDEEP 384:eDPqSSpWB8PUvNdB6Ju5qkpeCRCGqy/vJu5qkpeCjBC4PDNtww8YXJu5q0Sqf/H1:eNJtNR9sCRCog9sCjI7T6qHIOeP8cU9
- TLSH
  T1FDF265662D4AD301D832E1768EA6C818EE62621372E08137FF7C517A1FF18799CD5E78
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  cbtmalela_l8/app/Http/Controllers/UjianSiswaController.php
- Size 10KB
- SHA256 9743df717e289252b0464b84c5b7e4f9113b078da73b36f2ab6e10d58168ce33
- MD5 e348a3f654decbbcdb7cc0b5ad18d73d
- SHA1 96369d3a4205c07b24003cfe42768aade64bb687
- SHA512 938fbbfc63d66b29cc1aaaf4df9f635a577a7a6b358e444343ea3f984d0ee94fe2e16d3694212b4b693d9cda2d6b3ed00a2f69405321e11576e252a92ff6520e
- SSDEEP 192:09vL6z606/qT6B7va5p9F7xPVmG6XHLgG6V4xr5f4VitSi8:yDAZ0qTKojRpVmGaLgGnT4T
- TLSH
  T10432021B3B9FC1315133A07D4E96D010A473F00B76F47958BE5C1378AF79A3AAEA4968
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  cbtmalela_l8/app/Providers/RouteServiceProvider.php
- Size 1KB
- SHA256 d530a0167ba25b065eb9f322e7472cdef6d9b7a1169d19c1ca9bd4229b04f8b3
- MD5 3c29d30e519d9395534fddfd779d7e88
- SHA1 d2e2a71eb30746af0d546c1f77d3f4455e143304
- SHA512 7676f577a45b5c745b9a2a887773ac1803efd0386aad662916baf6e2dcd979089a0929febde1d11202420ee10585d9e628a32f079b255551129aea3fd6389bb5
- TLSH
  T1FF21E16D61D54B718D2726BCBB0FD580E422E70B241A1D053AEDC3741FC5EBC8C17099
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  cbtmalela_l8/artisan
- Size 1KB
- SHA256 4459ef6c40673495532d04eae68ecb3fecfb8768f7a013f7119e4016d1bdfa8e
- MD5 b46a90df551d4b1c280332a1c8921b4e
- SHA1 91ba45e356e545b0e3d3db180e5f2b195e042abb
- SHA512 6088b2dac773bd71b418651e36e723d9111c39f6b68371f7afb117fbda698e58ef16da813ee5f3511d31e5bd926050c0c9804602a0c6abc05b8c4c6bee11fe02
- TLSH
  T1CD31F0CB3E8543E09DD3F6951B0E66A2D76EA93E3DC0A1215094140CA3D128CD26F5E1
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral10 behavioral7 behavioral8 behavioral9
- Target
  cbtmalela_l8/public/assets/auth/images/bg1.svg
- Size 128KB
- SHA256 b17e6564b203436d219a27469ad8139a1e13dab1585cbf575347043eb568ef7f
- MD5 b277bac21d522f4154f67544d977a13a
- SHA1 e3f65f33917ca5befbcdd723e08e3a13ad12dd92
- SHA512 c4de9a64880201a8dcaa2074038d13defd9c2a2839f9cb6df40c4b829094ebd73b6bb2bb34203bc865c2135148e874f965f9c614aca8834ad9756cd27649b6a3
- SSDEEP 1536:UER62lTT+YVP4o+a7k0vE/YCgfrpa+Ly5uHoqZUx9Fh5CdKvChYSrmJg:r62lNV9UgTpeuHSCWG
- TLSH
  T12AD3347783149BBA8180C788CBA67066317591D5F2FD91CC9F639A97AC069F384BCCE4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  cbtmalela_l8/public/assets/auth/images/bg2.svg
- Size 26KB
- SHA256 8cdfbcd5d0108192b53124b3a5a06f43b7b56aece0b9b2e8e1948c90d2c10481
- MD5 6cbf4c51a98cfc4b8ebba9940bc1ed43
- SHA1 9b3fadf638ea6eaad98cd6097432cefee0e124b9
- SHA512 0b5819858f110d85364ecf6531dd40c6d15b7ed29c9447fa4bb023ec96f64ae56ac8162409a18e9ec635a9c16fdec67a1caf20cd255fdd15a3f750ddfa9b42b2
- SSDEEP 384:Lc0hy3LKOZwHLghWFJYXSxGF1/SvQYJ2PQDa9TgINGLnDM0fBWObO5azK:FEhEkLF1/NdCfBjbKR
- TLSH
  T160C23F73D31457BB92804B48C7A634A63274D196B379A1CC8FA39A97BC05AF344BCDD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral13 behavioral14
- Target
  cbtmalela_l8/public/assets/auth/images/index.html
- Size 131B
- SHA256 0ee6dff170c38f66cc1e9ef00cfb927bba75b30379af3281c026647c068a4709
- MD5 c92aa5f16d78423a983a5d7ae44428e4
- SHA1 ddabaf1127fe57f9c65e2cc83cd3443f4efe5caf
- SHA512 e6da7a7c4f00aa43d6683d254b31b19b63be2c5110de15aa27e2865499dc7cbac356055f6bab38ebed326e90b2157f295eb231b89e1a1da8d3990278b5133df3
- TLSH
  T1DEC02B4B310D1044036363801AC43760314303C040C309C40F87D113880051EC4C704C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  cbtmalela_l8/public/assets/auth/index.html
- Size 131B
- SHA256 0ee6dff170c38f66cc1e9ef00cfb927bba75b30379af3281c026647c068a4709
- MD5 c92aa5f16d78423a983a5d7ae44428e4
- SHA1 ddabaf1127fe57f9c65e2cc83cd3443f4efe5caf
- SHA512 e6da7a7c4f00aa43d6683d254b31b19b63be2c5110de15aa27e2865499dc7cbac356055f6bab38ebed326e90b2157f295eb231b89e1a1da8d3990278b5133df3
- TLSH
  T1DEC02B4B310D1044036363801AC43760314303C040C309C40F87D113880051EC4C704C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  cbtmalela_l8/public/assets/auth/index.js
- Size 419B
- SHA256 fa4bbc585ad901dcc8c2d0105fd69e0e88743dde8f203955f21dd1b1fe532dd3
- MD5 87ec893d8e238ad0b99428c61e61b49f
- SHA1 5e6381b392697ceab7e878329f2268de8cbfb4fb
- SHA512 41a065fe7587044620bb95f076509c3c6032bb1ebbb298564b24d22d85f75954743b130ca80794d91ce627077e4ecec037c3abe0359e60cad3ba89c202353bf7
- TLSH
  T16CE023B73A640432D1BF4DDF239641743B65C16761C39461386DC15141BECC4A16E5F4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  cbtmalela_l8/public/assets/cbt-malela/assets/css/index.html
- Size 131B
- SHA256 0ee6dff170c38f66cc1e9ef00cfb927bba75b30379af3281c026647c068a4709
- MD5 c92aa5f16d78423a983a5d7ae44428e4
- SHA1 ddabaf1127fe57f9c65e2cc83cd3443f4efe5caf
- SHA512 e6da7a7c4f00aa43d6683d254b31b19b63be2c5110de15aa27e2865499dc7cbac356055f6bab38ebed326e90b2157f295eb231b89e1a1da8d3990278b5133df3
- TLSH
  T1DEC02B4B310D1044036363801AC43760314303C040C309C40F87D113880051EC4C704C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  cbtmalela_l8/public/assets/cbt-malela/assets/img/faq.svg
- Size 5KB
- SHA256 546b6c6cc25309d56a28ac7db96e40eb714d5f0a34325339b18f9ad385479240
- MD5 3e7df747c1a2594f460c79e1ad675dd5
- SHA1 bf5a3e020a7a33260ab9f36cafba3566d37c4f72
- SHA512 2e20c520cabf98baf7b206ac3ea088f5561819808a7fe057e038eea72e0f184d21719504568a3b6305cb21b78a3695a3c52e489e242283848712e34721fd1aa0
- SSDEEP 96:+0pY1IwIxWWK/AdCA1VrPCZIbOrd/E247P40y79gWB:peW6BmfbCWOy80yGWB
- TLSH
  T12EC183FA231E67FAD5A28B10CAD56647336A68CB70B6F3DCDB6752865C114F70078A30
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral23 behavioral24
- Target
  cbtmalela_l8/public/assets/cbt-malela/assets/img/index.html
- Size 131B
- SHA256 0ee6dff170c38f66cc1e9ef00cfb927bba75b30379af3281c026647c068a4709
- MD5 c92aa5f16d78423a983a5d7ae44428e4
- SHA1 ddabaf1127fe57f9c65e2cc83cd3443f4efe5caf
- SHA512 e6da7a7c4f00aa43d6683d254b31b19b63be2c5110de15aa27e2865499dc7cbac356055f6bab38ebed326e90b2157f295eb231b89e1a1da8d3990278b5133df3
- TLSH
  T1DEC02B4B310D1044036363801AC43760314303C040C309C40F87D113880051EC4C704C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  cbtmalela_l8/public/assets/cbt-malela/assets/img/logo.svg
- Size 1KB
- SHA256 1c03bb43805d2716db0a1d986048c091c7eee69a5675d240812d6a00ccf747d6
- MD5 97bb2f6ef934e01d6f62576dfdb8c61f
- SHA1 f71da3e9d9afe708069577e6bcd3c13fae71a680
- SHA512 b5d4562152ff1f461856ad8551e9b10d0eb61c8e3a024bec2f5256d39ecfe87ca1e1466a05242b0ab68284603808dc1362e392d87daad82bfbea5aa20c9dba83
- TLSH
  T1C81130A4828FDC7FDE01862CC2B402C22E3160A3961299B8C4FF346BEF4CC95038034E
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral27 behavioral28
- Target
  cbtmalela_l8/public/assets/cbt-malela/assets/img/logo2.svg
- Size 1KB
- SHA256 7fc1ceca83067233069366868188f0255e1c381cfb41579f216aaaf2f1990c23
- MD5 64d9a97aa114e83945876886bda7f6d2
- SHA1 808e264d2bc7390e876f16f2d31f055b90a20f3d
- SHA512 70685213221c9f3239beeb2342c9cfe97ebdbeaa5006ee0c6d4f9691c411f8b9bb5623720816405045eea9ded21ef79163d33c06c76f2b0e8452f3c3518f4452
- TLSH
  T1CC1100A4838BCC7FDD11862CC2B411C22E3020A7D61299B888FB306BEF4CC95429039E
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral29 behavioral30
- Target
  cbtmalela_l8/public/assets/cbt-malela/assets/img/mindset.svg
- Size 10KB
- SHA256 4ea9ef5174e0a3b8310af3232f48bdd81d099fcac42777908f22e72872c6b4dc
- MD5 4b9fd3d470cad31bab576b2a16f5b5b4
- SHA1 5ac0665a66ee60684375787b817965d66bc044b2
- SHA512 4620d54b747d7fa88dde6faf1b770a6750db003a128ab0aa0e311e2e4ca978c0c128bdc1bebad2299d82e1c53bd1c22764c0ba1c1f12cbff396e5001594fba43
- SSDEEP 192:JU+5+dWeQbjb8jG2V1BipX+v6Uv9StSTvhpG3s58Cxm0o58cDm0o58bS:t5+dWeQbjb8jG2V1Bi1+v6w9S4TvhpG6
- TLSH
  T1FB3262B977382109D9501B1DC7D89CEE702EA1C6AA6252DCFB8017075C396EF5BAC30C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32