28e0eb3aceb17debb8316c15ab5a8f25dfd7dbe1f7d1c803d293e743bb5cb3b7

Sharing

Copy URL Twitter E-mail

General

Target
PainelLauncher.zip
Size 11.3MB
Sample260802-agdahsag82
SHA256 28e0eb3aceb17debb8316c15ab5a8f25dfd7dbe1f7d1c803d293e743bb5cb3b7
MD5 6117884d40ce566b9dade4d3d9168d5a
SHA1 520a5dba218b790f7ef1197a34bf5cbf14042103
SHA512 735ad1018f62b6fbf94f246ce8b05458db5c96afeb77f5abc565ac1c05e7a5317e9cb20448a1f508a343e448046660351b7447d968f2cd203df759fbc9a614dc
SSDEEP 196608:Zg07UWtveMNccuBGzGJMw8Kk7xvJ5d9CI0ivppYQnjMqn6NOSCCGe6NOSCCW257/:zAciG8MP7hLqQxp6RMRd7CKv
TLSH
T180C63301C069E45ADA6E073AF7C12B43FDA1838D2075AD4F569A50D82B97F3A0EEF531
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  ads.php
- Size 14KB
- SHA256 f22a0940b788cb30cc76ebbe0c2dd03b0eba03daddc8d53fb3a3eb304a69ee0b
- MD5 c511570db1ba9a4c4b425f7a706af69a
- SHA1 ddfb830ea703ee5055c596e92cf59037c1bf5f39
- SHA512 90ba85deea44e5488042a5439a2dc74fec9b59519295160b165c6927d05e4c2fe11d1312f6ebc742c48b4cc15203a0091bef42d6fe23c7b63980d6264b2811e3
- SSDEEP 192:MF9uh2TbgYV3TCZ1vsYVsTc/yIonZXli9RNPhabzKC0EJAavA:MF9hTbgYVjCVGQ+Oh1
- TLSH
  T1F662852468D150121533D3696F69AD09FE426217A602C948FEDF23D38FB6880CDB7FD5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  api/check_activation.php
- Size 1KB
- SHA256 ae235b2e30ba5e8509a443aa3c53d9097fb84541696a3e164364f760b391e7c3
- MD5 6b791b45dbba2b9ebd227c6eedc17f6d
- SHA1 f8a59b7bc0ca74cef35f2b165cf9791cb7e541f5
- SHA512 22a2f7890632c69a54d5c42e0ecbfd24fc4696cf3e5d44791badb8759200f5277041ba90cff77f1dd7c7e9c1c673cca2a598f68fc7eca06529ae48df8faea532
- TLSH
  T16D11D0EE14095B60CDF76673AB00C2A0E5670953865157E2FB0E13590F70790C56CDED
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  api/edit_texto.php
- Size 7KB
- SHA256 c0230e598754fa6ef5f628d6583c8c13a9a5f1f888ecf041b61f56d7d6e8b6c6
- MD5 58599a28e70c9d089466d84345601f46
- SHA1 ca666c6b4382a34ced06bb765c5bc16818c73cb0
- SHA512 4d3e3a736e5e3c654ec62a25512f077ad28b54e5995731fe3a0586c61c4ec1e38ace93316868e5dbfb54c66284f5b7da4a2d095f7e7b1fe00f8692cc977f3fad
- SSDEEP 96:yusnQ3Jo0oq/DJvoC4GsEqLuaSvgJLuaSBYwAZ4s4jgHFw11sqaS:yOZyq/DJvTRsmaSYEaSjAZ4s4juFw11x
- TLSH
  T171F1967739F6083118BB15DA3FDAE1087C56A1031A05E984BF8C02E14FD6F46E9B7788
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  api/esporte.php
- Size 1KB
- SHA256 298987069296a14864cfd696b7e683286fcdd9b0ab65b4b6e1c34146dceb5249
- MD5 6d6f860d1d83f973c07c35311ca43f52
- SHA1 d2773ab600e64d8f434bd2a244fe1d480ea03e82
- SHA512 2b4099602d787c79f925c4fd44fd5b9065499090f0025c7d17d9b15d056d3cc77476339c926bcf6d932ac348da6d663705d97f249ca9cefb06aee94ac09a8045
- TLSH
  T1913180F93D129409445750D9C8E0D2284B96F359A0C0DFDEF4A5C63371837F93955669
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  api/get_online_users.php
- Size 716B
- SHA256 ac3f4d722d66c0811852b5182b573e675dd04909695df75c59d706ada18e3086
- MD5 3ea4aaff7a409445341b467b43ec849c
- SHA1 af3d3bc808eb65814608d5123fd7d6fc9806f6d6
- SHA512 5afa98c022d224bad01e1859c7478e8252f3faabf804f70148351c6a6bd95db0564981620de6df950694b64ce86eae15a230d352a7d5e1887d37f1d591e2b6cc
- TLSH
  T16A010CA23026272287F7815412048824F332E31302640E50B93D92A22F30BACF8E3BE8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  api/index.php
- Size 1KB
- SHA256 0ca512e8a96630b8f672914072056cccc3fddf75c502ce27813fa029adfe77a9
- MD5 c318edfd8fe6ce16b08c78ca785016fa
- SHA1 acf12a1bec85b3275484673547cac12580e336b2
- SHA512 8a492ebd8a29deeae7a254ff603b4333b801e5fd4961f7e73696c5a8a223422416db236e055041e68dd586fecf6bd0a93440d9aa016d2f367e87170296423a39
- TLSH
  T18E211E88A4EE3E4701D7683515EE564C5EEC009B202C4D88BF8E039C8F9C8397DDA989
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  api/lista_apps.php
- Size 952B
- SHA256 52679c22acce990b94ad757eb74e1e10b8958877252320509b784da7d68b0668
- MD5 53261c13da53ac3e0c95cef886005ad5
- SHA1 8cd8ebd685c11710c9cc51fa60ff80df3153e454
- SHA512 9ee202ebb3769a5508c29287ae2720edc875f9b466c8d774870557b7c8c38bb6a12ad2322a146b18fdcfc271c3f9d8cb5534188dd315e61f05f7d97a5f18ec07
- TLSH
  T18F111C0321E73AD39AE6B6291B87DCA4A05B143F816C95863C0F2ACD5FC8320CA75719
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  api/log_connection.php
- Size 1KB
- SHA256 1f338778445513e6025181fb267a6cce886aef9a9c6d2c24537910ab41f4dffd
- MD5 ace685ac1a565d418617458938642a3c
- SHA1 887654c9e26a61a04d58f53fbeaf6d647105b3bb
- SHA512 e5d9b26b2f3f192c9aa6b7f540563c37ad0ffd15e2d796033c2e0920480cb2b388f10bb237bebf78228a169caf5198c1b90bebc2e239947376d026b6ceabd1f6
- TLSH
  T17E31202624636F95DAF7E2266FA080E1F35B8183191049A0397EF9D15F30354F6E2ADE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  api/manual_ads.php
- Size 2KB
- SHA256 f3c11252dc78839951caff2775241b02d560d39aff83a8fde9c4943ddf5a3219
- MD5 b69a60b2416976f417b4279daa4ecf7a
- SHA1 9a06e6320def4bea00372f1dbf4d15a93e312eef
- SHA512 d99e5681342eb10d44b5b78618013cb425c0b6be8620b85111acee79acb1a387ba31b5156497bb05d9ab44e14138914d4097b967f0654e10917dadf1f96fa9a0
- TLSH
  T19D514521668518336C73327878FA995936FB7140B635CBA83E8D60D9438D7C86A393E9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  api/movies_script.js
- Size 96KB
- SHA256 fc5499204b9fb3d2d3a2af0dd117c08d9e14a9583fd7afaf7ab875c5608734f1
- MD5 607d9b0b62ff5697e2b40f94a6c56b8d
- SHA1 e1651a128d738e4d964ce3587b4a0d2aa015c35c
- SHA512 1d3855bc4eab89740e35b3d5a4800a71f8a0a7e917ae2421cb62437d13cd637c9634f73e17045ab03f1b139b614ac54d7c2b5d0c9683bd851ea8319b7b006929
- SSDEEP 3072:jh1fw7aXQDzjELM9btKN4e8BTyTUjOS8Un1uD:rwoezjuAbEN4RywjGIw
- TLSH
  T1F6A3BE312E063E1AD3662D6CD5FE14C56DDC83176818D4B1389CE8AAEB62D31A4F6D70
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  api/update_status.php
- Size 3KB
- SHA256 5a00ef9a0c311cf082de769c9f66c5ae3f08d7a13b2121717d593aff1ad870d1
- MD5 177089bf66828143afb8c95f00d690bb
- SHA1 ba4e7ccc98316a5003a8d9919187e97d81417987
- SHA512 45357e4d0c5037e19f3193fa71a5a0a9f4f0155a4322abb5aebfdfe8d414b750e27657e4cd9fc1f9804351cb875044b54a9f2f6eccfd217ac6b7baf51487a845
- TLSH
  T10361E02134652D82C5B712336F209060E3966653760A5FD2BE2F95C25FB43E0FE916FD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  api/webview.php
- Size 4KB
- SHA256 5a67e11c01eebefc035a966f2062dc47a2f19a41d6161503316afb39a414a392
- MD5 ce7f4da85a7e8a690c203e61b33fe1d7
- SHA1 0321f5754ad3aa4f1607b3dd648ef4672a7b768d
- SHA512 399d2767a9c83f96350559954997358b8cb65a36961df3e5294e3af8760b27df01c01a0271eec3afdbaa3d585c349e24344ef549dd03a5826b695fab7982ae8b
- SSDEEP 96:xmRd3WFR54s7lQYjWEtYKo7CQOmy28wkl+X71t9mX:mlG2s7lBWEtY7CQm23U
- TLSH
  T1E49165329881405F6473E2A27BF2478AEA9F805B670141687BFC73D60FB5A55C8D3E9C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  api/webview2.php
- Size 1KB
- SHA256 a1938a4d27096e2318c525914c769947e2a705142f60ae1cb4997d7d083cf652
- MD5 81c5d7f53f3e1268c12f9126e7d4c1e3
- SHA1 48c9a29ad9462e52128b85ef8bbb2a8fd5f13222
- SHA512 b6d4d0f34f5f5b0cb2a4eb821f4eca1602bf7aa6c8f8dcddce7bd29c7c9d6db7b2cd6b79dcc8725c85a9d7416f3c79e119f82c02e2e41f4eb1e62d9e8a6f7bcb
- TLSH
  T15D2142BA3EE710871922A7B143E7F1052A426507A181CD4039DEE3984FDE78AC0E33CD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  api/webview3.php
- Size 1KB
- SHA256 e2dcab2e374c9235002bdf7d447f74f20ce4aac7c8c102487920f34a7a8bc18e
- MD5 eb30665dfed8f8cbb1aa80599abc6800
- SHA1 5084d554aa797d50215ebf9d34e90892a79f9d74
- SHA512 35ebccec0572d3018a42df2840b7c269641ced62f828a05e5c5d51686d6b93edcdaf8f46f484c48450054b7c420ac4b2811af07b62ab72e166dad007990cdf0e
- TLSH
  T10D2135BA3EE710461922A7B153E7F1151E426557A181CD4039DEE3584FCA78EC0E33CD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  assets/images/svg/email-campaign.svg
- Size 51KB
- SHA256 b4a3c893172b9deaabdccd1b672358d5756b3162d518bfc975cb00baf21c74be
- MD5 38e4246c494ecc03967a7a2c49c43da6
- SHA1 c77b27a992f4ce794d280be6308febbff0dba334
- SHA512 b66861f56de91dda17ed3b7d9fcddff4f4cc187bff35c6c646bee639ab712a3cb46f96ce9a503c5b1be71a324162c250082bbc6b81f5bbc077314f823bae35fc
- SSDEEP 768:Mxnj3a2RK4oVKOnO9FqDCMMxjoW0CYWlJduYpwa85s0x:MnqeMMxcXCjq33
- TLSH
  T1F533A3B7133853FEE5C18B08C6A524AA36AAD4C7B2B5C1CCDF639A069C169F7447CC24
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral29 behavioral30
- Target
  assets/js/app.js
- Size 5KB
- SHA256 fc6263c2a74db589a01dd068e53fee4fcca50c85e95f1ac1548d314446ab8b44
- MD5 3056090c589d799a7740bcecc8f50d4e
- SHA1 50db103dc19244ab5e5035be6e6092386fe5956e
- SHA512 6e09e2c0d8d67d53cfab0fe2e5254babe262268302e5087cc984a5184c316b5e7812c6967a5d09e0cf339f1af418cfe52c868e20d12a24964514f3ca8982607f
- SSDEEP 96:2Ty/Myy4FkZs+Wgj8corhiCOo45R+C+0T2:2Nyy44wzQp/vI
- TLSH
  T14DC14C25F410729E88BB337C917ECA596A3E4435890347C8B8EC804F2E59BFBE5C295D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32