General

  • Target
    Amz_Area16.zip
  • Size 10.5MB
  • Sample260802-gzh22svsby
  • SHA256 43911166263f3b9b690d141a0419f7549fa7b8fa7f3f52c8465a69c597ef4a95
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      arahmataAngin/application/controllers/index.php
    • Size 547B
    • SHA256 e10e88587c22b2a1a7c826f88544c4344dd93fc65c9897bc24fa4e1b8fb79d15
    • MD5 SHA1 SHA512 TLSH
    Score
    6/10
    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Target
      arahmataAngin/application/index.php
    • Size 547B
    • SHA256 e10e88587c22b2a1a7c826f88544c4344dd93fc65c9897bc24fa4e1b8fb79d15
    • MD5 SHA1 SHA512 TLSH
    Score
    6/10
    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Target
      arahmataAngin/application/views/activity/index.php
    • Size 547B
    • SHA256 e10e88587c22b2a1a7c826f88544c4344dd93fc65c9897bc24fa4e1b8fb79d15
    • MD5 SHA1 SHA512 TLSH
    Score
    6/10
    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Target
      arahmataAngin/application/views/bank/index.php
    • Size 4KB
    • SHA256 49ed42cabd93ef753c626e6b3e4af89960b33061e87218009ccf3d3fed2bfd21
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      arahmataAngin/application/views/billing/card.php
    • Size 8KB
    • SHA256 940aa24600c003dd7fa0b36286e01e7e25ef726f5c3305a09178a1c702b3cd0a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      arahmataAngin/application/views/billing/index.php
    • Size 4KB
    • SHA256 0115de5035e9fa33657b4a9eba9dbecbede89a55c2be1a4f936d1b8b51bd7ca3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      arahmataAngin/application/views/billing/sq.php
    • Size 4KB
    • SHA256 03a0bf335da264918eca6bbf1768c9d5255f8d6aa53653b3e0ea47ac19dd460b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      arahmataAngin/application/views/done/index.php
    • Size 1KB
    • SHA256 fe7d6c007d42cebd6e43cb0d3fc1f74c3bd332a15e5126fd9050480dc46a2583
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      arahmataAngin/application/views/email/comcast/favicon-apple-icon-72x72.png
    • Size 1KB
    • SHA256 714152d962c78d48c9dfb4e727c4bb57b2e655da81f67d082a0ca69b60fc7c3a
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      arahmataAngin/application/views/email/comcast/index.php
    • Size 9KB
    • SHA256 52c2caa2a664c878851c2a08bc4c048fbe697b41736f212365b32d3b5584332f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      arahmataAngin/application/views/email/email/index.error.php
    • Size 3KB
    • SHA256 678d238d11ddcba8cb4d5d539bf9ba086af396b04c1cc665f21a476f866de56e
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      arahmataAngin/application/views/email/email/index.php
    • Size 3KB
    • SHA256 513be3e8215765f438d8087ec6bc3cbcf32eb40ad167585eaf23ea6f56dcd52c
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      arahmataAngin/application/views/email/gmail/jquery-3.5.1.min.js
    • Size 87KB
    • SHA256 f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      arahmataAngin/application/views/email/gmail/jquery.js
    • Size 85KB
    • SHA256 bd6e8593ef34f3b762959d6deaeffe46c5a029ab0a10647df9e637b41fb72cd9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      arahmataAngin/application/views/email/gmail/jquery.mask.min.js
    • Size 5KB
    • SHA256 e0ef803f8bb9cbe07f2407212c2422f87d48dbd08addb5bb994c5f485b2dcc6a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      arahmataAngin/application/views/email/gmail/jquery.masked.js
    • Size 5KB
    • SHA256 af6e84540aa3f1291ef65d21944aeebba501237234237c3a29df6535e6f6c177
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks

static1

svgjavascript
Score
5/10

behavioral1

discovery
Score
6/10

behavioral2

discovery
Score
6/10

behavioral3

discovery
Score
6/10

behavioral4

discovery
Score
6/10

behavioral5

discovery
Score
6/10

behavioral6

discovery
Score
6/10

behavioral7

execution
Score
3/10

behavioral8

execution
Score
3/10

behavioral9

execution
Score
3/10

behavioral10

execution
Score
3/10

behavioral11

execution
Score
3/10

behavioral12

execution
Score
3/10

behavioral13

execution
Score
3/10

behavioral14

execution
Score
3/10

behavioral15

execution
Score
3/10

behavioral16

execution
Score
3/10

behavioral17

discovery
Score
3/10

behavioral18

discovery
Score
3/10

behavioral19

execution
Score
3/10

behavioral20

execution
Score
3/10

behavioral21

execution
Score
3/10

behavioral22

execution
Score
3/10

behavioral23

execution
Score
3/10

behavioral24

execution
Score
3/10

behavioral25

execution
Score
3/10

behavioral26

execution
Score
3/10

behavioral27

execution
Score
3/10

behavioral28

execution
Score
3/10

behavioral29

execution
Score
3/10

behavioral30

execution
Score
3/10

behavioral31

execution
Score
3/10

behavioral32

execution
Score
3/10