11751aeed24a92efeefade0791dd00f90d2d5049ebffbb512a51d89cba56a33f

Sharing

Copy URL Twitter E-mail

General

Target
sumupmahmoud.zip
Size 274KB
Sample260802-plcbcazsez
SHA256 11751aeed24a92efeefade0791dd00f90d2d5049ebffbb512a51d89cba56a33f
MD5 c04447575e140cea7bda525208dc4584
SHA1 7a71a953829a35b78271bef0bd5ebfca322dc68c
SHA512 9b329bd137dd6f321f43348540138d729c29282d8b9c2a7e9f16a8675b4ec472cb075286c2a4bb765712dbe49962026117a170ec7ec313fa452f38fa211c9d80
SSDEEP 6144:kmZBeB8HGtYlDkihIDYJYrhIgwK3T4DlMICBLTpJM6Dm:kmZHGKSiiDBrHwK3TYlM1LJhq
TLSH
T10B54F118BA7902A0F94BEBFDB9881045FC119FBC61E90AE7694920C94FF75D33B52718
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  sumup/index.php
- Size 8KB
- SHA256 c37f179d1828cedff7e6db6f1b7338b2ad6e9838d3d65f477f29e4c727de4a59
- MD5 33a3798c0bd5c68c1aabdf243ef347fa
- SHA1 ad0f03868e9258c1bfa9f02e7d4cb9f660987652
- SHA512 524aff54ed089e4a04e1a475440fb33a53017d38b9a378e951c05b14bdae3958a69acee22e6ff2a09fde5e003c4a23f8ca3fd15944f6ed527094e611793ed601
- SSDEEP 192:iVfuRJexpgm5brcCjksd7ubfdYvG/3g8kqNWUQE:isRUgGoIxeFY4nNW5E
- TLSH
  T14B1219EB61252B6E91B1BC9FF9027A44771508C7C009D6D6FE8E02D21F8E19CE3B4B19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  sumup/panel/classes/mother.class.php
- Size 2KB
- SHA256 1f19b806c6d43257713a73499922e707926e27c6de5dd9b45053db6ce117e25f
- MD5 aa49c77f701fa57838613414f935848b
- SHA1 ff39cbc9ffe27aea5a7d04b0c540fbdb3086a5db
- SHA512 445174409e2b2d0da14df3a8231a5a981539ac32795af11ce1074e8a0e5cf43cb3c23c045ae9f6535f727bb6e3993b469cddfc87c92c094970ffadb658c059b2
- TLSH
  T19751FF8D794B6EE8EB72255C033BC9029CA1A95BC80D5603BCD847E11F3562C62B5DBE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  sumup/panel/res/jq.js
- Size 87KB
- SHA256 ee11e902416a1d896f538103110337b39a0e2e2606bc1faf5cd0652914891127
- MD5 3e4bb227fb55271bfe9c9d4a09147bd8
- SHA1 156837f75f6600ccb602b4efcbd393636c33f35e
- SHA512 f7810ef9df875a7fdfa7228f7e2f95dd34e18b57f56a46383198ebcc591e32f633b0d73cc6b271fbc669347f7fdc114cce6a6b43681104b25084fe2a1e7bee49
- SSDEEP 1536:ejExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vN:eIh8GgP3hujzwbhd3XvSiDQ47GK/
- TLSH
  T1589309DDB2C6702257A720BA007F510BF236199D6C4D8450F169D8EABC78A4E827BF7D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  sumup/panel/view.php
- Size 5KB
- SHA256 efefd202c2582fa92bc334fae480f6b7c717edb044fae5cc35eb203f77f3e037
- MD5 26e32a31e172f3e8b0d283810d3d2f5a
- SHA1 8efac1020517b7a8f52fd69c2f3ec4cc8ac74fca
- SHA512 4ee370059eab146abe7c86b985eb323083c528678010812ebd8ba15bfae17f48697bbab3dd264cebae2331d6c581309c245da020056e89412f06b1b8b31bc9fc
- SSDEEP 96:stsNgbPg6w3rSDa9c2xQ23ibGRaIWl+M1OnUI7mi1ila:YbP+3rG87n
- TLSH
  T1A9C1A465F4020D2F62F360FC643247E3E5A96507EB034A6072E663D7ABDAF6BC563148
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  sumup/web/email.php
- Size 16KB
- SHA256 b63e065e6d0d6b0a53e6b3c1d24bd702bfa60371400eceb0012915a9b1495e7d
- MD5 30b7a5d3812e06610bd2576a0ec009ae
- SHA1 a410d03ac7eabf11372c352fdce91f479d6de04d
- SHA512 1ec53095505a8e21dd74b93b80e04704d9732e79ff5b301c16083e11ce5dd09357f21861d026093de860110da387c6d60af1f361d3e70bb28c85d3d2e963eaa4
- SSDEEP 384:GicJfqSp+QWgvr4pkP+ZgWnW5XovspvrtdBnaxa:GicJfqSp+QWgv6pWBvrtdBnaxa
- TLSH
  T12772F79392844D2F187341F95B8A5286F7ABE153C3150410FB9C1FA39FA3D81EEA7D68
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  sumup/web/files/img/sa.svg
- Size 1KB
- SHA256 df29e195c7ce5c4f33396e81114eac661a621be7f028453bdf1a312604f45af9
- MD5 f0f71ae00b4ddc23e3bb657f65750c81
- SHA1 955bcfb50ec1a3fb5b4f499838d4059e8be15bd6
- SHA512 3c25ab64c454eb1154c015877cebe54d43c38341003ecd1bc3c16ae1bfc4dad301daab43220a19123200808e7ffa1646109daf951cdd9a44cca66b46a4c56562
- TLSH
  T10521DC98C380C3F0DD4187BC8A3569B4748F10FE94E2D31886B9D4A1A2928C9939EC8A
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  sumup/web/jq.js
- Size 297KB
- SHA256 6f5cbf761c8a9b09ec245c44334197842b78be51cc9485436e891e7b464bc3df
- MD5 e9fb7bec5f9bba0f8740ebf1fff7742a
- SHA1 279565de37d54e801a3060fe569736d7d58cc48a
- SHA512 9f7960a03ffd997eee28e0efd53d0d37761e411691c0378c345030754ea556f551dfa1e1599e4a12381d5c9ffb5240c96b1fb4dbb627ddd80e484603d359f5b4
- SSDEEP 6144:Z+aKxfuLY8mv4okFFmw6FbP6s3JNB/H30KUWrEI/Qp89y8esY1qZ2Oki2epHed0t:EO6FbP/zv0KUWrEI/Y89DzT3HeBbjXVG
- TLSH
  T11D54B4D9734F116F4BA233AAE43A5149FF7DD1B0520551ACB58D897C24A081883BBFBE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  sumup/web/login.php
- Size 11KB
- SHA256 b697ee39a15e29d95fbccc8ac89032dcf6d100ff8951b5dcbc335b44922911f6
- MD5 799d00cfa1c3a76124961d0a237ba577
- SHA1 9fc47fb414129c93d651ab7f823c09fad9e2f6b2
- SHA512 8d04cabbf74de036e9b1470f807b10d36291824608e592d73e85df64a0131f1d9e05bd5023d40255810b520fabe8e15df651970b13fdb86e940fde4c16260443
- SSDEEP 192:HnNawo3pvEmgr4pkPwN+0mPj7LTWcOmWPU0p5N6PaPbGN/bBaQ5Hwxf:q3Rgr4pkPwN+0inWbcqsn+f
- TLSH
  T14B32F9F351504C6E486342FD871662C1331FF0A7E7278A10A7EE6FA76A93D81D81BD28
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  sumup/web/sms.php
- Size 18KB
- SHA256 c38a8a864552910d91cac346841d4279635c1711d25b4a687d1395e46026f9d4
- MD5 5d548ab4af3602a8283e1617db26b6ec
- SHA1 e1db9a4a569b00326617b00bb613c1d51e0ebd2f
- SHA512 12dae4b02e536761b175c4126b0d9a611de9c8e6de1e7af187b1c64220f954eb976eb0b1fd2985f5d25a87c2bd0ef5ee7d8910932b090a068fcb87d69b55bc7e
- SSDEEP 384:Gicm5QnNfqSp+QW8vr4pkP+ZgWnWssVu4jGI8CYxpAoJevw:Gicm5QnNfqSp+QW8v6pWssdYxpAoJevw
- TLSH
  T1FE92F8A361804E2F187381FA574A52C2F76BD193E2550410FB9C1FA35FA3D44EEABE58
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  sumup/web/sms4.php
- Size 19KB
- SHA256 bd77a884d714d24ac660d187f28541c260baac69a42e9eab773ce5c9224898aa
- MD5 22d2cec12c091105bdae17dfb4fb94ba
- SHA1 6367cda6fc258b061e3451d87d295e8358294440
- SHA512 099c10ec30208dbd90d7f82f18bd3bdd18717de056799e274827435aea1524376943f5633fc4d45cf7084e6e8f5b34669f181809138726ccca0b0af0dc225372
- SSDEEP 384:Gicm5QnNfqSp+QW8vr4pkP+ZgWnWssVu4jGI8UYxpAoJevw:Gicm5QnNfqSp+QW8v6pWssnYxpAoJevw
- TLSH
  T17492F893A1804E3F187381FA474A52C2F76BD193E2150400FB9C1FA35FA2D44EEABE58
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20