General

  • Target
    mikos-cms-do-wrzucenia.zip
  • Size 5.6MB
  • Sample260803-rfjvca1gmc
  • SHA256 e46e92df81b2e5aee0cc99bbffd49d65cc2f9a8ebc1ad34197523f2e39880033
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      www\.venv\Lib\site-packages\PyPDF2\__init__.py
    • Size 1KB
    • SHA256 2fc68fe93cfd29f95e9292f2d0888ee8e7e92b563abeccc0afd8d18f6678728d
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      www\.venv\Lib\site-packages\PyPDF2\__pycache__\__init__.cpython-314.pyc
    • Size 1KB
    • SHA256 e91a3e469a0a0b589701210b50c6bba6f7a7c8557d91df4c73d8af4aaaf2f78f
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      www\.venv\Lib\site-packages\PyPDF2\__pycache__\_cmap.cpython-314.pyc
    • Size 18KB
    • SHA256 36ce5edb4e3f1adb5e3c0ce3c9c1e3be8a0b090df43c2a590ca340d3107fd32d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      www\.venv\Lib\site-packages\PyPDF2\__pycache__\_encryption.cpython-314.pyc
    • Size 54KB
    • SHA256 ec60c485ae0d1709274391add6ece00ae2a5ca0b23eb2df4406b219def4120d3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      www\.venv\Lib\site-packages\PyPDF2\__pycache__\_merger.cpython-314.pyc
    • Size 35KB
    • SHA256 f10e9e4765103da40b75b22ec135b1979500c8904932b328574661f46acbafe8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      www\.venv\Lib\site-packages\PyPDF2\__pycache__\_page.cpython-314.pyc
    • Size 98KB
    • SHA256 ee16ab6adbe2e62ffc0c2dde1edb86b938bc78b6b48111c826df1e7cda3cb613
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      www\.venv\Lib\site-packages\PyPDF2\__pycache__\_protocols.cpython-314.pyc
    • Size 5KB
    • SHA256 7388b2fd2f53104f0324428c6c15bd0c46ba157d5c3d8e7e0e51e24e72d6beeb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      www\.venv\Lib\site-packages\PyPDF2\__pycache__\_reader.cpython-314.pyc
    • Size 95KB
    • SHA256 76dbba32ab95e92165bd9060a912a0bcb9c43c0143acf6cd7dde9d2a6d73b177
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      www\.venv\Lib\site-packages\PyPDF2\__pycache__\_security.cpython-314.pyc
    • Size 7KB
    • SHA256 240fc125cc159c957b7ef731f9ba40b9074be9a96c79d72b5d4719a8aa82246b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      www\.venv\Lib\site-packages\PyPDF2\__pycache__\_utils.cpython-314.pyc
    • Size 23KB
    • SHA256 7597bf3330bbe03dc0727344a552a83d999f37158fdc5e13c2d7738023c779fb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      www\.venv\Lib\site-packages\PyPDF2\__pycache__\_version.cpython-314.pyc
    • Size 180B
    • SHA256 40bc4f0715640d731d4c63046efc65758210df3d6a72d56ea557a4202f268dbd
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      www\.venv\Lib\site-packages\PyPDF2\__pycache__\_writer.cpython-314.pyc
    • Size 127KB
    • SHA256 762e54a79fae2f0f22aca20128e5a0998cf9635c2cbf39bb870c41835c6365b2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Target
      www\.venv\Lib\site-packages\PyPDF2\__pycache__\constants.cpython-314.pyc
    • Size 15KB
    • SHA256 3f2a7b7e475b09f00757c25a1df9257cca06947a43c05960c93c99a11d5b340f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      www\.venv\Lib\site-packages\PyPDF2\__pycache__\errors.cpython-314.pyc
    • Size 2KB
    • SHA256 e78e96fb1b487455736b2980ffa80ef7c13a3e6b6049d0cf2c3633568d273dcf
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      www\.venv\Lib\site-packages\PyPDF2\__pycache__\filters.cpython-314.pyc
    • Size 29KB
    • SHA256 f6f4af2300ca346a6c55788a6c0bf92415c5d56c1d71e7184095b54199b8aa20
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      www\.venv\Lib\site-packages\PyPDF2\__pycache__\pagerange.cpython-314.pyc
    • Size 9KB
    • SHA256 098563adf432ba80cff2b84b171254e73c9ecd0f14ceb11023a47d01fab6af17
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks

static1

pdfevasionlink
Score
6/10

behavioral1

execution
Score
3/10

behavioral2

execution
Score
3/10

behavioral3

execution
Score
3/10

behavioral4

execution
Score
3/10

behavioral5

execution
Score
3/10

behavioral6

execution
Score
3/10

behavioral7

execution
Score
3/10

behavioral8

execution
Score
3/10

behavioral9

execution
Score
3/10

behavioral10

execution
Score
3/10

behavioral11

execution
Score
3/10

behavioral12

execution
Score
3/10

behavioral13

execution
Score
3/10

behavioral14

execution
Score
3/10

behavioral15

execution
Score
3/10

behavioral16

execution
Score
3/10

behavioral17

execution
Score
3/10

behavioral18

execution
Score
3/10

behavioral19

execution
Score
3/10

behavioral20

execution
Score
3/10

behavioral21

execution
Score
3/10

behavioral22

execution
Score
3/10

behavioral23

adwarediscoveryspyware
Score
3/10

behavioral24

adwarediscoveryspyware
Score
3/10

behavioral25

execution
Score
3/10

behavioral26

execution
Score
3/10

behavioral27

execution
Score
3/10

behavioral28

execution
Score
3/10

behavioral29

execution
Score
3/10

behavioral30

execution
Score
3/10

behavioral31

execution
Score
3/10

behavioral32

execution
Score
3/10