30aea0ab69223f7d7231f5fd4d6189edafc5fd843c1e256892c6f2b80eaefc46

Sharing

Copy URL Twitter E-mail

General

Target
manganescent.zip
Size 372KB
Sample260804-g2c9kssgpc
SHA256 30aea0ab69223f7d7231f5fd4d6189edafc5fd843c1e256892c6f2b80eaefc46
MD5 f84d3fda10f243ff2e6e24cf67a598ed
SHA1 09b3e11254cc68a8f5c43b41afbe4270711d87a2
SHA512 4559fbca9fb8d93fdb47a27c0963d061eaa3c59d455740097f0f2ff762f70ce02b4f7d2dc7c0d3e0aa90cfe103dded91a5782cf513078b9fa96072a770a386a5
SSDEEP 6144:acwLGlmBjICQvHxmFb66Ue+co2ftlPm3z9KEvakniKuvoQmfVSE3UbEeYtzWiMMV:ZgGbC6RmFUeto2/uzStOibEeY0hMV
TLSH
T1008402B99B5D34D4CAA3833021D787D5E3E486325C46EB2D6368017DBE886CDC1E78E6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  manganescent/fonts/adellebasic-bold.svg
- Size 55KB
- SHA256 65e39d8c8b23f5dbc6861a89e45189468998f9f9440fcc7da85d44d4be9e65ac
- MD5 0cb62cf801a0a625613bf11dbb8125a7
- SHA1 9a32226432f1a097250c0a1bb2d408ccabbca874
- SHA512 8b9e1c1196e58a5a7400b67bef35446a673a2c7ead76a3b8c3cde4cb972a12b6d9dec925de4699b21074ea361a2b682bc137d8dcfcbcc2079d55281034751de4
- SSDEEP 1536:eJrPLNssWwUUDPIFImlokC9UzV8C3bFU8:eJPN8GwFfl5CtH8
- TLSH
  T1B6433E75FA8007F8A7DD43948A695EA0433D926E25333EA48939DAF0081F7295F5FEC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral1 behavioral2
- Target
  manganescent/includes/administration/options-functions.php
- Size 8KB
- SHA256 883a139f197d92c4c67d8ae99e31909f447984650ed4ead9b4323a6da5a4486b
- MD5 61f67356339d2a28c9c9033afb1612a9
- SHA1 7889e1e554543da54a8eb651df5ddd7cd290ca1a
- SHA512 79c1ca3ea4495dd5589b7d8cb2cfe5428f61ab39ab74e6bdcf73b84be324d585190ef27f03c696308b9739ab833206dfd232c0d03ba0428068cb69a94b118f70
- SSDEEP 96:LbWkHGSLnDv/ZTfZYfZ25GyjYeEr+QDTcRd0DwI64kIDpkDbTCJAmYnCJAmB8CJW:LbW6GoH5GyjYd+iT8YwISqp29l
- TLSH
  T12A026529978C5673036370FC6D0C949891B8D226D3F14CAF7E1E7E84E2D95244E27CBA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  manganescent/includes/administration/options-ui.php
- Size 2KB
- SHA256 0b5fedcc0e92f066eaa13b41c473da762e99c2a6d7961648355baa9b7b7c099c
- MD5 bf5c3011c9206399038acec1cf36ecc1
- SHA1 5c19cf1843fab5b115048082fc33ea36ae62ea12
- SHA512 0f327abd8d825ea0f28c24fddb1f2e0184d99bb10ebff174a42bd03ebbf0329b4d3b19850d2e220de635a385343a7d602ab06aeaea4657d587797f560cc7590c
- TLSH
  T1225150329B5C4EB3272320E46D289599375FFE76FA1628B7382307CD86924544C0ECEE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  manganescent/includes/administration/posting-functions.php
- Size 1KB
- SHA256 b311037b805951175fcb5ac5d716587a5ae489c4c154e6179e83c156dc7abdb7
- MD5 fe2b19d9ddabafc03b70f6812826b02b
- SHA1 befcdaf2c1b7ffc7ede115c9a30637fff3c4b37a
- SHA512 9c6f3d13a9780c09a638dfc4084e21f90abaae6887cbccf7e0f3a09023d5d3fc5a3efc0d0d4cc53aa3e5bad0ad979bfe449ac58b158f4ddb90dac6e06e75fec9
- TLSH
  T1EB310215B78C55E2835370F96F04006CAA58B6123390893EBF7562F4BFA03BD1C56DAC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  manganescent/includes/administration/posting-ui.php
- Size 182B
- SHA256 755b1915ae1d2b69253b7325859561149c26441b4ee95d1da6d3cc7855844eae
- MD5 c7b33a6f7d6cc143896ccd2ab605ff6e
- SHA1 65eb1f37ab15b2e8d147c872a93c88d3c43ea55e
- SHA512 78ba2e5987cba762980eb627d4ccaac02156ee89a08292ddd8edd44def92cd2229810dc0796d878fbaa49d88e0fa03189e1dfcab8701b4cc7eed216449e4ce06
- TLSH
  T1EAC08031D70D28E3CA36D4844D44513CBE415323F5134D746E59D7DC47405051C49D7D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  manganescent/includes/defaults.php
- Size 3KB
- SHA256 3b4db8375bcd69773a36067cb4c12e23f3a06443544645253f7124c5734aa6f3
- MD5 64deedff71dde7f5c506588779554dcb
- SHA1 dc050fcb615397c9ab98787e0824497440ca8ac9
- SHA512 48b23c1df308fa7a01b3129408cc024a09357477b6e62cb0e4709f7d77df37c4e2afc77206db08b93fba1f20e0fef322393d9a8f80e00b076adc36d2235ec735
- TLSH
  T18781DB1EB008CFA34777B2F11FA55BB040725D80A3C15CA96EB67B4225E84414BBBDEB
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  manganescent/includes/required/template-bot.php
- Size 556B
- SHA256 3dbbea6db5879dccca0321ed3fb5082416ef7dae3d2b635af022483d12d5b6b6
- MD5 03db9f704d65f9c60ef319462ce34722
- SHA1 8804786af61a3370f0cba93108af7e3938d5d94d
- SHA512 e4bc64d588d494958d008712da40686a8f8765a5839e077ac7110cfb0fe701e9da0e17df320a11f9a468d3a6ac0f7cb525dba469d710a674f1e4e1982b2daa27
- TLSH
  T176F0E111CB815EDC49A905B2E88CF6436D1C24555997918C6E8476E5E0A8F76C52F140
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  manganescent/includes/required/template-top.php
- Size 3KB
- SHA256 68f34dc7b21c842bd87c1fea57007c2df40279a3501a2f55fc132983deefe50d
- MD5 e9ea586bcc6b4df51231b63317ec5f7c
- SHA1 b34e6fa230766ca44471c056c5edc0f1c272a5b3
- SHA512 671d421d6cf36f765a5be26d3ddc9a30f3d0fdddf14911c12e117b0febfa973f323305c2c6d895e30287d2df4dcd2f395c50648e379e18f5755de04f1f49adb4
- TLSH
  T190510B19EF8E4DC9064526F5E81747C44D1280D2FCA32A985C465FBAFC78F7E3929036
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  manganescent/js/admin.loading.js
- Size 505B
- SHA256 6c05f70483d6aef4ad9f2e2fcbaa7bf850d4b310e0a4ceeca52d83cf99728c05
- MD5 e0a95f5d32419d0bf74e40055a964918
- SHA1 1a36a1f75c384ee8069dcac8f6675b3ed70435dc
- SHA512 86dd62ea8a15411c1ee845a8731c25941747b8c501a02f54cb3282fc10dddca36cf5a22d89b17b9bb5d755763fb373fac8e418d543a6f3551a465b2aaf0564e0
- TLSH
  T1A2F0503D5A58416F743735C93D351178B22637327E24B606412AE6CCAA0597AAD6011C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  manganescent/js/jquery.cookie.js
- Size 4KB
- SHA256 4f6a9c99d36c51fabdd3e290c6a7fafb8252e6f34627d37d133ee9381a7880e5
- MD5 384772142d1907d7d3aea3ac11fad9d0
- SHA1 014882baf0ac164797a8f1d30a7bdededad3f9e2
- SHA512 5a7fe569f04c7ee191f95dfe47c8969971b8684b942c27d2a7280d6b76f17fb124ffbc24f6af966e97af8e4523f7bda0bacf7c1dc8e35bf8864076696bfc1dce
- SSDEEP 96:L4BZxb64Ng7V8cNwpGylRCsKZcj1JXulL6M/aGByLskP4P4lBCClf1wgCyC:LQnb6eg7DgCsk8fgZJkP4Pa+gCyC
- TLSH
  T1ED91ED293A4D231D149353F57AEE50C8A930D632216AD46C744CB6B06F10C63DDFBBEA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  manganescent/js/jquery.cycle.js
- Size 29KB
- SHA256 e574d233fb3746dd57a608981ca03a15b0785e0716ace4b2c274fad823bb8c90
- MD5 d52e88b65153bc75fc254f01fd78ec7d
- SHA1 748c4dd98a6f67115727940b3d59d5dcfd1207ae
- SHA512 1319b27a12b540cf244e8bcf4634753a3061fd2c00ba80d56ac68fe7403c110a18d2cb427de7d8513a4351d2a1b9d90cdc94f8fb3775d600e2ece037bb45c00e
- SSDEEP 768:kbOnGXQkuJE80m73DJYWgfa7mqgw9lrDp3aP88ihRD69qQl:kbO6QVy80m73yWgfa7mpw9lrd3J8ihZ6
- TLSH
  T11DD2A62C6609FD12CBD936A7243F8E485D70C273FA05C6A9A2B489DE25B085CF117DF9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  manganescent/js/jquery.superfish.js
- Size 3KB
- SHA256 3de8c96e365c06abe0c688cd023dd73a3025c4e9d0e365051289d7018f71d0a3
- MD5 2eccad210bb396325d848f73f97bf1a3
- SHA1 c0cfab3cbd43d932a74513e804cdd8e6fa519d05
- SHA512 b2a9b0f5008f248f970789ae704e615b8d74e202f303ff60ad69a45879e39bd971b2dc017c026ce0614cdd54a841a021f34ef40fd2bab7d9bca759c58f0ecb9a
- TLSH
  T11C7173CCF38F7597AA77227E402F1185AB3E8A72E8884C51BC3658585CE895D0792C6C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  manganescent/js/jquery.supersubs.js
- Size 3KB
- SHA256 d4ef078917b241943753b08eae4dc10af197c0ca3e54641c0f192d7f522e72b5
- MD5 a617c66c43733ce67e5e053b999d1fce
- SHA1 1396c84d0c68c3812abeecd4a09f0c2a47da89aa
- SHA512 2f3fd9b2ed994bbe9bc48d8e946631e7e33da152ee72ae78a95085727348a430c42be78e9c2e9b779ca72330aeff871134b60c2675c22d175ecc6c9853e45b8e
- TLSH
  T103618481B35E7B4E583292A15E0E924EB33FC5FD530B84159D6E893C4CD146A4173FD6
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  manganescent/js/jquery.tabs.js
- Size 10KB
- SHA256 374320d2695962d7c99eb94f5051b23be0e90d1e97a87569c37f6d2a3c67fec4
- MD5 8b2640e15e2c95284b507063faf52de1
- SHA1 485df0a8741ed49d9cd69f31f9c490d98d8f02cb
- SHA512 e215b8ad55d7b32546f59e052bf141455ab76f7bae7a67622d125f3a556d686c0a6412b7b97bf350b9de33c4477be42f1d21ab06d673bb2e58b83e46315b0f60
- SSDEEP 192:+DoeeVlw5aYQUOEXuUqOkeKw2bSGamOLsf1CSJ+2a:8oLlw5aY9HuzDafsfAy+X
- TLSH
  T1F0223CB160D445AEE1BBC2AE1486C31317E3067533AB95B8BFB075C04BBA271D187A1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  manganescent/js/main.loading.js
- Size 2KB
- SHA256 413bae9ea9e0ce57cc93b9599e5a8f3380b2e1412660c96f085d9b14d1d261a8
- MD5 998b3cbe827a8f2de58e053868a4bf1f
- SHA1 327f850c9efebf1fa8cd84b241a4171bc19999ed
- SHA512 bda41c74ae3d0a94af77f39dbd81e6f8ae24830ebd441a5ca80a6896bcee09522e050d1fb9a5f85e23a4f86178c70f8fd6f7766b91d2b58ec9704ee116e3889a
- TLSH
  T19741A9A6FEA710FE417350F2F8F653393293574AFA119858EAE441B80598C25332992D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30