ec748686f54d8c3ef4e556447834250906e2a633fc069de3ff0b3415860aeee3

Sharing

Copy URL Twitter E-mail

General

Target
ph.zip
Size 26.5MB
Sample260804-g3b3xashjg
SHA256 ec748686f54d8c3ef4e556447834250906e2a633fc069de3ff0b3415860aeee3
MD5 5a30a921cdd861d6d5a90fd650b7be5f
SHA1 314ec4405058e3a71fe16e82a198b00c26dc9e6d
SHA512 e997fd163c3ed48a1e119885d141af22eca0255dad6369fc6ac8218a142ff3137ad21c71f3db79ff12cf5ff06abb6d44d2b3e14f8ab5d51f172c19369e240eaf
SSDEEP 786432:IPkFCQ27Bbb2x9UR+m8zclSaarbhkvHCQbcIa:x4Qe32wgmNwaEmvxIIa
TLSH
T1045733FDC180BB96DC5335B3256E928ADE459089D809CE2D82D4D1087CB4DB87AF1EF6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  ph/001d1ce71778204e1524eedd8a7f5d68/assets/images/8d93ec36-4b9c-4cce-82d9-d86b2562cb57.svg
- Size 1KB
- SHA256 61ec7ebb552d725252fec9680aea937a68163036e7bce73a8f25d9a8323dbed6
- MD5 c9ce3c6979448273c5e208194a7bcc70
- SHA1 6aec1e2c0e2fd7019e631d36fab4adb619d43c33
- SHA512 26e6bf50c3a72c4e6aedbbcfb0059dfeda3cb381992355f81068250792becf266c80a57d46fbdbed755802c0bbd8973f4b1871e3f788f92ab5cbdfff66cb817b
- TLSH
  T15321319453DEF2F5E44DF1D4D23A5311BA7770D3AB40CDB6C0A2BD6626CA05D09905E4
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral1 behavioral2
- Target
  ph/001d1ce71778204e1524eedd8a7f5d68/assets/img/7f1p9jgsmxjlpcttd76.svg
- Size 5KB
- SHA256 4fd0d4d07af63a22cce12abeefd12e05c6cf272833c25cf1f3668cdaf529a8c6
- MD5 867c0edd0b9110c42402af75d228c6fe
- SHA1 66ebb1049bbc6a13c6d6ecf40da378112439b773
- SHA512 3444620753285b864efe3ff0550b949fc26bd13eaf0a480558f9f34a8629d7b59fdc883212dab16968772273b4b55e586141c873bc96eb2af652aa924de82b11
- SSDEEP 96:4GKiBTFXSL7z/IOPCO1DeYwBg+d3QXQcYgV0T29H3kLG7MYWuIGB93wf:smVSfz/11Dey+d3ypvVogH3kLQDHwf
- TLSH
  T1CCB100DA176042CDB0AE9D6DDF2F9CA8524E78BA75F5418247BF5789968F844EB80C00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral3 behavioral4
- Target
  ph/001d1ce71778204e1524eedd8a7f5d68/assets/img/VEDOS-Hosting-logo.svg
- Size 11KB
- SHA256 1ad6c8abc47609fb9fc9794f3557de4e0b13ba28e94bbf260478ae420fc0195d
- MD5 506640165a47202cd8265a1899deea5e
- SHA1 faecd4e1f2febdf618c69848f8d20ab6be8ad646
- SHA512 1d942883e3fea190dd5273450ec648d50f8370cbfc3168caa600396fd3a637a8934876234e7ba0155edce2c7cbd78a69345c5d3c3bc4c30fd43cc9cbfc31b3f6
- SSDEEP 192:m/36XgMp29pEL/M+0Rn2RhktPt9TamPabeUt2ymCd0a+iHH6UVf14RR1cFe9d:Q36hcvx9RgYt5aLYfAjoncFw
- TLSH
  T1FA32E7D517B79ADC6180429EF20031552E7548337BB0C6DCFB5E9D6A739A8C319B0EA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  ph/001d1ce71778204e1524eedd8a7f5d68/assets/img/logo-no.svg
- Size 6KB
- SHA256 708ff3540ac249d750152700357c358610dc3e49359ed5a0db709da6c330faea
- MD5 a5b0d4ca3ba210f80f7647dc7bf26546
- SHA1 04be37b49f1de6ada93e43e140d0e7f3563ff708
- SHA512 aec32015791562a1b38430ccb890aff7055e60874733b650b1c3008d465163f460e6621a582e7f7618910cbcc35d150b12edbdb64a206d092d475d268353c553
- SSDEEP 192:XQ4rkYuIk89gudm81guNnz0yoaMjzFQogG29:XbrkYuF89tm81VnF5Mjzkj
- TLSH
  T1E7D1E71B1315D7EAFEAC142CAD29288DB690D887D4B4F0C0AB6B5417D48C4E8F65DBEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral7 behavioral8
- Target
  ph/001d1ce71778204e1524eedd8a7f5d68/assets/img/logo-sg.svg
- Size 6KB
- SHA256 22958ab1845b66bc756f3629e4b778a300fbae35b85b24cfbdf3bc76814e2a8c
- MD5 aecea06379a796705342d90f525131fc
- SHA1 256d29c536efd6a0aaf198674f4e0ee129def7f4
- SHA512 e2e711599a09d20a9ee1a76703b64eb4d2c174a5245c9cadfef74e09c793976db213e6fad587446727fd877635fc5969673f238c345c93c10725777917a17edc
- SSDEEP 96:mD4oCadk+OlzutSIFmWhupZRYnECH7uu9Sq/GUoWME7s2WhkRUvn9T8I4GAgkI:mUoqlzuvY7vCn7uQOTEEWRUv9dJAgl
- TLSH
  T11AE183F66724C1E8A9C51B78CBD46E8B27FC54CDB47286C4672726022D17AFB706C862
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral10 behavioral9
- Target
  ph/001d1ce71778204e1524eedd8a7f5d68/assets/img/planethoster-logo-en.svg
- Size 21KB
- SHA256 3f0eb98e46720605d78e5e51984e45ca9c11e07b3207e6931a3ce9ef622f65e5
- MD5 ff0c2c892f8fbde6a6f4973b6e799f8d
- SHA1 957a10d10c070cdc172ed66ab61b804ad3ef39de
- SHA512 f90faa9273e39977e2f652728a512a297b902f4c3830acc1b6a289b6b3deded8905173b4475a804254283061a864067dc01afc96f7c8e9eefacf99030929a675
- SSDEEP 384:AOZ0fX/CRa2WAdnT2Y06A2rDwDI1IRDhcfM4QU5y:ZZ8vC82WAbA2r8DFDhcfxQN
- TLSH
  T1B4A251BF13309BD9DA94E7881F95EBCE237C95C5B4F241C08B4319866C169BBB278D50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  ph/001d1ce71778204e1524eedd8a7f5d68/assets/js/validation.js
- Size 6KB
- SHA256 1a56eda699245745c4b76a6bc01656e7158494c235509853c72444e126a6ac0a
- MD5 f9b63cdf678b25d7f8f592f085d75ec2
- SHA1 e222dda83ccd69033b9007b8f84868bf8be6dc32
- SHA512 116d3ad0c22608f4288692988dff9ddc4a489e22e12dcd152960fdb42fd174c416b03efc84cd1cacb360088d7ff0342799a143db14907ef1225452ff5aa053eb
- SSDEEP 96:61wvbJ7hk05IbO4iLLF5PvpGKMwLESRonoGtai4Y101oE33BVL1R0/g:tbJenTiLzpgSRonoG4PiEnbyg
- TLSH
  T106E1000C7A4216675EF75B3C2BB79961EF1A012380028358B4BE57412F729906B76FFE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  ph/001d1ce71778204e1524eedd8a7f5d68/inc/auth.php
- Size 9KB
- SHA256 00c9c6a83477831c4c96fa63631f1f0f808dc55e3a48fc7c9e957edc1e4ab6b6
- MD5 6d30fc9a90484425fe260ccf3a876102
- SHA1 c78f200a5213f827760f2fd5eb75b4aebd6213ce
- SHA512 520afe79319f38c67eaa64b35d9ee143e2b32ca5438d00089339fd27c232433214724b134d9aee5b7b1708f27fb6e0fb3276ebc5cf268837d48645e8f2137490
- SSDEEP 192:2wNV56ioitiUAvZuBmbZdHqCoWXctLUAb1V2dm:2amioiqvZOmbZdHqCoWXcTsQ
- TLSH
  T1FA228547B4FA593200A340B8B2B36E1B3E72891F910E9E117D4D76D09FC6E59DC5BAC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  ph/001d1ce71778204e1524eedd8a7f5d68/inc/payer.php
- Size 354KB
- SHA256 5685134f768a4c4d27f235890bdd09354671cf047cbc562ac93eefdfbb289e99
- MD5 643261fa1d6d77aa3788ba80268c1479
- SHA1 cf18a51b3804c8fc1119ec0fb34947fb0125afbd
- SHA512 7ca01c1239d94c2461af2f0c8f529c0991e7e2b8adc99efad56e71c3e91db50af9af0e12dd20a3c69186bf233cccf7ccf7a5e71cece922cd1162e5132ed6c0d3
- SSDEEP 1536:IQMGKaK4RK8HkTEwDcTN63q4Fmx1HroHVARlGzlsZBZRsQ8yd:/MGKaKH3nhAoML
- TLSH
  T11E74A409F6E3517329136D6E23EB9E457760A403C005FF787E9D93918F89AFA2448B6C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  ph/001d1ce71778204e1524eedd8a7f5d68/inc/ver.php
- Size 314KB
- SHA256 a75eefe96aedb13d38b2de7003b216f18bb80f2cc7b128136c704c13a398fdd2
- MD5 733fa310bf6c3627d12632522c57d445
- SHA1 ddb39b174593c3e781567e7589be511533a6ee59
- SHA512 2277c4c20382ca7398e9519db4469ae946df1101f81ead0f6177dfb3c2c97e2a9540f635d19eb664acec71f30dfa6a1e1c1071ca7ab1d37688f6537270a979ff
- SSDEEP 1536:50MGK8K4RK8HkTEwDcTN63q4Fmx1HroHVARlGzcsZMyf:OMGK8KH3nhAoJ
- TLSH
  T12E646209F6E351732D136D2E23AB9E44B760A403D405FF787E9D93818F896FA2458B6C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  ph/3nz0/assets/images/8d93ec36-4b9c-4cce-82d9-d86b2562cb57.svg
- Size 1KB
- SHA256 61ec7ebb552d725252fec9680aea937a68163036e7bce73a8f25d9a8323dbed6
- MD5 c9ce3c6979448273c5e208194a7bcc70
- SHA1 6aec1e2c0e2fd7019e631d36fab4adb619d43c33
- SHA512 26e6bf50c3a72c4e6aedbbcfb0059dfeda3cb381992355f81068250792becf266c80a57d46fbdbed755802c0bbd8973f4b1871e3f788f92ab5cbdfff66cb817b
- TLSH
  T15321319453DEF2F5E44DF1D4D23A5311BA7770D3AB40CDB6C0A2BD6626CA05D09905E4
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral21 behavioral22
- Target
  ph/3nz0/assets/img/7f1p9jgsmxjlpcttd76.svg
- Size 5KB
- SHA256 4fd0d4d07af63a22cce12abeefd12e05c6cf272833c25cf1f3668cdaf529a8c6
- MD5 867c0edd0b9110c42402af75d228c6fe
- SHA1 66ebb1049bbc6a13c6d6ecf40da378112439b773
- SHA512 3444620753285b864efe3ff0550b949fc26bd13eaf0a480558f9f34a8629d7b59fdc883212dab16968772273b4b55e586141c873bc96eb2af652aa924de82b11
- SSDEEP 96:4GKiBTFXSL7z/IOPCO1DeYwBg+d3QXQcYgV0T29H3kLG7MYWuIGB93wf:smVSfz/11Dey+d3ypvVogH3kLQDHwf
- TLSH
  T1CCB100DA176042CDB0AE9D6DDF2F9CA8524E78BA75F5418247BF5789968F844EB80C00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral23 behavioral24
- Target
  ph/3nz0/assets/img/VEDOS-Hosting-logo.svg
- Size 11KB
- SHA256 1ad6c8abc47609fb9fc9794f3557de4e0b13ba28e94bbf260478ae420fc0195d
- MD5 506640165a47202cd8265a1899deea5e
- SHA1 faecd4e1f2febdf618c69848f8d20ab6be8ad646
- SHA512 1d942883e3fea190dd5273450ec648d50f8370cbfc3168caa600396fd3a637a8934876234e7ba0155edce2c7cbd78a69345c5d3c3bc4c30fd43cc9cbfc31b3f6
- SSDEEP 192:m/36XgMp29pEL/M+0Rn2RhktPt9TamPabeUt2ymCd0a+iHH6UVf14RR1cFe9d:Q36hcvx9RgYt5aLYfAjoncFw
- TLSH
  T1FA32E7D517B79ADC6180429EF20031552E7548337BB0C6DCFB5E9D6A739A8C319B0EA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral25 behavioral26
- Target
  ph/3nz0/assets/img/logo-no.svg
- Size 6KB
- SHA256 708ff3540ac249d750152700357c358610dc3e49359ed5a0db709da6c330faea
- MD5 a5b0d4ca3ba210f80f7647dc7bf26546
- SHA1 04be37b49f1de6ada93e43e140d0e7f3563ff708
- SHA512 aec32015791562a1b38430ccb890aff7055e60874733b650b1c3008d465163f460e6621a582e7f7618910cbcc35d150b12edbdb64a206d092d475d268353c553
- SSDEEP 192:XQ4rkYuIk89gudm81guNnz0yoaMjzFQogG29:XbrkYuF89tm81VnF5Mjzkj
- TLSH
  T1E7D1E71B1315D7EAFEAC142CAD29288DB690D887D4B4F0C0AB6B5417D48C4E8F65DBEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral27 behavioral28
- Target
  ph/3nz0/assets/img/logo-sg.svg
- Size 6KB
- SHA256 22958ab1845b66bc756f3629e4b778a300fbae35b85b24cfbdf3bc76814e2a8c
- MD5 aecea06379a796705342d90f525131fc
- SHA1 256d29c536efd6a0aaf198674f4e0ee129def7f4
- SHA512 e2e711599a09d20a9ee1a76703b64eb4d2c174a5245c9cadfef74e09c793976db213e6fad587446727fd877635fc5969673f238c345c93c10725777917a17edc
- SSDEEP 96:mD4oCadk+OlzutSIFmWhupZRYnECH7uu9Sq/GUoWME7s2WhkRUvn9T8I4GAgkI:mUoqlzuvY7vCn7uQOTEEWRUv9dJAgl
- TLSH
  T11AE183F66724C1E8A9C51B78CBD46E8B27FC54CDB47286C4672726022D17AFB706C862
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral29 behavioral30
- Target
  ph/3nz0/assets/img/planethoster-logo-en.svg
- Size 21KB
- SHA256 3f0eb98e46720605d78e5e51984e45ca9c11e07b3207e6931a3ce9ef622f65e5
- MD5 ff0c2c892f8fbde6a6f4973b6e799f8d
- SHA1 957a10d10c070cdc172ed66ab61b804ad3ef39de
- SHA512 f90faa9273e39977e2f652728a512a297b902f4c3830acc1b6a289b6b3deded8905173b4475a804254283061a864067dc01afc96f7c8e9eefacf99030929a675
- SSDEEP 384:AOZ0fX/CRa2WAdnT2Y06A2rDwDI1IRDhcfM4QU5y:ZZ8vC82WAbA2r8DFDhcfxQN
- TLSH
  T1B4A251BF13309BD9DA94E7881F95EBCE237C95C5B4F241C08B4319866C169BBB278D50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32