4e0aa0f9d0f650cb8093586820fd6c453db2893e7aab02a2e533b7340c9e911a

Sharing

Copy URL Twitter E-mail

General

Target
BingWallpaper_1.1.459.0_x86.msix
Size 43.9MB
Sample260804-h4tj1sfb32
SHA256 4e0aa0f9d0f650cb8093586820fd6c453db2893e7aab02a2e533b7340c9e911a
MD5 9917d406e97198cee8810601d002e8cf
SHA1 bb101ab9c386e6ae049d7c6d344307c68a5e4e3d
SHA512 2f489c00b5af78796bf64c9c9dd419a5abcab6e12fa1f86beb6041b1e7de952d23f5ad1ce96fccddc630180f454f937351ca501d3a9b6f2c833a4edc155c038c
SSDEEP 786432:73kwbXPOAW5ZJDxZYimMIG1uHPXHwn9aVSiv1BLnwXPuKkQNsZaYiYn0dz:73kwbXR6ZJDNmMKhhAmlQNYziYnyz
TLSH
T1BDA73375D524A80ACC4F4DB1F44F2BEED5B08F641596CADE31C6E204584EFA00E66FAB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  BingWallpaper_1.1.459.0_x86.msix
- Size 43.9MB
- SHA256 4e0aa0f9d0f650cb8093586820fd6c453db2893e7aab02a2e533b7340c9e911a
- MD5 9917d406e97198cee8810601d002e8cf
- SHA1 bb101ab9c386e6ae049d7c6d344307c68a5e4e3d
- SHA512 2f489c00b5af78796bf64c9c9dd419a5abcab6e12fa1f86beb6041b1e7de952d23f5ad1ce96fccddc630180f454f937351ca501d3a9b6f2c833a4edc155c038c
- SSDEEP 786432:73kwbXPOAW5ZJDxZYimMIG1uHPXHwn9aVSiv1BLnwXPuKkQNsZaYiYn0dz:73kwbXR6ZJDNmMKhhAmlQNYziYnyz
- TLSH
  T1BDA73375D524A80ACC4F4DB1F44F2BEED5B08F641596CADE31C6E204584EFA00E66FAB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Assets/BingStroke.svg
- Size 3KB
- SHA256 212d8abe15b4c538d59d8e509ff447b9618737d3b9604558b37862a50374ba52
- MD5 bb9395bb0d7f32114166cf6995308fd2
- SHA1 647f557ae8094cc74fbbd7e953b3e5dfbe20d051
- SHA512 ca524b9a2de6e11c1e97dac72c6f3aa86c46a22905c9861ea58419221af4ae9e5a232400161ee9969c0e89e0e91d3a20a470e2153a43e3243938771bc46e3946
- TLSH
  T10071A7AED389EC7BE366C7A8C804CC71321951A7EE80D790C164FF4F2E295D21D9D640
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral3 behavioral4
- Target
  Assets/WebWidgets/SingleWidget/assets/index-CyfCDJeO.js
- Size 343KB
- SHA256 1f0098d456c70ea85d4e6772bfde04cd9a93bf449437c10b4e7dce5f626025d5
- MD5 e90594ad8ca83ae17c6c9b8cd4334066
- SHA1 733bf437a00732c577a6f410e76ed63164117b26
- SHA512 06781fc2b51920236478e8b0aafb1f1b4d0039ea90d108efdfc04434ce1e0cc91013d057a1a72f23934148aa07f43c2e5e6b98129b266411715c8d7924dba6ff
- SSDEEP 3072:ErQnzHw0bdDLk1/5dFbF+OJFbsI7dGtdLkJqTfZqdBKsnXQLToif2uGVXyLBBS/f:EmpD+MthLTR/PTo9u0yLBBA/1PUU
- TLSH
  T1AC745CD871EDB9B56A6287E1407F1507723C3837780D88B0E034EE99677848961BBFB9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  Assets/WebWidgets/SingleWidget/index.html
- Size 881B
- SHA256 1f98164547ea16a9b6e83aadfa94ac544cc28cb9b0a93fd4a0a6a7b6182c7d37
- MD5 a2042eda5e3b13e2eda52f25a69cabc3
- SHA1 ed5506319fa876b001b1fbcab0c50fe756a6927b
- SHA512 25e99212493bff267ecdaf87e9d9307f2f57c8cc2a853e1cf50bce64d23fe3e6c3e95a65551c29cc7e898b304a9eb01e2f4e23118bb532a2b2f413b6e008ec1e
- TLSH
  T19D11EF0558D08C6A033163281B85B218EF229643478EAD1534AF1B7B5FB29908D9BCA5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  Assets/Widgets/EmptyFullscreen/index.html
- Size 11KB
- SHA256 c3b2a6ead3ff5c95345e9f7782e4f4deb4ecc753809eaf0f79d5d48b2438e473
- MD5 b21bd7389341c7be0c0d4f6aebe4ef53
- SHA1 b65530715567bdd55f4d487c91daaeeed42f6f1b
- SHA512 7051be28331fd40d40001709256a709fe7370ed91a6637daebb7f3f587582eb5f4d772b6603445364d0ad8176e8ffd16297c66f957905e69bf3f864b5ad69c95
- SSDEEP 96:kpzr6uHyhFPt9nIdG1+LMocz0/YFXFzVw/aqZWPJawMIEgC4C6G0YGL:kpzrO59nIdG4kz0/TvwPAwMeC43Yc
- TLSH
  T1F632A70D21610D5A8533B3984BE6720EFF2192537A12913C3CDE67852FB859293EAFDD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  Assets/Widgets/FullScreenAnimated/index.html
- Size 2KB
- SHA256 793e5fa724dc565a72023e8a08be800215c603c26ebe47947f0495ddb4ff35c9
- MD5 26898f74648a132a774914b83307a7ee
- SHA1 fed34dcbd24cf6b8923f3b306118595950c4d0df
- SHA512 26ed41b13c10bdd4c10a5eb2341a39cf494e38236ee9ec8b4e070fb9f09e68b46bdc98caec9bd91ab9e7d9ced3f63917d71513a29eaee308b1e42a32e46f9fb0
- TLSH
  T10951CB1A59D049410933A7B14BE7E21EFE56B0537B40404DBFEDBA038F3168994A3EEC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  Assets/Widgets/GeshinCard/index.html
- Size 13KB
- SHA256 27ed5aa9970755e1048bb4d94f373bb9a790276e1a1741a55801f754977879ac
- MD5 693535485b7f13ee327cbe652b29935f
- SHA1 b332fc365b29e831be252d3d1c74ad3145685c19
- SHA512 88df500dc255867928ea7ad9beace1e4bf98c6a200e3d9ce727f70457f062b7a77aeaa00ecba8f4c812c1a7c9e0aa73aa53d06e08276d70d857b9a7d1d934a86
- SSDEEP 96:k2Hh1Vaeof+4Xq+UROtt9Uh9nMy/dAmla11WlBTJWlBTJlYj3IF55Fa1XAtgmTrK:k2Hh1Fi1qfOtGcEdTlBQlBPUSRh9C
- TLSH
  T18A52850861510836017323B697A7B689FE159047E70195ACFDBD97411FF28D4ABB3FD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  Assets/Widgets/HoliIcon/index.html
- Size 26KB
- SHA256 bbba50cc90f731616d0d52f9857aeebe465d8e28ba9b106da22f39d40ed3357d
- MD5 dc5560122de6dd2c27aa59ff7d5df2f8
- SHA1 c91db779a66d955becaf1609762020f9756ba2c4
- SHA512 2e32a5f375896f63c7cb2f5cc2b17bfb6a9fdd21c0ef276fc9acda4adbe19646c175c16fb8ee4d8ad834271d7804137d76fe23b2d2c8cf293f455c42ae6689d6
- SSDEEP 384:4x/xXyLZzDyPJo13T74S/XNoQbLi3ZMaxZjb81/MPNe0inaksW:0xCLZv1n9aQbuTb8ckpnaksW
- TLSH
  T183C2D7F992D121D46033E368EF635148FF6A20BBAB4147497A8CE7906FB6045C9C7ED8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  Assets/Widgets/HotspotRect/hotspotcontroller.js
- Size 3KB
- SHA256 4898b5a182c56a22f8e6efe995a53090c1e2af23b0db12f940d7808a4af0f842
- MD5 860d81e4f3e8ce40393dbc0651b5545b
- SHA1 96765d122fe91dd1489225abfc8d7e7e43e1229c
- SHA512 79396fb834a81b24e67f9c72314972ac5c2e890855418282a145ac6b9c5c95afcec54f27297edd93b4ebb8d1006293a8bf839524c35c036d18913ce4ff5d5faf
- TLSH
  T17361BA4811E51325C8F15666BF065844E01D983B270FC6E9B79E86D00FF09BE5FB0AE9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  Assets/Widgets/HotspotRect/index.html
- Size 12KB
- SHA256 ae86438c0ebd6a91b97f2483f0019b22020443cb4f42e77b0980aa53d7af6f3a
- MD5 aad1b75c45b4f4d5da9d002a17ea651f
- SHA1 6f7df636e1910b0975379775d13fccc55c30fd03
- SHA512 549f4d8a25720734c4473925580312dfa00ab7596cca90069f99dce0ac662e3f2b8414f3ba3fab6570999dc3653fc96d1858bb7e5d7ffba8caabcf69758073ad
- SSDEEP 192:kQPnwkSt0rQ5J5d5J5F5D5p5D56PJuD6GZvjO9S2:kiLpRX9B
- TLSH
  T19F52833CB18059B81B72E3617FCA9ACDFA55A3139B425065FAAC26101FB01FD6D52ECC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  Assets/Widgets/LearnMoreIcon/index.html
- Size 36KB
- SHA256 fdfc82a3dfcbb13cb0ca39f10daf59297f06776ba791396e0824982af078c3fe
- MD5 7869f7ad23507bfa64c20cee0a00157b
- SHA1 85a13367dac6985189a497c035d6e8534725ff87
- SHA512 f6613b72ffa1ea6067a37efc84229ad0cc3e7a8aded1bd92566570251b88da74659c108ecc0fe87179abd6e7af941586643c7d55226deb287bd18eae583a441d
- SSDEEP 384:kWn9gcjz1oCRl5NG/eeNXRP367E5z0EWafvEJq2FKQ:Zgml5lC64CEEJ7P
- TLSH
  T191F219E9D2C109E18533A378CF13A546FB1720B7EF40826875BCA7C99FB54D48997E88
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  Assets/Widgets/LearnMoreIconExperiment/index.html
- Size 40KB
- SHA256 47680c70408a4756bbb30ab8223e96a01ae7e4eedc9fe55a06ccb8d6d0da20bc
- MD5 417f17685eb367924720c964d069a0e5
- SHA1 48075848294502343d39bd6c0ddefa1884573e5c
- SHA512 bd874d0ef319877233a58803bebce3ef882b265400062009a96d695c9842cf01eec531d70304fa7de9c21f84aa0d4e09a9039e893e5c82c87e5831e425e79b1b
- SSDEEP 384:k1PxHReDNChl5NG/4exBRn367E5z0EW5MGlmRNBv4KSPiH:v2l5Bq64CEKM8bO
- TLSH
  T1B6030AD8A1C448F5817393E4CF13A045FB1A60B7BF808598717C97865FF18D199ABED8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  Assets/Widgets/Rewards/index.html
- Size 11KB
- SHA256 46910b81eeac943b7af1115fd4db4eb4c4ff9a661111ff30dd6f71838aac6695
- MD5 98a112d37134e2e4f517a4bb5bca4556
- SHA1 2af33fe69d232ee50cf45b229e8feefc16985023
- SHA512 e2b87b50d81e64b051da883b2db01a9bc6a48319c4f14eff273c77f07bb8dfab6862b93f74f707859384934f62482b471c28c2530b5dedb529b9f0932cb3ad16
- SSDEEP 96:k1F7IEf+4Xq+UECOst9ADh9nMynPAVla11WlBT0lYj3IF55Fa1XAt0mTrWsr+rNS:k1F91qfdtGc8PslBCUSVpyg
- TLSH
  T1E34294086150083601B363B697A7A189FE11D143F70195ACFDBDAA411FF2CD99AB3FD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  Assets/Widgets/js/core/BWCommand.js
- Size 839B
- SHA256 85170f39e6eb53c8cfc4bfac63e9a6750f036a078c463c2225857cf614e6d394
- MD5 9cc714b93d096adb51651a4250c5cdcc
- SHA1 48d707c6a8c7f832260445d53477fb868914408d
- SHA512 4ecf6d78db87df0dfb40f70b77ec7842581da6fc3aa70680f8627e25d737e55da2289b39ecd5ec6b940b20e34f8548a272f9cbed9f023b04dc4af7215c3f0572
- TLSH
  T1D401260A42FD6006983362308B132616FA61323B7960415A7BACAF547F71413A2D5FD8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  Assets/Widgets/js/core/utils.js
- Size 27KB
- SHA256 0bd5460531268380e296077a5fa6f00732da9e8c113720d75e275e27ba1069d1
- MD5 5f08cde871afc635f192c071e6e42e10
- SHA1 364e7579ada6434770a773acd3d55533d38123aa
- SHA512 48feee7fa3a7c9f4f67ab35aa03d91eba4dc3e67df4f5b3dc0450f7af1fe66e3f57c2054ce2d8dffe0ae1c03ca3780027ac36e48185a1ff4c1ed048645da71a4
- SSDEEP 384:bES2hRhMGZkAwrnqrTWpSvqDZheDTYXSEDsN1hfst6WyIFEHfSRT9M1hcIP2ePCR:bEdhRxWnqryZ0XKSE10fSRJghcp
- TLSH
  T13DC2F8E562D461D4C077D322CE03A520FA6E34FBBE058BC9726CA7616F70598CA9BDC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  Assets/Widgets/js/windows/BrowserEvents.js
- Size 1KB
- SHA256 d3da9706c66ccb4e6e0f4a52fd3d5496118359b51cbf495caed8824610e4712c
- MD5 05cef6ce80b83b0b12a558a3b5e1d054
- SHA1 e8393af6e00bf9c18cb5342c656229672fa3e533
- SHA512 f81c7924d794e9c633206f5dc14940447fb0933764d694062faf2600442c3198e2ccf0904014ee089bdfe3bb7f5ece0b1fcf8216bed0fb4db2398dd939cdec38
- TLSH
  T15231ED055596313204B7F7932B177319F62EE2B365486282BE2D9F381F31543A3A5FC8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32