2c6966a95a3b96742c042e7ec2d6cd511620689eb3be59aed1699f4a27b8f5a0

Sharing

Copy URL Twitter E-mail

General

Target
paperlesscountdown.zip
Size 3.3MB
Sample260804-petxtaah44
SHA256 2c6966a95a3b96742c042e7ec2d6cd511620689eb3be59aed1699f4a27b8f5a0
MD5 97dae659afecb894fc77f804bd16f6f6
SHA1 88c7d469dfa5a44347556e5e7df70ff6a8d24535
SHA512 17f1abb5bfe80c8410ddc3e829b1f544e936b3197e04e9e54f10a5fbd512d8aeace18032aa299824babbdc34aa5ff7be14e1dcac5baaaadc9d59ee01a36356ad
SSDEEP 98304:ZwSWuF9RQtksdFcaaNGpfRHv9tJjlQDcsJF6urQqtzC:ZWuFzQJeaaURHNjCDFhQ
TLSH
T1F0F5337696327A8FFD46EA3C77898F16BBCA83802DF27172079313DE9DE54654CA0211
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  paperlesscountdown/Image/brand-aol.svg
- Size 860B
- SHA256 0aedbfac81b64afe80d901d42d2195b44bea6729a35a722b854c55349af055ef
- MD5 be06ad6fd654269fb7719877451cb478
- SHA1 7d34a9466c8a3c4f880a8891883781c1e43152ba
- SHA512 855446d9fac488beaa4a8b37788805250ad6064db3c31d4a2df663a7b36989f7710f4a19a6c826839e44335f508693c6fa97541c252b34fbd67d7c3ffb270b77
- TLSH
  T1581152D331302B50A98DA1FE5FBFB51224AF802FC2A03015666E62804FCAE55E42A91C
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral1 behavioral2
- Target
  paperlesscountdown/bootstrap/fonts/fontawesome-webfont.svg
- Size 433KB
- SHA256 ad6157926c1622ba4e1d03d478f1541368524bfc46f51e42fe0d945f7ef323e4
- MD5 912ec66d7572ff821749319396470bde
- SHA1 98a8aa5cf7d62c2eff5f07ede8d844b874ef06ed
- SHA512 4f575d52331de91a2e32cc3408dd0eaf0cf25b7244d34b226314e3647e85ce284f86e3b7238c6c8b9022dc4e2787bf51620849290cdcd5d4c4bc905f289d2156
- SSDEEP 3072:PLac0AVfCwGzG8LY4kh53s0eOnz8WjKAOvX7LYvglcD4ZME8xYWDQqJpFDBl4qjm:hCG7bFv9gSS
- TLSH
  T17594C96CE9910B79CBDD42D5957D0E90132D81EE28783E1846BEA8F05D06B2A0FDFBC5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral3 behavioral4
- Target
  paperlesscountdown/bootstrap/fonts/glyphicons-halflings-regular.svg
- Size 106KB
- SHA256 42f60659d265c1a3c30f9fa42abcbb56bd4a53af4d83d316d6dd7a36903c43e5
- MD5 89889688147bd7575d6327160d64e760
- SHA1 de51a8494180a6db074af2dee2383f0a363c5b08
- SHA512 c2e77eab327af1469097c31bc0daf820c066b0222059d8ff0ecebca974b62b7535e96f1f356643b2b62763a924d040e4ac9b2097e1de2c22226411fde8723743
- SSDEEP 3072:jY+spjSP0yD4zOPqGGUG0kSnouoxvKDHkPooe4Pqo0CjmFIudsqi/CWEI:kRjSP3D4wlG0kSnouoxvKQPooe4Pqo08
- TLSH
  T130B30F1CE9940B709BDDC3A25B75AE54231C418D72303CD04AB9E5E0B99BF694F8E9CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  paperlesscountdown/bootstrap/js/bootstrap.bundle.js
- Size 223KB
- SHA256 06ed8a1990ade6b474914d22e71f2b431e655045b16b96aeae674318fa4ce646
- MD5 4d5e7e6ccbe7360bc74ee4930ac25477
- SHA1 7cfa62b4df5d4910475dbd5e237dace197e5f282
- SHA512 8aa85692f2ce5d50f3f8bafffd9af210a36f679a6681d2847b9f1687f5707d31b04e4bb430a6ee2e18c9d7350026ef2249b3aa7cb717aebc49eb5fb6ed31e2d9
- SSDEEP 3072:DeOiz6JsHhcZMJ6XsqoBGa5fHWb0YAguWEtI3+s:DE6JsBUMJ6XvoBGa5fy0YAgwtIt
- TLSH
  T1B524730A3DEA34A3456BF02E87EF5149F635505B5209D9107C8CE7982FE4E3452AEBF8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  paperlesscountdown/bootstrap/js/bootstrap.bundle.js.map
- Size 399KB
- SHA256 4d769aa49a4aa7aa0c71c2c15f3aec6c5a0e5bb1c5b537b6d3527d0c9c960131
- MD5 4d6538c06c82b86375f9f4d09455752b
- SHA1 bc221e5ad61cae5dde479f04029ec03c73189570
- SHA512 8014bbcb087c22f94879695ade882bb59426adf9ff904a1776c7123fc643ea8dbc51b3924bf0047998232e03fa47cabd83fb4b7c47018b07999e15be7fcd14b7
- SSDEEP 6144:hM5axoMN6tHYVqoV7qrmWY+atE+AQE6pQGV4m+8nlhnXgS7oi4:yLRyQ5
- TLSH
  T197942F132C6BD8337157D6BB298A4297FE20709D6E859600788EE244F3C2F39B5EE574
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  paperlesscountdown/bootstrap/js/bootstrap.bundle.min.js
- Size 79KB
- SHA256 5edf297381b409d711bc8d27676951a59e151e783412850332519c05243d1e24
- MD5 7fd2f04e75bd7ab1a79d80cdd4c33085
- SHA1 e02a14457b25e6df2568b772feab4387c00a4934
- SHA512 3b2e41aee25d13780ff7e2cc275d640b99c4ae4877a7863419ac13d49adc7b3e114c3c4e0dfdccfca3f7a44b2078e63159e8eacb648f9e3f9032982dbe10dc89
- SSDEEP 768:WVDnVrD5m8HVHZIEzSV7BTxx4mu0spQ1+jmzpvACS+eAuQnQ3O1+dCDWi6OzlTd3:WVbVXIVCHKzpyAWMkG1sn8B0upp
- TLSH
  T1E583D54A7254B47206DFA176807F460FB2376899A50B802CB869D8ED2E7CD893177F7C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  paperlesscountdown/bootstrap/js/bootstrap.js
- Size 133KB
- SHA256 8bf26ae9373c49b3cc06b9efabfb0e4df1fcd615b97a655ae0ecd93ea85cc2d2
- MD5 6386470cd2491cbacf90825b3a65991c
- SHA1 e70b61e27abce309a4be39bd3d3d4a4e0c4e2271
- SHA512 56d99d3853723a78915081f391f2f81807becae021a16cc9216616ffd7a571dfbbccdbb5d8e2ac7161487bd3d143a541cb8763af0195ccae8c2c3de84e92e945
- SSDEEP 1536:W/Mhzcl7vqOiT+1W8khJyJK/8u2IEZPO+w:weOisWEtI3+w
- TLSH
  T175D3410A3DFA2863556BF43E8BEF4045F634508B5509DA147C5CAAC81FE493453AEBF8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  paperlesscountdown/bootstrap/js/bootstrap.js.map
- Size 247KB
- SHA256 e5222ae4398ce5734d329814d414b2b4c88de62e1edda2aca10c5f166ac602da
- MD5 04bdc87493634ee9422b440d9333ef0d
- SHA1 1fcbe82ee10af3965a79c7c34c8dcb3cff172be8
- SHA512 a96e3a3605ce13fed10a60aafcd17e68467fcbaf4f22ad62f683b01a6cf62a355d68a2889752c64425f18250c4d637ea7026f7c3e19c7325fa51a5a08d0d2ae3
- SSDEEP 3072:3wZPEV8ywvsZdJ0FiY+AQE6pQGj4m+3sZZlhnGtAgS7Nui4:W+at5+AQE6pQGj4m+8nlhnXgS7oi4
- TLSH
  T1C34473123D6B9833625BD9FB289A0187FE2470CE29418554B88DD588F7C2F39B1ED778
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  paperlesscountdown/bootstrap/js/bootstrap.min.js
- Size 58KB
- SHA256 38544024da1a0fc2f706be6582557b5722d17f48ad9a8073594a0cf928e2e3ff
- MD5 6bea60c34c5db6797150610dacdc6bce
- SHA1 544afefd148715da7dd52d368a414703390ca0e0
- SHA512 2394e4bad0290e39d6b97fac98b20f64d870f8b85377c5ab4217422acc421514af845c76926f197c4a4d22117d9ead389ac1e13a413c04c3818f9404d3bca130
- SSDEEP 768:WLlcnSRAIvHVAYIE8Pg76Tjx4vbh3p6viDl0TS6SXH6G7e6Pxh35CCmVla4:WLl4SE0MJS36GPxhAV1
- TLSH
  T1C743A54A7254787206DF747A817B060BB3366C99A40A816CB8699CED2F7CD493277F3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  paperlesscountdown/bootstrap/js/bootstrap.min.js.map
- Size 186KB
- SHA256 b22c1744ac99c334f0baa4a9906cd69620b97a29577d7c321ac3558cdc5f4fb9
- MD5 159c3a0fc6e3d5e1c3749d523a408bbd
- SHA1 8b8f4e98b9d6d44f8da5d0b00bd638b544002703
- SHA512 5b507738e8094d44be0d713c2efeaf29a223f16dfe9ce4c4b4ded65fd3f2c9eca6af1e28d13c2d2016973d026c04d034830d01d745b3523f210ea4190d8d6065
- SSDEEP 1536:YR5ylFK+kRJMTGGkwZHSZAIOOVdjGaYTjeB8yJNIsqZ+Ip6/CEVZXMt3e20wSwa3:mvQEWIljwZPEV8ywvsZdJb
- TLSH
  T1BB1481023EBBE436475BD6EB4D6A80C5FA35318966029128785C18CC17D6B70F2FDB7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  paperlesscountdown/js/customjs.js
- Size 758B
- SHA256 60a47a997ae7db875f6ad922f4d2a335af4ee785baf85aca5aa6f736e4bef226
- MD5 ed4ce6dc49cc48d083b1ad6dd7975927
- SHA1 f196da413e4312c2e169e749310159aeaf84b830
- SHA512 605e2f71ad981d2fa064752e0a188f4efbb4025afcb55a6792b6e2bfd9a649a321f3296cfb1332324c9a03e21bc935e886d6327672a62d5b1285a1c9308bbaf3
- TLSH
  T1AE01F408382A138D497B72650D975350D83920030250AA4DBAAE74C16F334CCE361E6C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  paperlesscountdown/js/dataTables/dataTables.bootstrap.js
- Size 9KB
- SHA256 1ba2569612e7a6203ec0b1e077468eb3dbc72230bb1e074100c4f3404f9786d5
- MD5 d6a84d7977a34972716e3d61e63d0928
- SHA1 59ee45f0f661501713b324a290515087619f34e8
- SHA512 d76cb40b92208712b4a6d92e97c7b2d3b936984345ae14774a156fa46cb13ca3eca9e492acf969a412c6fb0e3648b11090b97ad888322c238817caf207dfa8ad
- SSDEEP 96:Y4UqaoDiBX7kE7Xqm4KcuyHz7KLxCPeixqDB0PcX+dwIUYNozJgB6xnHyUh5Mb6U:Yxqasqfqm4KAo5Spxw1Yoi6xnHyawn
- TLSH
  T140123246A96125A647B3F33EDB3E4701E73190678200E6193EACA28E1FB4D505394FBE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  paperlesscountdown/js/dataTables/jquery.dataTables.js
- Size 413KB
- SHA256 11780306b1ae75f0f8338e6710f99a328b4cb9300bc7f73a1bac836dfc1653d1
- MD5 65cc28256b5e81d346875a83357b29e3
- SHA1 ef9c92a327bb19de40133bc6706c23ee1bfe65bd
- SHA512 889b594ca2c11e160a1a0f64a03f7e130752cfbc6d7c15b9722c2c6ff421356efe87d8960ec388314367e79cc63634e3076bfd9c0bc9b1d0fb35ad20292db929
- SSDEEP 6144:HSedHgQGY4tyw1aNgq1FuDtnIJGlrxlHcs+mwyu:yelGYCxq1FcllHYF
- TLSH
  T1D99474C7F34CA22A2A5372B0B27DA294D63CD03412612CB87C9DD9697B50C7693F9ED4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  paperlesscountdown/js/jquery-3.3.1.js
- Size 265KB
- SHA256 d8aa24ecc6cecb1a60515bc093f1c9da38a0392612d9ab8ae0f7f36e6eee1fad
- MD5 6a07da9fae934baf3f749e876bbfdd96
- SHA1 46a436eba01c79acdb225757ed80bf54bad6416b
- SHA512 e525248b09a6fb4022244682892e67bbf64a3e875eb889db43b0a24ab4a75077b5d5d26943ca382750d4febc3883193f3be581a4660065b6fc7b5ec20c4a044b
- SSDEEP 6144:+tah6/K+TCtlMhTze/RZcYmDizK8dB7alFys/WL/umH4N0IPfKu5AA11vrIY:9pZcYmDcHwFygmY1PfjAA1Br3
- TLSH
  T1F844A4D8FB8D112E423231AA9C2F12CDB77DD171560458AEBD4D597C24A083D82FAF7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  paperlesscountdown/js/jquery-3.3.1.min.js
- Size 84KB
- SHA256 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
- MD5 a09e13ee94d51c524b7e2a728c7d4039
- SHA1 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae
- SHA512 f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a
- SSDEEP 1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69
- TLSH
  T1748319DD72C6B06247AB71BA00BF550BF2361999684D4410F129E4EABC74B4E823BF7D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  paperlesscountdown/js/npm.js
- Size 484B
- SHA256 c7aa82a1aa7d45224a38d926d2adaff7fe4aef5bcdafa2a47bdac057f4422c2d
- MD5 ccb7f3909e30b1eb8f65a24393c6e12b
- SHA1 e2b7590d6ec1fdac66b01fdf66ae0879f53b1262
- SHA512 81bc329ad688d411fcf3decb28454238ec478c192b6ac19a3ee07e9939556cf15df91fc7e689802927bdef0362483fbf1659a7c92f877bdc625a56983967cf2c
- TLSH
  T1A4F074E49FF9AC543B5209AB105E1B677326E985A358D875D02E08FB59D89CC0B85CB0
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32