bd904f823320ee76862d552a99e74e5d061077c37773e49b4f52ade2001b18fa

Sharing

Copy URL Twitter E-mail

General

Target
dataimages.zip
Size 21.6MB
Sample260804-pfkerswvcw
SHA256 bd904f823320ee76862d552a99e74e5d061077c37773e49b4f52ade2001b18fa
MD5 60880157b8db5fd6c89c648fca478b4f
SHA1 7fe4b7375c4cbd6c51feb23c2c3270860c2397a6
SHA512 dc15a6ee5e93f5b6df9d63ac72d59ae38593e9131c724b29f5542b030668aa019b9419d47fe0718e3a4a524cb7f11d58f3c6247bee6553f097c0370d0433f59a
SSDEEP 393216:QSdVRrRifskxcUnn1ygDAY+50ZCPhVctjjs9OPuWMz3XcJdR0bjo0/Tcy125sRri:QSdTCskquQg0Y74VctHs9OP83Xcl0X9I
TLSH
T1F13733B1A18C2013E80C4E3F695B585560D263AF7595E1CDB72CAA119FBE81BF47C2CE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  elementos/analytics.js
- Size 34KB
- SHA256 de91edb147ba03e94ac2a7c1a0181225b63a6c0cf0c5b4d142df51b6c48d53e9
- MD5 24e0b05fcc984d5de75bd24d82a71ea6
- SHA1 77e43908863a3e826cf4aaa7d91cfc292afb2fc2
- SHA512 492b383681fcbd24a45b91dfe12818ac22b12cf209de80dcdf389cc614d98310da1e89cba1632bac7bcb8e3e52e813aa835d39a686de587d51619e7cfb621907
- SSDEEP 768:/tKs5aTU1JiCH88SdcgnzGmRAUKVcLCzzcd4FlZt6GlsKZe:FKjosdjnz1AUKVQGZQGlsF
- TLSH
  T11EF20AF9B6827459D39270E4403F100790BE9DC5F448D4D8B68AD6D47D78EAB02BBF68
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  elementos/bootstrap.min.js
- Size 34KB
- SHA256 f971b901aeb9e55b07d472afee09bd5ae05159e1119dbd16d993e473565e7fc0
- MD5 2616d3564578d8f845813483352802a9
- SHA1 5ada7c103fc1deabc925cc1fdbbb6e451c21fc70
- SHA512 e3d8bc8fd58b0ac1d9fc444f21f2dad94defde536af2aadb6ace768ae0bca9f9c9274161b076fc546ced174f23cc7495a8c5049ab00be19c75f6310e91ab1edc
- SSDEEP 768:91+7/uRE672wlNrDMlbGqXYu+jS1s8ep0s1QfrXf8X8GvpZOWQ:DFRx7zYyS1WOv8fpZDQ
- TLSH
  T18CF28546B230316107EFB1E5515F020E72396A6DE90690BC78A5DAF63DB9C48317BF39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  elementos/fonts/flexslider-icon.svg
- Size 2KB
- SHA256 5d2b29884d32f6a2b081915401d41846e2e9a16d639c270df5e5266d869a7aa9
- MD5 10e8a5455c4522c48aa975eacd4f0023
- SHA1 40c9145494cec020ed6157b7b2cd90997e95f539
- SHA512 13821cf3280140c669aa8fd663148ca456f4ff6266471a4f6bf43cb635de29678793bfe97117d1f84d5a18ea869eb13928976591c076329620ea5e83a5bfa0ed
- TLSH
  T12B4136EDD2B642F16BD3D600E3B83F1856A441DD49B079D88CB0A2F88936B7A131C5EC
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  elementos/fonts/webfonts/geo-medium/svg/1110FC_0.svg
- Size 72KB
- SHA256 9d8c05fe43fb2532473d429bb8f2364193678dc0761c17fa1ef35ce42ce407f9
- MD5 9627a318fd47c4653a893a950eb12cf1
- SHA1 424c0d1a3733a6db3c6ee169700683c7f7099216
- SHA512 dada1c7cafb60fa6ed1186efac8fbf48b0ea4ad3c9888a22447ae6dd3347ff422bc4e4d76d43d26dd7a86302694853de7f328b9cfd8921a432f311f9b890579b
- SSDEEP 1536:mhzQ0LlABkxLHww6tq9d98G6Fo+3823bEk2JdbQIc:PK+IPc
- TLSH
  T10173A6BCD80ED6D64973D7C4CF59F0F8803EC3B7251D38A9999A96740E29B19EA039C4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral7 behavioral8
- Target
  elementos/fonts/webfonts/geo-medium/svg/svg_test.html
- Size 2KB
- SHA256 a317e971eea2a009af77f3fcdfdf52439de05dcb57161d83ef3717556a97354b
- MD5 c614c3293e44f3ede3ce5c2488c92225
- SHA1 d26827fcc1163240ed7c9b21470d9a49a211d58b
- SHA512 c3f29ed13415a6712af9e1c2767b320331dfc1617293e21749edd8c2ce479ef720e82ebbacad8aa2e31397f727f0bfcd79071fa0f7f3819616dc7b1b9510c429
- TLSH
  T1B451093B29C60700CB8312F8718B5996CFDAC510B285AB99ACF7D90F64C945CC2BAF10
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  elementos/fonts/webfonts/geo-regular/svg/11014B_0.svg
- Size 71KB
- SHA256 0bda1e07e5f1c8fe3e854c08ac55aa3207445cc583ad800cfdb0a8d1adad5656
- MD5 111e84fdc695a99d5c03239c691c25f1
- SHA1 ac26a3d57a91958eae7d5db829e585b665b17990
- SHA512 78365e49b074d9625af7387984a52460cabccfcd2b505f4e11901db5767544d3b81a531086e01a39fa2b7eeb9c59ee16e5b0b9b21530049e1ea088737aeb4bef
- SSDEEP 768:BfpkC6/xgNdcFdS3h8MPUxeXAvBi+bBMDJIu2342o9cj1Q7gmZnYhosaNSveLc10:hpMWn5pp+mDJN23D7jmRYSov8j3
- TLSH
  T1747396B8E849DAC50C77C7C0DF5AF0F8403E82F7652E2899999BD7710969B18EB079C4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  elementos/fonts/webfonts/geo-regular/svg/svg_test.html
- Size 2KB
- SHA256 ce84b6cc2f7634e101c18004e3d9032e68618fca4c51ae03ad45cfce76513140
- MD5 e55872587fa2db1747321a9a017a0df7
- SHA1 e68c000a26038d93d9e6281d331bbed6a2ac6a38
- SHA512 9498f9c61b1093db9e1cc885c7f4bfa66d8be05664de36426851e8270d92de107b73bce8f661e7abd6902af94980f24b1df1c2cc84baf871f3a0994883019a22
- TLSH
  T18B51C62B6AC60700CB8622F8B18A5A96CFD9D5207245AF58E8F7990E64C985CC1B6F50
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  elementos/fonts/webfonts/geo-semibold/svg/index.html
- Size 2KB
- SHA256 fbe5440b31296ec2ec098b0dcfa1873d21261a069b98b42b285c1c49a31679a9
- MD5 5cd68b178a3ef304e31a55c7ccac3901
- SHA1 26ea3722b90948bf48d17696e0e4c53795a41af2
- SHA512 bb2087ccc9e2b1ae92d166b7abe73c709fff049abbc3c427269959df9534409efcd7e9837ebd3a3d689d0db2585257d948d0b7744d3fa0c4f0b49e4965506a15
- TLSH
  T17F51C63B29C60B00CB8222F8714A5DA6CFD9D12072956F58ACF7DD0EA4C845CC176F10
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  elementos/fonts/webfonts/geo-semibold/svg/style_169898.svg
- Size 73KB
- SHA256 e4fac4f26ba73768b39a1c51b3457fe83a431a0ca354ffb7f7c560bfa04b9f57
- MD5 b455c08061a26860e3fb7c21c64e57ed
- SHA1 0cdadc67f6228cbe88b632d9e107db2edb5add1e
- SHA512 eb78745b1b2494934698895fbde6ee5471bba5618550401b235744b1932770bbea0064c3339aab620e2ad5c2f47b2e21f45a885668f8c77e5971787146b0953b
- SSDEEP 1536:B1ijekc9y3em81RMny+Dwtr8kExBSct6pW7P:BVtoJR/76p6P
- TLSH
  T10673A7B8D84DCAD54E73D7C49B4AF1F9403FC2BB241D3899D9DAD7710A29B18EA43980
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral17 behavioral18
- Target
  elementos/html5shiv.js
- Size 10KB
- SHA256 1c0e32f76392383d433390c09d424256663b7945a724fbe13cad8b4dfa9bd8ea
- MD5 2fe36cdd9411c84f325cb6b311f36e59
- SHA1 e4e6b66ed1596e8cd47b460f8a3df5ce759ce131
- SHA512 7dd1c5564cd61f21e9a507fd554cab2af7e3b9f5e61bdcff920e46ee5a643c1eb4961904639a81d6f5a163a9142a94f73054649d879ce962dcb282382881a586
- SSDEEP 192:9RcSiBKrSIrlxYidqy7Y88fkGUKc7oA5rcXr5iX8g0F31pf3tw0AeHA5Bcc//Xg4:9RNiBKrnxY0qy778fkGUKc7oA5rcXr5y
- TLSH
  T1E32230553CDA31A60176E1676B7AB64BFFA0A26B3351704074AC853C2F70FB060EDE95
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  elementos/html5shiv.min.js
- Size 2KB
- SHA256 dd09d170aca1c1eb67a16f0e23fda993989a3333a0c495080b4e83e8e270c3dd
- MD5 7b7a4e3a218061d489d18edc20018200
- SHA1 c30ffb887c1b5a7e0fd6ed2772559b0025ed4c38
- SHA512 58f0d375441821a512aa7def12404bcf8f51fc4d5f42b84c8b98cea74c5f7061b2fb02da72eee9e4602b7d1014b99e8f2491b52a96aa8d8b610e154e87349006
- TLSH
  T1485197857062714A8B2B11AB917F970FF5E452A6D8580070D4E9C87CF930CF8C2BBF65
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  elementos/jquery-1.4.2.min.js
- Size 70KB
- SHA256 e23a2a4e2d7c2b41ebcdd8ffc0679df7140eb7f52e1eebabf827a88182643c59
- MD5 10092eee563dec2dca82b77d2cf5a1ae
- SHA1 65cbff4e9d95d47a6f31d96ab4ea361c1f538a7b
- SHA512 cc92cf5a9b3a62a18af432fdffb81b76da84e2f43ce3c7800a919c10809118d0611e29a47f103ff3df18a54d5331bc5f06ef4771dc406cc763b30ff2a66a3e81
- SSDEEP 1536:Du98G2ltZMNWnDr7doqPp07HVDTLGbY9TGA7zEcbnkb17jQq3nPRefqvpsz:DuJItn6qepq15nUfqvpsz
- TLSH
  T15063E9C9B2C67273C3E730B824AF510AF136A8AAA44C4854F06CE8E5BD74A55447BF7D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  elementos/jquery.cleanSlider.js
- Size 5KB
- SHA256 dcf07ca467cb8c1a58eb857d4c825a7c71c7361afb3c7785dfdf391fc58d0f44
- MD5 c3c64176399188f5295c55abf31d6aa1
- SHA1 dd0765df168eff5a25348f3f5304f47b12896c0d
- SHA512 d765b8ff86fe6e676de726b3b6007c6fdc821b5d23d3d0dc440197279b3e6b1569b25843e2e75a8ac6ea6c02d8845eaffb317ce633eabd05346cf530250cbcad
- SSDEEP 96:pbAzbUM1U2huKmFFBzKFOwfpVThL2GAbBFGWmb+EgS/y6A9sWg0gi7k2WMeiZ:pMzL6Z7BzKcwfpthL2GkkPyoEec
- TLSH
  T12BC1DB0D79211475A4B306BFAF7F884CEEDA22178105CB04F5AD6518CFB2808BA65BFD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  elementos/jquery.flexslider-min.js
- Size 21KB
- SHA256 0c853c2cc205bafe5d893017b6a03a2acf0f04a11b85f80605514cf0ae540fe6
- MD5 9ec3c315b67f434aabc4da58eabc6c3a
- SHA1 51b3a7d882f438d53dc69ca5289e92254160c09a
- SHA512 75317411016a28dff4e7a1d68f7b604b7b08e0be90038c3039493123fe2a89ebbfc084e1e15c029cbadcb64efad2a122307957d8ba51e17ef42fff35a8a3922c
- SSDEEP 384:6zEjb38fdvqEqHLOB7/Y1zicwyWda6lo7iMrpLtwSO2BAw1EFO:6838fdvqEqCBk1zzWda6loeMdLt9O5bA
- TLSH
  T1EFA28315B3107A329EEB122F7F1FC42E69B2DA82E405C83D3D7C85482DB15485B37BA6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  elementos/jquery.inview.min.js
- Size 1KB
- SHA256 2fb896d59ab96b495498601fb1a0b126b53057ac7583e9ad13b319a3e532a943
- MD5 44f4d214996626de5b94cda8c7f22306
- SHA1 75f16a1360bf84e2dd5a4b403c2490fe04d732bf
- SHA512 1c4a42812893c63d8ff9053260986344b49631431d0c21f515065f87442dc0b0d81126a0f06e1306ee8d04ee75d86906b2194a24e582d7a90bda41bf521da560
- TLSH
  T1D221102D3700303E80DE18E2612E0D0C14676325A347E4C1A679EC951AB897C367BE6D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  elementos/jquery.isotope.min.js
- Size 15KB
- SHA256 98d6427651f10db6f71e5f7ee348dbf2718fc7079e9db54bc40846e41643dc6c
- MD5 5688d1082463d6c3ebe40d4c8b32f1db
- SHA1 4e3ba0443b4bfe19a32653c8f6173b48de75f77a
- SHA512 6e2320b677b7a21e36ab6de5ca0dc21335cd13e0a97ab2b7beb41c5805c5429330d3ad40d936ff720d89f2a95b0d75dbb85e45a440de67d565e22ec3e5961a44
- SSDEEP 384:13eN/o4+J2jv0pLWu4A9kvpB8SgDC1aEPtc7RPajcw:TJ2jan9kvpCB7w
- TLSH
  T1DF72739D738133218187B2A141BF110F3137AAF66A468CACB63BC5DAAD7550D2077E7D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32