e24f402b1a933e7ec81ebab8f48bed202179f43e8d97f5ab326651fa1f074843

Sharing

Copy URL Twitter E-mail

General

Target
portal.zip
Size 363KB
Sample260804-pfkerswvcx
SHA256 e24f402b1a933e7ec81ebab8f48bed202179f43e8d97f5ab326651fa1f074843
MD5 4b98a66ddbad3866ed0aa8ddf3537740
SHA1 e17350d9fec03c1fd29f96506ace5e4ede3c81c3
SHA512 3da469876d6ea6b2d0970d42c7d92e1662e321bcad1d8644d6e85515e3719b37b05a852313416926bf622b982cee7d307a68e2da285a0c80a953318a87151f5e
SSDEEP 6144:+cT8K6Pjej5fpQwpyjSEDyTqMCtTFuiaQQinJZB4z7ZV+odViAkgEmbSmX6e3tuI:ht6kcUyFyCtOQQ2zB4z9V+oPkBmPX6eb
TLSH
T101842331F21F3726C0AE4ABC434BBB27385DBCD604C15AA4A1CE9482ED47168EB59CCD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  portal/8q5vwgdaee0fqvd78d3hrn5o.php
- Size 3KB
- SHA256 1c36eac313a4e9e4df3e6720f7581682b1eebb9072e50b23526eb94d85c7de61
- MD5 bd51494cadba5ea7579f374c167fc720
- SHA1 07490897e2944e9743c1613ebc08bbaaef6313f1
- SHA512 f507a74a57b9dd45454a1300c7d9b622836c01368c4234292ff06ee758be67e7839670abbafcc46b2d3c1312e52932a4ff2ce14468f2d7734d9e2d6a60776b14
- TLSH
  T1F2719505B69FD88B41938B9B71B22205959FDB3847231D2AB8E0617FB3B5D0CBD864C8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  portal/Success.html
- Size 3KB
- SHA256 5bfedca2733eaba714fc1c8af36340663efc20870955a0c05ee7a39925265487
- MD5 03d9ef473579fd22cd1c28dce5156865
- SHA1 04c185286843641134a7f7c526a83c6a0c62e9ae
- SHA512 affb8bda443c7607845d38384fe3c7029c2ddd2b1cbebafb3d6372abaf2b860d058c51d721189e09b50888f1ef27089b1f2ff9af49aa2c7bd55f6e36fcff23e0
- TLSH
  T10851853BE686B806621205B0F18B761491955113B302CEE0F3D897DB99E19CED667F9C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  portal/images/ms-logo-v1.svg
- Size 756B
- SHA256 5d3357bd875b7335ace42e8ee3a64578e4253bed1a4e279109de403eedae3a69
- MD5 9de70d1c5191d1852a0d5aac28b44a6c
- SHA1 f4f64f5cbdbe6d1115c10a7f9ccb8828e6b67cae
- SHA512 cac13fc2fe30e10772008f2aff70fca031ea9918e1f8c5c8b91cb9e79463383183406efaadf89360de3a08573fcdf2716c14da6411e24b7e260b96af84f00762
- TLSH
  T1AF019CFA136C56CA9E0A471C1D69365733BD4ECDB15F41A86B8A2F0F2D4139B78B2106
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  portal/images/picker_account_msa.svg
- Size 379B
- SHA256 34d8da073f47030ee94b99d84fbe68e3345bd8aaa37ea909ff2da00238447486
- MD5 2d8f86059be176833897099ee6ddedeb
- SHA1 93a2e327027deed53076e86bfa7d9eebbf0cc4b9
- SHA512 64d75b1f35180ff61f5bf11d21544454df016d0854573d75d277fcb933ce845d1436bdc822445b78c627a1ff730b39fc34b72c27d45a39e237f2ccf0876fca4e
- TLSH
  T1AFE0D8F342ACA54D85558F281668318275A7A1CD737A022DB7806B052E00AEF64BAD65
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral7 behavioral8
- Target
  portal/js/jquery.js
- Size 93KB
- SHA256 91222f96f34735ebc88df208017e54d4329b9202e3e52367fb8b149698a1a5ef
- MD5 4dc834d16a0d219d5c2b8a5b814569e4
- SHA1 4fbe0563917d6f6289e4e1b4a0a8758e4e43bda9
- SHA512 6fbec4785a21520fa623d1a151c6c8b64baa1321ac6918a127bcfc22e49ec2e3bcd161af9c237bd5c70bc4046eb12cf434563f86cbdc9876eb67fb2dea87034b
- SSDEEP 1536:EPEkjP+iADIOr/NEe876nmBu3HvF38sEeL8FoqqhJ7SerN5wVI+xcBpPv7E+nzmN:bNMzqhJvN32cBd7M6Whca98Hr4
- TLSH
  T12F93C8D9B6D27162977730B850BF510BB13A98EAB80C4C60F1A4D8E47D78E89507BF2D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  portal/redirecttoinbox.php
- Size 1KB
- SHA256 467144464d1015175edd23c51b8145b8acfc98bcf494554bc034b8643d760a59
- MD5 383b61b79c5b71dce530125750ea2b8c
- SHA1 5dbe6565dff2725f528f652bcedce92ebbd0acc8
- SHA512 96b6996267104563f6e62e64dce9d81421a4403d46ca521225ed63a8cda5fd311665bdbecc8d34af9238f95ff97476c0f4a353523bae9b6b2288d0180b866bda
- TLSH
  T14C214486E4A2542BD7C048117BD63A843A6E9A874A0BED013A4C176CCF87BDECC7324C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  portal/retry.php
- Size 3KB
- SHA256 90d13bec865065ace1d6c536949759101a8067d617bfb7bad77d8e1a4f1ae173
- MD5 43c21a30ff7119a9fb6dfe1d3447e6d9
- SHA1 8edfa4885d7683087fc7c030c1802faec6beb8ab
- SHA512 3bd2850353c24e2613f9ee2d92811717881d7d2ebfcc70d3d1f482eef5681078a8b9426149b0e50efbee2dadaf8afe2104bb3daaa0872da5befdb0a326ed7ef7
- TLSH
  T18D71D815E79C9C8700624B5B79B5324D20AF1B388A234C2BBCA3605DBFF5D4CBC4A8C0
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  portal/security-assurance.php
- Size 1KB
- SHA256 77e454e64989f3dfda7169450b671698ce53c3fc47d31f0db7a3269fb4053730
- MD5 9c32cfe560cc82825a0b3dfe2655a2e3
- SHA1 dbad36e91f0f8738e8c1a08ca22d18df6b46c352
- SHA512 05eb0126e9b4b570bff7dff0183f3fc58dd6937dde9aada0884837f093eeae3867a2659ce17905d116962a34b994ea4715dfbf9eba632a8fdacea004ef32f873
- TLSH
  T16331228AA4A25427D7C144113AE23A8CB66F8987464AEE51764C176C8F87BDDC86714C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16