a4d2111acc63e2bb03108105a6805d2cea220f5a7f3b8704dbd0a7077ff59dc2

Sharing

Copy URL Twitter E-mail

General

Target
ba.zip
Size 3.1MB
Sample260806-amd41avtfv
SHA256 a4d2111acc63e2bb03108105a6805d2cea220f5a7f3b8704dbd0a7077ff59dc2
MD5 b8ee910bbb680935a8dd55e615ff33ec
SHA1 68fde6bcf01e76cecaf8b4d3b224109c12ce568d
SHA512 7fdc8d948c016241af7fdaca6fdd174168be99050e1740020d5d27da481a4d0cb99a832019b3fb81a70952966ce21ceea2f432844d475a9ce3d6c7bed38a3b23
SSDEEP 98304:XmPWzZW1bwnmG/NIGL0zxVGuqGWWeVMe0xvXuNY:XmPsktwnP/NtwzxVBZFeVHSfuNY
TLSH
T1CBE533B6A391B8D5D22D1EB4190DB12A07DF9A60EC9E320318D6F8CF43B573E95B6305
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Targets

- Target
  arrow.svg
- Size 318B
- SHA256 01512e35308a58318e2ce72ffa6c1459bef40301e85b51654150907572dab834
- MD5 cfefd45f067c8b7ac988c33050236031
- SHA1 4d8514c075f5599ba5c05436bbb0e00a80095928
- SHA512 4e4a82f2acca9616a732424a5ef3ed8f42bc9d3a43b901c3bd86316b388594b469ff4aa22001f0e8cc1c93f388a8548b3d007b5135ede1b0f2e625a1bcb6f014
- TLSH
  T1C4E0C24E23084D3CB9624A20DB693235C4AD52430B4D6298CC3321345A5A51F7C3FAEC
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral1 behavioral2
- Target
  arrow.svg
- Size 318B
- SHA256 01512e35308a58318e2ce72ffa6c1459bef40301e85b51654150907572dab834
- MD5 cfefd45f067c8b7ac988c33050236031
- SHA1 4d8514c075f5599ba5c05436bbb0e00a80095928
- SHA512 4e4a82f2acca9616a732424a5ef3ed8f42bc9d3a43b901c3bd86316b388594b469ff4aa22001f0e8cc1c93f388a8548b3d007b5135ede1b0f2e625a1bcb6f014
- TLSH
  T1C4E0C24E23084D3CB9624A20DB693235C4AD52430B4D6298CC3321345A5A51F7C3FAEC
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral3 behavioral4
- Target
  favicon.svg
- Size 699B
- SHA256 f87a87d9a7cd78333950bad32cb9c6a2cf8da61ec9d807ebe46ce4f5f4739638
- MD5 20a5ffa6338fc8e12aeb888a43ebb58c
- SHA1 e0f6925f82b7f493f06e4cc005f30f001dc59e37
- SHA512 06f35d4e8afeedfb95d620274341a78cd85c01ac61510989bf69cb2d3c84320d79fea3d7267087a2284b5c9ce71e68a40dacab8f7e08880143e5bca50e95a298
- TLSH
  T1D501C010E29E8A0CFC144121C65C7038207891C38A46C064F3976EBA2B280CF5C976EC
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  generated.svg
- Size 740B
- SHA256 cd79a35afe8c4d8f23995f6a9f37cdd5183ad36dba23808a874f7f7f2d54ef11
- MD5 3f07888e824c8782dd6b27472b7e2970
- SHA1 20b9699566581aad960b9ecf4af33673b03e6d1d
- SHA512 d52d718912c49ae118f7a695cc75958e5ebf21847b670c0aa0ad178a26376557bc9b947801205173d1d9972abbbc975fd854fc6d5bb2cb5d73118ddaccd9bd5d
- TLSH
  T15901DCBBB30548FD4E4A5B8CCF00557371B914369ECBA115087818D47C6A5ACFDF3988
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral7 behavioral8
- Target
  index.html
- Size 14KB
- SHA256 e56f27566531ff4950eaa9432ebfdd702be0fb554ce5c7efa1f23eb7ef0bceea
- MD5 6ee8cce8d99e34ef158e7d43e02b097e
- SHA1 1e91121e9932b8d99c2364f514a86b7343c5d7c2
- SHA512 78c8df2b4b3962223c82d8c002271a858a1b0056e82a104fa7c23ddcad744717b3a47b2cdba236a5702cca34df1ab3c464598479679e5299f32420ed1cd0c7c6
- SSDEEP 192:/wPlgS+IMzDzqmIyEb+b0VTzbEYTK2oxQPpoLj4s/BPep3gD8nAM:cgEMznqwCfFTK2oapcE4sQInAM
- TLSH
  T1FA62CA2050CA583751B3C0C6AA265B9EFFD08203874A4641B6FD57EB9FF3D16CE57688
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  primer.pdf
- Size 163KB
- SHA256 4cecdd4479e0a414146cbe3f78d11a6252d9ae828fcae2d179af46b0cd95afc9
- MD5 845b746b1c565470e2456d7c8416a376
- SHA1 e992dc754a8735d99e35b5ea8ac1741badae967c
- SHA512 186cc384e10d1dae1e2bc62d6bcb14fa830b2fad1864a933e7f4e88057694e1ade2e21dc4744dd41cfd0ab56a2a6390fd0e9c0c9e6a65792e1282fc23dbb4fd2
- SSDEEP 3072:k/fD6m5NGAamKbfDdp4GMOEC67F/fD6m5NGAamKbfDdp4GMOEC678:M6mImSdpvMZ5V6mImSdpvMZ5I
- TLSH
  T160F30105B0842E99A5667D8C3515FA0A81C5FB266F1FF8E31C9C9C754FDAC462BC32E8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  script.js
- Size 17KB
- SHA256 2f0638424d9c3774435bc0a7cbf197f9a3f65ea1a1bf11b6273493ed26ce1699
- MD5 5c4a43fe7feea577e54b2558934cdfef
- SHA1 b2d33710264e67c4ecc18e41ae50088498d986a5
- SHA512 232d5250b0e8cb74bd889409b100110053268a8cb50150815fb6526666b924bb9af64a8dad9f4bf6be6335118092565176d5c511c5d8c707fdf61bd703bc4e0a
- SSDEEP 384:H/dmpNSJHQT1nOMG+Lk32wyIR/zuSxWUE1JY:H/dmpNSJwT1nOMG+Lk32wPyYWUEQ
- TLSH
  T17B82B4A6511B1835CA7293FAAB96502CFBB001177542C3967EFCC4546FB6A2092F2FDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  users.svg
- Size 1KB
- SHA256 dbcc6b93f9cf8e4b68d2934e93eb0740bd2e88f4e30fa712f94616e002632e66
- MD5 03ded31455e11c42e198a955a4c6bdb7
- SHA1 e0f0715b1c015995f13934f300c1a5968155f41f
- SHA512 53129106f602a1d0ce62546b9e87b9d8dfdbdaa93f15cdc8836a09964edfb22d16733b43c2a6ac01b063b1694e8ee27e021b06bfb988b0d509fc29136bed5793
- TLSH
  T1C22124F73648ADF8DA2BD3E0D572247A3587347EAE3B538C84284150101664D89FD898
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  favicon.svg
- Size 699B
- SHA256 f87a87d9a7cd78333950bad32cb9c6a2cf8da61ec9d807ebe46ce4f5f4739638
- MD5 20a5ffa6338fc8e12aeb888a43ebb58c
- SHA1 e0f6925f82b7f493f06e4cc005f30f001dc59e37
- SHA512 06f35d4e8afeedfb95d620274341a78cd85c01ac61510989bf69cb2d3c84320d79fea3d7267087a2284b5c9ce71e68a40dacab8f7e08880143e5bca50e95a298
- TLSH
  T1D501C010E29E8A0CFC144121C65C7038207891C38A46C064F3976EBA2B280CF5C976EC
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral17 behavioral18
- Target
  index.html
- Size 10KB
- SHA256 2644ca5ce668e4f13cb2bcc0c61a5a7fe463f118a2c864a80b86856653ed3b20
- MD5 a8184b736b4fd9d9287a772c155df192
- SHA1 14878d274251bfdff99ffee5575c1806cf373f65
- SHA512 df0af27f71c324c1fe1fb99c19297a258c855ffae0445d7b7adab2ae65544c8eead07a5a89f80074aae757c024160489144b5a88dffa3122f896003aac6b7e78
- SSDEEP 192:/wPlgS+IMzDzqmILEYesdjzcqzyep3gD8nAM:cgEMznqYkQInAM
- TLSH
  T1AD225F2084D5882701B3D18AAA6A5B4EFF518203974B424579EC83EB5FF3D5BCE57A8C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  primer.pdf
- Size 163KB
- SHA256 4cecdd4479e0a414146cbe3f78d11a6252d9ae828fcae2d179af46b0cd95afc9
- MD5 845b746b1c565470e2456d7c8416a376
- SHA1 e992dc754a8735d99e35b5ea8ac1741badae967c
- SHA512 186cc384e10d1dae1e2bc62d6bcb14fa830b2fad1864a933e7f4e88057694e1ade2e21dc4744dd41cfd0ab56a2a6390fd0e9c0c9e6a65792e1282fc23dbb4fd2
- SSDEEP 3072:k/fD6m5NGAamKbfDdp4GMOEC67F/fD6m5NGAamKbfDdp4GMOEC678:M6mImSdpvMZ5V6mImSdpvMZ5I
- TLSH
  T160F30105B0842E99A5667D8C3515FA0A81C5FB266F1FF8E31C9C9C754FDAC462BC32E8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral21 behavioral22
- Target
  script.js
- Size 14KB
- SHA256 381a10e45c6265fe677d317c183fdd761aae0171eb4dacb0ff6138319ba26e8b
- MD5 82da55c4d7b077816eebbceda1799f38
- SHA1 17bd627252bdf76cf487a5e362b01b71c51d808a
- SHA512 7084cd343fd921f10f3cdba4150c13d9503022e895d3e450c2997deee95a9a2c77141d10d521e8d0037e579226ce36b67133343bd4e313a1c3ea5da0beea70ce
- SSDEEP 384:H/dmpNSJHQT1nOMKLk32wyIR/1yi4iQi9:H/dmpNSJwT1nOMKLk32wP1Vt9
- TLSH
  T1A052C5A6001B19358A7253F6ABAA4028F7B101177541C7967EFCC4587FB6A6093F2FEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  favicon.svg
- Size 699B
- SHA256 f87a87d9a7cd78333950bad32cb9c6a2cf8da61ec9d807ebe46ce4f5f4739638
- MD5 20a5ffa6338fc8e12aeb888a43ebb58c
- SHA1 e0f6925f82b7f493f06e4cc005f30f001dc59e37
- SHA512 06f35d4e8afeedfb95d620274341a78cd85c01ac61510989bf69cb2d3c84320d79fea3d7267087a2284b5c9ce71e68a40dacab8f7e08880143e5bca50e95a298
- TLSH
  T1D501C010E29E8A0CFC144121C65C7038207891C38A46C064F3976EBA2B280CF5C976EC
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral25 behavioral26
- Target
  generated.svg
- Size 740B
- SHA256 cd79a35afe8c4d8f23995f6a9f37cdd5183ad36dba23808a874f7f7f2d54ef11
- MD5 3f07888e824c8782dd6b27472b7e2970
- SHA1 20b9699566581aad960b9ecf4af33673b03e6d1d
- SHA512 d52d718912c49ae118f7a695cc75958e5ebf21847b670c0aa0ad178a26376557bc9b947801205173d1d9972abbbc975fd854fc6d5bb2cb5d73118ddaccd9bd5d
- TLSH
  T15901DCBBB30548FD4E4A5B8CCF00557371B914369ECBA115087818D47C6A5ACFDF3988
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral27 behavioral28
- Target
  index.html
- Size 15KB
- SHA256 0ea6a472e90cb2354c04fb1a4f46c9d8c7b9a0b550a9b08aefb86b03227d343f
- MD5 f69123f58f1e84e50a48b68939db7102
- SHA1 774109ee71892fa556828714ca71fbd3c5a43c07
- SHA512 06b52b4a4c6d4da5d6c472c704c553951b6ef59af3f3536727ff40dc45dc6ea6b85fdf69d8fb0de67b0c9e981e4a9fe0b397677120e017f90cd7be9b87a3f5e0
- SSDEEP 192:iL8XdrgS+INbzDzqmIyEi+b0VTzmEYTK2oxQPpoLj4s/BPep3gD8nA+:vdrgEdznqNCSFTK2oapcE4sQInA+
- TLSH
  T18062DA2090CA582751B3D0C6AA265B9EFFD08203874B4641B6FC57DBAFF3D16CE57688
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral29 behavioral30
- Target
  primer.pdf
- Size 163KB
- SHA256 4cecdd4479e0a414146cbe3f78d11a6252d9ae828fcae2d179af46b0cd95afc9
- MD5 845b746b1c565470e2456d7c8416a376
- SHA1 e992dc754a8735d99e35b5ea8ac1741badae967c
- SHA512 186cc384e10d1dae1e2bc62d6bcb14fa830b2fad1864a933e7f4e88057694e1ade2e21dc4744dd41cfd0ab56a2a6390fd0e9c0c9e6a65792e1282fc23dbb4fd2
- SSDEEP 3072:k/fD6m5NGAamKbfDdp4GMOEC67F/fD6m5NGAamKbfDdp4GMOEC678:M6mImSdpvMZ5V6mImSdpvMZ5I
- TLSH
  T160F30105B0842E99A5667D8C3515FA0A81C5FB266F1FF8E31C9C9C754FDAC462BC32E8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32