c677cba04e5a3f608b480f0888c109595e1623e8591a31a167e25914e95539e7

Sharing

Copy URL Twitter E-mail

General

Target
startdeskt.zip
Size 25.5MB
Sample260807-pfb4dsvenh
SHA256 c677cba04e5a3f608b480f0888c109595e1623e8591a31a167e25914e95539e7
MD5 e55c23ed2a3882d5d2dba505f24ab3e2
SHA1 409283e45ed16237126b2d01af2fbeb0606fa1b4
SHA512 dcec0ffeb58761f0121e087129431fee0207367980eb15afbf5e3213bfd49eaf6373cd7051a96bdacacb956beb5feefc6daa23e5ee6c827da8c937fc1fffc529
SSDEEP 786432:Ib7g8g8ZjtJz+NcV8CFeijOb/OEOKpF1cPKnG3vblNNtMySfu:kg83Zj/fV8CYDGEOEUPKn6vb0zu
TLSH
T1E64723A9C92C15A1DF375A36D216875DF5D18D05932BBB8B6B0892128C7B0C5BB32FC3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Targets

- Target
  startdeskcourier/admin/dashboard.php
- Size 3KB
- SHA256 18c6841af237345363dd646756bd8698b29a1ce53b781d74972378d26656d4b7
- MD5 4e5b62fc78d0ed51bddf80b42ab4756d
- SHA1 1d7882432167db1497924e142a405adaa603446e
- SHA512 0f8eb50d0caf468513bc84a9694e4c9c4a6e35bae89c4c81fcde106a18b0572879c8cd0fe585103c29267946512775aab8f37cc657abb099583f4350a3a54395
- TLSH
  T1C6811D6734C0F03744369E69D22A8E85FCC7812B9B056C09B94F72DB8FF2D20495FA80
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  startdeskcourier/admin/docs/documentation.html
- Size 8KB
- SHA256 4cdead4a256005f0c24334be7b7c3a6fba5c3d2aec07fdd76ca02d9cf3e04c08
- MD5 5fbd237d84c7cfb6a8769973fefbd0b4
- SHA1 ebb6d9f01f64a8aaa7b0cdec3fbc42dbb5b837ed
- SHA512 b753e6be833631eb37f2023d3c1b98d319b733f9413503ca00f44e199ff7524aac671915e13ac92e8e2fe243e42ae374da51650b7c30f13d428e4e40af9782ef
- SSDEEP 96:fetV1W169XD1Fv7KR5Z1bgecL/vbBuuP0Kv6+wa9L2SQHocVrreM:fetjt9XxFzMGeUx8M6+waR2pfeM
- TLSH
  T1E3026F3A52F91337258382D5E7099B93EE66D82FCB1B012176ED73581F96E02C2770D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  startdeskcourier/admin/docs/documentation.js
- Size 835B
- SHA256 b7a3925e98ef5bb41668b389f74134d5302fcecf5924ad39f06f8623ee6de8cc
- MD5 a28c270dc5b6f4d2e86427c55a94d81e
- SHA1 719d08c4e2ac3156240fb1ba5b662a3cb6bd1017
- SHA512 66ba424365bec823635fb71654dfd7e8aa5448bc6751aabdcc2f6b25f39deaf076530614ba0a53a1b20dfabb3d4e824c8bca91095bf0ce78ac5b63da40562745
- TLSH
  T1E301896E70A2520705BBA77D9B2FA250B93710675208EC80381F8F881F1163F8A679E4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  startdeskcourier/admin/images/logo-mini.svg
- Size 846B
- SHA256 a80c6c33adeb46b2a23a91502a4faf5d495ed141ff45a56dd793d9b1c6cead13
- MD5 bf3abedf155104a7bf962a81144432de
- SHA1 e4fd240a56bd2c1bc7c114f68f452f7064533415
- SHA512 580d1b8b7a72067cd483ce316bfd4846268df6e470488e0a0ffac2aa988e795c250bbbe7c438fb957c53875db782de731d7392a2e0c337a3891117e0863a2bf8
- TLSH
  T1BB01CEE816A8486C98CBC33373FAB016652629E753CA0565F28D1C82BFA51B30ED710D
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral7 behavioral8
- Target
  startdeskcourier/admin/images/logo.svg
- Size 3KB
- SHA256 af2596dd01fe1771d7c3d50dadd668fbc9f348dc02604b177eabf73c2f522a7d
- MD5 3809bff819b68ccd94fbf8ff85f716dd
- SHA1 6dcf49d914d178fb7359f48b4184c69d686f6abf
- SHA512 deb1e1b6bb11fc35dca98c1e7f37d49dfdd0b8c773fae22b8ec920450c12370428b3c7390019d8cacce3d30ac867f7213fd180339363bec158feb4e79a8cd121
- TLSH
  T1115144CA1361D34C99CFF96EEF7155C8661B84B9D5BAB2C1419EDB288593CC9F805C40
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral10 behavioral9
- Target
  startdeskcourier/admin/js/chart.js
- Size 7KB
- SHA256 c3912d1b3f59c4ad1c5824cfa1ac7957a4a4408ac3df1c13c8beda97bc5761ba
- MD5 f3d8344c9cd7209e0ef6d8064ca8c48e
- SHA1 92bd77313e69809ca825951dafaed492392a9c07
- SHA512 27872f742d51ae7fe3db5021cc0b66a13cdf750429b7a501ac69ff97e6cece375a0cb8c003995c92c4712f2b8df9125a79d781be309441c32abdb925a6c1bd80
- SSDEEP 192:+Zs+h3N3esycTsoJOVZyXxVxXzKxT5kUsTx:+9I4AUUm
- TLSH
  T19BF1DB38DDA79756212331AD446F9D47F7A0E2031D1EFE29F94DA2503F8C16CA0B96C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  startdeskcourier/admin/js/dashboard.js
- Size 23KB
- SHA256 5e07beb361e4103433bfcfb533ee1f0de526a01ec1d219637bdfdb248359c88b
- MD5 ed866ce1074fcf9c41dfbedaf4dba367
- SHA1 ae66ca834c459b4df2264a489aa82814942d3acc
- SHA512 cf2bf0fd68b4bbcf80f2a8b58a71231c390b330ff08c7bedb9e5ce14f3f073b4fbc2252c88f440bf2286c7c9b4f3dc6be6b4979cc161ddeb3f673a13f16654bf
- SSDEEP 384:WSPe0iDA5I9+7jJvb+7jBv+0hhWv2+9F58F2tP8iUoppqMLOUigKLPjK2LDLxiWH:WSPe0iDA5Iw7jJvC7jBvRhhWvH9F58Fh
- TLSH
  T12EB2BAD1D31CA13F8223911B1D5DBFC7D72DA136AD36A7BBF869652813DC8282095BB0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  startdeskcourier/admin/js/file-upload.js
- Size 398B
- SHA256 d754269f00acefce08a6d921bec67166bb3749c74e3bc346e4208ce98b95b770
- MD5 030f91b039d0899074af13b463451e7f
- SHA1 f081e73370c9cf2b92c86d35ac307ca2c8adcb0f
- SHA512 4ac27a9052cc6cad5ea1184e38631867736fb830cd40630a3a0f5225be8d46496b4b7dfb0eb0376e2f61fa01c41678d293ced2f000603c373deff6cd8f05d074
- TLSH
  T1AAE02B1DFCFA403005B3311A127BC815342B500B010ADB14B4FD2BE16F9551941D6AAC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  startdeskcourier/admin/js/select2.js
- Size 237B
- SHA256 728b01f983edcdfef8bb290883b60dae8de93d331f87fb5cb298fa4e3f98e951
- MD5 ec9e22f66e552c55c07828f3a7657946
- SHA1 8a49dfa4b7e6dedf7656b0cb6afe995e413aa65f
- SHA512 d18837e9ff72733b90366047dfb7f09fcc3ae79f1ef86d484c7e333606254232f8ee35ae03d964edb928d7da0e88885da4f9dd0b9070616208acab131539b5c8
- TLSH
  T15BD09E066AE7563F0836B4A48CAE8105EA60CC19188C9FD6E8804650AC70D6A18D6A46
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  startdeskcourier/admin/js/template.js
- Size 3KB
- SHA256 fbc224ded8d413b8e07e1d65a46c2da96c9b01990f327bb851276c4f52c2d741
- MD5 bcc10ea6d1e675496a57199000f05166
- SHA1 a6a653ad50e206268cf0c20c4776d97dbaa65245
- SHA512 a1fbb5adf5c0cf79ab592e492ce88c922e578c0ef9582047c0bdeef0aae7ab317bcb3eb78a9ed6d11fa05caa6c4385243c88c78aee99d6e0a63f86520eb3a014
- TLSH
  T1AF71FF0974F670A461FB383A8BEF41947339401B9245DEA53CAD9B840F85B2472F5FDA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  startdeskcourier/admin/js/typeahead.js
- Size 1KB
- SHA256 65c547bb17c3ba1fc1011b199c0c68b2d30c047a0d31e1066f65e3f368b8d59a
- MD5 aa9e5a33ce4c35dae3160850b39471db
- SHA1 e2635bad20455d254db0addf0826aaaa15b69ce0
- SHA512 e8caea205aeeb76551b17730320328dc1eb7c2fc452b5e73f66da25743a641f7e94addcc03d00ca87bdd73c45e842add462943cd9d6ba5ac3c16a12d13ab91a8
- TLSH
  T1DF41446DA55E017C04A264B9C6EDB4450A03C057D615F5B1FEDE49443F69B6C303FAE8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  startdeskcourier/admin/pages/charts/chartjs.html
- Size 16KB
- SHA256 8b44a1f8059b392a2e3daeabe86e9d5e7a8a25beed0b9254e46e26e3323c80a3
- MD5 2f1c368bedf1fd27af47aa277ac50d72
- SHA1 140f50b88b2a6f1a9db62c8b7ecd8b9d723d57cf
- SHA512 2371046997f3d98c25434ae5b6086446c8f76fea78e8231d489e9880656f2a9fd67fca3142807596c5be1c7883efc0a4d84006a1ec4c54846d6e2f9e086c32c7
- SSDEEP 192:3eKp6pTsb1xRrKpUbvJLuCdstp1bisytChoZNAANIVEPqUAyFfiuu:3eKTl1LuF1hCNAANIMauu
- TLSH
  T11A72FE6188F0217741C3D0CAEAB49F26BEC68907D74AA60172FD579D5FD2D829E13E2C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  startdeskcourier/admin/pages/forms/basic_elements.html
- Size 49KB
- SHA256 71a8f85b5403b5d3f8ce6c9c6ae23797378dc35368e419b60fbec3b958252af9
- MD5 51226583b7141be57273c9ac0b78190c
- SHA1 281ec9c0b373813fad8d7179ea638bcd81d4aea4
- SHA512 c566d0b91bc49dadc4edff9389a5adf9b0569051ab4ba63bfd9063bcdde977f9577ae0b68a7a6e33abe1da62282dffd93f38c6b306ecd556f409fce5e238f85d
- SSDEEP 384:3eKRl1LuF1hCNAANi/I+VP9stf/e5aRNu:dNNAANoIWP9stne5p
- TLSH
  T11F33623114F0567741D384D9AAE89B1B7EC5C603CA4A6601B6FC5BD98F97C83CE23B29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  startdeskcourier/admin/pages/icons/mdi.html
- Size 287KB
- SHA256 1e7f7a88267ea7a2cda3e3901ac1110220e4c5aa8d8f2b3d9214041a0988d2f7
- MD5 00467dd688256b21c38f2ebed41227fa
- SHA1 fbd000767f16ffdfc7df529081b80d9a77f18bad
- SHA512 87237aef9ce566d97aa8d7f800e6a2e6baf9d353e5dfce42f3d81e5176e73ccdee2adf7e667f65340836f5da3723c53711d1fdb0b3d916019814e519dd28b45a
- SSDEEP 768:dtNAANFvEOw3cQxDyK/sl45LaOL5mnA7wdL7f/b+RqpFb33/5:dtWAkOwiA4/TpFbf5
- TLSH
  T1195491A015B07A77417BC2E6D9712BAA7A81A547CD7F12623BEC3F820F67C52CC93605
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  startdeskcourier/admin/pages/samples/lock-screen.html
- Size 2KB
- SHA256 cbd803422f6df2f7298eba4b303793da0ce6917f02d09c8a7e5527b34305774d
- MD5 57323febf118b928f8398b9cb4f706ab
- SHA1 d7fba01f012a2395d31447978511102fcc344b54
- SHA512 1d55822cdf4c4e867383150c7a82165d3524de6c03665b358ba9de73d0f226178c112b8af1c9743aa733d7fb7ef4321dca1919abd5c4381aff4cd450d008cefa
- TLSH
  T1BA4101108CF951ABE6C24464B8541D1BEEA2CD0BA65F4A0030FD4AACBFD7F43DE57585
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral29 behavioral30
- Target
  startdeskcourier/admin/pages/samples/login-2.html
- Size 4KB
- SHA256 e63ab16274e8914e145b3cf30d3d437eec895163245e88e7304fc57d76367dfe
- MD5 276355b7c8a171e8e56aeec525effcc2
- SHA1 0aa98016008a566936ed180bf9ac20e39777f6b9
- SHA512 5a99746e07f954511786a1e37f7d55cae6c458d8a308fbb64cbf7662dcd2261798d630968fd215268781766c0cf01bd5c5bae3d435e86ea7749bd6dc1fa8eb7d
- SSDEEP 48:35gOSkjDRntH0wo/+mF5mU0sEUZhf1LIyw0mLw3OWx9wvWBSQsAh6snKu:3eRkYp0sBz1L/w0mc+Wx9wc1Ku
- TLSH
  T137A11F2088F4117B91E280A4F8945E27FE96D907D6AB5A0532FC1BD89FC7D438E1768D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32