6964cd75c8e9277bd891ba1c8ddccedd9fe801f781bf6a554392f270141afe5c

Sharing

Copy URL Twitter E-mail

General

Target
brazucanovo.zip
Size 15.8MB
Sample260808-ajtehsek4v
SHA256 6964cd75c8e9277bd891ba1c8ddccedd9fe801f781bf6a554392f270141afe5c
MD5 9791dc065d68127c59060694c3b2d6a2
SHA1 0e7b290b913b29ef2a56cd284eb9674d434ad661
SHA512 6cf9d2a8f28dd04c2f3e9a8bd7e8b1fd744a91ca42307d682ad334ce3d8d28b7885f343c1697cbe56a897d3b361d83a5a0aae131c48508c207d836e36ad9dc90
SSDEEP 393216:vFq6ruvGJGNde1YPqEdOvqWnaXbokcu8gJ:JNJuo4Iab6dE
TLSH
T1E3F63374F2263409C6BDE870B06D4F26D7FF0AB16C6E747D1A64C328B61538125AE39B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery execution

Malware Config

Targets

- Target
  deliverybrazuca.online/01/index.html
- Size 191KB
- SHA256 f8edd51b6fb243ee079090371c9c3bf02c1d52d1fe3db273831b1e36ecd030d3
- MD5 5ffe9ce26c230081efbb29c71869b13e
- SHA1 7e35942fcf2cb25f2e49982c9096548e754b80e1
- SHA512 6cbc75e34223204c3867b5ccd19813eacaae72c4e877c23f8f003de4de04381b5c8ae5759c588a9681cb792577354b1b70ea7dab8ade9f877bde1ecab7a4afdb
- SSDEEP 3072:QQ5NgYg/qvgLsa69RLkF5TifKCjAnLqoa/0tBoM0fj:F5NgYg/qvgXSmDTifKCua/jPfj
- TLSH
  T175142F3C9B8EC59FA78577A3202D1EEB2F5C993185CD5199B177AE4648ED8E23730302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
  discovery
behavioral1 behavioral2
- Target
  deliverybrazuca.online/01/js/all.js
- Size 1.4MB
- SHA256 75ca5d1ab7947e7c19b4914a8ebaf31f5ef8547fee7fe3c4b49125fa9159fee4
- MD5 f0b7e001e9f8a42f5ac1c1cd612b4a66
- SHA1 9ff3cfb2e15856f9b77bdda2661876614f46a245
- SHA512 c858d96d3611089a1d9eec8696c29a98d13f2e511a100c525037b9faeeb5995f33cea25514e1fb4e750b136fcf3ff979bca5a950d9c5e1519591787732380bb2
- SSDEEP 6144:+ZmgvFsUIY0mRrSWAept/X8Xt6kXTfyGmlvWyHjmhu9kO0n6FUwumFbMSAwLc/d:4qUD0JPvgJmhulEoMSlLc/d
- TLSH
  T18E65C56C97A193FC5D6AC3E18E2040B47D8F96EE7650A33CD279C670B1625ECC5C8C9A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  deliverybrazuca.online/01/js/delivry.js
- Size 42KB
- SHA256 9cce171fc4d4f9b29d885593aeee19f60eac979adab9a27cafb4d3dc02109f9f
- MD5 78995d1357cc61a1f23804dcbf3df1f8
- SHA1 bcd5995f0fff048563a3bd96920d0e6134b6e0b8
- SHA512 bc74d80b7630de18a2eb0ad8a33ef2c40cf817e45f841276dbc889346c7cd2c1856a53ecb0ae8489227f6cc147bad354483977822f57a5a2fb7fa4a8cc89fea1
- SSDEEP 384:TLgLMUqUb1G8/fzbgkSgd+2GS9clApNUHHy++XhknrqmJ7B1zxBpHO5FiZZfGw9C:TLgLMUqURGcHgkd8fHDGOqI5jqdVv
- TLSH
  T165139614F3EC69D30276322A481F919E17AC0273D6004C6BFDBAA5F42CD8E6D7762D69
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  deliverybrazuca.online/01/js/jquery.min.js
- Size 85KB
- SHA256 fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a
- MD5 2c872dbe60f4ba70fb85356113d8b35e
- SHA1 ee48592d1fff952fcf06ce0b666ed4785493afdc
- SHA512 bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe
- SSDEEP 1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr
- TLSH
  T13983F8DF77CA702247AB30B9006F550BF276199D684D4400F159D8E9BCB8A4A827BF7E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  deliverybrazuca.online/01/js/latest.js
- Size 12KB
- SHA256 e411fc67f406df6d7ab6388f0dbe8bfa3a0494b39300e4d5b8a4675b1e7f3e83
- MD5 efe61894addf749077304018579f5727
- SHA1 77dfb4838314dfb340f995ffd9c8d9033ac25f7b
- SHA512 d931414057384c62c8d05d4b90b9e550bb1f34ed5339788b927c542d1ba321a3087c24076286ab99d8938c35f8feb9b7aee9b88fbf0501276b291c5839ebfbc7
- SSDEEP 384:4vFkFzAdvF4ZdO9Eve49NYdsGW4GmrC/g+fEjmcbnaVaD/bosH:IFkFzAdvF4ZdO9Eve49KdNWfmrC4+fEr
- TLSH
  T12B42A6A5F179E4E413A20CA690B79271F23DB735B005C1D1A14E9D86341EEEB22D3D7E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  deliverybrazuca.online/01/js/pixel.js
- Size 32KB
- SHA256 ee835475b8a2fe9e573a3045dc87cb37f62e022a594d8d94a67f1d0ebfa64d0a
- MD5 5f2b003925600a48e5ef97101a30327e
- SHA1 e41abcfbfbabbfddb081d5874082f33d5ac468f1
- SHA512 0d28fdba78414bcafed982a8bb75d015f547e17139e89cf9cf714c2c97513e056252cc1fac5a634417701a229fdd6412db200e279dfe2fe5dae8cc1cc6a921dc
- SSDEEP 768:HOaob07fi2b8SWHJ+1aZ1VGJlbw8AJXkIt7bHz176ZxWlbcqcsyTXrj82FLuSVKi:1sdGOkU1y/Q0lefQ
- TLSH
  T166E29685FA86D55407E384E5C47B2132F3383E3A712A8480E27EADD67C187DA7323A35
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  deliverybrazuca.online/01/js/sweetalert.min.js
- Size 39KB
- SHA256 2ac46ebee46d515be86deeba385b4e41f8cff160364b362c9a6e153df327c66b
- MD5 f3b8ce97ff6ce324da6232da353adf40
- SHA1 2a3daabc70232c6350ab48d32605dc4a6ac1f1fa
- SHA512 000d41ce9e50d0ad4a6a728a9af37fe1ddc844a565bfd3d883014fbe6df69cf3ba412f321f51ceecb6e0075a6088ec4fb5f7a0e73127d9b6bae0c51ca89c7a08
- SSDEEP 384:/BLa4qL1li0jldLUuuRzdNU/CfFqLyX9ye1hAbj/i5Yy/kyyeu8pgUqaF2XSSHEj:ZLahUvdNU/CNqWX9ye1hWz8+B3c2Bkj
- TLSH
  T196031A96758470A643E398F191EF020EF2359523B84798D5B361E8E88FF4E8D50A7F1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  deliverybrazuca.online/backred/index.html
- Size 8KB
- SHA256 f18aac62e5d2ac71701ef8349789f15dc827ed77f615d46910fc9398414c7033
- MD5 80eaf54cc0c9708b2775ba877f1e6a17
- SHA1 026e44cace88d273b3434db3240eea2fc119654f
- SHA512 754fbd38bdcaa296bd5fe6797c9d636aa13194058674e668e2b995468cd23f3985184d3151ceb9b030a747cbf5ebd787740c63bdc110658a6414ff5f4b6bea23
- SSDEEP 96:tFggJSyg2tyYfKNTH4WMyJroxffHOJHIoFe2H/YurtC0Hx2eTWFnVH/vl+5:EMLg2E2YTHkyJrsfuKF5H9eTclI
- TLSH
  T1FE123225A4F24037107291D06796BF1A3FD59207C54A8E6476EC23D89FCEEC2AD6729C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
  discovery
behavioral15 behavioral16
- Target
  deliverybrazuca.online/backred/js/all.js
- Size 1.4MB
- SHA256 75ca5d1ab7947e7c19b4914a8ebaf31f5ef8547fee7fe3c4b49125fa9159fee4
- MD5 f0b7e001e9f8a42f5ac1c1cd612b4a66
- SHA1 9ff3cfb2e15856f9b77bdda2661876614f46a245
- SHA512 c858d96d3611089a1d9eec8696c29a98d13f2e511a100c525037b9faeeb5995f33cea25514e1fb4e750b136fcf3ff979bca5a950d9c5e1519591787732380bb2
- SSDEEP 6144:+ZmgvFsUIY0mRrSWAept/X8Xt6kXTfyGmlvWyHjmhu9kO0n6FUwumFbMSAwLc/d:4qUD0JPvgJmhulEoMSlLc/d
- TLSH
  T18E65C56C97A193FC5D6AC3E18E2040B47D8F96EE7650A33CD279C670B1625ECC5C8C9A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  deliverybrazuca.online/backred/js/delivry.js
- Size 42KB
- SHA256 9cce171fc4d4f9b29d885593aeee19f60eac979adab9a27cafb4d3dc02109f9f
- MD5 78995d1357cc61a1f23804dcbf3df1f8
- SHA1 bcd5995f0fff048563a3bd96920d0e6134b6e0b8
- SHA512 bc74d80b7630de18a2eb0ad8a33ef2c40cf817e45f841276dbc889346c7cd2c1856a53ecb0ae8489227f6cc147bad354483977822f57a5a2fb7fa4a8cc89fea1
- SSDEEP 384:TLgLMUqUb1G8/fzbgkSgd+2GS9clApNUHHy++XhknrqmJ7B1zxBpHO5FiZZfGw9C:TLgLMUqURGcHgkd8fHDGOqI5jqdVv
- TLSH
  T165139614F3EC69D30276322A481F919E17AC0273D6004C6BFDBAA5F42CD8E6D7762D69
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  deliverybrazuca.online/backred/js/jquery.min.js
- Size 85KB
- SHA256 fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a
- MD5 2c872dbe60f4ba70fb85356113d8b35e
- SHA1 ee48592d1fff952fcf06ce0b666ed4785493afdc
- SHA512 bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe
- SSDEEP 1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr
- TLSH
  T13983F8DF77CA702247AB30B9006F550BF276199D684D4400F159D8E9BCB8A4A827BF7E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  deliverybrazuca.online/backred/js/latest.js
- Size 12KB
- SHA256 e411fc67f406df6d7ab6388f0dbe8bfa3a0494b39300e4d5b8a4675b1e7f3e83
- MD5 efe61894addf749077304018579f5727
- SHA1 77dfb4838314dfb340f995ffd9c8d9033ac25f7b
- SHA512 d931414057384c62c8d05d4b90b9e550bb1f34ed5339788b927c542d1ba321a3087c24076286ab99d8938c35f8feb9b7aee9b88fbf0501276b291c5839ebfbc7
- SSDEEP 384:4vFkFzAdvF4ZdO9Eve49NYdsGW4GmrC/g+fEjmcbnaVaD/bosH:IFkFzAdvF4ZdO9Eve49KdNWfmrC4+fEr
- TLSH
  T12B42A6A5F179E4E413A20CA690B79271F23DB735B005C1D1A14E9D86341EEEB22D3D7E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  deliverybrazuca.online/backred/js/pixel.js
- Size 32KB
- SHA256 ee835475b8a2fe9e573a3045dc87cb37f62e022a594d8d94a67f1d0ebfa64d0a
- MD5 5f2b003925600a48e5ef97101a30327e
- SHA1 e41abcfbfbabbfddb081d5874082f33d5ac468f1
- SHA512 0d28fdba78414bcafed982a8bb75d015f547e17139e89cf9cf714c2c97513e056252cc1fac5a634417701a229fdd6412db200e279dfe2fe5dae8cc1cc6a921dc
- SSDEEP 768:HOaob07fi2b8SWHJ+1aZ1VGJlbw8AJXkIt7bHz176ZxWlbcqcsyTXrj82FLuSVKi:1sdGOkU1y/Q0lefQ
- TLSH
  T166E29685FA86D55407E384E5C47B2132F3383E3A712A8480E27EADD67C187DA7323A35
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  deliverybrazuca.online/comments/feed/_https_/gravatar.com/__Gravatar_/a_.html
- Size 71KB
- SHA256 4909cf8da2805b0b22754515c500e0ee3f76f2309d71123376a74f7c17e478ff
- MD5 4d75965bdd6bdb43945306f14321bfaa
- SHA1 dd071e6343e587e02d582c89086ec51edcf94419
- SHA512 9ecc47da5bf4bbe4e31b67f2224e3ef102f286b547cfdfd0823cd5d7b5a5a97f83f2a89fade3b5276dd1903fe6b4560b393aec8b0fd4ef5b0846739ed3a5bf24
- SSDEEP 1536:yIlapedqSN4LGHGQBoIR8VSaj5mI+Pli19DP:yIUwdBNuGHZBoIR8Vv5mI+P41J
- TLSH
  T11B63D732B5621055252F4B8BC2CBB70C5269EF62C55359F9B1B120188AD9FBA33E731F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  deliverybrazuca.online/index.html
- Size 64KB
- SHA256 a2965745861b9623d6dbedc89ee14a0f3611a26797debfda1adb914a22dec6e0
- MD5 f22b2ea1a07f7c8ce3092826ca3b6c49
- SHA1 be8826adce3b4a6627222aed112c222e66a35976
- SHA512 31eee755a3cdeae4c8ee2550d6b76034f1570705cea04611458e0d536389c71434bb41101ab0aa883d55c0568c99a309616b00425ae5401194fe25ca6a2ea83d
- SSDEEP 1536:w/laped5SN4lxcR+yd2VSac5Gzr1X3PltWCpe:w/UwdwNSxcR+yd2VA5Wr1X3PTWj
- TLSH
  T10A53E832F6A20155262F8B87C6CAB71C526CDA21D54359F971E12018CAC9FFA23E771F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral29 behavioral30
- Target
  deliverybrazuca.online/prato01/index.html
- Size 44KB
- SHA256 690b9b7537af0ce6be9f655dcc9414a99c3347012f5dd941318c23075a5a4fa8
- MD5 34173a867eade797dd4d353a5ed9c1c4
- SHA1 39546954d29bb8f8aed1b0ea404d8c87446c34f7
- SHA512 911af35aacb047d2c20417ac9d16eb7cb12647309b075a6d9f5854f75573ccf26afa46d2b340e1d50e1a6629cf1e6a55ce7484f14c2f4561488f2b0906dce4b2
- SSDEEP 768:82/mL2vfuokyDxkxcxUxlxix4xGxBxVxexmxyxNsxuxFxTxvxTxYx+xLx5xux7x6:85L2vfuokyD66CnIi0HPE4E7sEHt5JCk
- TLSH
  T178230EB1A09F2D37412781DAC0D59B9530DF9E3AE26BA4D1B6F3ABB523DBDC07405806
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
  discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Looks up external IP address via web service

Looks up external IP address via web service

Looks up external IP address via web service

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32