f3619f122fc20fc7577857156ac8db4032a98357fdb1a4de68353e7781c75e55

Sharing

Copy URL Twitter E-mail

General

Target
loker.zip
Size 13.7MB
Sample260811-prmdhazth1
SHA256 f3619f122fc20fc7577857156ac8db4032a98357fdb1a4de68353e7781c75e55
MD5 c035aebb8182819218791f1ed8eeb89c
SHA1 4f68c4a493ebef6010aaee6208a8eb297f4cd6bf
SHA512 56f6a04d22c44408ae6266740f34f3e7a8957082592f616839c7fa24c3cfdecc209e0aea04610153afb8720567212fdb15b835d9e26a36fd893f3ebe052aa748
SSDEEP 196608:3sQ+ifThcQ2bNwqtw0MGhYE4Vy1ZNVK8km/t5wgvXEeLgFklV8meUIksVle0FZRE:3jF7Vq/YPVybNBl/KovxsVle0Fvt10
TLSH
T1C2E633F646184C86C12F9A74E78D5745C8EF4689A003FC4BF8B617C4CEEAA612A37F54
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  loker/Gruntfile.js
- Size 5KB
- SHA256 3950197f6ea56406ed19ab8dfe1f76a73336956d2894ffd1183cd69882933dcf
- MD5 a50a395cfeda9267c4c47256bcd996f7
- SHA1 6013750619daddf96865e72a61d8c2767a190374
- SHA512 844c2d4bda1d444f26d130cf834ff4a92bcc7af75ef6926bc03f792317fbee0f95e428a63cff3d831589aa88262d5963a08bd3afd3bf7a134f2af60f02a3eb2e
- SSDEEP 96:ad/g8H1srHZHBjHpHXn5HpHNHpHDHJHXagHfHMVSHKsB1s5HKHPHPHXt5HXHXHvj:ad3An1aRVNs/ntTYbnPaxhaY+a0fDDNm
- TLSH
  T1B2C1466800A40B23B2D735ED0E6A7211E9F4B09F24847578F93E521C8F9E12DA1B37B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  loker/acme.sh
- Size 164KB
- SHA256 c7fb632e198a78bc7aee4bddbae77709934f2ccb8926041a4ee31eea3dc6c663
- MD5 e6f63e79689e30cd8789ee78cafa20f0
- SHA1 e4edf9db1a4f750e2a1251d002bdab8ae11a4509
- SHA512 420cb9e5c13afb8fda5a7418369f2842ec96ba41d97c5cfcca38ee8302fad28321f9d42dfada4e80ca379c4713b7122051a2365a41cc3aaa9aed4b9216029337
- SSDEEP 1536:0vxUSMaulBYdlh4NmVMWh9dHvj46SEr3LxKxaMzil7oDiw:9Yd/k4njRw8tSiw
- TLSH
  T1DFF3B406B8400FF119BD80BD6DC2B42A232DA14745743820B9DD799CBFB5A62E1F5B9F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4 behavioral5 behavioral6
- Target
  loker/admin/main.php
- Size 7KB
- SHA256 23bc3a6b4ed51839884bace8d77793b9c97a9e8243ed3752db4955d5add2f770
- MD5 7c935f8c9dd57d8f816d55c7cefa62ba
- SHA1 c8e7eb8510f3955880b473fdefbefa8f6e33110b
- SHA512 da69f6276e323e178b4c00fc23d958f80017e981d5adf5e4fc08f3f12be876fe08abc7f48fe86df2752981dbfa43b40c61600f66699d4f00803f5008b5c24ffc
- SSDEEP 96:uv3oWM3gEIDyxFDkqwHOrNovxcD3eecdWuVW6IAW3TupfZjyae9fyrSod:uvYWMPIDyrVvr6vxK3rHucae8Sod
- TLSH
  T194F1610E5DFA5177001188A675F62B2AADEB080FF665D52470FC0B682FDAF4798239D8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  loker/admin/server/New folder/class.export.html.php
- Size 5KB
- SHA256 06d516864f113747b5a0e941b556d7191b94112cc3e29dc85309fc08413cc335
- MD5 810042779b4e3d0d73b05835cacf6612
- SHA1 99c499d7ca3f7b117c2f266f5465dd2ce7798864
- SHA512 86ffd90b04c5c564fd284383325b163ec9d2fe73dd38d22b90ba413ab8b5d0673cef368b7e0050e54a254c132a37c0bfda308d6580504b9ca81759ff98fb7065
- SSDEEP 96:H0EegNsxPRkYsfYREfhNDP178cq1iBXoM7MtyXudoZfTPOMaWcNk67q/+J1Y:/89Rs+mvN5EiBXoM7MEVlq17q/mm
- TLSH
  T14DB1B71AFFAC5DC65262B0E443CF71BF987CA23557411C13BEDD0BA814A871C12BCA66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  loker/admin/server/New folder/class.export.xls.php
- Size 4KB
- SHA256 f3d2c04ddf866e50b9da2489325423e956aa992f82e1949cccbd00452facf948
- MD5 7f0d1d8470ab46c8511e22363a51e81a
- SHA1 592f9faa0310e6486f4f15787f5b370f4ab70e5c
- SHA512 e486f4d56320ac4775517892bb89073c3b6813ed240667c339463090e08297ea6b0f0d3faf3371bd79583da5ee6a971098f442c68ece4a48d38d550233c901c6
- SSDEEP 96:sx0VQVEx0qXBrCqlWI2EC8A/PvIakkk7olgSY3H0lBARO:xVDZrhY/Pvxkv7olgmBARO
- TLSH
  T10EA1A49C74DD59AB933212FC8F36D954DC6CE1379245234179CC1CA28B7825C87EC6B8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  loker/admin/server/New folder/class.html2pdf.php
- Size 6KB
- SHA256 c5da40bbcf5e57e67dea3a927caac8d279d50ece1457cb1e0559d61d25281582
- MD5 de6841ca708f2ff2a53db438e248e171
- SHA1 2e9f6f4d4f1f4f122ec8e2f0a0b3afaa79ba2a40
- SHA512 319cd888d29847f9605ac8f0c3b710124decf575dc91e06e72be4260cf4f04e474c41ef758e51e5237245c543a5615daea860475f666cab44195b8b22e13a89f
- SSDEEP 192:QBCSSpWvRawn9Rv7pTKcYMxpVMtHzv7wCm5X:0CSfpawn9Rv9KcYaVMtTv7wCuX
- TLSH
  T168E1B59B3D4E12DD1792B1A593FFF465C93CD238639526027ADC0F98108871CA7F82AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  loker/admin/server/class.database.php
- Size 37KB
- SHA256 540f5f5a370496787bbc290f7db8b031512cf5dd764ac563d3a839d9dc5c2740
- MD5 404169298620de48de2b063b8dd2829b
- SHA1 6bca219807fdb75f30524a547f9514b6455950ba
- SHA512 490033a4dbf13838d99f7df8fc35c3847add42b093c5e4c8bda534dc3d60cfef4746553eafb2fc2faac5a9721d21b58d315e73cf093917e140a38e40cd1b19ce
- SSDEEP 384:DP/q/BTMJUmaLpBQVFfWjdXUR96TU7CuZYpRmOahbdOvFdTNCcf265HY3YH3eHYZ:Tq/LpPU6qYT2pO0sEWAEWW/R4FQ6rBu
- TLSH
  T157035F482CDBA450006BF1B88B5FD060F96E68273B489D017C9D5FA41F58F38D7B87AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  loker/admin/server/class.os.php
- Size 8KB
- SHA256 172af0ff9b8e1b16156a4bea692a8f99c659a75aa2434613cac7f9bbfe2beed0
- MD5 698b643b5eac1a501861833e34d707a9
- SHA1 3af1bb5bf92bc092e532edd84117b80c0b53a06b
- SHA512 71099b4b9121e0a24b92cc91688a86668d20d557b651c3f96542ceee7dc0953f3d4267c45cad29df692c014fc69552d5ae6fe951448e3c2192556c83e2b84bed
- SSDEEP 192:sBIFJC/G1Uzv3lg5DU69cfLISCm/CyMLc2Rcym9:saGy5I69ILa6
- TLSH
  T16212858939FB8EB5B0B7F0DE4F4F8414B91496473540DA817EBEA2C04FA1664D9F02B9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  loker/admin/server/class.query.builder.php
- Size 7KB
- SHA256 baac8142c8db5cf7ecd839415137d465261fbfa6ad3dc6d96f6b59bf1852b7b8
- MD5 6bae47b49c4ee7f65256273d1989946a
- SHA1 395b7dde5750aa5bac4c2ea3aee3b62ab601f582
- SHA512 979c0a2665dca68473b78574e30ce46a9f36fca733e741adb379cdd05904a6e3c9b25936696e582a95b747a5d68ceac9e94798e1757bfc9f7cea3a1cadc9db13
- SSDEEP 192:9mQccV2RxUKLPjj2HZbXEaA2o2woIQDccn:9mQc+S5LGHZLEh12wZQDcs
- TLSH
  T1BCF13384DBCD6888407A63B54DAEF0E96D7C6032BF440C1BBCBD5F682758E3E44259B9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  loker/admin/server/class.utility.php
- Size 6KB
- SHA256 55dffccdba94f7dbf9759bb7a8246ea46e86780d9ae2ecc98ef371cf262f2555
- MD5 cccf57c128a6a31ec293c56bfa1c1668
- SHA1 cd8b9322d046f9cc91442c2b6b0e84c2c757feff
- SHA512 ec6baa3e0a61395692d3cdea306b09e2d2a1d44ca48b9c70448cb6907e18e925c6b25f63bc0dadaea2d5515b2a6b3f85e881ba9a7146c1013d77fcac5527dc5e
- SSDEEP 96:EIUi/30bV24RPOCz4cBc8B0aBtw01W9DgyIITztAS6aZR3xz2jBG7/2nGteE+sEE:uiv0bY4lp6zItwhDuwN3oVG7/2GZ+lE
- TLSH
  T189D166DCBACF612D4657B0348A8EF039D93D5633924A4E01BC9D0F396FE0A2CD2B4569
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  loker/admin/tambah-post.php
- Size 10KB
- SHA256 bc5e79fce64926ed52ec4212dcc892d9e43a35903660c6112a12da581178772d
- MD5 5df7d772338e996f7d2666867b09f4fa
- SHA1 83e541844a8c59d3a8732ed5be6fa5a3840b3449
- SHA512 a8172665ee12cee2c443551cfb186264aeab09c011789ee10ab31ae4b5d3bce517424cee4e0cf2fa7088728f7cd8827b4ada5513a9a0e0f8c45137678e847750
- SSDEEP 96:b4PRYkn9mhPvHk744B2Za4+b2iofKnsxoUsAKvqzZz:0P9mh2D4I2i+Ksx7sAcqzp
- TLSH
  T16A22202028E14E62557B89E8CFE54D4EFE68C213D905418139DCABC30FF6D42C9B3AA9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  loker/bl.html
- Size 2KB
- SHA256 24d3164790af370fbb6804ae5d7bd2480bdd9fd81839b15dd3798f7e200c7ccd
- MD5 f5af1e3c52fc047123c20443f43dc1b9
- SHA1 402f332082b579b95966865142dc8e42190fe61d
- SHA512 67a2b8b6e8b43b18039221f2cf21b497029c98b27ec73580e570f9ad27f9d9472500f823eb7ed37bf4c1fab78c8ed6bc0e2fe9097684512b270df1ff9c779d0b
- TLSH
  T15D41B7A5A9F415C159A005747F84FF62AF60863FD7004988F88DC67ADF88AE2E5333D8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  loker/blobl.html
- Size 24KB
- SHA256 f163117e9c5c957e077c87142041fcc32230fc8ef36860e14c984144db365ce4
- MD5 bfd0ad378ba9e63a9de55cd043981fd5
- SHA1 b0a9b9e0bf2450f1de407ce763b8303e5547d4d5
- SHA512 8049da7880c3307b09ab791fec0ce65cfbdf043cec942d7eebad53468cf786f7a4b4220a143564026041ad25a69e21ccc243896b885207670e260e6d860f55af
- SSDEEP 384:o66Y1KRhFRBmWeXoD9EnN14FEWFNdIlzvI438NC1yymm2G8RovtbgzYvjrm047FB:o66YURhFv
- TLSH
  T119B28BA4C08F0F7D959220ACC9AD5A29369F6EF973DA4814BC7F493AA71531474233EC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  loker/bootstrap/fonts/glyphicons-halflings-regular.svg
- Size 106KB
- SHA256 42f60659d265c1a3c30f9fa42abcbb56bd4a53af4d83d316d6dd7a36903c43e5
- MD5 89889688147bd7575d6327160d64e760
- SHA1 de51a8494180a6db074af2dee2383f0a363c5b08
- SHA512 c2e77eab327af1469097c31bc0daf820c066b0222059d8ff0ecebca974b62b7535e96f1f356643b2b62763a924d040e4ac9b2097e1de2c22226411fde8723743
- SSDEEP 3072:jY+spjSP0yD4zOPqGGUG0kSnouoxvKDHkPooe4Pqo0CjmFIudsqi/CWEI:kRjSP3D4wlG0kSnouoxvKQPooe4Pqo08
- TLSH
  T130B30F1CE9940B709BDDC3A25B75AE54231C418D72303CD04AB9E5E0B99BF694F8E9CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral29 behavioral30
- Target
  loker/bootstrap/js/bootstrap.js
- Size 65KB
- SHA256 41af969ee00e8132a0040094db2b1a79a15b4d9b7e2bb485012970fdf7b5c455
- MD5 9cb0532955cf4d4fb43f792ce0f87227
- SHA1 542cfd539f0cad650342c8cab8baf1cdbcd5fea6
- SHA512 bf94662d185c86861febbd9fa60d8e8691c9507d20e5e7b68e6b4a1dc2daa6ef578283d0c34bb782b96d748c93bd04ac6fe265495b94b373f25258fac5d1a7da
- SSDEEP 768:VpDChCkWDTb92TihZIbECRUI2ek9BjooHVZsBdGhWLXA:mWDniKekhsboWLA
- TLSH
  T1B56340167BB820618B5B70BA8CDF510C7238951B554BD4283CAD97D06F50B38A2ABFFD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32