cde830bf73157be23b39d24875d1843211c7c272c2c23a033b71b49681bc9ea9

Sharing

Copy URL Twitter E-mail

General

Target
facebook.zip
Size 3.3MB
Sample260812-pk72mace67
SHA256 cde830bf73157be23b39d24875d1843211c7c272c2c23a033b71b49681bc9ea9
MD5 a62ce55d93f4ecaced1c28916a0172c2
SHA1 bbb8f7f37c783e86c5d3fb05bfecc13c1e149218
SHA512 be0958ee70507d54da7e2e52025fd624a633c5c1068c04355ed97bba2dfe5ec393af2c214d00a1df084f6d4aa5899eda9aae3594f684436fa991956986365b73
SSDEEP 98304:+XggNNXZy45Z4jm7AQkl8+D9wvD6jknydjP:GbN1A94AQMxwvWTb
TLSH
T136F5337F97500127E33F2E7050DFA21E5CA90B8AB951241BEC52B7863B5D3466F292EC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  facebook/facebook center/index.html
- Size 10KB
- SHA256 d7031b126d0af7f80c22955394c02180c582654f09f9157bad78ff53944bae14
- MD5 aa0d16b5a1fbb472b4110d94de806eef
- SHA1 4a2e1e1069e62abbd72cc79c6614995440d20256
- SHA512 041b6316fc6ac949577239e6df4184658d364dd7458542a206ed026e9eb327fcc9db636c14c88991bb0fa7a10321e5e0b7ca6f847d57ff5bad49afbe790243fc
- SSDEEP 96:yHgW7ooPHEVEvoPHEVEvoPHEVEvoPHEVEiJF:gZHEKWHEKWHEKWHEKQ
- TLSH
  T14522572048CD50B720B389C05F514FA9FED68E539A26C604BEAD77A72FBAD39CC57024
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  facebook/facebook center/js/jquery-3.3.1.slim.min.js
- Size 86KB
- SHA256 26a80014d87ff2ce19f2d1cfc92e537213f96ab6b620a4217da3cb643aeab4ba
- MD5 4a24bed8e21d8f3b5569e507c0de2ba4
- SHA1 23a66cab14110e02194a5f205bb7e6aa551a046f
- SHA512 77c7708eba471c09d10045f71c5469329e6820eadc9c25518b9895bc1ceb5399c512b30a1435ecc32536684cb913480e6080e17b5a6d456f1f1b819cc0a7b2f3
- SSDEEP 1536:DTExXUPinxD7oPEZxkMV4EYKFMbRHz6odHOHCWrdETuXxBxCKKB9XMqojZlOPmH7:DMZmeodHO5nhCKWoyPmHQ47GKf
- TLSH
  T1598319DD72C6B06257B761BA00BF540BF236599E6C4D4410F124E4EABC78A4A823BF7D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  facebook/facebook.html
- Size 1KB
- SHA256 06abdcae95e0e5a5e9e0085a90092c34d9f3d344e172bbc7d02621519138e77c
- MD5 1655d3b26c89b47350c28d81f12295a5
- SHA1 7c2d0667a263433446bf7106b43610b37af25334
- SHA512 b1f65ead3c8ea5277394f0a34002b8862a829ba11d4ae5b5a81a668f945904ff204c2ede5286b7819b9a113c6ee9ccc06235e45cbdc81748d6ef9f56749c9d04
- TLSH
  T1EF21E03500C0481341B3C2E19AA59BAAFED29243DA4B560071FCBB9FAFF7E01CE97241
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  facebook/font-awesome-4.7.0/fonts/fontawesome-webfont.svg
- Size 433KB
- SHA256 ad6157926c1622ba4e1d03d478f1541368524bfc46f51e42fe0d945f7ef323e4
- MD5 912ec66d7572ff821749319396470bde
- SHA1 98a8aa5cf7d62c2eff5f07ede8d844b874ef06ed
- SHA512 4f575d52331de91a2e32cc3408dd0eaf0cf25b7244d34b226314e3647e85ce284f86e3b7238c6c8b9022dc4e2787bf51620849290cdcd5d4c4bc905f289d2156
- SSDEEP 3072:PLac0AVfCwGzG8LY4kh53s0eOnz8WjKAOvX7LYvglcD4ZME8xYWDQqJpFDBl4qjm:hCG7bFv9gSS
- TLSH
  T17594C96CE9910B79CBDD42D5957D0E90132D81EE28783E1846BEA8F05D06B2A0FDFBC5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral7 behavioral8
- Target
  facebook center/index.html
- Size 10KB
- SHA256 d7031b126d0af7f80c22955394c02180c582654f09f9157bad78ff53944bae14
- MD5 aa0d16b5a1fbb472b4110d94de806eef
- SHA1 4a2e1e1069e62abbd72cc79c6614995440d20256
- SHA512 041b6316fc6ac949577239e6df4184658d364dd7458542a206ed026e9eb327fcc9db636c14c88991bb0fa7a10321e5e0b7ca6f847d57ff5bad49afbe790243fc
- SSDEEP 96:yHgW7ooPHEVEvoPHEVEvoPHEVEvoPHEVEiJF:gZHEKWHEKWHEKWHEKQ
- TLSH
  T14522572048CD50B720B389C05F514FA9FED68E539A26C604BEAD77A72FBAD39CC57024
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  facebook center/js/jquery-3.3.1.slim.min.js
- Size 86KB
- SHA256 26a80014d87ff2ce19f2d1cfc92e537213f96ab6b620a4217da3cb643aeab4ba
- MD5 4a24bed8e21d8f3b5569e507c0de2ba4
- SHA1 23a66cab14110e02194a5f205bb7e6aa551a046f
- SHA512 77c7708eba471c09d10045f71c5469329e6820eadc9c25518b9895bc1ceb5399c512b30a1435ecc32536684cb913480e6080e17b5a6d456f1f1b819cc0a7b2f3
- SSDEEP 1536:DTExXUPinxD7oPEZxkMV4EYKFMbRHz6odHOHCWrdETuXxBxCKKB9XMqojZlOPmH7:DMZmeodHO5nhCKWoyPmHQ47GKf
- TLSH
  T1598319DD72C6B06257B761BA00BF540BF236599E6C4D4410F124E4EABC78A4A823BF7D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  facebook.html
- Size 1KB
- SHA256 06abdcae95e0e5a5e9e0085a90092c34d9f3d344e172bbc7d02621519138e77c
- MD5 1655d3b26c89b47350c28d81f12295a5
- SHA1 7c2d0667a263433446bf7106b43610b37af25334
- SHA512 b1f65ead3c8ea5277394f0a34002b8862a829ba11d4ae5b5a81a668f945904ff204c2ede5286b7819b9a113c6ee9ccc06235e45cbdc81748d6ef9f56749c9d04
- TLSH
  T1EF21E03500C0481341B3C2E19AA59BAAFED29243DA4B560071FCBB9FAFF7E01CE97241
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  font-awesome-4.7.0/fonts/fontawesome-webfont.svg
- Size 433KB
- SHA256 ad6157926c1622ba4e1d03d478f1541368524bfc46f51e42fe0d945f7ef323e4
- MD5 912ec66d7572ff821749319396470bde
- SHA1 98a8aa5cf7d62c2eff5f07ede8d844b874ef06ed
- SHA512 4f575d52331de91a2e32cc3408dd0eaf0cf25b7244d34b226314e3647e85ce284f86e3b7238c6c8b9022dc4e2787bf51620849290cdcd5d4c4bc905f289d2156
- SSDEEP 3072:PLac0AVfCwGzG8LY4kh53s0eOnz8WjKAOvX7LYvglcD4ZME8xYWDQqJpFDBl4qjm:hCG7bFv9gSS
- TLSH
  T17594C96CE9910B79CBDD42D5957D0E90132D81EE28783E1846BEA8F05D06B2A0FDFBC5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  js/bootstrap.min.js
- Size 56KB
- SHA256 0a34a87842c539c1f4feec56bba982fd596b73500046a6e6fe38a22260c6577b
- MD5 e1d98d47689e00f8ecbc5d9f61bdb42e
- SHA1 6778fed3cf095a318141a31f455c8f4663885bde
- SHA512 021e615983f30ec5477fd8b611e8c5045ac6d9900f9a9bb8649b56e0c7d282965a727f8cf501c3b7e1ddff02f5b44924d5481bcea7a926be8a9e166314a07ed0
- SSDEEP 768:5NYyDyKAmHVaS3m3Dqp0NwCkXDtdFDLmTV+miDNJcJiQMRqyPiYtB6UvcCg8YGk:5NTKktDLmTF8yJL45XtHjoGk
- TLSH
  T11243C90A725478B205DF9176917F420BB737688AE94AC16CB91D98ED1E7CC893227F3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  js/jquery-3.3.1.slim.min.js
- Size 68KB
- SHA256 dde76b9b2b90d30eb97fc81f06caa8c338c97b688cea7d2729c88f529f32fbb1
- MD5 99b0a83cf1b0b1e2cb16041520e87641
- SHA1 bc5836992c0b260496ba520fe1336d499bf06eb7
- SHA512 33ea8c2353c745c61c3a927378995a59b555c76249c8f23065ab3ca2bedd73decb64ea248ef6e97d1c729a156d9492f28e2177c06cabd0524e0380cb38d2d52f
- SSDEEP 1536:hLiMgk2gULYoXUmZx6+VWNL0kC8W90qU9JR7hDqEDqWSNB1gZFy/HG+FP:I8w0qU9JTtH3aP
- TLSH
  T19B6309DD72C6B06257AB71B900BF510BF23608997C4D8410F129E8E9BC75A4A827BF7D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  js/popper.min.js
- Size 20KB
- SHA256 66f3a07e1fa9b64a686b66381e4458dbc8abf3dbbff954720c4eec07b84411c2
- MD5 56456db9d72a4b380ed3cb63095e6022
- SHA1 6dbce88aee15b42f29083df7a07513cf3b486ba0
- SHA512 e56bd96b837b26add354d0a9e2b8dc04c95cea94f7959ee05718ed23a224296fae22d49afab160b45963bd99c2c501a3f12517e431eb68a13a327ff8b262b50a
- SSDEEP 384:kmQkLrwVOyzirVyKnxRsIB9Db5HjiWn8xHOxvRVgD75zBY5vImg3FzGpL9ARdOgS:vLsgyziJp3Db5OxHOxvYD73Y5vQzyL9p
- TLSH
  T11992B4CC3294B06643A791A7A0AF960FB2339875610E9410F19DF2D97C30EF9A13BC79
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  facebook/js/bootstrap.min.js
- Size 56KB
- SHA256 0a34a87842c539c1f4feec56bba982fd596b73500046a6e6fe38a22260c6577b
- MD5 e1d98d47689e00f8ecbc5d9f61bdb42e
- SHA1 6778fed3cf095a318141a31f455c8f4663885bde
- SHA512 021e615983f30ec5477fd8b611e8c5045ac6d9900f9a9bb8649b56e0c7d282965a727f8cf501c3b7e1ddff02f5b44924d5481bcea7a926be8a9e166314a07ed0
- SSDEEP 768:5NYyDyKAmHVaS3m3Dqp0NwCkXDtdFDLmTV+miDNJcJiQMRqyPiYtB6UvcCg8YGk:5NTKktDLmTF8yJL45XtHjoGk
- TLSH
  T11243C90A725478B205DF9176917F420BB737688AE94AC16CB91D98ED1E7CC893227F3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  facebook/js/jquery-3.3.1.slim.min.js
- Size 68KB
- SHA256 dde76b9b2b90d30eb97fc81f06caa8c338c97b688cea7d2729c88f529f32fbb1
- MD5 99b0a83cf1b0b1e2cb16041520e87641
- SHA1 bc5836992c0b260496ba520fe1336d499bf06eb7
- SHA512 33ea8c2353c745c61c3a927378995a59b555c76249c8f23065ab3ca2bedd73decb64ea248ef6e97d1c729a156d9492f28e2177c06cabd0524e0380cb38d2d52f
- SSDEEP 1536:hLiMgk2gULYoXUmZx6+VWNL0kC8W90qU9JR7hDqEDqWSNB1gZFy/HG+FP:I8w0qU9JTtH3aP
- TLSH
  T19B6309DD72C6B06257AB71B900BF510BF23608997C4D8410F129E8E9BC75A4A827BF7D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  facebook/js/popper.min.js
- Size 20KB
- SHA256 66f3a07e1fa9b64a686b66381e4458dbc8abf3dbbff954720c4eec07b84411c2
- MD5 56456db9d72a4b380ed3cb63095e6022
- SHA1 6dbce88aee15b42f29083df7a07513cf3b486ba0
- SHA512 e56bd96b837b26add354d0a9e2b8dc04c95cea94f7959ee05718ed23a224296fae22d49afab160b45963bd99c2c501a3f12517e431eb68a13a327ff8b262b50a
- SSDEEP 384:kmQkLrwVOyzirVyKnxRsIB9Db5HjiWn8xHOxvRVgD75zBY5vImg3FzGpL9ARdOgS:vLsgyziJp3Db5OxHOxvYD73Y5vQzyL9p
- TLSH
  T11992B4CC3294B06643A791A7A0AF960FB2339875610E9410F19DF2D97C30EF9A13BC79
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28