578139f394ed4d8269527c02e866204650d98cea50d71b5d0d8680c13b533267

Sharing

Copy URL Twitter E-mail

General

Target
RCKpanel.zip
Size 13.9MB
Sample260812-wvmxrssbnc
SHA256 578139f394ed4d8269527c02e866204650d98cea50d71b5d0d8680c13b533267
MD5 5fa78c43615c545fa7077bd4db1de38e
SHA1 999cde2d83a2f6db4b44c52e3390c8ab565c6301
SHA512 d45dc1e328825209f5693a346c409e5414fb6d5f03fd1aa414e9efd67065d0ddbecbbdbeaf3bfa34afd2f0aa314e71ec10ae446c1ff5c83b238a2f11b8f18cb9
SSDEEP 196608:RWnyh5qgpuLIBHBBBdjzS0PaOe0T+fnM/nLsZmF/TXS+dvbl8paK:e25VNBddjm000T6M/nLsZq/O+d58pV
TLSH
T1E8E601389B281CD1C81E4DBDAB0C424590BB1396D206B4673DB85258DF3FA437F7AA76
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  panel/app/Config/Events.php
- Size 1KB
- SHA256 eabe1dcae714fb66dc88b9e6a308a536054f6942bf351066497b54bfb6c1b29f
- MD5 6c7aa27b50274fef585fffeeff062ce8
- SHA1 6702ac4308f873b7a504ace582f65b223cff87b9
- SHA512 31dcbd2b095326992462c2c290e9d1569d7524b72ecde078491dba5f39724d14cdcc16603fb719db257fa45f7980d16e4dd61d4763c4b127c8d3af9b498c83ac
- TLSH
  T13F318749DF5A41730466D1E6768F34CBC3BB42FE761448E15A0C8D2C2C8190C529FFE9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  panel/app/Views/Auth/register.php
- Size 24KB
- SHA256 fa64b0cec7b3202e8ce8ad427ddaec466147007740846c4366b59a8d85f9c582
- MD5 db87745b26e524c70ee5b7d6d1e85f24
- SHA1 f2192d11540dbf4f13a7dc78f4522e575433266e
- SHA512 0ad2d6c0f4e4ba4337aa5c99a6891c62174e85435f7fbfc339a62033600fe0de9da29d1219daf033cff6aa208b9f9bd696b590a0df1a155886fac17d5857686f
- SSDEEP 192:gqhvKVdySaTZyeJBryRSBryATyU2B0ybcbSbwbsbktbaSo7O9863qxoaeIYGJj+l:vxV9/3ts+QMkXK0dFdUuwwK7
- TLSH
  T144B2D73816F11A1D518BC2F0BBE877262D39C253E52B8C9E79BC41B84F82E95DE23754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  panel/app/Views/Keys/generate.php
- Size 11KB
- SHA256 e1c71eb988c90cfdcf01e0e2c34142dc26736f2d84f073adc6850dd79c38aeb4
- MD5 d1b1bda39c76f4bedbcedbd7ad84d3c3
- SHA1 6a52bdc792ee38729bca32ce72abb80dccb8f579
- SHA512 24f05e7c6a0a468b3c5ac2a00152264ed93354111028e4415a093059b2c50fbdf04aabd98172bc9bf8ab2eec5ddcbb5a5c37a46476b33ecffe29f252f0f5f186
- SSDEEP 192:ebA7OIgXroHgAYLJi2nyiF9DG4oLDpl/qi5i6qiwiZn:ek7kXroAA92yiF6Ci5ixiwiZn
- TLSH
  T15A42503971C00A7A94B3D7B2AB642B18FEB9C217D6078599F5AC65C70FB3C14CE176A0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  panel/app/Views/Keys/key_edit.php
- Size 10KB
- SHA256 f89adc0fc1df1f062b1fe8c0c707cd17d14fce80d71ff7fcb16fd2b266988e6e
- MD5 4bb2362315e9f0f6c6feb072ebd1b580
- SHA1 0d233917fe743c99c9a2730e760aed907d0242c3
- SHA512 bd086b728d4a65e919e26bd23be00d6fe06b86dd4b834ff325a4788d16824d0f638382929853955348808c4d6bc718fee6d6124d189bcbd026e360f8d23aba69
- SSDEEP 96:eDP3EwNeFBSfgFGxz8FH5+EFQ5h8fNKO5FTaG7ljFOOg5kFMeRsFCXlohzF/oRgz:er39YFIjs5L1ltg9aloHo1PDG4oF
- TLSH
  T14632406975D00AA698B3C2B36B507B18EEB9C613EA07449AF58C599B4FB2C60CD07770
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  panel/app/Views/Keys/list.php
- Size 14KB
- SHA256 23d3cc72937047f57f517f177f6878ca0570e164b3ac858fad007e8ebf96eab9
- MD5 3409e96ddcea33737b829f0991b15ba9
- SHA1 956e81657b0613dfb242f237e18f4c3a550bddb8
- SHA512 19bf03e86271f6a472e783ed4b006cba1b9a92d218bdbee0a52cb73a3f049a9656a924a61cb922dfc0a1ea3698c4aee1f9e4a67b858467b86bf7860d51c08785
- SSDEEP 192:eltxrjvGHZr2fN022gBhfki440XJ97vc3io20zATNzRSbGLnob6vIViNt8v4AISJ:elnPOr2fN022O3i4iXK4AbOy
- TLSH
  T1E762C4A97BF5262D1047E1B59B4F37213D35E187ED0AAC287A6C52E04F96D1CFCA3290
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  panel/app/Views/Layout/Header.php
- Size 17KB
- SHA256 6e00d2d77f577b2f78fab2ad8443a47784608b9dfd0bdb5ee1f088bcc58510e7
- MD5 485f182c08a2a0460cd71461334296a8
- SHA1 2b600cf6c9187fa40e9a2d7dd73407fad350c362
- SHA512 e7f0a20c293cfb0ec9c298dec8dc030ae61185e6996b6aceb1a79f41d5e50140876db6d87601995e0255dce308a53829bae756bd7fc536d1b03c1a3b6ea9430c
- SSDEEP 96:Of2mexmeGDqTz2faVzjw/74wOxPexVFUoaaJ3jwAJ5H1UHSe+9:TrevyVHa4ZxPqIWznE09
- TLSH
  T16F82FFA56BD01A3D20778762D7787738EEA682C3EA07101DB13E50676F72D0DDE639A0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  panel/app/Views/Layout/Starter.php
- Size 3KB
- SHA256 d0669103bc07dd19c4b017ce24bf31e47ecafea38295770e68fc7d748e7c471d
- MD5 6bda2b8e7bfbcca5a38e59cfb892589e
- SHA1 21248288ee5f61c0b054dabd616e8bb5f3ec5b17
- SHA512 34ba125d73e708eb09c361227e3c19559d87a7aa9e53d3734dadc017c6613d4a38b5d6783d74f1b8372273e14b41074b4f00970e3f13bc560ecde503e3eb7b6e
- TLSH
  T1BB81843A968065091033D3AEBFF11584EB364017A2064858FBEE721BAFF19488C27FD9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  panel/app/Views/User/dashboard.php
- Size 21KB
- SHA256 a996ff4d1c6d593c576942d518442be9612e6199247bf78a793302be46bef670
- MD5 dbeb3d398ea73669079d4441fcfab3a2
- SHA1 e334ad12160c5a64aea608a16ce1c0e3769c0959
- SHA512 a0eeae9f50bf614a0b6e95b6715c9145abb47d484c679f6c25250b93292bc387806741a5cef19ee10aa6884716c5e63a4f10d95b1872febd42906bf49657dea7
- SSDEEP 192:LUHRhIdKxBhfkiBfhLigchLisaETriqni44044044w44VXJ974/xkF35+s68Lg63:LkReasfLgfXftVGNbXw3kN1hH0CswAs
- TLSH
  T1B3A2C56869F2063E704785F2A76D2B66AEB8E613D90BC95C757D00D00F83C98DED73A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  panel/app/Views/errors/cli/error_exception.php
- Size 1KB
- SHA256 30b4e04e09021225604737cbc491f6eac0b4f185bdbaf67b2788d467a2cafbb3
- MD5 04a2f832362c990ed39ced758f6d370e
- SHA1 4e4e54fa84be5b6fe0c001a277532ef860dd75b8
- SHA512 d32ddc022748d2f264999a722f4635d057debc9896b40dc3d8593a1e4d724627ad23421e1179a2462424ef74c848367544b56cb7181626e63efd8e81f07507c5
- TLSH
  T159310009F84DA31681731AECD15B5148E56DEDB2E1603D53FCD7405036D486EAE9F89C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  panel/app/Views/errors/html/debug.js
- Size 2KB
- SHA256 bab0513171b3c8a1cbedac83671b9b006b1565af73a7d85d098779c92764df5c
- MD5 5973874e26829d4330a083f98c7c5bf8
- SHA1 32090be50de5987b2ed9e0277162dcdc701f2296
- SHA512 8836ccd51def9ae57ff8c66143850d143fb6f7416665c9cad28738f4e30ac879a839b6207bc5ca5d24ba8c34e041c3e5edf433fd1c59ca77fd0ff291f3570037
- TLSH
  T1F15115F66F0C523D3165F06A0A8E65C9F72C057AAF409456B86CC49C21E1E13A07FBEA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  panel/app/Views/errors/html/error_404.php
- Size 1KB
- SHA256 bf3e612c7da00e57bbb1a0bdfcdb4cdfedf34ab79365218b8f53cbc04459f2ff
- MD5 d6215981703559dddd259d19ca3a758b
- SHA1 a1a8911f64000869569689820fd8148f2181fb03
- SHA512 a2f8911df956ffbcb5405cfa75f7a604f7ca22bfd627b8ba7e0e1733ca2bee74f8bc99b59a2dfee6e4a3e62c95a80747fe1824da614f32fca3fb7c815bf2af70
- TLSH
  T1A531156E5B0D0645112EA4D13A78B3D1201F173F9D4A8E6B7C63D630DEC813C0BA7EA4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  panel/app/Views/errors/html/error_exception.php
- Size 9KB
- SHA256 eb5d5b40fcb5b18887ad65bd35722632af3837ebbea254e22a09f46724db170e
- MD5 55276a6b5fc23c34356163a5e28b15da
- SHA1 5d7b664dea846370eabe8484e21df933dac67c58
- SHA512 c4c0910736841971f9f92a3084ac509c89bbe6740206d8101c93b1fd83dc238603d5c1ac15ae39ec2b5eeb679c91c4d6d9199480c92ec850b5f1beb2d4668ea4
- SSDEEP 192:nq1i8zTWFdO9HU/gj+jzZxcMvxxcY1r985AtXcl1r985LCIs/9ZORF6cY1r985li:Y9HQgj+jzZxcMvncY1r985ABcl1r9858
- TLSH
  T1BF22422389CD5C7E808178EF941E158851EFADB9B2A28451FD7B127F54C05287E0ADEE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  panel/app/Views/errors/html/production.php
- Size 456B
- SHA256 98325b61f81e7c48fd496ccb2af4e7e3de66963e71182521eedb29a336f17243
- MD5 bd2ca81229a8db409884c0185a4aee9d
- SHA1 5217cd96b588b63bda1441e17bd02c77ecfd74ff
- SHA512 644f39c54c0fc19487b9c28abf16a1d0f562cc60b6752f84c50ab34a7dec61d7b228b73a849237dc469e2ca3947b8bfe2e76d88c9c0ee94271ab7fc6db8cbccb
- TLSH
  T116F05C1A44522B229110FA756386B75838F3D909D71CCC605797B03FE6C1841C967155
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  panel/app/index.html
- Size 131B
- SHA256 0ee6dff170c38f66cc1e9ef00cfb927bba75b30379af3281c026647c068a4709
- MD5 c92aa5f16d78423a983a5d7ae44428e4
- SHA1 ddabaf1127fe57f9c65e2cc83cd3443f4efe5caf
- SHA512 e6da7a7c4f00aa43d6683d254b31b19b63be2c5110de15aa27e2865499dc7cbac356055f6bab38ebed326e90b2157f295eb231b89e1a1da8d3990278b5133df3
- TLSH
  T1DEC02B4B310D1044036363801AC43760314303C040C309C40F87D113880051EC4C704C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  panel/assets/img/add-to-cart.svg
- Size 779B
- SHA256 f0b662afb29b3c581524b8a5c9d1c765fdbc5b8bb13f7e76784e5df3d82b4dd1
- MD5 e757d9656216b672ab95ceb7e65670bb
- SHA1 dd57d8702b2c28ce2b912411528212febad5b9f9
- SHA512 6dab37191dcf3c085192f123ac729550fd37e27e7e472035d7fbf23c0fa362b228a6169440051f4f381c6663011b1ded00902bc3e6e901c6715c6309d075778f
- TLSH
  T17001687D8458F3BD6DEAFD3C1E6856511054F1AB48D7C78703A8D43A02830DED9094E4
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral29 behavioral30
- Target
  panel/assets/img/analitics.svg
- Size 666B
- SHA256 2b6329fa0154d21f61a3b7515aa0ef35fd8b08e9c64cccd39a4f38ee88e2cc09
- MD5 54f5993392d2d6cae2c019a68b2c2036
- SHA1 f492e06e58c77c8502cce809197560816b99a565
- SHA512 48a69661986cfa5ee47237d63857d799fe0a95ec5c91bbf8d31988b1bc16cf90f91e20d41d255bace40ca49c23bdd8f2d99991ecc3c30373929eea96307b6923
- TLSH
  T1BD01D12D5342E72C59DDD5F1BF1969E83248A0CDA28A821228A7CA8086425D0FB2E737
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32