2680f978354e60c9cc8839c141de24c659de2cb9e3ee3b29fa7647c51d9934fc

Sharing

Copy URL Twitter E-mail

General

Target
pos.zip
Size 32KB
Sample260813-wvldyace83
SHA256 2680f978354e60c9cc8839c141de24c659de2cb9e3ee3b29fa7647c51d9934fc
MD5 799196a41480aa033eb95eacbf06868d
SHA1 515e73e7c4667096104dda9610550635a7d33ede
SHA512 0d99ac0ecd2f597d5f688fb51da3cdea4fa0ab480bbe3f2856ab20961b13cd5c9b68f185a15e13b8dad421e7766a783715dc6028216d7aa904e0249d02a4fd8b
SSDEEP 768:3aJRHteMbojlUsthkZ7US9MXi4V0yJi3OM+dAXcy8PoVk7t30MbC:KzH4tlvU7WPi+MaAXcZcS30MbC
TLSH
T1F9E24B22CC18692ADD0FF634455EC64853ABC386CF42989F1B858A583F9F8845E75FBC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  pos/assets/images/bakery.svg
- Size 383B
- SHA256 5ade2cc5330395dc38856f3ca336014d301203c5b60a1cd9abd8eb21e86fb45e
- MD5 f19550fd23489314554ed5434cdb08cb
- SHA1 2db4771bf4dbb2996661e96d86fa713824edea13
- SHA512 0798c3bd9454d7e2499021301804a10ec023a434366365a45dc1f2b5b9ba6e2790458fc4974b70e53df421108e3f8ce1016c2299eb5f1324a113ff78f59417ac
- TLSH
  T145E02262428C980C4AB2C20C372A74E9232AE0D8920806C9FD4C3EA3A4527DBB807298
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral1 behavioral2
- Target
  pos/assets/images/beverage.svg
- Size 366B
- SHA256 d781fd1850d35fbac7666587d9e9c9b698b38fb1ad91a44ee76e1e78d8af6875
- MD5 d6be39a86fb3b4f8efa61e5d76767960
- SHA1 4a5148623e28ee44977356bbfefeccdd83bf1054
- SHA512 183af832bc739083ecf63df19ea08b27e5b27d23a1bc88e44193a467c3dd37df4ce1b44e40a3d21dede307671317ee37bf01e6de31d05eb8da28a0d21a440874
- TLSH
  T114E0D8A8C28D440CCF648352293C7DE413EAE6E4714400D4FD483251170A7EAFCEB24C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral3 behavioral4
- Target
  pos/assets/images/canned.svg
- Size 437B
- SHA256 8a6e9ee357d98bdc5e931e79652af6bc6573b023f658b7e6360a8db35a600ff9
- MD5 3391f7bcbfa2284c225b788b300b5845
- SHA1 a10e9e9f96092ae08aa449aa3894613f7869c613
- SHA512 b396adc399000651417583861aee59dc6b84c0d0fe4c802a4cadccc1749c3ee93f88b9d7ee04b6bfbc9619194931fe526c39ae7dcb0e9cbd42215c4e57521176
- TLSH
  T1E0E0E564938C441CD734C609672C39F43357E1D9430922CCFD413817614A6EEECBB29C
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  pos/assets/images/dairy.svg
- Size 343B
- SHA256 fa97cfec02a8e27f891b2f9c394d2749bca2f57163b017bd8d79806411b367b9
- MD5 3d47649816a7d1e909260ad0585118ed
- SHA1 71e879a5e7820d5040e33c09d56cc4b041a0fa94
- SHA512 279d2c9d0490cb134c35086cc5ec2780b5bca7d709d4e2ad868d7453463ae599fe28f53ddefb83b6988ecdf07b6d2ea06c9f5df47290cb25b816a8b02290a0c7
- TLSH
  T1C5E048A8C39D550C8E60C6553B2D38B5133AD5D4628401D4FD44655157067D9AC57658
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral7 behavioral8
- Target
  pos/assets/images/default.svg
- Size 404B
- SHA256 1a940be0f5dba2674e8530da3f8012303bacdaecaf260f79a43b80a206ae4288
- MD5 ca85692f99734c681f9f60c3a76dc7c8
- SHA1 96c841f0d7bda9459029528d80c07d6db87fbf6a
- SHA512 f9a6cd2f560c7cb16fe789f9c087ba165b0ba5fd66c5def2dd4dde9866c3ab0cc37534b1a35f6f1ca53743e301f584d4bb79bfd83effe1b398db5bca39985f30
- TLSH
  T184E02B96E2CC551CC764CA08731D78E52346C0CC0705469CF94039436485BDF699738E
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral10 behavioral9
- Target
  pos/assets/images/grains.svg
- Size 433B
- SHA256 99aba7a8c8d9970b4b88db2bc4f0767c211c530408608446f4d014f6e4f12c82
- MD5 38898b50909d6a17fc153aaf79dac02c
- SHA1 29e6a66f909c8c42776b112961287111b1628d0f
- SHA512 def06366ae0a00f4b3f5c78adf9efdaa97896454a054c8452907912dec3014db8d49ca6cec1db47eaf85c5367b8a14807c64a95faeab6e4be12b6a7360a8ea1f
- TLSH
  T1D0E0E5A4A29C004F9F3447C1312CB9A8513DD3D812890889AB4C37F1274AF8DDC5B7C8
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  pos/assets/images/meat.svg
- Size 299B
- SHA256 24f00b7b2bed57b3ca9c5963df89bcf1ff6217374f64120ec95d6ee2f57843d1
- MD5 5e3761bf6a6340d3ccfc59ef8908b1d5
- SHA1 e78ddc0811e9e804db68995f4a0d398c245698fd
- SHA512 2a7f7eb5786300cd563bedd687a0d8fd141a5e97763e5bef29acc7cae0a7b644f761c4abf4c3f411d8ab023402cf6bce70a012596876efd05a87fce53d86ab8a
- TLSH
  T13CE0C268519C88488634C698273C38E42366D2D4424442CBF99C3E825442AEBB99BEED
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral13 behavioral14
- Target
  pos/assets/images/personal-care.svg
- Size 329B
- SHA256 959993f4e198dee0076269bcddbea88622b778bf663bd029f37f19b5b5a2550c
- MD5 51bb0db8f75b7be8d6d1f9d54f2d9452
- SHA1 cb687b74db88242169d8cbc7ec037d10709361ae
- SHA512 f193f76d0deb356d44d240757c6c4364833e380386bfc0b8f459bb82e04e032a92411266e7313c4c578046564d1b92c75e1f7653701e43406077f155842cb1fa
- TLSH
  T1F7E0CDA9A1DC550CDF64C619373D39E52392C1D8434802D8FE843C4797066EBBCD769D
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  pos/assets/images/produce.svg
- Size 403B
- SHA256 e29ae8a2309e57fb6b0ea2b51d065722ad51f82ad5ec963fcd20596296fa5870
- MD5 4ecb8b44b1f78c5f3f417b70d6851271
- SHA1 9a81cafd529bc056051067902e0423416662f681
- SHA512 be4d2fd5307f1d1ec372791518457c553e5c073f35a25b87e5dfdc381dd8c8032b591525e65520f533791ce1a4a34f672a8b58d8180ba2045ac82f8afb94ccc6
- TLSH
  T1F3E09B5593AC450D9E70C288377B7AA5335AD0D4420C43E8F8403D52595A7EFF81E3D8
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral17 behavioral18
- Target
  pos/assets/images/snacks.svg
- Size 376B
- SHA256 4599bdb087f6da673c8cee7fadf20fc079665bcde0d08a67c9ac1afdfd8ae2f5
- MD5 fef5120298586f1638b8ec22ab82c9e1
- SHA1 b350097ce66e3a6a45e974de959fa3342e23551a
- SHA512 0731ff86e281d6fef3254b20d22c60211707da94d42b9158bacc6d8f594a453cfd5fa80d03e73840151aa260d54426dea32d4d4b777a8be3073cbeb4ac8ce26d
- TLSH
  T1FBE09298838C041C9F3582156B283CA9527E91F5A20811E8FC483261575AAAAAC77698
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral19 behavioral20
- Target
  pos/assets/images/spices.svg
- Size 378B
- SHA256 928bb58a383a2dbfd01670863a3ff1d48c729ad68914efdc91a81656b25178e4
- MD5 73f491e75864c58fa454c580542c659c
- SHA1 2bda6ddd6b0d6582af7b814f06782e5d237bf7b9
- SHA512 edd285da0740fa4e78b81f0e22689c6ea3cca1a363422deb7928508e514a35902aeab2a839327e30d6830e7fb619c4e3fbee0c3bed3720dd5d982bd4ee86294c
- TLSH
  T17EE09298C39C481C5F34C2556F2939B8132991E5A20901C8FC4826726B46BAAAD7B698
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral21 behavioral22
- Target
  pos/assets/js/app.js
- Size 1KB
- SHA256 cdd98d8502eb01d69582ade9a104ed0027ef35f9da6ae0990d437d3004c4b27a
- MD5 ed0b60758dbde5a4391b318788400403
- SHA1 0d8a7a9ee15ca7ed2e8f3ed509f14093baaf6be3
- SHA512 10160067001e8ca81c66ec1c62a28a0ba176fb1799a16cc570346d445c34c6f6596fc6eae7f8315d47989788dc7a584b09abe5db2f79aa4517db1274f5a793c7
- TLSH
  T1FC112C3D110611368A72ABFA97668414FA2E3237A100E60AFD4CC5412F7165A1A73FDE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  pos/assets/js/auth.js
- Size 401B
- SHA256 25bfed39b5e366f44c9803a8288b9bad53adbbf27ced38071fd74a373e82aa33
- MD5 72473a1a632e8d673d7832b9e050cad5
- SHA1 ba3885130aa83ac18a0db62161dd646f8bfbdf69
- SHA512 53272ccaea44f299b11409ac136394f85a4812a1d0b6622f0edb33fdfea6b680b578473e127122f9830215ff57dc7c2456e91e4374918b84d419af9d266ddca7
- TLSH
  T182E02B7130150C014A71F3A533A21814F414A027308399537BACD38C2FF3C634662E77
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  pos/assets/js/pos.js
- Size 15KB
- SHA256 53716cc5a464c905a54fc6d96212347d4a4487b2c5bd4ea6ed82e6ad8992d7b4
- MD5 f764b18cb7216b4f63c024fee8a8895a
- SHA1 4abf5eecf31f3bbffee6e73cad93299970f5aab7
- SHA512 ce00c64e2bf537c5d88a68e0cb62d70d2d9d3762c814cffa06e7d7f3cc208c32c75f3381a84cfea2f105ff8f9ca2a41b9ad8debdc2ae0513ba1d8d38920a10de
- SSDEEP 384:UROQiA7uQesGE8EAC+PE1tcUAkHg4IZ3Scggfs+JGWWc28oCXeARhi7D:ariAuqnRx1tc9kHg4IZifMscJWf8RXeP
- TLSH
  T18162A6DDD4F127708676A379A3630748FDB8324761C289517E6C89843FB2C2542BBEAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  pos/partials/header.php
- Size 3KB
- SHA256 a94b3efcfcd695c2fe1df04fbcfeed1fbc8278d44c43f24c6d706246cc154b81
- MD5 8f08684b54d85f8adb47c280bb4c723e
- SHA1 eaa722025adac871f27fc1bc1d65f3ba92b0e28a
- SHA512 9730643b9f6ba75440d8f0a1ca963f1f5670cc4df72e7f567a7153a3ec27e0bbb997c94f3582b88a722dd72ab86cf89f26fe6b9302783dfb9553c4d44a243702
- TLSH
  T10F51019B64D06A2606F2D9F686E25A29FCA3C10754A2274075DC0AC70FF3E65CE6FC41
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30