fe4d1b10821547fff3693aadd10f0f98dc280817c759bf625262c6203adf4bba

Sharing

Copy URL Twitter E-mail

General

Target
ElectVote.zip
Size 592KB
Sample260816-wxnbbafb85
SHA256 fe4d1b10821547fff3693aadd10f0f98dc280817c759bf625262c6203adf4bba
MD5 b4516f3ef5102d2feb2e56ab511e3afb
SHA1 57e26c766b7109016fa1cbd72f020ec9451535d9
SHA512 2584d5d7ac20d28b9e9b04726c09555e52714a650ac05efe014e44e523bcfbaa4d041e1239f74cb64f22a1ce45882933674f2b99ed2243933261807a5968c24d
SSDEEP 12288:1YBQrRt39mwmHFMWF/rbprPorxTYsep/AFYat2cHR8T8Q6tNAOVLeQ:1YBQrdhmHFMCNrqlP+/AFYM8T8tUOVLr
TLSH
T155D42333E7095010DC9B013F71B84546FAE4935A62A8AD8A9339DAE21DCCAD51D437FF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Targets

- Target
  ElectVote/ElectVote/frontend/assets/js/config.js
- Size 4KB
- SHA256 30d7f7c3d740af536e9b771bcae0ed96561c8c6e266d2e38989cb2bab07f72be
- MD5 e7f72f1ed5a7c6635c8887799acb571a
- SHA1 9d64b488d0fbafdcbcc12bb39e4e17e9b7f6f829
- SHA512 044f35740991e692159b9af8cd9dee49414ebea94f3ffd4c2d7658ffae839d910095dee66a6f2cc181a0d3b39461cec2fbdd6706ecb991b83e2ad30c7a6366f3
- SSDEEP 96:3V14ZAf1CJLvN8IRYBANs+Uv3zeeg2jf4yWK6Sy7EKZUv3zeeg2Rhry7Eq:3V+ZAf4OIRYBANtUbe/lKDy7RZUbe/cq
- TLSH
  T14F81319B259203160AF263E67B179614F337E1672299C25A72BC83443F78406C9F2FCE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  ElectVote/backend/api/candidates/bulk.php
- Size 1KB
- SHA256 57a9d238857b6d66d870fe8de322ca63ae0795464e20dbbb9ed8a667b62fefef
- MD5 5a791eda18a154a878391c0fef21e3d5
- SHA1 6b06eed44d7611e6c587d00646f20954a4885257
- SHA512 5f58058b39dc13f4cceefd6437d684c013498798b0b40f6c16e58bc1fdd95c1874bc67920642eba680aaf5aecbf5883e2d81916d05107576fe4f38b510fa2dd3
- TLSH
  T106313D671984166525B277A612314910CAB8C1123FC102C078DDA6812BBABEAC72BFFE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  ElectVote/backend/api/votes/index.php
- Size 7KB
- SHA256 ab6e08a968d1a4e8876ba78ab0038536fb0ff79058898c80fdb60fb5ba29cda4
- MD5 f00bbbed2ee1d98b6a08ecdcf2d89cbb
- SHA1 845a40cd69c4820f3bc620e2d9e3e0ac83fa27d9
- SHA512 f502f2c99022f37471ccce48518058d6b212f09ba770858253a1d87337f3ddd019acb68af3b72cb00315348bf9eadb56dd36ad86c9f6450ef69fd643d6fc541b
- SSDEEP 96:Cvtp5uqqjkxF6/VSyK0KYs04PKwPKPwfANJkad0j6tMj/wYgitcKxvnP1vLm2C:CYqhc/3FKYs04ywyoM6Gf8c8vJLm2C
- TLSH
  T147F1017475A15EA534B3D36C5B168009DB66B5133280054175BEB2C00FFCDDADA2AFFA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  ElectVote/backend/config/database.php
- Size 1KB
- SHA256 7eeefdb78862af8e92a7fde00ec8a7a6036ef38aaec546214f7eb8a512c2260f
- MD5 f174f0fb5a6890560c3a5a529f4d7b4c
- SHA1 ecc452c71cfdce84978f3c36b1c41b8a052873ff
- SHA512 90476f9b56370d89bb6db962a0b5c6d6bd5b2629a94b0272a6a6ec373d82d2a51071c8c36e0dfa5e848fc2565d2802c72965993b355d85d6b04ba483d8cce7bb
- TLSH
  T1F9211F562240D561133B336D8F0BC044F57EB23B425822627E7F90462F302B4AAEBF8D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  ElectVote/backend/config/migrate.php
- Size 2KB
- SHA256 f16fb1f8a22dbeb54513c4fd820957d81b03b61f67f93c1574bde2a4e3533549
- MD5 da96434356ecaa02fdf0d1b6bbd5b9a5
- SHA1 111c2c2e7809af9b97199c642a0564240bd578e1
- SHA512 3853618e935218744956085d2df66248ce58bf3986bde28540c1c78fa259c1ec7241ba2cf45ffe3acbbdc989ee81db264a7b6b06eb95b0f9ce9b66b940a202ca
- TLSH
  T1DE418D0B34421E3988F767699E73E084E367E86791E056F078ADC0D45F704208A6AFEF
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  ElectVote/frontend/admin/account.html
- Size 17KB
- SHA256 9f4e4edfe41c5cac2f7b709bf3e89757e422e0f329e4cde4e6a99374461afcb8
- MD5 e31d47b0ea04973b9bda0170163add95
- SHA1 ac8dae6c34ef2dd813775f6c6ef7b85213346b51
- SHA512 7b29a7a215adffbdd007b1e6cdea750f3b83fce76d9be2623b6d234757afd65ba96988df2c3e47c1d967df271076b7f0d46e023479d19d5b38102e0a6f601b9e
- SSDEEP 192:HhuJ/W5Ft59yEwkUiOs/Lf2rxn/9V1O4A0kf8Q:HAJu9dUt9/dAxf8Q
- TLSH
  T151826D762A841D3C7063CAADD7A47769B465F143B9064018B1BC32652BEFE09DC376F8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  ElectVote/frontend/admin/candidates.html
- Size 28KB
- SHA256 df64046ebecf23c88782268ec069ce56c58700ce4a1fc7433a29b8c171b3c691
- MD5 2fcb47e2940ba2bfca06ceec11a112a8
- SHA1 9b255c4999bc35710001d314054e4ec4ab1ebc97
- SHA512 12102ff767dd8f44e4e314c57124d138bef95299a0af93941377d073195c6fffafd133ffcd26f077f7bc0cef7f9d9f9189a4d95539fa63490050913eb48c8e44
- SSDEEP 384:yCiaYqfm7vRHqfQLp10chx+hKjP6bucoQdl3JsfNc:yCaqfUHMchsIjKtdrKc
- TLSH
  T196D2607232901A3974B7C6BDD7666759FA25B103B9465008B4EC71920FFFD04887BAF8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  ElectVote/frontend/admin/dashboard.html
- Size 20KB
- SHA256 8cde2bd93e52f64c63d75d005de583b5463a06f9661e205efb2f364d94a3bbff
- MD5 dd6d730d5b3b2bacbf5041295b92b70d
- SHA1 dc89402154e698a9f314a9892b6b1913e0b3da9e
- SHA512 4a1fa88b0469403aab79585f1eb07f5ced0ff592bd8f3cd1033a6689ec5c296ea049f569486c8a4d12b431006f6281ed1acb15111a89f7b6086f4a9446c98302
- SSDEEP 192:6huy3IbV3tbtg9zG/fkaHhfMMMRBJUXc4/djRSgCTW8U:6APxnBxBfMMMDJUMQdQdTW8U
- TLSH
  T12192107426C0157E94F7C6A1AB6477AEF9A5C283E94BD118B2EC03D32FA3D04DC67294
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  ElectVote/frontend/admin/login.html
- Size 19KB
- SHA256 d7546fb4bb7033c5c48d6c5bb178c506a72df1ea61a68d69e6c9ec139846979a
- MD5 60b5c9467206d9fb4514921a4ddc23a0
- SHA1 79ee2bce946bc9734ce9cdc7acc72637894a0807
- SHA512 17db711bf679154d2dafa4f9019c1b7abfebb50fe517f768d593b905b1f3c32f4148838c0dcf76197c976d2906575768a6193a90904b159bf5b7b3b6cb261881
- SSDEEP 192:5hfq9nEqiFOY8bRQv7Ga50dkrKJj5H73zrdoC+tzCUOYvuIUxjXBAHJMmedB3UG:5Zq9nEqiFOUcjz+VvUxjXIK/d/
- TLSH
  T1139295752180182D6473C2A4DB626B6DFB6AD013E607856C72BD23961FF7D48CD23AF8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  ElectVote/frontend/admin/positions.html
- Size 14KB
- SHA256 1786a3d24d0577da267c6767ab54d0f1334b011b77d4dc48df2a3be07f7d19d3
- MD5 c13ca94bbddd199cad411cd3b7b9fe45
- SHA1 9cc52bacc8c314a6df9ea44958634c9ccf88bb7e
- SHA512 49e7097536b803bfce1368d8132bc41d58b3fa107c5b69f76f19e8e4f27dc16d52bc36e35a32c11cef1f7d0e49392c00f6b0bd2b059838aaf7c06e1e4d825745
- SSDEEP 192:ehuK/WxFts9yImkCR9FeDmfkltztjdnF4zPF8Tc:eAKYg7yeCoBt9F4jF8Tc
- TLSH
  T1D562C62137D42A7D51B78AA5E7AA776DB438C243ED475008B1FC00624FA3E09DC7BAC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  ElectVote/frontend/admin/results.html
- Size 16KB
- SHA256 d4b95f07fbc02d28a01e34d55dcf0d2f4cb8f4ed732593b4643314549734e113
- MD5 d62be6b01f14c53f866177317e0a19c8
- SHA1 60546182bdf0bdb6b2e93d36cf87c2580c607aba
- SHA512 52104b38b76189d175377f14ea8becf7573b444fb48c6b452d1e3de976522a9c0e84328f783b14159f90e8b4e7976b5e9789ce0a960f70197e56fd12c66eed0f
- SSDEEP 192:Qhuu/W5Ft09yIn1+9qk2ILsXrcPg+S/SHJUoobqR9BHGQ5Nee+kzUQHeLycfDU80:QAuu4hknOCg+jpphLl+kYQXmDU8fc
- TLSH
  T13A728464BAD0167D54B3C6A1EB95772DEA39D203F68B8018B5AC82121FB3D04DD37AD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  ElectVote/frontend/admin/rooms.html
- Size 19KB
- SHA256 26a5a834b649c9562890f05ef242c9840fbc654eb04e452fe7bf715f0275737d
- MD5 8fcb52d8b60afb9e6034c44b25f1e3ed
- SHA1 2b6b1f2199f2d4f5b7fc39b0c3e23ba2fae17ff5
- SHA512 4842a3cf966e0393b92c7e50edc46f6a1f733254995f62a7ed3cd285ac7389f1057219d29c469628fb3d13ed5f975a26c4f6ae9492afc292d287057560643ef3
- SSDEEP 192:Hhj/K/W5Tts9yIIDaaseoReW802p7XwnItpsAGUBx+bM7fw8fc:HN/KmgAaaseSUxAq7GbMrw8fc
- TLSH
  T19D92A6203BD42A7D50B785A5D72B7B6EF9658243F84A8018B1FC01725FB2E09DC77AD4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  ElectVote/frontend/admin/sessions.html
- Size 20KB
- SHA256 c3cb154ab115cb5c8f9271e4acec9d3d2aa313efa71b03fce4e7b68413b42854
- MD5 dffc260e2804fd052c6e113aa2660411
- SHA1 39ac654f2a40eecae4faebb190efb3f7e83e3046
- SHA512 b72d8ec8c576d696d61fe2b25a4f592bf93a048039c2980065419e8f8dac9d054ab5cf651864f4eab5c861d97f31a896234699bf21bd2ebd0426be99a5e8b1ea
- SSDEEP 384:zAJAqGoG027AtaajhZEqnh0YPKlXGlCW8gc:zvqGoG3Ih0YPKE0kc
- TLSH
  T18092B55536D02A3949B7C6A6E7B6776EFE718203B5038004B5EC41920F73D4AD93BAE8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  ElectVote/frontend/assets/js/config.js
- Size 4KB
- SHA256 b687e46631de0ce65cb2ec24c33a055e9874cd22560c82cfaf3f30691512eb78
- MD5 497c5ebe7f5e75d77f3034c38dd9b5cf
- SHA1 0619d11bb85167bbb5dffe53865cc1ad45543e18
- SHA512 547b25c7f901580d4b22da94785552a99479e15f8354b91b8b0168c14a5a39efa8430cd0b758c3c0cd3ed8407a8b21aca9052936e6ba52c2e12f5623559c520d
- SSDEEP 96:PWVfc4QQif1CJsdG85hTceHiNs+Uv3zee1tdf4yWpN8ExrZUv3zee1tMfh7Eq:P8/QQif485hTcnNtUbeQ8p6UZUbeQG/
- TLSH
  T1E391248E249213160AB2A3D77B169618F337E1572289D359B2AC82443F78546C9F2FDF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  ElectVote/frontend/assets/js/utils.js
- Size 12KB
- SHA256 12b0fe24c8890993e80db862770422003aae545147da29a4e482a782444f1043
- MD5 6125d68e1dda79b0b24ce82c71b8fad8
- SHA1 93e503fe0b0f7fdc93fa01dd7766cecd049fa87f
- SHA512 636bc01df2ac400919580bb930ba612fe37998f2c764354894e95fad9ae12b3870e8ecd5aa1d73ed45650a3d32a926cfdd16519c050125ed88979087a6ffb64c
- SSDEEP 192:o6VzLSJJCLanw84vV5w45dzKmpSZFdigSoytcAP12VSudigSoyQ8gVWo:oembC2w845cm8ZFdigSoytDudigSoyw
- TLSH
  T11842A3B122761567BAB3C2AE6713160DF722B22375514A1475BCF6842FFD820D192EFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral29 behavioral30
- Target
  ElectVote/frontend/observer/index.html
- Size 18KB
- SHA256 c88014724c1724e3bcf04f779471e6bdf09484845e2a47037595852268a698b9
- MD5 4c15a6d797913e7124b28f372a7d16eb
- SHA1 fe2f6c7fea3280415bea2edab317741b3ea7abda
- SHA512 eaf8269edee2cdd7d0808b327fc647675791a62b8d8ef9a40959223b11662e2ae63ebffdb063417c2b5cbc6f428ef2265856a1e53d244200290fd5469ead818e
- SSDEEP 192:VhK0JUhsjnpFQdJQ3FneFZr344LdHrCuXU+6Gsk2IUtp02RAJMqR9QqQvNG8QpmM:VXgJBmuXUSskA7cI1lQHQN0
- TLSH
  T1F78250656195102554F3C3B1FBA29B1EFA75C603E64BC648B2EC52865FF2C01C87BF98
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32