61323ad25546552acefb3ba2e94d0892ce02a9aaa567d813813e7c36e9fd19f4

Sharing

Copy URL Twitter E-mail

General

Target
faup-1.4.zip
Size 605KB
Sample260817-ppaa6a1tft
SHA256 61323ad25546552acefb3ba2e94d0892ce02a9aaa567d813813e7c36e9fd19f4
MD5 de42cb49fa1f653bb1c5c563ce7e717c
SHA1 1ed6ba2e77f18e5c71798f0a04f654285cc88d58
SHA512 a859784a3414dff86577e45cc6955d45564e2e0cac8e5980c6476ec5e7e616b94536d92f8495948d305f602bbcd60984f9c15cae9dae876cc8d4dd5d865383de
SSDEEP 12288:FKqGTtCinoGDj3xtCQiZhJxsbfRQl7ZuHSsm+sk/oGGO2OrOpr11G:FKrtUexvabIQliSsm+sSFzypB1G
TLSH
T187D4022ECA6D8013E4CF587ACD17E348C0678580529367DBFA1E52A1CDAB1C5AB37E4D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Targets

- Target
  faup-1.4/doc/hacklu2012/README.md
- Size 9KB
- SHA256 1c6254cc754c347f23d6b7ace4b31fb9fbdfae21f7fbff6b8cffaa0667ff8bdc
- MD5 7018229002ddf6384a4545801e988fbe
- SHA1 6f22c42482d5823b91965a8d0f267e74d181977d
- SHA512 466d6884d5752c3cb1c2dad39401e071728ae2a7e0565d5cf01f678dbfa15c698eb1adae0d49d8b90887ebb5746a08b37d2a5ad71987197109a1aec1755a9ade
- SSDEEP 192:9I6AaV2Q1oldVuaT2FkBhQqN1MHEG1FwIKJ1ucpf6:9I6AaVtWldwaT2Fk/QqN1MHtKucpf6
- TLSH
  T10F12B65BB10833720D3729B7768FA1A7FB7BC1B8A575A52084F508BC321091A457FAE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  faup-1.4/doc/hacklu2012/index.html
- Size 7KB
- SHA256 3acd2a4964865dbe3f9482e99eec0e6e7ac119cfecd9325a1ad9f98d76298d63
- MD5 c0ff7bb10a236fff8cbbc7e4ac678b82
- SHA1 73f8db637717d64dd1b035d7e46ce79466f9e70d
- SHA512 172e3506e2a67291618a09f7cdd9af95717a44a561c60dd490e464d7543781706af9f31ac67e96bdf10707c0fe8e23af73d7aa85610bdf489fa3bc16847d1b4e
- SSDEEP 192:DXqcZkG7sdIPZRC5VuB7/gjux99TGEA+mBfe:3aG7sdIPZw5V87/gix94EA+gfe
- TLSH
  T17DF1A62AA34DBE57113329BBA5AB5A44E1FF5E34D2B51090F03B04A83F6460DD41BD3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  faup-1.4/doc/hacklu2012/js/reveal.js
- Size 32KB
- SHA256 9caba4e3fc45ad636d2d8641398788abac3d1654779fae5da9c1e515768fc83b
- MD5 8dc0588f60af59cdb2c0b757995d1ebb
- SHA1 407b37728391220da657cd64e7440d8bc7a927be
- SHA512 740a94783f44f223919317c7f59a0cdaa4aa3d6d398da832ed58f3c8259911e21473476658f16d8c1a2acb1f9365dd33286d11c36bad6325c8bf60edf779aef1
- SSDEEP 768:LA9fILBaFw18x02frhN9XwpdDOS8622Cn4XLNP:LA9fIoFwWWkrhP41
- TLSH
  T1D5E2B656D71C57394075212AA7DEE1D5BBBD81FAA40014EAA89D9C3C08D0C7843BEFFA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  faup-1.4/doc/hacklu2012/js/reveal.min.js
- Size 12KB
- SHA256 823611be436c6a480d077fdf297e82ed3e41a2c6c0ff53edf614769677006f3b
- MD5 efb06600dd2a9984d399f4865b254864
- SHA1 fe9d0354e55a20e4692672d06ddc9a4d5c797c08
- SHA512 cb0b5ffe9f0b556fe9daa5ec7b8699834cc9bc08b9edf20edc371b4ef3af52907c1dd29adc639408625c153e1d9c3d5d7e63831168ffb656166442dd3eb092b9
- SSDEEP 192:UQUCLQ7iyICA+VaCmqjiOzcKfVleI8PPWUaU6kHDwotOP+zupe:PUCLsZLDmq+OzcAVlt8P+U6kHDwod5
- TLSH
  T1CF42A5241320533581B742EFA2DFDBC03A79A0DBE50130AA8075DCA43F68DB59267FE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  faup-1.4/doc/hacklu2012/lib/font/league_gothic-webfont.svg
- Size 46KB
- SHA256 f746971d719442a5a5c7f814277f10f01f2aa1fa54559a5e0fb03e0c14db194b
- MD5 fe0b97f78d0e6a8ab4b10c7d0814bead
- SHA1 64ae93d4e6278f786646fd6188fdc66a5f1748f4
- SHA512 330eacc1e2736b4f1315317e58f53cd9c036a1ddfb715f2ae0cf49b1908f4087749c8b2a1cfafc46b669278d02eb1617c2bc5a0fbf98e7c285e0f7e80a0e0860
- SSDEEP 768:TstBgdZa7Y+/pQ3zrZ7mz3Once8F6QDx3P5JgBsQn+mC:4oE7DRCrZ7mzev8F6QDLuBsQ6
- TLSH
  T15523202DF5820BF49ADC82D48EA9ACF05278929E20363DA44C3DD6F05C1E76D4F5E9C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral10 behavioral9
- Target
  faup-1.4/doc/hacklu2012/lib/js/classList.js
- Size 1KB
- SHA256 4a0d666d8b735134a74ac380fa2af79fdca56100289498b58423ccc7ad69a053
- MD5 daeaae1afb79c4577c26fc099228cb44
- SHA1 4e18271836dcb38f7ada3b1e8b6e3d5e73fed605
- SHA512 82e9bf1ec5495c84acee1bbb1ca98b4fe50896a4985154724038660ed37e6394a34ebed5336e9bcb9d8a8b991f6997adeddb1a25ef55d814eb9536032ccfd324
- TLSH
  T195314D18B28539BA41D7F464503F0005B332AA6BB5288578F370A9CB2D35A88486BFB8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  faup-1.4/doc/hacklu2012/lib/js/data-markdown.js
- Size 862B
- SHA256 9a7dbb6ae975936c29bcd84233ce10d73393b9ed92835aee7cad3df68f1a0643
- MD5 229fa6cc70db101bb77214cab713b345
- SHA1 62b7cd39b88ac27ffa5c352fd91f36154c77f901
- SHA512 bc5f2e110f0cf90f97f8d4a246b237aa5018a330c91aabc8ed5ead36d0236ec43b800f85194b6ff33fb78b9bbd3b0854e9b536193385529fd084618c6b4e235c
- TLSH
  T133112564F0900296951730EA51C7514465E21D4F1D19D0D9BC4C7D48FF81CFA55C7FFA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  faup-1.4/doc/hacklu2012/lib/js/head.min.js
- Size 3KB
- SHA256 54a477d9c297d02245fa079ae2aa834b0a88d4b905f4cc99b6a24b229c2856e1
- MD5 8244e91e3efc1ad6285d9beb8125fe4b
- SHA1 39b833a058ddd0188f38d04c92e348fc121c4298
- SHA512 e565f8f80433b4a302dd65a5bbb5c5c004aeb92c36d7dfa89f6cac871aba2e192e6689fcd3aa40d3043eddb549396d7bbfd9d8039a14fc0de141f9ce44364baf
- TLSH
  T1D15187DC7E49F459866B707555BFA20AB13A64E7B8444882A0D4F4C03E78A9D012FF9F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  faup-1.4/doc/hacklu2012/lib/js/highlight.js
- Size 23KB
- SHA256 5b8f00138ec3bde2928dcae35d201d3319ec52faf12182e5dffcafd944152489
- MD5 dd7099e67e236048fe6eba6ff73aa451
- SHA1 426eb4c60018f94c9c46d494df4612e19d97debf
- SHA512 fe46db532d192b2c55ae3549b126349d3673c45f26a1eb94cc4a393ed5416b362f621a80274f55114ee5a1ea9dff0db809aaddcf9244c05b365658d8e99ed0ff
- SSDEEP 384:jJdSGVr6ECBpnzsMqwKdotr1waQaGl3j6/LAI1BFk9alXfzu23AqxxxIgZOYcw6G:jqG4vaMqwOoNaL/3mLASBFgalXfK23AS
- TLSH
  T1AEB2D7D9D74E82ABE96030653ACF1057502C9AA44CCC9B95D7D8CF3835E4C2D21EBDB6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  faup-1.4/doc/hacklu2012/lib/js/html5shiv.js
- Size 235B
- SHA256 a97e0c50aac466de0b6b136d02f5715cfbfacd0ebcdde0aaa1a7f78d8523d9cc
- MD5 ff0e20a524223e4c3972e0d907e0877b
- SHA1 15a9a8c83f46a9f80c635e945f79fabd0b970713
- SHA512 e84fed995e5e2c6d62999692b0997e9759bf827dbfcc9d625a3e175ecd6332b6e84cbc9e36afcd913573a8d2bb39a8d823f78843c7f93fa9e21f3dc9fd50ed3b
- TLSH
  T18ED0C5393070987D51A8044B78B58FEEBEF07239A0772011C09D8D0DB531F80847D826
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  faup-1.4/doc/hacklu2012/lib/js/showdown.js
- Size 9KB
- SHA256 8685e054548843a4c422f50c8b66b0f0cd47647969cc618591d2334f131c971f
- MD5 e2bfaec499e23555e8c483be58dba6e7
- SHA1 591f0476630955b69cd9854564f9e7093e6476be
- SHA512 04c821b2690401d8068b64a33e287765d3f05b536b9ec63bfd565e3a04ed4f4d3bc3a641b58996a9c02b2bd29d1df947816f023731cc3aede23c099cd50c1d62
- SSDEEP 192:kBxkn6s4ym/3Ys90dOmvpqyBrOv0rgupkSEBnpkd0ZpqEehEFELRKlECU2NYtTxB:4kn2ygorqyBrOv0rgw1g+nEeh+KaNYtf
- TLSH
  T135124F9C758179E3472534A049EF90F6773BDB81F2DDCA64E048F5C2BA380A89429F5E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  faup-1.4/doc/hacklu2012/plugin/speakernotes/client.js
- Size 1KB
- SHA256 43b17ce23914fb9a47e431d5dce33aef212e1e9806d8a2c8fb7dbd3a5865ff21
- MD5 3d0e450377a1fc1a7c18e10b68aea765
- SHA1 9d20edbf9be874a8dbcd18fbf7e64226dd3ebdef
- SHA512 4db74ac5e4c44cdaf772d9972c1b2af5d0c46d0e0011c54b56a6480a8f687adc295f4839bd5df1ef4387d0d780f25e2659d2854dc116272def9a933d4d30de57
- TLSH
  T146219B0EA75C4DB160BD250DAF9CEE88397FE9C30111A8A79CE85C0570D055A1BACEF9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  faup-1.4/doc/hacklu2012/plugin/speakernotes/index.js
- Size 1KB
- SHA256 dd8599540fd9966d9ee99f53d5d84a16cb1f4e4dab57bab8ed00b0fa07a978a3
- MD5 90442eda772dcd76a5c0c216062a1415
- SHA1 940c9106a7fee3823b089c53f474e0b6aa897d80
- SHA512 b2fe9ce5b6fcacd668749f033fb488e2dbed3f69435e6bf0b70b0d32aba4356814ea92155aab2d3004c69db30ca35322f2aa761c43153c18913a5af4ac11f373
- TLSH
  T1DF31560EE9F8622270F23587AD0F81992CC3F8591283A11479DCC5DC2BE54593476EFD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  faup-1.4/doc/hacklu2012/plugin/speakernotes/notes.html
- Size 2KB
- SHA256 6dd8515db8d503fd1d7c01c633f6102c3290501bfbfc395e8514b488d3154970
- MD5 ccc4b99cb2f4876b7ba7a1e3cbfecf3e
- SHA1 3191a680363bb0188e69ed75816ad648602243fc
- SHA512 3acb6a42645c586be97c45e3f6c66dbbcb4c1f06e19b0f8b46d6e2b588d627d1e8fdc0d651c424938abd0764b20bb014a6f9cd5aa62e8350ef8cb583fb9f961d
- TLSH
  T1F651F9DFAB0D0419D235184973E4AA9C297FF21371029CBB3EAC14AE734818866A53AD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  faup13/faup.exe
- Size 21KB
- SHA256 3500736eaba9d3b640092d92222427f74dcd5eaa0f0a3f4b3d61348638301280
- MD5 9c1cebd9b93127b7680c5e873a4174cc
- SHA1 6faa362987d3652a4d2e4d23066bdfb6d3183304
- SHA512 0c5795f88668961610729ccf4f109d7b781eecf58ad2c2243047c9179197be20d6191c345f2fd12b9c73cae85a48c675b270a6b5f520b9c8fb128c99ea898c48
- SSDEEP 384:3i1WSyReiECoWeZNyc+LGZWw+SBJmWwQjqBGc1OF3xz2r9gSH5sV8FO+:yQ/EXZNyc+i06J98B/OFhz2RgSQ8/
- TLSH
  T1F2A2390EBE448034F99604F2557E97B6AD2FE1126F4450FBF79116A848A4AD2F83C36F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral29 behavioral30
- Target
  faup13/faupl.dll
- Size 7KB
- SHA256 602041aef91ed10782026f6822d7c9cbda376868cb4c4b09b656cad1ed5e99b5
- MD5 054a4a6bd67d398531abc81fc260f16e
- SHA1 b67339c7b34943f3ae045263d04bda5ab5accb91
- SHA512 f7db79bb661da2131d61ec6f812f013ce3b3fbde8c6203d11fbbb117bc939894aae064b5bea84570d591c928eeb879c506293f8734e41235cb97b9bb9feb9cc5
- SSDEEP 96:DRxlUOoNlZ0a0fvB0aTFkCjDO3F2OY3XQUPVAm6ydCtD0:FxSqJSwO1BY3X3PVR6ycD0
- TLSH
  T10FE1E83EBE6640B1DA4C09BA2D236122175862232BC241F7B79746EE2ED0CC6DC70362
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32