6d0e0ae828c241010c9040c0e173b3bfc5cc9f6601562b234481e77ba503cb6f

Sharing

Copy URL Twitter E-mail

General

Target
cpp.zip
Size 24.7MB
Sample260818-gyy2waxcrd
SHA256 6d0e0ae828c241010c9040c0e173b3bfc5cc9f6601562b234481e77ba503cb6f
MD5 2821a4b1681864d817b508f06204efc1
SHA1 030f9abf7b7c52b9c6f41294cf2fbca384fd25f0
SHA512 2e776b8cb9f9bc79f843c967d2a16a6368787c6b152cfd6bfa8f009747615d0982d654002a8b84bd980880697454e8e6f360cb34847d89fd7e73d1fc0118d59b
SSDEEP 393216:ah5pHCBcDD3MKpH+fSHwMSbA5hBIaxyW3rSGDCjrpcFpg9O3n+7a9k1lMcxOoGTV:MTHCBcDD2fSIAqaxdUGU9an6P7MEGTzx
TLSH
T1424702B0C949BB04EE1F4577C60C925AA27ED62CF40B7D9FBE548E084E5B8C11B63A4D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Targets

- Target
  cpp/clipboard.js
- Size 2KB
- SHA256 024c7e82e3a42845dbba0abe71ebb1e32b1a2192bac9b87d5592eba9cad15147
- MD5 14b2690e7ca2d556fe47b52f12068059
- SHA1 427444fff9dd40ea109a6303dcdc465535f9bb56
- SHA512 785b6e2bc59ecd1f37a14f38dc7a280c7cfefd92ebf5bf38285e7f93aff9a493397c44d7de99fa8b02bfa20899b9b43c9cc7a2e57e7f7cb82fca30daa03fa645
- TLSH
  T1E951B41BA26D07EACA9311A12E2B24CB3135700BFF49414CBC1EE6484F11872E4EFE98
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  cpp/cookie.js
- Size 1KB
- SHA256 6f9da35eed772d69c37ff64eea68cf217e46afce266db7ca3b131a388f4c95fe
- MD5 4722038d1e4d4db88fbed2e4ba0b2926
- SHA1 984965538a09244f32686ff42fa8fd1472c114b0
- SHA512 e7eb2f4aac8194fdeb55b81e6771ceee0d0ab7b565a0582e19d55fd8fb4f4e621631038336978d51d6de3d4b9a17b1c732b1d01e9742dfa131e54de4dfb73029
- TLSH
  T1D0311508729E911D4123A1696D5A1329A5344107300C9A2E7E6DB6B03F84C7B4EFBFFB
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  cpp/d0/d01/class_witness_patch_metadata_a18c65c0376fdac17540ddd58b0485869_icgraph.svg
- Size 3KB
- SHA256 8e58079f53c2b12d4ebf607c0ab38d14562dc1f323bd46869dc9202afe868d23
- MD5 6a43e50e5894496248b6f085832d1b38
- SHA1 3735eff72423887645940d1f3bac04e2006116e9
- SHA512 f190e94425196cde8ace1dfa784ba5a7cb85295d55046b6739eed784f34cbdb1adc2cf042310f787794cefbc1b381b92f6c55731dd5cfc7e840af6982044dae2
- TLSH
  T1767195BCB29E0872F3855334F7CA7EE350A7BC9690C84C74E4D0AC2C58C1FB95A451A8
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  cpp/d0/d01/class_witness_patch_metadata_a18c65c0376fdac17540ddd58b0485869_icgraph_org.svg
- Size 2KB
- SHA256 4f182ff561cecad2a3073bcaffe174d26f0419dd91213b86bba4dbc538fe67ad
- MD5 ca97d5e754df0e4a2cac99fbfb25fac3
- SHA1 98d91275f37ef3311b92f1526efd13d8d3315bed
- SHA512 ea594203a2543a7657250bef9ba653cbf72ac08382369cb59e6dc88fef0879ac4fbd06f7545454c5787f89ac987687d53a4144d0d7c168848791b26d6501a474
- TLSH
  T1BB5111B8F29D0876F3856728F7CA3EF320E7BC9290C84934E5D0AD2958C1F795A58125
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral7 behavioral8
- Target
  cpp/d0/d01/class_witness_patch_metadata_a5411ca42c3de3a2f9d799eecc69cbdc1_cgraph.svg
- Size 2KB
- SHA256 8406ed97d7c6d5f1519eb0c12d4a8741957d6b806eea28d63864d563bf7f7d87
- MD5 f15c9b6be9b0e2b4e4a57c7fc0cf45df
- SHA1 0059955afcc75513d770ef5da55cf64f26d23c1d
- SHA512 eb61950999e5044b699b65b6d165d2783baf94def3403357417bfe6b67d439c645e35506efaa10e000abce96c35c69bd31f7563859bab34778e5b257255f4135
- TLSH
  T19651736C625E4972E1815360B7E8BED351A7B8C790D14CA8EAE0EC29D8D1F790A051E9
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral10 behavioral9
- Target
  cpp/d0/d01/class_witness_patch_metadata_a5411ca42c3de3a2f9d799eecc69cbdc1_cgraph_org.svg
- Size 1KB
- SHA256 8a80728050b7967b6df161de3ab3baddf644b8ac6eada9fea82a073247c84392
- MD5 55568ba0ca45105ec0926df847e56f98
- SHA1 c1cb480ddefe46e597d554936e273e19f742d7fd
- SHA512 604e642ba051cfc2152562789fb7854d7429d8951be37490b6dd09df5348ad6f9d2ac6a2b643db71eec0317a68dbc609a5cadc80c7c3b4f64ff89e4388e41e7d
- TLSH
  T1A84141BCB29E0972E2801314B7ED3EE350A7BC9790D10C38FAE0ED5998D1E394658069
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  cpp/d0/d01/class_witness_patch_metadata_a7de5d43b835b195ffecb4826659ffb42_cgraph.svg
- Size 2KB
- SHA256 e44dd82bafa7d63faa19bfd17a194669fa08ef9f9d929bdae6eef8a4721cdd98
- MD5 d2b83f84570b3a449c6c052f619ca76e
- SHA1 b2c10380b883bbb4f4e18bcdeacaee7f034f96bd
- SHA512 faf18f32f1a23d1d54fa17668ffe7100ca71ba6be224fba6bc2121cb5161002cb12ed249fb1f0e466f0ccac4a1027a3a7f3f821d4fecd369ccf09ce7379bd683
- TLSH
  T1605173BCA25E4872E2814370B7D8BDE290A7B88794D04CB8E5E0BD2D95D1F790A452E9
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral13 behavioral14
- Target
  cpp/d0/d01/class_witness_patch_metadata_a7de5d43b835b195ffecb4826659ffb42_cgraph_org.svg
- Size 1KB
- SHA256 5654b1a29bbd54ca7e9c3ce8d46c48bfa5650dd7108744e3dc0999360915b702
- MD5 1f3d14459e25e772171a93b153dbad08
- SHA1 3cc7164b4486a6a0ede9acad671b154400f22dcf
- SHA512 0dca49c4640f394055bfc3090974cc6b9e5a91cd3d328065eba4d3d11d3d42f915c7fb56054362e9ea0bd62e2c935b4e9426a2be48d6305f1b7c09db0b3f7b78
- TLSH
  T1524120BCB25D1876E2811320B7D97DA350A7BC93A4D00C38F5E0FD1955D1F7A4A48165
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  cpp/d0/d04/classsphere__eval__data__mp__inherit__graph.svg
- Size 3KB
- SHA256 a125f126c1d3cfb704f1e9c85ab133234aa524c9e7c4ebec46e18a4ef93b2fec
- MD5 ff6bfce054c534cc0a1c8a90a07c5ac0
- SHA1 635df6399bfb591eab1f5760c976a30ac156320f
- SHA512 7462f48d577f9765733f0a1c9dca3d62bd6bf67b679bf064ae7f65f789ff987e8aea538c20fa6f04298d9aaa46f78567a188fe3c3502828d0c577ecb9cd8ac2b
- TLSH
  T1FB61749872AE5F36F38577A4B3DD3DC271B7B89580D44874E8E0DC216892A7812155DC
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral17 behavioral18
- Target
  cpp/d0/d04/classsphere__eval__data__mp__inherit__graph_org.svg
- Size 2KB
- SHA256 a55d2b6afdf81e3847d0e71afa8bcb5488a60956a86737b3a6e8d6309061e3de
- MD5 4adb01cda9f6d7fc2b9880947668e572
- SHA1 36da680ca6db2400e2d12a41571927a76cba2a17
- SHA512 8ebbd9c3889f71e381d7105a15dd9b08c0a4f7656e53e92d8ec592235855536f56a138cea989c350ba936bebfe42f8e8dc7745eb3002c255e42644a5a8aa8f7e
- TLSH
  T1705142E8B1AD1F36F3847758B3DD3DC371F6B8A680D80434E8A0DD6168A2A39535955C
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral19 behavioral20
- Target
  cpp/d0/d06/vertex__set_8cpp__incl.svg
- Size 8KB
- SHA256 9cb22b4e5427c28d4dab81fb1c58f983d7d97cd39fa09c2066c5e2105cce16bb
- MD5 a2ab201e20c76788eeca501e166c605e
- SHA1 ce95da3775304be686648562e64d4c53f2fc6ffd
- SHA512 f14af77158694b3437d132dd3af70d67915bda2cb86223c726b08abe5cf2d703bf43a0b71792541ac3a4feae613369777a118a85635a3f6d1d11472dbea6bd69
- SSDEEP 192:1nZIHdXtv0W6d2HvoHAEi1x/nk7bNwa0RvF5:106sHvtk7A5
- TLSH
  T135022EA8B3BE0D7AF3C16728F7DA3CC6A1FA7CAA80DC0830E464D4256851B7C452599D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral21 behavioral22
- Target
  cpp/d0/d06/vertex__set_8cpp__incl_org.svg
- Size 7KB
- SHA256 43ea1661ba8d212c47529cbed73414e557bf6ab87a99974066ca472bc83ec4a4
- MD5 b809e71d4df474c3cc129ecfab2a81a0
- SHA1 3ae384b607f32835a2ab73c0f095e447ad0c20cd
- SHA512 d7de674e048c259e67aa852fc1a1a38df1ef048d1f5f74d0c9c2b880d2b226355b7e2abe56eebf4176ff8ffa44a2753d569ec49c91ee8f66d6b9c5599dffe1e0
- SSDEEP 96:1BArRhvGSv0zG/36d0GQYKOaO5zGOPXoGmTpnEBGTAw2Y4HmWPH0Gq/BGnsk7bNz:1stv0W6d2HvoHAEi1x/nk7bNwa0E
- TLSH
  T117F10CA8B3BA0D7BF7C12718B7DB3CD671FA7CAA80DC0530E424D4662851B7C852599D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral23 behavioral24
- Target
  cpp/d0/d09/class_numerical_irreducible_decomposition__coll__graph.svg
- Size 8KB
- SHA256 0b8829e4b126d4945752f6ef39c56acac337ae9e37897d214cd1e42e90a42e29
- MD5 799edd39b731f81179649cea8f7a546f
- SHA1 5b4b63f5cb018aeb8d54ae9b35e9d66369ed45fd
- SHA512 5616ffdffc38d29586dabc2487047ff05736f77cb2f29530e29d8828fb94fe2fe09ea6f2f7666fcf4e2085c2e76809bfdc4b333ecb6294644e31208c7716f75f
- SSDEEP 192:1UZIHduRUlmbCwHPazVBT+L5Op5UV0hcZevF5:1sUT535
- TLSH
  T1B102435872BE0D7BF3C56764F3CE3AE270E7BCDA80C44434E591E8162882E7A466659C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral25 behavioral26
- Target
  cpp/d0/d09/class_numerical_irreducible_decomposition__coll__graph_org.svg
- Size 7KB
- SHA256 20a608bf1bd1cca5120f78383f68bf0b7c8fad829be29360d3b51b7b6b81080c
- MD5 14dc0b8f70fb7c399b050f0b48145b17
- SHA1 06cc133b5bf4c960a4474f47d82e6ef5a82d2bc8
- SHA512 12007de77bd45799492a87ede042f3cffea81e922600de41c43dcc8dee499b9866ff2c9ecd12bf9099362f15d680ee3c5b25bae0ce64234aec038c271adfaff8
- SSDEEP 96:1BlraRzG5oGrmbCtGLLGyaLIPXG5QgWGwMVuGVjGUJpGrZ7GYNGk/Op5UV0h3Ghp:1mRUlmbCwHPazVBT+L5Op5UV0hcZ3
- TLSH
  T1F3F1439872BE0D7BF3C46B58F3CE3AE270E7BCD680C44434E591E8162882E7A476655C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral27 behavioral28
- Target
  cpp/d0/d14/class_temporaries_multiple_precision_a3404069f75d6442dc1080f4a31e94b59_cgraph.svg
- Size 4KB
- SHA256 f2a36aacb85156d5a8ea9bccc4450f4b55d7270d5c6b97f0115e18098a667f66
- MD5 60e9b7053157fb426b3ec2f097fc6ae4
- SHA1 fa81e3c131b37a99c642fe8625587a4d7e1262aa
- SHA512 82faa84c5eb5ccf04076fbecb4818f985b60363dcdb7686068550c1439c9cf4b80e359ababc741d5fbbd249d022663d223fc6897330c427781e235f85a040fad
- SSDEEP 96:1BhPB5pKZIHdYzD1+IGPq4G2LlEGPqKGGpBmjo3GPqvGHDFXGPqRGLSvF5:1v8ZIHdUwNqyxqKBoq6IqrvF5
- TLSH
  T1DEA19898336E4D32F2422764F7DE3DD370E7B8DA44C40874E4E1EC595952D7C07611A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral29 behavioral30
- Target
  cpp/d0/d14/class_temporaries_multiple_precision_a3404069f75d6442dc1080f4a31e94b59_cgraph_org.svg
- Size 3KB
- SHA256 6021435d95cf0d3e4e6433cc12acafaa38b3e819d99f8348b821c704f0a5eab7
- MD5 5147c6e8db159e519e95ad1398e4c09c
- SHA1 7e86c544630a26ebd088fd61b70e23dc08f7f78a
- SHA512 ca311f0464e0efa31131919f89e7249c80a22955eb547c28885d03bf664c9edd2d8159e5dadc4eb912202daecdaaf4d9fb70f1878352f57e1da6d381b5f68e4c
- TLSH
  T1B081749832AD0E37F3812728B7DF3EE330E6BCE648C40874E4A1E8895952D7D4770166
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32