8baa51698d109139667c2878f6a66406e242265f5f81c9cfb81e3983f9793106

Sharing

Copy URL Twitter E-mail

General

Target
demo.zip
Size 22.3MB
Sample260819-25exssbl6v
SHA256 8baa51698d109139667c2878f6a66406e242265f5f81c9cfb81e3983f9793106
MD5 cbe335f45bb223b61382d09a04780257
SHA1 40fc0b9321e4b4969561ed9c62c6ad5d37cd998d
SHA512 5dc26c2065c64bfcfba6b1d0555fd32a2cd4e57fe96f30af6b080939a38bda3b49f2bdd5704bd32b74f5decb6e8af4ff120eb577a059ffed392529da945175a1
SSDEEP 393216:7jvgTTc/Bk0AD2ZFi+CrQmrYbgDj6qP7anHbatxScO5qkbGHt4:XITcZCD2a+oQmr6Yj6can6ScO5qkbb
TLSH
T1373733F89B0611ADDB3B30701C5A04D7A5A7F34AB762B86F7DD07249BA17D852834E38
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  demo/404.html
- Size 43KB
- SHA256 affc29c0d96b7dd148df5a9501649aab11104d4c1b86f1ad2dae31b48a6006cb
- MD5 6478c091864b19a3735ac768496cf526
- SHA1 7c7fafd6d0cf87f6079a1bde7cb2ec61d5fdead0
- SHA512 85fbff2c7904fdba42aad3c48f25cfae526723275c2a9ce6757ab30323df4d130b75137252d7dabe5a787e201b8f2f58e45a7579ec5e7f562cc1c42ff8a42a58
- SSDEEP 768:pRRFex8qkOOgteuqkJS/rdzZjrZWMCOkARdJyreFfZhvlcyrmBgGIKzM0Q:TPOOgDv6tjUr1vrsZhvlcyrmBgGIKzMX
- TLSH
  T17113F86162F441F95106D3D49A229A367F935DB7EB06CA0872FC5E988F82D8DCC53C8B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  demo/about-us.php
- Size 46KB
- SHA256 43b477e560955606b8cef7ab5bb93fbfd8f43de8876de6f65e7eaf7ff991356d
- MD5 26c4ea4c84cc4703d0c28133b97b048d
- SHA1 323f2e8a518e14418b66ec2227f62e8a59d7d4e5
- SHA512 813f8bff5d7fa7cdf02f6738191cb09a4c893ac3ae95039056d2ba95d8ebc8fa2247e03df72ced9fbb3bf718810685ff4de88c51d2a0f29772944b8753fb9631
- SSDEEP 768:iRsWZfKkg5BUAsxjmRAxPAqajgiEe12rK4RCTs0r9OWjCaf1ZhvlcyrmBgGIKzMX:Q8kEBMxjmmhajYXcI0r9OWjCatZhvlcK
- TLSH
  T1FD23E9F663E4A1D04103D7E0983655267EAB74BBAF1BC39832EC9E945F5289DCC4BC81
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  demo/assets/imgs/about/dotted-img.svg
- Size 73KB
- SHA256 9819aec44adbbe74d8d0029243e6262f973320035b3d5f1e821299c186daacef
- MD5 fb9cab740fd8799d37d309e6cbe5e8a7
- SHA1 07d8086d0612de18f7f029dbc8edf558d7593a36
- SHA512 f6f6443ba49254e08deca90a8ce8e773addc1d387c128a87509febdcddadef7e576e475c6164705d0738a9d982324dcdd8f745e917a4f75fddd148fcfe9173e6
- SSDEEP 768:DJzEE+vM1lhIfRTGbcYanlr5h5BR/I3AcbkZbERgDTxtnCVikd0SmcpqSdAByuzs:mE+Vw2YEDFrXrm5/1QWDct9c
- TLSH
  T1C97320FE73B909E8D886E3E27F1A40BE640311FB1665CEA5C7582E2C1942DEF4D516C2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  demo/assets/imgs/banner-2/banner2-shape.svg
- Size 1KB
- SHA256 f02746a18610666cdbddf9388f0d85a49bb7baaa73d0c22ab38ad2334c63686f
- MD5 03ad21ce08299156387b465c04e6cf2f
- SHA1 1702cdfe5078513dd712d208caa5923f06e07882
- SHA512 16582b00135cbf497fe64dcf06c239c289a5ee92e26d890556803bd0b747af2c07c56639c68fc68909c5387f6bbdab84b81e0d16032224fe7289a8661f903834
- TLSH
  T1222137DC7328ABB4B09D07F5EF19702D749B3022414925E5D5516E2025C88BDBD3FCD9
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral7 behavioral8
- Target
  demo/assets/imgs/footer/logo.svg
- Size 6KB
- SHA256 ecf3306c2d77d1c331ab3500625101ad23ab8c9b25786f16e58fdb026cee4a6c
- MD5 cfcda5eaa89ad9f912f41f3a802f8579
- SHA1 5cf89ef21ec8897d3f1dbe01c0e58fe386f3d0b1
- SHA512 c99e7fea889ef21672a683df8f9d2068230557a656db996cde0b023f4e7ee23dca7d821c0aad94bd6fe978dd8635d4b21a1faa98d40c98c1b7713e49ec440980
- SSDEEP 96:RhuwXJ9TqZROuAxWjTnLZ0Mu4LxsMqGoJTtEFGHw4u7zc/BWbrO4l+wB80Y+4cs:fHX7wz9FuQlOTA7o4cwK+4j
- TLSH
  T15EE1B6CE2FD851F8F140D3F4EA92083A7B1B16FA7A22EA6DC7C45E55580216D492D8C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral10 behavioral9
- Target
  demo/assets/imgs/logo/favicon.svg
- Size 2KB
- SHA256 d4ff150ec8b3f54d55dc9057e126bf4d1239e85b5eb9671c95c8b108abb8aa5d
- MD5 0798b56405bd47a8317c97705190fd9f
- SHA1 184ee7e4bf2b2ee30488f6bb43a49282a699356f
- SHA512 03b533b2c46e90ee70ad483686471f5fe4090f4ac5ed966f9d3f9e7a4115bb697890c373143c12c51b6fc461ccadff9fbeaa3dc5e8dfa335828f1416462a309f
- TLSH
  T1FB41C8DD735CA28CE3039BF09E3A9538217734FC7902C98247D903DAE59624E59CCAC6
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  demo/assets/imgs/logo/logo-3.svg
- Size 6KB
- SHA256 3b7bf695ddc48487d8a81c148a0f7f840a44d35ddf16599bc880896a9c766815
- MD5 eb557fed5acb0d5de3502d3d885eaf87
- SHA1 ec4386252fe5c17505240c09e4052a6b7475235d
- SHA512 402071cdbf8fff7f52e5fb250fe6675b9f3ea055250fff1a9eec259198fd519eb921205d360d40985c31ca8153bee803b0b00003633cb3b8b19e39eda0fa0578
- SSDEEP 96:dJYadCQ/6YCWVbcR6vgPXZklI5FaJ27W/GRaQnawiypE4nl7oV9GDKmMVyqP40BK:XRdCQ/tUXZkloJj8QnaqZM3Vy4kdZ
- TLSH
  T18DD1A5CE1BB962E8E181E3E0E666003C765752FA3E14CE74C3C86E9E691106D48A8CD3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral13 behavioral14
- Target
  demo/assets/imgs/logo/logo.svg
- Size 6KB
- SHA256 12de9730c54a90bac0f25572206118f6ca9414770656e84d00e480b385491b52
- MD5 f74396333aca3d00de736ddaf814d6a3
- SHA1 86c83158c180adf281f5c3d7151802b9444de074
- SHA512 27c7e0227b891b33ea20d36530157372084f1670bcbde76a18adbdb7c3ddc4296acea7323f2c0e6bb86b591d0afdcfc1f4d1d0a0d47d9c568866179a434f6333
- SSDEEP 96:XJYaoCQ/6YCWVbcD6B8PXZklI5FaJ27W/GRaQnawiypE4nl7oV9GDKmMVyqP40BM:5RoCQ/tYXZkloJj8QnaqZM3Vy4k1Z
- TLSH
  T120D1A4CE1BB963E8E180E3D0E6660038765752FA3E14CE74C3CC5E8E6A5106D98A8CD3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  demo/assets/imgs/testimonial/bg-shape.svg
- Size 6KB
- SHA256 84e75a592d5f591a74eb8cea1135bd78ef043ff4953131cbe0dfef051edede4e
- MD5 5327d77f8fd9ed54ba5d9778a097f434
- SHA1 b0cccf295e842f84d1f7c1bbed301743ec346649
- SHA512 53ef551f4bc9c7f3c2b0da199cb708f4b7ba7c9739ca1dda71706d2263b40a570bdf4672a7f3f8d34716181627d6b9f0b1c9543d1cd8bc6330e01ea8ab15fd1b
- SSDEEP 96:07V9iWou/iSF4T3dCNcBEviKmQ0gxr8j6f8xo+Cs6Oz57Rb9PN6LmdQ3MYvezK:077EBSmNZgyjwb+n6M7Rb9PwLmzYz
- TLSH
  T19DD1A5CE377484C488DD4BCBBF0595AE2827EAF669C54E55E0480F0E28C1C7E9E278C2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral17 behavioral18
- Target
  demo/assets/imgs/testimonial/big-dotted.svg
- Size 869B
- SHA256 aef88237588b04d7c6d8dbcba5a03aee6247cb9a399c3d33ef0768d8eac54c52
- MD5 89949d8a0fd10258d2b2b0114fa7cc73
- SHA1 627472a9a49c26288c0b182420091fbd5728d95c
- SHA512 ef6cf289cd891fb2cd9ab9605cdcaf3305be317dea0073a5039c1e6a39ae0220e9fdcbc4b6d0bb97b6b1bc8670ed550d51fec2b2ec3d6f4e128145507c3e982b
- TLSH
  T1FD1129F4137A3B24D01AD370A7AFA531153D44D02FD7889B93E006CD982285A9E5616B
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral19 behavioral20
- Target
  demo/assets/js/main.js
- Size 27KB
- SHA256 2c7114f61d388ff9c5057c4813da27409f6c620537cb013479fc3221bb5db00c
- MD5 7f064e436a3ceac09953ee2a75f9c664
- SHA1 cce1b4858c1c2092c657b2789991cc6f331ddb0a
- SHA512 c80e4d325838b593774de8eaf8528ad1102d9a0f37ac9b9e9020eabeff80c0b21785b12c21532f31ae582fa56bfeee60253e4d146000bed5f514b3de61bb46b2
- SSDEEP 384:YRqncqngFijlR09UW1ygfITf3ocQUsAs8rME2xWcV:iqncqngFijlR09J0VlrME2xWcV
- TLSH
  T1CAC2EE0AA8B510320237B63E5EAF9300F5716147999AFD717D8C0A884F5D32D62BE7ED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  demo/assets/js/plugins/easypiechart.min.js
- Size 3KB
- SHA256 58b1d4da74a539a188a3add63f6fd5b70e9bcc6cb28a932de0f4a1343b1c3f8c
- MD5 1fc2f0875cdf70b9eee8c198c8f5da6c
- SHA1 18da0ebf9164550422fb7aebcf85b7c60e8933e4
- SHA512 e6ad749ff6af5592e8a89ef4c3810c5b3cf5d886463687920730fac9bd5e47480ef0bc7276949a7498d0c1dcfb002f3eab4ec0a505b3925e86e896c5ad992561
- TLSH
  T1B3717186B161350950231539917F520A322724F6B48F4C28B738A2FE3EB990D227FF3A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  demo/assets/js/plugins/isotope-docs.min.js
- Size 81KB
- SHA256 0d898a35194bba82a002ec9aa836f9ddfead2af0c56c4cb1ee84f21450402874
- MD5 86394e4d7f40ab6657de96c54bcda089
- SHA1 1f66a9b1238de3423733d4b28ccf1b69516d63a4
- SHA512 cf93f1e94cd3a9616a90e10b2b51f42f522473a1522c024283cd5e1720ea25dc62fcb0810ce0d50ba859a7668798b578f4a43bd1527eaa15f8d0e80aa429b3ff
- SSDEEP 1536:S5ZpyIPLnN+0aNPw16MxzkD6jDztXd0NFpAAQou90e82uHYctzwoH1HQfjpbr0bC:DIPLn6MxoD6jDzv0NFpAAQouKNTHFTg3
- TLSH
  T17183E74E724138254387B1B6916F150FB137A87C6A4A905CBE7AD8FA2DB9C4D2037F78
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  demo/assets/js/plugins/jquery.countdown.min.js
- Size 4KB
- SHA256 3f25abc862001a9c86a15f2703935b1d1ce661a7eb2d1ff1b49ddaca6ca19b10
- MD5 5687ff37986e9a4fc169c299087eb2bc
- SHA1 e6a1be605a384a94fbdba0484a0c721f07b22e63
- SHA512 c70d676afd257790b9c09c9a7a9c8950b6e508d850f61efb15d8f73676c78e1d5d1417cbd6685a1806f5015dc1f36f21899ebc01d72d0667171473050302e8ac
- SSDEEP 96:MbG5QHArNxeRFMWiM3ySohdy0v/2bBqz2e/xMxHxqxAxKx3xDx17qD2Ycw9NYy:3QHAMpqh2Bqzt/xMxHxqxAxKx3xDx1Wb
- TLSH
  T1CCA1C4CE73B2239908A552B101AE1546617BF25AF4D6002CB4FCEAC87A76C6D607FD78
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  demo/assets/js/plugins/meanmenu.min.js
- Size 11KB
- SHA256 4594db563a574092ecd91c9f357af5a366bebf76ddb9d1f4e680d63eca02795b
- MD5 b1a78e15b45e0497c3299992222d138b
- SHA1 a30da9f858a3ce2ab3edcf07706337d2ca32d9f5
- SHA512 a4051d48db93666b1e84261b6f5c4503f9093e926ceefb8a8f3409647e004622796a8765cdc8f15bc133c636b0d8a16166aeaec908cc4e4106855880006eba11
- SSDEEP 192:QIsVd+89x+N3UXr3/5gSvB93q2I6ktrquz8Ikb:QrVd+8iN3UXr51JGpu
- TLSH
  T1CA3285E0F37C11AE95761464B02702FE34BF823AF449AA167C79DD79309096912E6FE8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  demo/assets/js/plugins/nice-select.min.js
- Size 2KB
- SHA256 66bdef0724e5306421bcc7e0910e41b5645228119ad9096ca4a6099e48d94e6a
- MD5 d13462ec489f9f0c309a811f85feb3d6
- SHA1 d9545f8b139eae5b387de1a60a84abe949c7e88f
- SHA512 36a61db3cb2eea38afcb5fd62e85bcc75b593110fbff565f8561bf8dc4502cecd5d64d6b20e0c2a4c8280676abe505ec84a24657bbe2d0b5cb3573e816c33966
- TLSH
  T1A4511114B10512F648FF25D37911B147A075493DC42AC14BE97E86B21EFEC02AAB6D5F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32