f8922ce29879ff3792beee694ebaf019a1020823ac38af34900de55abf7fb97d

Sharing

Copy URL Twitter E-mail

General

Target
authentication-gov.zip
Size 3.0MB
Sample260819-wymfeaszbs
SHA256 f8922ce29879ff3792beee694ebaf019a1020823ac38af34900de55abf7fb97d
MD5 a93ca0e3d298f5f462de5397c44e5d43
SHA1 569fa09d869564431707c57773454fc368993bc2
SHA512 a03a165a446a1e7d0f8ae66f05912738c5a7d4fd0c36217c777c537a5a62baed0c4144ffe05808b09a15eaceb36331112cab4d225df6fd4a527be1add83c358e
SSDEEP 49152:Y1tEYqtZjQdHuEWh0/WBowPnHupzSCjH0BTQXeLR6HUAWjqVTiVq6YshMw/agm:qCxj2H0wmHuMgH0B8uLRbnuVTiv3q
TLSH
T1E2E53382276EB0D2C77159339572CB15BB76700D7069C51E36190AC8ABD3E2ECC964BF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  authentication-gov/assets/index-DbS10SAO.js
- Size 421KB
- SHA256 5ebef3135e6a9cc136212eac3e26bd009e4886d2cb1fc7d609f6f3f5487c82fe
- MD5 d09bd57dd1504cfb762dfd0a085e92f3
- SHA1 1f4377b0214c84a2ee99abc15eab9d29a632570e
- SHA512 6c5643b31c9ef9678d7571a41c46f8c6a4df737086f246a1fbee10bb85714f03e3507722a7366ca2da0c77605cca10ae48ec3ed6f63d8b3ac693ff848c5750da
- SSDEEP 6144:G8DMKo388zocQ2vksGb0TF7s+Nb+lVi3gdGXibNwL4Dvy:G8DMTBzocGoTps+NylVqaoibNwL4DK
- TLSH
  T151947DD872A5B5A297E311F0407F1107B27A2916680D8450F32CEDDE3BB854AA17BFBD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  authentication-gov/index.php
- Size 11KB
- SHA256 8dc6846be27e34430f35093a919387a825a6ae1c585c0677c9993eea12f5f9c7
- MD5 2e48b152f16c3a731b2f79ddd6ab2d88
- SHA1 7559f202bcae23ab7bb415d7f555da2188296ddd
- SHA512 2adb559793c6002a5b5326122170bd3ca1fae11167b532605aee2bea26f54f6e6097a0a41fc597f8da371e84ebf970ef4c4967e6a560b554650e62dd04b61250
- SSDEEP 192:+aH15xUnlaMEVT7XC5o7J8J/kX0XgXUXIX8XaXiXMX8Xebw21V49Jf8E9eNunTp7:h57coEwkYsqycMQ1VmR84Wi
- TLSH
  T1403285D828FE2821577798AD0BDBE1447612440B1D48D685BE8C83E45F8D76DCBB1FE8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  authentication-gov/logo.svg
- Size 62KB
- SHA256 954aa858b3bffb8511bc41bc88b07d2b24597c37faf522550e26c9aa3b0d220d
- MD5 b53f20300babca4ebb422e59b888be1f
- SHA1 699c5898c6dd9d2b8b949db2e13c8f0b0d29e26b
- SHA512 3c8417a8c6b689a876633c18f00558b89334f5bcaf8fcd0242d4ed3120bdc0eebc1f1981642c7337c3f690fbc7b243fd61f08220bc7c0bc3bcb2b2ac8c9ae5a1
- SSDEEP 768:pOLsHDCJYU28s5MBiVkYR1utxxmLhtzP4GWWT5m/tW0BhRL26WGiGy5ZGrr:pT+Jo8sifYRIaWgKVl29GiGuZU
- TLSH
  T1FC532F7A5308877B45C3CB84DBDA64C9325DD1C3F2FAA0C8DBA3158B5D128BB95BCA11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  authentication-gov/logowhite.svg
- Size 62KB
- SHA256 10b11a7c97b90bcf7ad520ac94c5769d08540ce1ee3b84d487c587bf128e3388
- MD5 de646b2f77f5fa27d55a01bbb9cf584e
- SHA1 33316eb871adf6e08af7c780eb15872549d08dc3
- SHA512 e9045ed1fc7c7820e37a6ae88fadb685a79a5d162676fa81360081824bb4ef63dae66ae0d62337d81668eb83998b26ee6404faf0fb299c03cc52e505ad027354
- SSDEEP 768:bOLsHDCJYU28s5MBiVkYR1utxxmLhtzP4GWWT5m/tW0BhRL26WGiGy5ZGrr:bT+Jo8sifYRIaWgKVl29GiGuZU
- TLSH
  T19E532F7A5308877B45C3CB84DBDA64C9325DD1C3F2FAA0C8DBA3158B5D128BB95BCA11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral7 behavioral8
- Target
  authentication-gov/mledak/PHPMailer.php
- Size 183KB
- SHA256 7ff1a6ccd4197913759e59164492cad0034422300efdcb50dbacba6031ab9117
- MD5 3ce67a55b649ec605056bc8cb51e085d
- SHA1 48dcd4f2ca94313b37a1395d029f4cf903b4dd19
- SHA512 8fa0bd15c95e9784f164e9a30f39d97d751f3bc588c4b8262b0c21f5b12d06a47cdadbff6ded93f6b891ca1d4d7ba0aa531d7845bddc03627d100148d496392c
- SSDEEP 3072:jUBdpq7fD8SUvI2YXW4hER7gQpQjG4kwc1gSlX4rxcfBrs0g6XhvXLVOf3biBcPK:gdpq7bEvuXW44UCX4rxcfBrs0g6xvX5T
- TLSH
  T123049254B8D76C92153363B9DB87A008E63A633B11256192BCFC83B45FB072CD275EB9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  authentication-gov/mledak/SMTP.php
- Size 49KB
- SHA256 8fa4c6594ee301b7483d835839f1267b54afe76419fd8147b7f6c76285f9da72
- MD5 cd171a0e4a0ea364d913f05a49b48f37
- SHA1 d23f8a0fadee0ee0a7bbfd0d600ede3fa579d331
- SHA512 3f9d6f4ffc1e9b76be2e45cd375a5508b311a72d3950ea7934ac899d9d1cdbcd146ebdac6346f4754f9bf775181ff150a6d1df3079cb0a35fcd593ade583c2cd
- SSDEEP 1536:+QDDAChd0D68x6LGkWDwhu0ufsf4wCnZaR2WD:BDDAAu0tf4wCnI
- TLSH
  T1EE33828A38DA2966113363B9DF47E008E73A673B12255286BCFC57752F3035CC671EA9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  authentication-gov/mledak/email.php
- Size 8KB
- SHA256 7d53f548c3d2bea9f7312f6b813569d9f8ad568539a5361b08b38173db148f25
- MD5 731ab8ff6810d9c341070c628bb44c0f
- SHA1 f1e21d82180c31dd431377244dba83cba8980a74
- SHA512 3a48f8896358e8d01a7d8229cad503a00de4fd797c8420068238ee0ae807109becdb6629fb07e09f44f0eaa72cb024f384edf2f7034cef7e436ad83a0556a889
- SSDEEP 192:AH+vHfTQhizOmqYEqrRUUwsxkxqqH1+58arvYp:LzOmqdP3QFS
- TLSH
  T1C902858021AE58102B93B86E7FEAF1119999C1073E08B6517CCC53D85FCCF6AB6F19D6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14