dfdf8075038f3bf0607b7fb4455050fe06ea963af991cd75cb552b1f6b786c8c

Sharing

Copy URL Twitter E-mail

General

Target
aio new page.zip
Size 3.1MB
Sample260820-drwrdsdr7x
SHA256 dfdf8075038f3bf0607b7fb4455050fe06ea963af991cd75cb552b1f6b786c8c
MD5 48a1b2c166b7778c6b2e4444c5a7474f
SHA1 93dd339a15c608b9e86fa41eb3d988740a759619
SHA512 739a87ccbc977a7157d7b307fb09edf728a4254c7784ba1d0a83ba1644473be15bdbb53737e49ddaadc09701bbf429e3fc7130f8b1ca63366f5c20e218b491a1
SSDEEP 98304:/YeyspK11+l0jn2FfuZnagR3PotB1Otw1/LXOmTPU:AapKql0yFfutaIgr1Osj1s
TLSH
T1D9E5334FC6541482C92FFB3AD9C187EAF53B56051408E9817DB0DDED61AED403AB0E9B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Targets

- Target
  aio/assets/bossmail.php
- Size 15KB
- SHA256 093e8e739ec15414b738a47440c8de9c70d81527fdc0725996995f153705a449
- MD5 cc2ddfe0ec75279a324df283557dc1be
- SHA1 26c863619c5c7fec7459e1e66166efa7b9c81ab3
- SHA512 88ccdd16997a1409b06b81997dc062d0b969671f08fd62a3abb21697dbe6ae43cfd13a6495376ebe592544a19caa7c75ef325ef1fceebf3d0e3194ab8cf0db54
- SSDEEP 192:qIEKKQqm3AyXkjy6BktExVlSvhw8SgwozY1tx7Xgdsq9NrVxGqcN238YtmRG1WaU:qIDq1ZA7wCYrOsq/VxGqcN2bURG1WaiJ
- TLSH
  T1F072B650728DA82B61F351C6A0BA5B18EDBFD53BCA018D18F9FC13A33FB6D009953959
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  aio/assets/globalmail.php
- Size 5KB
- SHA256 cd3c7ae94cb201ee1727df9a1a69104c1306b399ad72f5c8be0cd55332abc6c2
- MD5 555ad9e7d04538d76c21df9af925bbac
- SHA1 8c59a6a542c2bfd74fb269e12146eada0f2b34fd
- SHA512 ceecef8cac0fa4f87fb9543005a4d48991ea6debe7a815fd7b83d91c437203d6af6d05bec9548a6d692977d9882b7b3f60a4de72cdf8cc869b04d6a10db279ba
- SSDEEP 48:PtA9OpKrdx/xWU7bu04bwXWzw/rXjpF6mq9engosFs2rqRdHxhcjF33t7r10ZuyQ:a9Oix/8wmOWzwjr6vQZ8tCgB+yrP
- TLSH
  T14DB1722255D54C26627781E5A6B2EF4CFAA9C303C71A580076FC17F36FF7E928943268
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  aio/assets/icons/logo.svg
- Size 4KB
- SHA256 c7e1551c2e53820d7ee878007123f5e54b8d2c404c63f6bd07bb308d8f6f8bc8
- MD5 5f7c565e8b623baea252bd586d513adf
- SHA1 aaf53a1237fc90b48f0d532e2132d7a37024503b
- SHA512 9a2e4104e4afa930048d01616237cf687d30b2ed4a2a65eb9de924671908c4f4d064864d9bb49d10d563009751f1fe18b10fc9ea5d82c39636539fab973dcc28
- SSDEEP 48:bm7X+YrUM8p3IW+sKeH85SZZ9TRcJy722wwThUC7mA0fBT6R2T392A26fYFZadSQ:aLljsK05c5s7ybtdw0LjuIM9DQJVmM
- TLSH
  T179A1A6DD33189574DF09D3C1AFA3142C762BA1FD39A3C25DD3885E462D4469E5808FC2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  aio/assets/icons/symbols-brand.svg
- Size 295KB
- SHA256 d207ed6812cc66bc2afb1a7f385cd3fda7a13e80108e81f961ae3dd899bc6300
- MD5 d60ac3bc7036674848397645e3e95f20
- SHA1 1ff8d91eaac027bb7763bf01fd02ffe391033ed2
- SHA512 b2fcdbff7544f2f087424abc44c8c0132a3bbdf9fd07525f2d9d7c12cf85dbf59594ebec6b16d97d58269375fafe3c4803fe85b83227835c1bb79c80eab30535
- SSDEEP 1536:l0WV5gRbsfvL40IolvA4JbtlvA4WbsfvL4TFjJM42mnY27BvB7ZFmt0PzpTvpURg:tHtzfhWXoxPU9cPMR5ybQnFZhRz
- TLSH
  T1B05453D62770D3CC98CBE96EEF35D9D4630FA0B9797795C04A9F8B68548B884FA06C40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral7 behavioral8
- Target
  aio/assets/icons/symbols-webmail.svg
- Size 465KB
- SHA256 11427a50e34936756920f9187a342c018f71e0ff67921a63a64877231fb60b16
- MD5 9357b1b5012f92fb78cfcb0424463885
- SHA1 1cfaa0325e3e2cdf9489b14d41f2f895e34e83d1
- SHA512 75d0b95a0d443f61e1281105b3a467d68c166427900f25e0310c5ed9d88e098d32a4387e41ed1adba5b1d03e9c1c6d9c72193fffb4b13d253f9d83d90db1ce4f
- SSDEEP 3072:UNa35GkHfCsLx7IoW6A/NaNr9mNfs75L6ECMcL+56Pu8tXCJmH2:RpFKoWTSJ56GH
- TLSH
  T187A431E6271C09ACB4534FBADF35B2B5032FB3A5315D51A4B93F9A7422431ACE527E80
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral10 behavioral9
- Target
  aio/assets/icons/webmail-logo.svg
- Size 2KB
- SHA256 74d1ecf847b8dbfbda3454d2a99ccd2906022fa6e290397f44d306b393d6e11f
- MD5 63cce1c72e9f613a95bc14d7ae0dc2ef
- SHA1 bcaa77e2de1ad4549472cfc41132b833e8b7266d
- SHA512 952a87aa1286334817b8415ba59fdf7bebef628028a324c8105195cec1fa3c6da3a4746639bd42f7f7c7e188b170304323404248db8999e0e0d5d5119f9d75d5
- TLSH
  T11751F1EE6308B6D0DA06EBD9E509923D625F60F2BAC74B918751AC067462C8F4C88EC1
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  aio/assets/nc.php
- Size 21KB
- SHA256 681482f3aa322549eff3dbc76fa9b17a311d7197e173ffd48f23421fe9e8856d
- MD5 99229b2b045f2938349671f184f55373
- SHA1 5255a96c14c72234846d7ca4e7ecb36c57dd0fd2
- SHA512 2c5bab89a0aa7d873821c763aa89ea2a8f0851731b1ede971506c117e369994006c2017592e0ae4ff882f87647c8fa6b525f43ab8edf546136188c7c7f0d42b8
- SSDEEP 192:iyEilF9FP/ZmXg8oWllBg6wuv1PBXK5D9qEs0lXl7ENXEvSOGgbq1Fa:2ilFP/ZmXg8xv1PzOlX+NXEvh8Fa
- TLSH
  T1B5A25F0154C9046301B716CC6EA51A1DEE9A8323870B8E44B5BE5BE78FB7F5DEC8724D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  aio/assets/orangepl.php
- Size 7KB
- SHA256 12944c538ed8c6b9147fa22bfd47d71b61a5b5feb0147e8c551ce636515c41ce
- MD5 6001cea12a6772c54fdcaab247eb0a0e
- SHA1 bb7912015736d8c585529e0f1894df3bb703d945
- SHA512 b4b11b378e0db1882d7cb899c20132a2cc52df0db4d88f62540379bacba17ac20cc67b250e0526e13d66d9d6a4dd1fafd3afbd3dd62c5924ec098c6406567e30
- SSDEEP 192:acujwGl8w+oxoVi024k7cCkiTFKoa6JQ9bDWEbuNdMfyQqsQCkx5n:Azz+ouV4FKom9nWByqso5n
- TLSH
  T17BF1D923208C8E37075105F5E0D66642E8DFC098DB625C19F6BE16BF07D5E7852FB568
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  aio/assets/registerit.php
- Size 7KB
- SHA256 217a7f95a193e04139b5087847dcc481b6a3e07fbc72ef0809fb830c2356e99c
- MD5 32d40b3d6885b008db39d76dcf0cd6e5
- SHA1 61d8a05ec62484f1adfb17864a84207cda7503ca
- SHA512 d6420fa74f45313cfb369b09e9ff0668beca181db24d2715843dd786b731ffc54ebbb5093235789906bdcddb0deea25568c40e5a6351244310b78a279fc54c74
- SSDEEP 96:fzlMM0uNBPgYjdoFgOcyo/GwffzFViG3U+161BDcr+ilSdqSO0OP5rESg4bBt:LlN0uNBTjdNCo5frZq1M+DtOjP24Bt
- TLSH
  T1F8F12D35A482483790B795D86E95AB9DFF85804B8B0B490976FC1BCF2FF7D41C903A88
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  aio/assets/smarsh.php
- Size 11KB
- SHA256 6718e833e2f5451e6ae0a3da3b7fcdaf732ad33493245ceac3514a10d6bdab19
- MD5 ec52e9a97d35bde61fffae6178b30e3a
- SHA1 f3de1263033ade23e0e11f62e004437bc56cf9aa
- SHA512 40463e08fcffb7666be9490e66565b90666e2d2112faf7ed2e5d7a79ed890bed0450ce3bd4fb320831efc66e88a0acfdcaac580208857f3599cff52a4586f346
- SSDEEP 96:D4lhGzcF3tB3VbqoLugzdXP32aXjD39cKFYlHJAa73PrSHIgHVkCF970gYQxh8Wu:DhcZtVhKmd/3L526Q3PZS9z8Wgax/2
- TLSH
  T1A632622541C81C53443392F49B539B49FA99C1238303DA187BFC4386AFF7E968A57AAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  aio/assets/telkomsa.php
- Size 8KB
- SHA256 1daa4533b3df0bf069f81197ff50059e5a6e9ae717ae07bdf5638546ee4b4d22
- MD5 1e96430a3c8de04f228ced7a34dccc21
- SHA1 cd0ae800471e74aeca129669c964611862d96d7a
- SHA512 59923b67687f2a584caf2da5094f948de64efdba572dbeeccdb52b815ac39027b29f28ced3734dc77f76eeb829b6597c36e78140e72f92695f132c44ea254028
- SSDEEP 96:VcXiLzLB2R7PrtQqrweCFZ1rBVlAm3LtRSO7q6e7D9/maKDdeQr:pLcdrtQqrPCnX3tRSO7q68D9/CDdeQr
- TLSH
  T135121B2916CADD72413302C2B172AB8CE96B86B3D302485DF8FD079F3F62D55E663609
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  aio/assets/worksmobile.php
- Size 9KB
- SHA256 d928c46d4e1d28e2d8953f331901aa5b5dd093c9d409ff33fb6fb5a751971652
- MD5 a43b0ad39a01b0ff0d1c1bd587dace61
- SHA1 edceab618f24ff464f898bc12afa5c30c1e22953
- SHA512 d7058ef7cff8cb2ae5a16a7490e67e15daac0f28ae2058a806128d8a47388689216a6fec6c34048948e688860feed96f404cf5248c3532ad4b7f471daef62216
- SSDEEP 96:SsupBziLQAN3OdkIFZmCO2wQjsT0tSZog7PP3zhOTI4PEMna4Wobj:izOQPtcylGn3teFEMnx
- TLSH
  T1F1124461C0D62C336433819959D6AB44FDEA8113C346D9043ADC67DB1FF7C14C62BEA9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  aio/assets/yunyou.php
- Size 43KB
- SHA256 55c3c605056b0f20243d433041ddad9593fdf311842328310a443d57e83205ea
- MD5 261aa746c9faf80cffec7f0e21692f94
- SHA1 69c1a116a6a8b4a8aa476967c8cce01e2a55971d
- SHA512 0ed1731f88f8b50e521ee392ba292e32d21c156fdc176ec03b67305911f7ec87a9c3747056e2e36c14bfe72a8433ec654db70f53e7a03b471cd343c29d040049
- SSDEEP 384:Qx8RSpCMhHgKsrJKHIfJhqt1C3kOTcU+nd26ipy15soo7WYGGJpLZOUjdvxoRf:tKHIfJhqt1C3kOYU+xiGakGjLU
- TLSH
  T1EE134025144D1D2715F3819155AA2A06F09E82778702CFACFEFC56AB8FE1B74C523BB8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  aio/index.php
- Size 8KB
- SHA256 9c0159194567b16ef48ff51c423678e20ece4146743d8b019119982a1ec55b8e
- MD5 9d0e2ffd3b34dfd46c2a6da1f4034eb7
- SHA1 b1158b65eaee7a92074258c9ea554c2a14077d89
- SHA512 2034a02dc77124e0931cf97aafcab53fac0a5c3c9b26a19c502377bfce5fe572db5478465d30e049db9619590a551c80d0da2e0c24725a32938144ae7ba05b0c
- SSDEEP 192:kqJO2QqRw1s54j0L/+JLHTSnAzck0cEAib5bMNE+3XVDi:kD+w1sFL/+dBGGiV4NE+1W
- TLSH
  T1AB12A35B18C610465E399A75BA929709F7494047C68A2C577FDC21D22FB0A3CFCB2ED8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28