177a3cdba0514e2eea47a72da8c7442231a4493d13c326cd62a735507f28857e

Sharing

Copy URL Twitter E-mail

General

Target
tahseel-receipt-client-handoff-shareable-20260821131943.zip
Size 13.4MB
Sample260821-wp1axavdpg
SHA256 177a3cdba0514e2eea47a72da8c7442231a4493d13c326cd62a735507f28857e
MD5 f345efb0d1a30576c15546bd9d5476d8
SHA1 d6318cf67c032283e7fd7c4e57fac1d61df6f37a
SHA512 6a29e409d78304a5236bc2a0f3f277cae37b86c8cafc4d5e1c0b10ea3755b922a0439dc7bc1dba90071c7bc77e58a971f01c1bd103ddd77585480836335a13eb
SSDEEP 393216:0WlT2wW9XRwBCGnafQ8wuNDwFWZ8rZhAI7D+TgM0Us5alw:0TXRwBpnb/GDwguhAeBvUWh
TLSH
T1A7E6F139C36D2052FD0F4AB0CF8D8746C496864261527AF73E8C1650DE4B1DA2B7E7AE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  app/Http/Controllers/ReceiptController.php
- Size 1KB
- SHA256 f45341ad873ecf9d40ef92a0972b60ea6c35e996f7ae525e5a29250697f52ab7
- MD5 08141b491a451f75d4483d05fde82e5c
- SHA1 e6ab2a4c9cd539deca4110cb92d2b3a20a56391c
- SHA512 5c9d90247f773b8338c4af6edd8b6e784addded5c24d48cf7b681d83d87b80e1d46807cbe71ee568d302f6a2216be75531140da321cb27adbf4c149ea37051ac
- TLSH
  T10131BC5A31D2D7B349A7503CB70F84B0E957C40702E8D461363F23AC9FA8A3951299B7
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  app/Livewire/ReceiptForm.php
- Size 16KB
- SHA256 29a125e46fff406462ffd3b08cd728213fd14629b20f98248f4bdf3e100e4a72
- MD5 a1acdcff116410b32c174af0812ae6e4
- SHA1 1e8619afbaf97eb35610445a0a7b56fcb7cd74b4
- SHA512 a1bec6efa1bf1502eb6d4c8e56d601a3137160a8161c92f44307971da19d8f0fabd84af1b11c6bc618dc80ad070c34d5e3617aca7532f2e66075827a8e0765f3
- SSDEEP 192:edI7GwCddTyzH5gXoHwwwvnRWi+zOKUhg2zO5WoUyzyjLVMx7gnt0kSjFQZ2Eg5w:ed+JCnut03+uNBorKNUJ6
- TLSH
  T1E1728418B4DB95B1141321BD6BCF9110D669D42351A6A815FBFF03682FC1B3CEAF06BA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  app/Services/TableExport.php
- Size 4KB
- SHA256 f0e0cfb8c1511a475c83f36bebc4ee967e800b5de003272e53e2723a5b2c83ab
- MD5 1a357c8eb9e7f25e40563d2011795cf7
- SHA1 5082b64f6b4c7c81d33bcb110f4cb1fc9885a65a
- SHA512 f6a16bc4d7b010cca8295dcf290983658c3ae7b260769690b2de607cf22e1f527425a2ffde9c6f6dc1640cbaf0e3d714fbdcc0fe6a35864c77b510aa4f043c18
- SSDEEP 48:8s0uKoRpSbb33gI/Kr5CEgI/fJ7NP2IstQDDgI/381I2gI/p93kgl8rCm9mQ:8s0uKVb3QIsgIppP2IaKEI/hIximQ
- TLSH
  T1BBA196173DD93D3CAA07B0784387D8899586402781AD8AF0FD6F9EA8DF5191E897C89C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  artisan
- Size 425B
- SHA256 f91a517c0c5d3a904c3f390933964a5e08ec1fc68146882730daac4aca4ffcec
- MD5 e66bb13691f6184c762c196427d8e685
- SHA1 b8f0fc8820d5de0b4de5710b0184fa998e156089
- SHA512 fa3f43c9125e19995c2e8b17663396fdc20ca4007e1bda34cff35738d65b3b88ae1e31de1118ef116f00a8b2f2f25b940192f98a11f67d63f756b1659becc1de
- TLSH
  T137E0A3FB078C02A1DF9634DE164CD4031C5DC9177CC010A5F415395887C58DA77573E5
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral10 behavioral7 behavioral8 behavioral9
- Target
  public/build/assets/app-DzqIgsGN.js
- Size 230KB
- SHA256 19507947da908ead5ac7229d9fc425c8b7eee9c8dfe48af25cbd1645e2ca3d0f
- MD5 7a622f9f6464da04506b2a193abff8dd
- SHA1 07aa670be800d5e92e9414f075eb8639c0559c86
- SHA512 3dd44f3d2767af19e3444d4161bd5aeea5f8e6b405c972b52831e4231ef67c45f3030216af0dcba4fc0410dbff81e02b1dadb06245bff0832ff038f1a2babb93
- SSDEEP 6144:q2ldID1QDPbn0TiXXkm4KLgTQIVN+lcAUMwAxbVFoUoe1+K:xyQDPbnGsXkm4KLgTZVN+lcAxwAmUoe5
- TLSH
  T1A13419DA33457123839A42AA947F010AF3326AD4084B582CF57895DF38A9D8676FFF74
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  public/favicon.svg
- Size 223B
- SHA256 b607e5054111047d25f5a780ef271595a4b2b504d31d24d76d5e6b3507981c01
- MD5 052965c4eeec4d1790cbdc229a4d8603
- SHA1 6555b2dc535c325111fb004f3ff7c69759318d39
- SHA512 4dbc42516c3b62cef43565d93aae1dbe2d186d96c72ab1f8e3b279c89d930cc6247c0f395525fa11b760a320b04ae96a540065cd28568c1674742838b09294bf
- TLSH
  T19CD0A7F5D65E181A8C0D8A002E78B551255A93CBA6500055E54C19771191182BC9B5ED
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral13 behavioral14
- Target
  public/images/logo-full-light.svg
- Size 3KB
- SHA256 4cf540f85e9df6627a02ab917cfa814502dfc9f3705165fc2bee05ed9042d415
- MD5 1c38c1c607e379637eae20ad24ac9732
- SHA1 cb9ec75135bf489d05f7598a6b222828621cd1c6
- SHA512 1589b80d5287ad0d2a0c01ca937db16758792d6e7dc3b9b7c9300b02d25cac415553798517b9da4e9dd9585b6a18df36932d5609e2030f8e16333fbfca306072
- TLSH
  T1FF6122B7436413AAA5D3535496D931C939EDD087F2A7F1E8A7A39463DC20CBB817C930
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  public/images/logo-full.svg
- Size 3KB
- SHA256 4cf540f85e9df6627a02ab917cfa814502dfc9f3705165fc2bee05ed9042d415
- MD5 1c38c1c607e379637eae20ad24ac9732
- SHA1 cb9ec75135bf489d05f7598a6b222828621cd1c6
- SHA512 1589b80d5287ad0d2a0c01ca937db16758792d6e7dc3b9b7c9300b02d25cac415553798517b9da4e9dd9585b6a18df36932d5609e2030f8e16333fbfca306072
- TLSH
  T1FF6122B7436413AAA5D3535496D931C939EDD087F2A7F1E8A7A39463DC20CBB817C930
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral17 behavioral18
- Target
  public/images/logo-icon.svg
- Size 1KB
- SHA256 380be0442158c5e481e9b9116360a642debf10538a5bf1faa7eca2bff8579df7
- MD5 4edfea82cd129e1224cd98231104575d
- SHA1 68ad420f7597f6f7b1586243ade47e0235987b5e
- SHA512 775df90aa66dc37f64ce827c8a7a13d7e8e3cf25aca2732316adc5bee7f4fe70c0d37b55afe7b2842885722c4ad839d5fe40daad807732d6ae073c5b6b17bf84
- TLSH
  T16431F1F3C244993B86480FA4D3A6311B6274B863B07AA5EC9BFB58572C158F702385F7
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral19 behavioral20
- Target
  public/images/logo-stacked.svg
- Size 3KB
- SHA256 a6dcc73ac7d2e4a162461caedd9d8f3a34855a9f1c12b249817f874455bed3c9
- MD5 146d2656e5232ef4283c7b4ba7fb7ffd
- SHA1 d701a0d552a158810614e8cd3da6e13ba06de639
- SHA512 6fdbf09b96c39883b6603f29e3821eb342067c37b59b1eeda651244cee7768b804f2ccb6b1a9470d11ab520402837165c946ebfd351f5dc143dd5a7ad3f752ae
- TLSH
  T1F66120B3A320866E90815F80D2D6219632DDA093B1B9A1C8EB67E7931D308FB417CD72
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral21 behavioral22
- Target
  public/receipt/assets/12.svg
- Size 22KB
- SHA256 9fb714e30373fdb8878959d26bd50805ace436270d3378e3de8d5440afcdec67
- MD5 5237a7b900e67a5c152f01e7dfbfc61e
- SHA1 6ba57200221cb350d6944979d5b9b647cefcd52a
- SHA512 262b837f16e96491ae56e0031a158850eab7d46f0776cbe45d86a9479b5d8d8b048cba6d5d9b49ccc1526af601735dc7a2b07f47141f0cfb78a5952dacec58c9
- SSDEEP 384:0H1aln3vfLJjj/UAz1WoQL9nMzBNP1zDmdxdsWqq7u38HG9lT1wIkh/WYkSL5yFg:41adLe9gWqq0NkMYyFg
- TLSH
  T168A2E0260316FBEA9DEC4368EA19148C78D4D887D4A4A1C0B72F5C1AC0DDCD5D69CFBA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral23 behavioral24
- Target
  public/receipt/assets/Tahseel-logo-white.svg
- Size 13KB
- SHA256 51c4850880a02a412bf4d683ba2447df7b20af5a4ad5fcdd77e21464b019198b
- MD5 4b3dff911b66c9ed3bef6e3460ac55b0
- SHA1 54552e2a982a6f090a7da14e4a492ecd658bcf6c
- SHA512 fddfc9ee16220cae473fae793e331e0190c2c0678aefe1613369cc40fd0b5fd1fedd548bc8e37f14d75b203b6137fe5be10f01c61e21e3cc85633c4f7a0cf28c
- SSDEEP 384:S0cpfUAFD8abWIUXyCv3WoWactv4ktvXwlntvnuUTrvUEaf7z4xH+W8jsc:wU73WdHynaFf
- TLSH
  T122521A1703099B9ABE5E05A9F814009D75D9D8DBD0B0F2D0FB6B6411E88C8E4E96C7FD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral25 behavioral26
- Target
  resources/js/app.js
- Size 1KB
- SHA256 a2f90377deea75ccb949a1ca32006bdc6a154285150f24fa8d0345411a90ea7a
- MD5 e346f02d6efc74e8b9ca6d4b47aaa754
- SHA1 4ed8881795bb1c1c3629d326b2dcb139c4d50e53
- SHA512 8412b4e835514c36bf4e8d078f8695784365ee9e3704710cb849ad70e45ab495a6f2e45dc94d2c534d3bf80fdc001297c97f0eda48fc3ab1a17f190c7a8fcb9c
- TLSH
  T17931361A16FA7576403304727736BC476B96518726C56D90FD8D42302F5CB3D43F86D6
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  resources/js/charts.js
- Size 4KB
- SHA256 0af421947503fa7f7fb31ef6b640bc591376aa78b4ee5e3033cc91ede2b67f0f
- MD5 103fdf8ee89ff52124f35205ce174d6d
- SHA1 4929e2bc84be91550c0c24d792b5497e3545697e
- SHA512 6fa83d155458daa84c87ea90776a5d49fba50b79573787d0d0f7f24cc631e87107096811424c264453c88e6e42da79a4696964104532c945cdf83e9717951b16
- SSDEEP 48:Fzeckbzecbkm/5w4sd7W0vpUVkEUV2YvTWUvKFxkB6UuHeoGx8GxrG2FUW/yGtWt:ockmcbp/5wPtHfVTTRCFsu+rfGOfOl
- TLSH
  T1FE91312CF7B54826052351ECA91FAB86A23130872D4A3D217E9C53A00F4D2BDA4F1BC6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  resources/js/theme-presets.js
- Size 9KB
- SHA256 3fac76af179ebe568d2a9a464d1c352ee6a59102d6155f92ee867937a043f8fb
- MD5 c33757fb57ae0369533c234590267b35
- SHA1 194bbe253e88f89465f95655f9a770734c81d3cf
- SHA512 ad63d064c63f5c7dfcd8ea203916a6172db05f4d2339ffb2cc60a95123d26f921804e48a9c71005d1be85766a2bf9dfc84f510fb69fd1d2c1579d1719173b6fd
- SSDEEP 192:18QjWQn8OJhebjbtRt0F8YnbDuWA03quxVG0ENWYLsaHur8R:WQjV8OJh0jbLt0F8YPRTxVxEpOr8R
- TLSH
  T177122FF92DD976140A46E4B6AACE8823D92F14CBAC4976537DEC44092F1D34CC2FDAE0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32