0265ea6d1d7775232100653735eeac039dc41a9518d58a783180d3151240963f

Sharing

Copy URL Twitter E-mail

General

Target
charms-delhi.zip
Size 6.9MB
Sample260822-pj56msgp81
SHA256 0265ea6d1d7775232100653735eeac039dc41a9518d58a783180d3151240963f
MD5 32ae70d8b5bbb9f559feb0db66c48a4c
SHA1 02b8fc96f854305e6cb2f02bcd3ed34dc75d22f0
SHA512 c5920ffe5c97fa70856a24b811d2e478eb63b6e451e64a95de4732464634a4422bbb815ddc5e5e44e2d66382aea095f5d1df84376f27499c382a63d6e853667d
SSDEEP 196608:nW62BHOQWZzYSgDzRbw7rswutQ/W79MnuN98CJpL:p2BHOQyNgZbjtN79MnwDL
TLSH
T1657633FBC2D19138C5FFA230B85E4548D8E296489E2196143FE5CAD76DB7C4772A203E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  addons/bootstrap/jquery.smartmenus.bootstrap.js
- Size 6KB
- SHA256 c5b40dde63fcefc3447d5007a1174afb9d10fcb87c683e3f314a7e2f3046074f
- MD5 c086730d7bc1e8c923872826c02f9144
- SHA1 b7800c38671fba267a565e26410a02168571c3aa
- SHA512 debb3e94d3a2d119253a2fcfd65c995fc15d376d42bfdf90f3fdd7da74ae9cfb16a6e41faa959ef18163ecacb755910406e8a629d1faa9cd3641a50b152b7d23
- SSDEEP 96:/iMTVopuRtsBiYox8K0WigNHKcFG98zf9ja69pZ9zZ9xJ8d0vuG/Ak:buwIivLpw0vXh
- TLSH
  T1BAD155C5726E712F45EB232521BE5156AE2ED1389006407EB1AB96BC6E904CD2373E3D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  addons/bootstrap/jquery.smartmenus.bootstrap.min.js
- Size 2KB
- SHA256 c0c9acef94da1ed6ba5b75a5a3874c76384ac4ce5f389ff212e66ddaac50aa12
- MD5 ec981a2198d7e2bb5d82f096289f192a
- SHA1 396c878e477ad0a4e96505513891ed1fb61e3308
- SHA512 87b97ab5c4ddeb65f5eccbca518d10f1378b08818595910047ff357ad79841427666fefd6f0c4064646a42c1a0f4a2ae7e625948c2e46e3a959a2c155b58d592
- TLSH
  T13F51178C71703152A6EB2866259FA6066977683981464091367FD5FC2FE8CD63372F2C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  addons/keyboard/jquery.smartmenus.keyboard.js
- Size 8KB
- SHA256 8d21b0cfebb196eeb92b7b5ea5aff04a3eceb369cd3e38a6eaac07786270f7c1
- MD5 39f2834a4700dcb25e13a8d3674bd3e1
- SHA1 13918687d0d7bc6ec81fcd997395b45a6309c1a9
- SHA512 86b5384210015bf2fde9453e098b902cce899a543c2036d63c040b4e9c7513b771529118ff82f6bfab048de7be1aa826870376fc27290d9dea1c11787eaf5de4
- SSDEEP 192:2ukXF9wgK4k0sqVjT/QZsldCsqfdm/QZscdWJsgshJSdmHsPLxdmHsGLk4PjFUsQ:2u+94Pv2Dh
- TLSH
  T11F02D1F0325D73AA46F713F925FDB26BDB2CF0B5400830EB7C982959AA2445A2374D5B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  addons/keyboard/jquery.smartmenus.keyboard.min.js
- Size 4KB
- SHA256 c3a943281160cd40ae6d2a3058e4fddafc5869f7cbb19a4f7d740e34c279dfa2
- MD5 d61eb0d59bf657895cbab6833d6251bd
- SHA1 c228b6e106584cfe31f5690438f63801eb675a3c
- SHA512 8ad426809f59f2f4e9cba55b72ec105733f8a357320a8c7dc3d40ac143847b669a41fa87c22d75c7ccce683cb2e17a4fb9eaf1558821ef73941595e9694db0cb
- SSDEEP 96:mzDxhrxDPDFP7F7qfpulvzdBDe7eOmoiawKcLbXulDRawKcLbJlZtGGWeZGGYHLJ:arxDPDZ7F7qfCv/e7eOziawKcLbXuxRo
- TLSH
  T18B919AA862D1B67381FB11FF12E6319BD252F8DA500C6B862C599E460B6C8D732B9C4D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  fonts/about-us.html
- Size 34KB
- SHA256 8a013ca1cfacc300f493ee993b098aac7a7ab2d052ba8f33c4ca309fcb70b1c2
- MD5 e3e65f98b3055b361c6b6bbbc362dab4
- SHA1 90f693c8d6268b561abf858d141c74d8475930ee
- SHA512 309e17a99455590fce504e311c27679040e39007632de95840093e2d41d96d02301a332af9a93574094d9f2039ecf65be6531c68408fd18a8f78bddc8254c933
- SSDEEP 768:l4V5Zy5oM1oAmW6gO0CRHMT+nIC4v9vlSpaO/g5+lE:6V5lMvnO/g5+m
- TLSH
  T184F2832275C02827067341E869112BA9FBE6C25BE3074A4135FF579F6FB2E41CE336A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  fonts/fontawesome-webfont.svg
- Size 383KB
- SHA256 0589ce0a21ae6c46a8af4092d76bded03f98093e3b9e31625278f9d3651d2896
- MD5 24c601e721ebd8279d38e2cfa0d01bc6
- SHA1 964e8dac2cee79c4b49b5bc300675773f6518812
- SHA512 00e178b7bae172ef28ac459d266318f974f11614fd8c00bc58bc5a8d4c266bf15ed4954dfa423d50d735efce7a9b5d93de613a24149568323da9ef4d45c0b1c1
- SSDEEP 3072:3G1+74+PC8RzArVKQqSpuOGSQdRoUtKpOm3arpFs2EzQQRwRSFRxO7B9WH4qjvlB:dITWHbFkR
- TLSH
  T15284A76CF9500BB9C7DC42D0997E0D94532D926E18753E68067EE8F05D0AB2E4ECFE89
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  fonts/slick.svg
- Size 2KB
- SHA256 8ca11b5fcbff92ee6378017cf6832dddfa745253202d7c8d01f42d5d17c4cb5c
- MD5 526d7fdf63614222d376257221e8b754
- SHA1 8abc209b72ca066da711e6110f2e1981f653c770
- SHA512 f4f184c401ff9288b6ec8ae7712b229ae6de4e97c3791c8bd97dfda73c03dc1a3a096278a6a4cf0c79fa7cc24e9388c63b79ee6d92b77ab55cd093f3bbd2a566
- TLSH
  T11441DD24DAF57C85FB8543C6532D01819A3C67429166036FD2ACEBF37E19246F72BA88
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral13 behavioral14
- Target
  index.html
- Size 47KB
- SHA256 d611fbc784642f54c714eb8df439d3d9bc3a8e4a641223c1fe89000e5a08b6da
- MD5 72581bf3dbba76d1621cdf33639e3763
- SHA1 af0861cb9225aa30f9ee3f6f1dcdde443158167a
- SHA512 8db469d0167d6ba4011a670fb2aee0991464abd0d29392ac48846a5a51ae50032402a93a2af0e7849a434e70c7e2256dcac0b787e1bedd8facd9307983804162
- SSDEEP 768:aDHpEZy5oMcmW6mKFzRAVHj08d8GPMWLMB3/qKN7eHd5b3Vg8:epE7HQ8d8TPN7eHd5bl5
- TLSH
  T1AD23222514C66837027341E96A312F8AFEE1820BE7274A5172FD27DB6FF2D06CD23659
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  js/bmsld.js
- Size 18KB
- SHA256 0be27c447cf35fd57848a5543cce2e42b30f55eb0d171677fae3bb17dbffd852
- MD5 aa3119af547884ed9a171d42bfa18c50
- SHA1 bc29260991a7b07e36f4cf9e8f5ccf7eb71a73f8
- SHA512 862ccdc9c90703b7c6a98f4e80d833074c1973b7b4b2c91e6c6fe0bd0ff6acb86e6cc2e022410e54d3417847651587a82ebdac6a7841cd9cbe093def63561b40
- SSDEEP 192:MGoLN83BRKmfL+ClFVPDhjfHGTgiD3VARMWvdO34AgEJrv/T16OsQon05rzIH0+J:SZ8WjOVRXy16/kXIHHSHruwc
- TLSH
  T11882531B713436FE46B632B1B29DCB087276948AC537F8F861B5D85819E8CC4301BADB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  js/bootstrap.min.js
- Size 27KB
- SHA256 46ed2dfb732a01dbc80515ce6a48bcb24dea4bcab8522c71868231812000b58d
- MD5 ddf62d2a6b8d502890dca20f3eb20b81
- SHA1 8bf498f560bbac8b5a487fa62a416f9c8517578a
- SHA512 57632be964514af913cd73198517d28ed257c07c0377bf9a2c52db2b572474eada440eab1066a2710e91e4028bb6933abdb4fdce1062cf1a5a2b9fe04b942039
- SSDEEP 768:GByuMGPYkskZzymPoatwbqp3/D8agMRzfYAfOvbOCt0eH:utBHvfdCWU
- TLSH
  T103C26306B2313161079BB2F5515B020B723A6E7EE906907C38B98AF63DB9C487167F39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  js/countUp.js
- Size 7KB
- SHA256 bf5feaec70ebdc5acc60afc454b5c510dc97fc588a880d3c697eb8b874c4e035
- MD5 a083e6c8c349b44fe9a1fb6a90d2b9cd
- SHA1 47e498babe1a2a4b15deaf01e0344a443481c50a
- SHA512 afabd364aed03583872db0f96d9cfd42b254e899582e9b19a071f98c0141ddd3b2ef8847a1891743bdbadb9606031ba9bd9a797aad21f1667365eb864892355f
- SSDEEP 96:B9Dr/Sv/g6+jtbL2VykciQGlGz47UE93UCIw5nIJsvSenzMcx:3DrS3n+jtbLKEUpECbaEnzpx
- TLSH
  T19CF1A98A552722216A33BB779B4B3207EB3F8633240D119978BE12811F7042247DAFFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  js/html5shiv.js
- Size 2KB
- SHA256 84e69e527e237e8af573ce4dfc252e05e6d4554782e7d2a4af8f7dbc3ead067b
- MD5 edadcd38965def795be632de13b47714
- SHA1 08491746f67d5028b2817578a20963b0f38a349b
- SHA512 f3eaaad667b7ea6b1b9f520a647c30395687cd5f61a4c7e897fa4f48e39d832ec52439701b7f6c7644dd2e1010811137f1689c67cd98730d7e93f9b5243895b2
- TLSH
  T1EE4165883163204A475B10AF513EE30BF6F42366A9654051D49DCC6CE930DA0817FE16
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  js/jquery.bslt.min.js
- Size 18KB
- SHA256 491129d0e497fd864765f3788f76cfb3f5131e5a695f3010417a6b710f94ebb3
- MD5 55984c95b9180272032f9de214464d5d
- SHA1 756554e38ee0b7c0b05523813e753c2f19015457
- SHA512 96b41f37e130cd3aaaf3fb8766873b77e40895cf045fd7c1bcad2a688cdb69d64f21f9c33a7ce1523545d245578b4aae7c3cf329ee737d686691178e1219d824
- SSDEEP 192:yGoLN83BRKmfL+ClFVPDhjfHGTgiD3VARMWvdO34AgEJrv/T16OsQon05rzIH0+J:EZ8WjOVRXy16/kXIHHSHruwc
- TLSH
  T14B82431B713436FE46B632B5B29DCB087276948AC537F8F861B5D85819E8CC4301BADB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  js/jquery.easing.min.js
- Size 5KB
- SHA256 a1e8de3faba0e83cce168e1d0923034e76d4ff2e6103efb8d957ca92ea81ccdc
- MD5 cb13ce6e9b41da9553d9d9266dcb6f62
- SHA1 12f67e93b24b5afc87ef925a9f8564078b92df2f
- SHA512 45577009502a366714485fc1bc388ecad1390904165dc9e1ea750a83edac8865f67eac12b7f437eec9dd5ed3e899b92f791dd5b757025d28c67268ed35eab11f
- SSDEEP 96:lUejDjbb0OrPJrFJzhOroq3w3znhG9zp4tSZCHjuwE9nCDTVpWZ:yAwOrPJrLEsq3w3r49+uwLvo
- TLSH
  T19EC10F8975F1761963B133F0117A201BF29DACE5160E6808F8B4A9997C7B17C87BBC6C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  js/jquery.isotope.min.js
- Size 15KB
- SHA256 743b919a337dfbb6d1e8648d0793532d47f8af48059e17f7e32ae8738c7614a7
- MD5 38c5167c8052d0c73892c3742b16e903
- SHA1 213ef9210b4a5c4e73a242e832a08f4abef69a74
- SHA512 a2846b069959c3f7ef7d045ab897be48909c077a5e93ad8e012a41826df33e0d4385d844597f44bb3af13e2716ddee76adcc9bc4fd89f84b2e83b3d4dcd7a138
- SSDEEP 384:1NeN/o4+J2jv0pLWu4A9kvpB8SgDC1aEPtc7RPajcw:hJ2jan9kvpCB7w
- TLSH
  T11772838D738133218187B2A141BF110F7137AAF66A468CACB63BC5DAAE7550D2077E7D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  js/jquery.js
- Size 90KB
- SHA256 3227c1f0bd7127f9b7fd63630f1868bd5c865be599bf536355d63222b353c197
- MD5 73e6254903375e432d34c87deaec234a
- SHA1 07f3c109d18c396138cb31359308dd4d471ad269
- SHA512 80e892789639166d184c5118c8ae995e14a00b2a8c2fe7bd2e82f1306c76eed8d77beae39ac761a2b4a7eb39ea97156cb0c078a494619f52bf5628207ad69399
- SSDEEP 1536:O4mCgi8DyCuXXFiJ+L0kJQsJVPEKLQRZdC/RAfDknv+p0WzH/Io9Z7qABZnu0sFn:OGsKXAI2p0WP9bDrstfak
- TLSH
  T11293F8DDB2D1B06257BB21BD006F540FF236195E280D8850F129E8EABC74A4D9277FAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32