a97e2c2f1d2d3cea2708ad7b5520218af500e3dc224137745ca5ed3eed7dd647

Sharing

Copy URL Twitter E-mail

General

Target
public_html%20%285%29.zip
Size 9.9MB
Sample260826-ptjemade48
SHA256 a97e2c2f1d2d3cea2708ad7b5520218af500e3dc224137745ca5ed3eed7dd647
MD5 fedb73b00b35054a36c556f460ea3017
SHA1 2a93791d4c21fee985bacd65acab1218c9057b6d
SHA512 d9d06bb6ee1e4b715e6035e763a7da6951b6dfa8d83b51e574c6cdacf6488c6df22bf0c94ca320c7d8616dabed62b8ba7550f48a880d5321b53a3e8c57127b91
SSDEEP 196608:DDe90ZkwoKmR/ohEQ60U2Tc9G+yQ60U2TVdb9uLzjY/:vc0CwnheQ607Q9CQ607v9azC
TLSH
T1B6A6128AFAF328218717E078159F6604B23D6043950DDD29B94EB79CCFD966846B3F8C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  public_html/crs/Auth/10-es2015.e98798e1ea92475a9eb2.js
- Size 231KB
- SHA256 9bc5e37c4a4a5ab09507ae1056f1e4b96c2140cb273cf4ac926baee957c8d936
- MD5 f9b7014eb13ed675e15da5cb13332de3
- SHA1 21695a15f5cf379d3d03340dce5e437d15de4859
- SHA512 a29483e7217a50611685886682e390d9eaccdf26adc3292379b4b3725fd0c57d9580a55100d6686a84fcb899b443ac5dad1f1974e6add4e2d5fb4a25b849fad4
- SSDEEP 3072:mi3lEvQS6sICfPCnDhZOxTsY/u4kmKiDG3nRY0ZLpQpOE0Z:/ufPckM
- TLSH
  T1A734305437137D3AAD44006A4C73218D4E5CA10DD7DF8288629E2EBBC9E6FCFB1A566C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  public_html/crs/Auth/common-es2015.a87fc886922fa204644e.js
- Size 10KB
- SHA256 6e2231da640d7ed222a1de61ed85cb30d05b5d2131dd7156376b9fa7c15e09ea
- MD5 6e1d6498c386d5cff2640ce78845cd06
- SHA1 ed3d3df554f5d7946e8d565ec73f99bfd29f0556
- SHA512 76b8091af7f67b65b0ae9e8f071d6fe7fe6ddfe7d60e4cec84468ac1951d90e9dc54f7c9218439c442608441c73ef3282c192c0cd2d1d7bf18b1dafeab6b3bda
- SSDEEP 96:gomUx/tpTpPoaKwh8639tFqnVa0+sIP0JFobeZ8JRS87MgSxG8PY5ROxadffBfhU:gRW/tpTpg1+FIGWeDd6xsvt1tvMJ
- TLSH
  T1442256A47717B939BC5550264D33768D4D5C224C99CF4298E0BC5A36C6A0FCFF0E999C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  flag.svg
- Size 2KB
- SHA256 eefec48081241c0d3cf292d7f67e77a3da8950ba4b9c1bc042fa1b741fb74eb0
- MD5 929a5f04415abb1243c9ee39e3c6ae05
- SHA1 4b92cd9f1b4b04de4377eeb8b3714122e26cbe71
- SHA512 ddb283b6ff7f3136f13d36227bf9da3292d151c52dabf5d6a3bc83600b0a549765bc337e06c4b682c461e3eae75ddd51a4b322c841c4118088366f821e239d5a
- TLSH
  T19E41BDB161EED852EA31C381EAD414B4CA6DA2EF468742DCF18C721F4F354A5394F365
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  main-es2015.00feead44c86e494987d.js
- Size 5.4MB
- SHA256 202327a005094e6ccf1a6c7256c0eb9bebd2f328a4ee5d02d09f25bfdf0065fa
- MD5 afad7ac79b10d0ce9cbaa33ff3194d32
- SHA1 d4d5179f2b8758f8b778fb125157c0a7d224a4fc
- SHA512 6fb0bfc40578e0711447c13bc6286a5d690cd931b393da8029209d1077b898d7ca9679ea9577d1c233e3746eb612e9f8fccd27295ac2b321c8f275a3dfdc7033
- SSDEEP 49152:iqMXaGBTQXjAJAyyDbCL7zF38e0N6ripps7UqEUI4x+DEfnf8Kuo565fsobO/zH4:pMhgCLdipp8EmA/yqXaEOO
- TLSH
  T1904609443353F935665610A24977304EAE2D245850CF846CF6689CFED8A8FCFB1BA7B8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  pdf.min.js
- Size 224KB
- SHA256 20342e987f09ebbf13150bfd221795f669e055d0d2fa873fc10df9d837829a5d
- MD5 b41a52be93ec4dcfb160b72f15f515d7
- SHA1 cfcb6d1d688bc77ce7f6ffde654c116b56276dba
- SHA512 da5a96d605019d47fd226e024e299b31cd92dc871a84c4118bcc9fbedfcbbee2b735497aea716144286ffd1884b696e8bc66382195c8c44542337a0cd8bbdc79
- SSDEEP 6144:hFA5Xds66cazr1LLbNHHWnBHuW3nyuVU7R738r:hFA5G66cCr1RW9iP38r
- TLSH
  T1662408B57255242686DAC2D6A0B42703E32575533406CCBCB62CEEDFACDE88111FAF76
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  pdf.worker.min.js
- Size 1010KB
- SHA256 b0e4240771ee076146680d0a0d5d876d134842b57d58595bb04c6a57e08ac306
- MD5 4559a1e9789c99336a572ca5bdcd8eeb
- SHA1 f6d957a579751d733740084a63d49bd4a673bfad
- SHA512 1d84cb00291f62d7ed0b50e129ff92c1bbe7437d1f1642f57b43abe5b18a1fd7b721f4ee105d6dca75c14fa755e50533cc21d38ecdc90b6feca825f29e397d3a
- SSDEEP 24576:debAOEbdC3vIPjt3EiYz1tyOntjxLq82niq10afecxOlGyMtWmZb/LS6KCiKG4:debAfoQPjt3EiYznyOntjxLq82niqmhu
- TLSH
  T185255DE033A498E786D6C5D7106302019179F51BB80C88ADFAB8DEDB6865DD311BBB3D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  polyfills-es2015.6aef01832b6d8c3795a3.js
- Size 36KB
- SHA256 b41f5e7798a0978738a7ebea8e7bd158b9ff8b94514ba1977a9c83c1daa7fbf3
- MD5 2e33b3d083652a8740c1ecbb7568b338
- SHA1 8a187ccc04cc9a6d61e26b7caf90cbcab8ae43cf
- SHA512 faecc422dee888b5a649073cbe6f9e46715e2d1fd2d8bdf8090a569d8715e36ebb136dfd9e148f5068a69e90536ad83bd76232d6fcb2fad53475656741f71e74
- SSDEEP 768:rHrbBjtqlNojI9P/pxiKJCRN0PCXVWWId8L5Jtq44XGT/009hxJ2LMdRNPv8+R3z:kNojxzZLP2itOTy
- TLSH
  T147F208D5779178B69BFA0AB2857B4103E33625A07C4C88D4F15C98EA2D33046A5B7F3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  runtime-es2015.d229b5b4d06dc9b13a6f.js
- Size 2KB
- SHA256 061b33b20b994b51fcbd4e215ec76fbe0d593826302c55486c8f2533e24a34cc
- MD5 bc637956bf7b23c4d8c5fd11be3a981a
- SHA1 fa18e5e648706341c1cb96afa76984480a22ea4e
- SHA512 c577138fe731d119221cf7f184b35a0a4a71d4940844d6abf0727491e9fafdeb323cdec8cffba77d9563617ff8d5c943152703703c14117853a7739564550121
- TLSH
  T1F851C6A533A4F9BA53661868483F601AF12919335E29E4E0C345D9F5BD34C49C027FBA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  scripts.505ed5c9103be7dc0e8b.js
- Size 57KB
- SHA256 59ddf21977f045d6a5fab9060c6d36a5fb0686b0133d49176f04866cdb16a9ae
- MD5 51f922b173f5666db444bd81ed03a1ff
- SHA1 3e5632dd9797cbbfbb0bbab243e6b4cc705ca968
- SHA512 f16e47b33f9b9425a3cfde4689b946dd83bebfb3435cc4909b4a3b248d2594d5c0c7b695d459087f07bf9bc5764ca26589b0febcf61a7e5d2d287d4160890088
- SSDEEP 768:ZFErzOLk1jeP7wxOYjAvdMDI7PeLKRTTVt4W8YsqOVm7MTIKAPRwVpOi9hOrAPan:0hSIsx3RklirSA
- TLSH
  T18D43C74A3358B83309DE44A69132474BF7255D94B547806CB9BCACDE2B3DC8272B7B78
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  trans.js
- Size 212KB
- SHA256 33890df97025bf825fd7b87f3758388dd3e1cdc8fa2bf2b80d3924d0a7fd3fcd
- MD5 185b33bb2ab57ab924cfc7dff9a4ecf5
- SHA1 be337a955bdba8171aea1c78887617f57119cf8c
- SHA512 1d85ad7ded93ef063b81d404a48993d7aaebd827b5276e4620317cbc2d76dc2fb9870f3b2e45bb2551916b79d5ec8bd256460bfdb55cc2fd41601f3781c580a5
- SSDEEP 1536:+Z4eG/X1E+ZwwrHVX62WO/SPeK6ZGM9UfOEGS+YTuOb8Nf9qs0Vk13wDMfqtAFKf:Be2LxX0Ph65EAX9SWoMfmU4z2uGRCiQ
- TLSH
  T17E24D7C87142F02B6762D57201BF135AD23A280868C966AC729DE4E57CF850E6977FFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  public_html/crs/Auth/general-public/crs/flag.svg
- Size 2KB
- SHA256 eefec48081241c0d3cf292d7f67e77a3da8950ba4b9c1bc042fa1b741fb74eb0
- MD5 929a5f04415abb1243c9ee39e3c6ae05
- SHA1 4b92cd9f1b4b04de4377eeb8b3714122e26cbe71
- SHA512 ddb283b6ff7f3136f13d36227bf9da3292d151c52dabf5d6a3bc83600b0a549765bc337e06c4b682c461e3eae75ddd51a4b322c841c4118088366f821e239d5a
- TLSH
  T19E41BDB161EED852EA31C381EAD414B4CA6DA2EF468742DCF18C721F4F354A5394F365
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral21 behavioral22
- Target
  public_html/crs/Auth/general-public/crs/main-es2015.00feead44c86e494987d.js
- Size 5.4MB
- SHA256 202327a005094e6ccf1a6c7256c0eb9bebd2f328a4ee5d02d09f25bfdf0065fa
- MD5 afad7ac79b10d0ce9cbaa33ff3194d32
- SHA1 d4d5179f2b8758f8b778fb125157c0a7d224a4fc
- SHA512 6fb0bfc40578e0711447c13bc6286a5d690cd931b393da8029209d1077b898d7ca9679ea9577d1c233e3746eb612e9f8fccd27295ac2b321c8f275a3dfdc7033
- SSDEEP 49152:iqMXaGBTQXjAJAyyDbCL7zF38e0N6ripps7UqEUI4x+DEfnf8Kuo565fsobO/zH4:pMhgCLdipp8EmA/yqXaEOO
- TLSH
  T1904609443353F935665610A24977304EAE2D245850CF846CF6689CFED8A8FCFB1BA7B8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  public_html/crs/Auth/general-public/crs/pdf.min.js
- Size 224KB
- SHA256 20342e987f09ebbf13150bfd221795f669e055d0d2fa873fc10df9d837829a5d
- MD5 b41a52be93ec4dcfb160b72f15f515d7
- SHA1 cfcb6d1d688bc77ce7f6ffde654c116b56276dba
- SHA512 da5a96d605019d47fd226e024e299b31cd92dc871a84c4118bcc9fbedfcbbee2b735497aea716144286ffd1884b696e8bc66382195c8c44542337a0cd8bbdc79
- SSDEEP 6144:hFA5Xds66cazr1LLbNHHWnBHuW3nyuVU7R738r:hFA5G66cCr1RW9iP38r
- TLSH
  T1662408B57255242686DAC2D6A0B42703E32575533406CCBCB62CEEDFACDE88111FAF76
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  public_html/crs/Auth/general-public/crs/pdf.worker.min.js
- Size 1010KB
- SHA256 b0e4240771ee076146680d0a0d5d876d134842b57d58595bb04c6a57e08ac306
- MD5 4559a1e9789c99336a572ca5bdcd8eeb
- SHA1 f6d957a579751d733740084a63d49bd4a673bfad
- SHA512 1d84cb00291f62d7ed0b50e129ff92c1bbe7437d1f1642f57b43abe5b18a1fd7b721f4ee105d6dca75c14fa755e50533cc21d38ecdc90b6feca825f29e397d3a
- SSDEEP 24576:debAOEbdC3vIPjt3EiYz1tyOntjxLq82niq10afecxOlGyMtWmZb/LS6KCiKG4:debAfoQPjt3EiYznyOntjxLq82niqmhu
- TLSH
  T185255DE033A498E786D6C5D7106302019179F51BB80C88ADFAB8DEDB6865DD311BBB3D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  public_html/crs/Auth/general-public/crs/polyfills-es2015.6aef01832b6d8c3795a3.js
- Size 36KB
- SHA256 b41f5e7798a0978738a7ebea8e7bd158b9ff8b94514ba1977a9c83c1daa7fbf3
- MD5 2e33b3d083652a8740c1ecbb7568b338
- SHA1 8a187ccc04cc9a6d61e26b7caf90cbcab8ae43cf
- SHA512 faecc422dee888b5a649073cbe6f9e46715e2d1fd2d8bdf8090a569d8715e36ebb136dfd9e148f5068a69e90536ad83bd76232d6fcb2fad53475656741f71e74
- SSDEEP 768:rHrbBjtqlNojI9P/pxiKJCRN0PCXVWWId8L5Jtq44XGT/009hxJ2LMdRNPv8+R3z:kNojxzZLP2itOTy
- TLSH
  T147F208D5779178B69BFA0AB2857B4103E33625A07C4C88D4F15C98EA2D33046A5B7F3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  public_html/crs/Auth/general-public/crs/runtime-es2015.d229b5b4d06dc9b13a6f.js
- Size 2KB
- SHA256 061b33b20b994b51fcbd4e215ec76fbe0d593826302c55486c8f2533e24a34cc
- MD5 bc637956bf7b23c4d8c5fd11be3a981a
- SHA1 fa18e5e648706341c1cb96afa76984480a22ea4e
- SHA512 c577138fe731d119221cf7f184b35a0a4a71d4940844d6abf0727491e9fafdeb323cdec8cffba77d9563617ff8d5c943152703703c14117853a7739564550121
- TLSH
  T1F851C6A533A4F9BA53661868483F601AF12919335E29E4E0C345D9F5BD34C49C027FBA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32