9f3c0784c5d0dd30b929b3a74afb8354ff96834702dc50f579c8f7452f1d6899

Sharing

Copy URL Twitter E-mail

General

Target
S1.zip
Size 36.4MB
Sample260826-w12ccavakb
SHA256 9f3c0784c5d0dd30b929b3a74afb8354ff96834702dc50f579c8f7452f1d6899
MD5 e4c13cd125a2a9035ae36c8f3303ec46
SHA1 996e8c9c8f4cb6083aaa94852c010c1f3127260e
SHA512 fb9d4dc381e90cd31bd826f253431dafb31349a53a0fd2f19d6e1086665fbb845faf808b1b1ab4fedb75ed372742fdbe4614245fcd04f1e08ba608c1250f1136
SSDEEP 786432:pFBqq7Lx40xoWMR5q7rpKM39XYUIqtWX95U5LumoklkZ0LbfNT8+:p7R3r8uX9M5s5FHfNY+
TLSH
T15487336CA27427BEBCD891BDA75B54806C0778635711E30FD191B1EA2F893B83ED3126
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  S1/font-awesome/backup/fonts/fontawesome-webfont.svg
- Size 306KB
- SHA256 bfdef833219a6edffd9c3cbc28db72739d22bb4d20cc2e2f8d56a7a4d408a206
- MD5 2980083682e94d33a66eef2e7d612519
- SHA1 26bb1c5ef100a1cd71923f1d5dc29fc797ef4639
- SHA512 6d578a62cc8360da90d650ef50325607420ab85e534f7f3ce118333db153a77f4a1637b29ad2770da84b7aaca0c19bc1e7b4f2882967bf4126fd4e815bafa32c
- SSDEEP 3072:Unw+ubvqCDOzA5vK+jRwXxSbs3cBNKyOAThr3JmqkOEY:VNlFyCX
- TLSH
  T11A649568F95107B9C7DC42C09A7E0D94532E916E18753E68067EE8F05D0AB2E4FCFAC9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral1 behavioral2
- Target
  S1/font-awesome/fonts/fontawesome-webfont.svg
- Size 433KB
- SHA256 ad6157926c1622ba4e1d03d478f1541368524bfc46f51e42fe0d945f7ef323e4
- MD5 912ec66d7572ff821749319396470bde
- SHA1 98a8aa5cf7d62c2eff5f07ede8d844b874ef06ed
- SHA512 4f575d52331de91a2e32cc3408dd0eaf0cf25b7244d34b226314e3647e85ce284f86e3b7238c6c8b9022dc4e2787bf51620849290cdcd5d4c4bc905f289d2156
- SSDEEP 3072:PLac0AVfCwGzG8LY4kh53s0eOnz8WjKAOvX7LYvglcD4ZME8xYWDQqJpFDBl4qjm:hCG7bFv9gSS
- TLSH
  T17594C96CE9910B79CBDD42D5957D0E90132D81EE28783E1846BEA8F05D06B2A0FDFBC5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral3 behavioral4
- Target
  S1/fonts/glyphicons-halflings-regular.svg
- Size 106KB
- SHA256 42f60659d265c1a3c30f9fa42abcbb56bd4a53af4d83d316d6dd7a36903c43e5
- MD5 89889688147bd7575d6327160d64e760
- SHA1 de51a8494180a6db074af2dee2383f0a363c5b08
- SHA512 c2e77eab327af1469097c31bc0daf820c066b0222059d8ff0ecebca974b62b7535e96f1f356643b2b62763a924d040e4ac9b2097e1de2c22226411fde8723743
- SSDEEP 3072:jY+spjSP0yD4zOPqGGUG0kSnouoxvKDHkPooe4Pqo0CjmFIudsqi/CWEI:kRjSP3D4wlG0kSnouoxvKQPooe4Pqo08
- TLSH
  T130B30F1CE9940B709BDDC3A25B75AE54231C418D72303CD04AB9E5E0B99BF694F8E9CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  S1/index.html
- Size 20KB
- SHA256 9d97844e72c5735c4e50524b3b66db4301e83da85946e486f15910600ceeace6
- MD5 9f4eb5c4197a9914b97c8ec74f1679c1
- SHA1 549bffc727b05ab7c850b8151c18321c232d7a3f
- SHA512 f8e205aac77e4b494cda857ed6565c8ff9c95a4383be6d6b69e97602a4195bcd9de348ffa0d507e952a851ce5877d9e713bbe72b0816c0874b20b2edca5b02e1
- SSDEEP 192:XT49ID24C78+hx50nt556KIVUeNGwt3atCbSIjrYMCXfohvQyDTzAu:2ID2488+h6+VUeNhbwxTu
- TLSH
  T1C492122558F5123B0083A2953AB17F2FAFB2940BD62B9A4435BC0BC55FE3E46CC53699
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  S1/js/bootstrap.js
- Size 68KB
- SHA256 0abe8deb334de1ba743b04d0399e99eba336afed9da72fc4c0a302c99f9238c8
- MD5 fb81549ee2896513a1ed5714b1b1a0f0
- SHA1 3b965a36a6b08854ad6eddedf85c5319fd392b4a
- SHA512 850780aed292053275b1e8118f24680e1e34f6d77bd0ba32eb6bac041dfe3b1e59d5a922b01cc2a195a953df90fcde4605b81427a5e8d5f71d1600c3211ccbc4
- SSDEEP 768:IOND1D6XlVY92TiQcAyK0r54Xx4oGhLxGiQpQsBd8+WvbA:oVWiDXx4zsbLWjA
- TLSH
  T1B4634F167BB820618B5B30BA8CDF514C7238951B554BD4283CAD97D06F50B38A2ABFFD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  S1/js/bootstrap.min.js
- Size 36KB
- SHA256 53964478a7c634e8dad34ecc303dd8048d00dce4993906de1bacf67f663486ef
- MD5 5869c96cc8f19086aee625d670d741f9
- SHA1 430a443d74830fe9be26efca431f448c1b3740f9
- SHA512 8b3b64a1bb2f9e329f02d4cd7479065630184ebaed942ee61a9ff9e1ce34c28c0eecb854458977815cf3704a8697fa8a5d096d2761f032b74b70d51da3e37f45
- SSDEEP 768:o2rGy27UwlNqMl95qNmCFejhqs8snmi+CSFXfbx8Gf3Zq7Q:Jg73zhq0GvbJ3ZKQ
- TLSH
  T1B6F28606B23031A147EFB1E1525B020E7239696EE906907C78B99AF53DB9C48717BF3D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  S1/js/jquery.js
- Size 93KB
- SHA256 24262baafef17092927c3dafe764aaa52a2a371b83ed2249cca7e414df99fac1
- MD5 3c9137d88a00b1ae0b41ff6a70571615
- SHA1 1797d73e9da4287351f6fbec1b183c19be217c2a
- SHA512 31730738e73937ee0086849cb3d6506ea383ca2eac312b8d08e25c60563df5702fc2b92b3778c4b2b66e7fddd6965d74b5a4df5132df3f02faed01dcf3c7bcae
- SSDEEP 1536:/PEkjP+iADIOr/NEe876nmBu3HvF38sEeLHFoqqhJ7SerN5wVI+xcBmPv7E+nzmQ:ENMyqhJvN32cBC7M6Whca98Hrp
- TLSH
  T10293C8D9B6D27162977730B850BF510BB13A98EAB80C4C60F1A4D8E47D78E89507BF2D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14