f8e7c8bd0bacb86d8967c83b4c6a487f59252afe465053f2397cdd03422451c8

Sharing

Copy URL Twitter E-mail

General

Target
4200-dice.zip
Size 181KB
Sample260905-plc8msvakg
SHA256 f8e7c8bd0bacb86d8967c83b4c6a487f59252afe465053f2397cdd03422451c8
MD5 797b8ff7753ee8b03dfa4679489d3334
SHA1 20703989cbe3c3056a244de715c7c5b8fa43f8ba
SHA512 a17eb9f66e18cfc493d343850c8a428cef93aea60c75a21c045c6bbce6e80c39a75790b9f0421db2d0bbd0f6cd61922e12f30766d5a657232436df21664ed8a7
SSDEEP 3072:r3gIzFGbKvxENfQH+Ay6ImDS5adV7IkSCLRm75jenwh3gIzFGbKvxENfQH+Ay6I/:7gEGKqNK/IxIdVmCI7N+ggEGKqNK/Ixh
TLSH
T1C80402845B1E0DF7DBF2BBBDF40C75A10A4863A952B87840D411B16E3BF4C98A21BB64
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery execution

Malware Config

Targets

- Target
  check.js
- Size 72B
- SHA256 577d248638c57941b7e35d9a19ef4b5d88d52482f6e59254142d4266c57bad38
- MD5 69d77690ed201acd0627e99dd35c96eb
- SHA1 05ffc794be6dae3836ee5df72d82d917323b2941
- SHA512 06aaf36275b0c4de82580319878333d973d3cd464f4c09df4281551f4381940dc792eb28c2c84b3a94196b53edf41751b01976ad77c5e393c0b62574c4b214bf
- TLSH
  T132A0220C0C02220F033230B080BBC8280030E3320BC0C3A8282ACA8A2E03C3B2A0208E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  htmlxf.4339771.abc11.0.js
- Size 8KB
- SHA256 931da005e270364e55363735229f72a321ffe3a75c1915f6488cd9e7f0afcb73
- MD5 b59f56da5596e2c6fc8f6bad2a9f798c
- SHA1 d5f6b737e4b7b359fe722fe9587fffdb367284e6
- SHA512 189d87e4c50497c6c51b479996aea5208a45951211eaf18fbbca8bc09aca7d6b730ce2e716815a56880a6889eccafd08d85a381439131845d6dd76c0bc60ce5f
- SSDEEP 192:MgvIrh56VmmVwZ0/zhza/9Zvr04vcswaw3wmhwewXwu:MgwWVxCZ0/Va/jr04vcswaw3wmhwewXt
- TLSH
  T19302B5623C81D419E2E58C1DA6FE9E79D8C2502982C3F984FA4DD53C87CD4F84AE3386
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  index.html
- Size 9KB
- SHA256 c61c53367611b06918bd2e9b7b1b9b7e7b786972bc0575d431127e388c96be6a
- MD5 ae3aba310b3d342682640969073b02f3
- SHA1 478e8a3605b877161a552cfb2c13de74d8c06901
- SHA512 394f916e67c3f90b03972782134b40d7276ef8f4ea2dabe35a7e42f84855da5d9695dc4d51394227e85028f8d751f06394a0606af0506f37d10bef7d5598dabf
- SSDEEP 192:WvBF2gHrstpi1rxS7dH5fq2cmx1Oek7j0nKJdF6o9U6d:WvL2jtb9q2ciYek/zj0oC6d
- TLSH
  T19D12E8751C958413407FC25899E2AB4CFAA28147C716CD19B2DCA2CB2FFABC9C9533D0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
  discovery
behavioral5 behavioral6
- Target
  jquery-ajax-3.7.9/mply.js
- Size 296KB
- SHA256 1e48ab64ba4a734088ad88c32c8d9b2250a1b34b46efa36db8540f1e3bef9b5b
- MD5 b9faeaf5f45ef5925522b4ff570bffae
- SHA1 ceb2d0906748013fbbd931c1cefe505c490cf882
- SHA512 a7af384c20783355b814c6bc6dcd7c544a04f6f0026390f5a98d92af47d42719f2252a84bde9a4ea21d7b1b4121fa129bca16a3f3e558b596c32f7cd51d8245d
- SSDEEP 6144:oQK5nuFFfZ3Py/LhfinJNxYV2rGTfAAhFo9oBu8Y3gjfKnB5OWOCcfj38rbIS12x:oQK5nuFFfZ3Py/LhfinJNxYV2rGTfAAH
- TLSH
  T19A544240BFC0AC5A03579F37771BA4D9F16A09BE78684A4BD018FC949299627FAF0533
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  wheel@main/d2zk8mk8hghu3d.cloudfront.net/3ff2dbc.js
- Size 26KB
- SHA256 3e5a5f2f94969f8ffc45bfc7f31e7fb87fe57193aa325efff901ab5a9d01c5eb
- MD5 f15e91e549ad0dd401be0dbc95bf744d
- SHA1 720add90e41d94d6a40b0005e7cc16dee79820f1
- SHA512 29697c739a1fc34d651a097156edf5ae8a8a84d95335b1db73ff62f2fabe0c790838486ee57450378f266e60c3b99a2c36af29cf797f5ae884c3f0c6eecc1a41
- SSDEEP 768:n5f2Ek36wBXro8Z1/peRXMiH54aGz0rCyQgmip4L/4aLv0NO:Y3Z7bZ1h2CyQgM
- TLSH
  T122C2644AAB6A1809867763BD9F5F5208FA75032F1512C119BC7C88D85FB4D3842A6FFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  wheel@main/jquery-ajax-3.7.9/mply.js
- Size 296KB
- SHA256 1e48ab64ba4a734088ad88c32c8d9b2250a1b34b46efa36db8540f1e3bef9b5b
- MD5 b9faeaf5f45ef5925522b4ff570bffae
- SHA1 ceb2d0906748013fbbd931c1cefe505c490cf882
- SHA512 a7af384c20783355b814c6bc6dcd7c544a04f6f0026390f5a98d92af47d42719f2252a84bde9a4ea21d7b1b4121fa129bca16a3f3e558b596c32f7cd51d8245d
- SSDEEP 6144:oQK5nuFFfZ3Py/LhfinJNxYV2rGTfAAhFo9oBu8Y3gjfKnB5OWOCcfj38rbIS12x:oQK5nuFFfZ3Py/LhfinJNxYV2rGTfAAH
- TLSH
  T19A544240BFC0AC5A03579F37771BA4D9F16A09BE78684A4BD018FC949299627FAF0533
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Looks up external IP address via web service

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12