9074510fb16031ad05b3b79f456dfa6925ffc17c12225aa13737d0783eabc7e6

Sharing

Copy URL Twitter E-mail

General

Target
invoicer.zip
Size 22.1MB
Sample260907-psvfhaha26
SHA256 9074510fb16031ad05b3b79f456dfa6925ffc17c12225aa13737d0783eabc7e6
MD5 c341b7bbd648601fb7efb39d3b940d7e
SHA1 e9bf988d464deeaec33ac54bef02d11f19b9e89c
SHA512 b74226174d3bdcb4f57323516c2115c74b0622fb4ec9ccdb0153a2f54aaaa98342bc53c0a1ec1612b3d68618b5a75798ccca43a05b949b775a91aa67a817fc20
SSDEEP 393216:zMdQDUAi6vAPGCtFdg2R1WxH/QB95J/4or6pD7B3KPC90p/AAINM:zSQDrXQ71+HW93/Qd343r
TLSH
T1A637F11E875C70C7DDC3AF70DB22CA3291AD8380A060B1571C8F9589DD5E6D84E6BE6B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  invoicer/assets/fonts/fontawesome-webfont.svg
- Size 306KB
- SHA256 beed91f60f61e115d1ef490241811ff6b12f595c7f1301509479aab8041bd3cb
- MD5 139e74e298bca37a25d2bd5868552e04
- SHA1 0b42e5ee7daafb72b1237b9d5b7f5ab0775fffc7
- SHA512 f7e2d285c1412795451ff5d9bb5c2f7ff1d92a073706d3f4a06cb6abb65bd978eb96e675db33257aa6c44bc79c7096fdc05ca553e227b1ef036fafa387e3badb
- SSDEEP 3072:qG1+74+PCORzAKVKQqSpuOGSQdCOtKpOmHkrpzs2qzQB:69TWHVx
- TLSH
  T1A964A66CF9510BB9C7DC42D09A7E0D94532D926E18753E68067EE8F05C0AB2E4ECFE85
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral1 behavioral2
- Target
  invoicer/assets/fonts/glyphicons-halflings-regular.svg
- Size 106KB
- SHA256 d985cda034eab4c9f2403976f8d171fbf6efc4b593107d8b1401e5b6daa46295
- MD5 f721466883998665b87923b92dea655b
- SHA1 4dcf0ab896f5417047f881de91bad10dcbda48c6
- SHA512 4c0db2185432ecd46c968d353d951baac8227e58dd13eaf59b11454a6fef38c16f27fea77af735fe0abee4bf8aab5921b6e33626e5e9001a55901ea50ea7b82d
- SSDEEP 3072:nTyaejS60yPCZ777ZGJGhk5nBuDxEKzHrIoomIPlonCu7equnVNzotWJK:TMjS63PCjOGhk5nBuDxEKHIoomIPlonj
- TLSH
  T19FB30F1CD9940FB09BDDC3B25B76AE54231C428D62303CD049B9E5E0B95BF694E8E9CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral3 behavioral4
- Target
  invoicer/assets/js/app.js
- Size 92KB
- SHA256 3433280d00f9d2e435161dd404b4c88ab43b359b52a5817eb430ef81a6dc4214
- MD5 27a89ad5f60f9677b369b5c4895ffe1c
- SHA1 a0665c6948f85774a8351656c0b60e467f631cc9
- SHA512 12fe8b1f3cbf4d483ef1fe317d86de846b67efd791480eaca01b81f870fa718e97dce05ded18fc67cd67b6df8bf92322c243d9880fef51e306b069d233007c20
- SSDEEP 1536:d03tOyYYl8Y+Ai9Mxh796KHB5NDotPrw/y3SF:dDyYTVMx19dB5NctPrOyM
- TLSH
  T1B693221EB658E877A9772665CAE7C014E9751C4F8008B1193CDCA8D92FB4C90D2E9BFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  invoicer/assets/js/bootstrap-editable.min.js
- Size 72KB
- SHA256 c0fb87d88652abed599483a3d2e6c8fc68a468ef6ec6c46a040c0b5e3f3d372f
- MD5 c34cf22f74c82f556f72e8a1ff4758de
- SHA1 1629217366b312cb4611e4f0e730d9cb473f1052
- SHA512 314bbcf0eb153e6c4944b51877f044a0cb44293a87eb8c2acf18e9ff026d53317590f72dde521f427a3d72c6389e72988125185150adf869c30a70caa820e370
- SSDEEP 1536:aRgP9BPDQNnWmyDj9iGZ4dfnUqx1afet/LkP0LkiaG:1PD+WmyDj9HZeUqTaaGEaG
- TLSH
  T16473848A7255735542B7A1F0409B060B7332BA7AA448443CB4BCDED6AFB8D0D617BF39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  invoicer/assets/js/bootstrap.min.js
- Size 103KB
- SHA256 45c9d6c2335df46ffa9defc36f171b831c859342c993f6787fab7feeabbfd800
- MD5 f9721af99cab4131f16d1badd2d52dbf
- SHA1 0f620a533582f5b9e9ad44f3157da29ad2089df0
- SHA512 b3932d57b031448e73151ab7b77722ae7e480e7a160d7698535ef7b51d61137b4a05e0419fed3d148a6adf411c0456b6d1a7dcd64fd871547f13f4a5bbf3805a
- SSDEEP 1536:r0U77GF4FEOdmI9WHRrcRLaLwiwfwpDNCKwnPQWYWtzLe3OH:VOFaDWOKJiSrwPQWvT
- TLSH
  T1AAA3540633E4B532466AB0669C6F8949F6375A9E6346700D76AC80DC1F3CC64627AFFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  invoicer/assets/js/chart.js
- Size 50KB
- SHA256 0c8bfcf05182aaa8efb72d416a1a2764251c71a53b4953c2dc3db64f46ed9775
- MD5 741761e0fd0f5a80ca7e181bf35c1b53
- SHA1 ebb6245a669e746facb98dddf35625e959dd2b4d
- SHA512 cd74e4685097ba422331cf9b84ee2325f439888c413651e269611b1f54356846a022bfe8ff143c50c58b24da6757596af4814d0db350e282aff3e01f957ef869
- SSDEEP 768:xLWH4/sTqxTO5x0JvdasbIkcxojnOxlxx6r7EhYvjWF7E2ujBq0hW:tsTqC0JvdasbIkkojMP6rYYvjWFJ4ZhW
- TLSH
  T10E33A64CF206226985E313A4350F134E913769643587592CB978E6F2E9B890F35FFBB8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  invoicer/assets/js/custom.js
- Size 9KB
- SHA256 cf1313b39d4804215300c5990ec4db5ea4f20a73352e7b6cde00be39eaea27c7
- MD5 405eb54f6192820b58ca03d87cc317a6
- SHA1 3ae0597d4ba96261b735d1d1fc552c1b3568d62f
- SHA512 013a915d9af5bf2732dba3ce4b8bf22ee985cd8c35878a28dc7f67183360e08aaf48cf47977f8ceb6dc43f30ab37020fbd8e8a4be9927d4d74ffd67fa5d2026d
- SSDEEP 96:DvmTkd3fZnnyiCgpf025Zd3kyAdcUeNN0pFhMj0IuYlQhCG9VxpgN3b9VH:Dvukdx3pf025Zd33UeNN0uwHBPGbPH
- TLSH
  T1D3224009BD78166645BBF37BAABB4A05FA7A00A74100CA01BDBC55E01F70E44B61DFAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  invoicer/assets/js/datatables.js
- Size 14KB
- SHA256 35378d44baadaddb0d599163f9a1a439aca748569db8afd3ee0b88be4d247caa
- MD5 4d033a7503ff482987981281630c96a1
- SHA1 349d9c445446c5e87d1faccb5457391f8c0ba185
- SHA512 f79dbab8d65d0349fc2a4c12c088f29fe4519e62e84456114ca93d4c69a2802f2e1adef3c105d344a17cd65c42e0cc78173c93f0d5b2d756746e31f6d449a807
- SSDEEP 384:YbQiQHkzUtD+5X81ORO+UGkWEnGBdcX7EnGB0Jal4gS:YAE4tD+5M1OO+UGkpn6dcXAn6yal4d
- TLSH
  T1FD625392361C35AF8BC7E649E07D4790C92DC0F49101AA3C766BD105AA98DB81BF8D3D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  invoicer/assets/js/jquery.dataTables.js
- Size 439KB
- SHA256 d810ed83601e68fd0947a9726867e8d579181ab2d2a623174c93e5ec56fd354a
- MD5 d4bab58507cfa89a2a26fbce103151bc
- SHA1 596423e1b8ed10ce436b91451d91ef5be0b5b3b1
- SHA512 28d9ad6a354ea567af54ba299a39ba158e5835230f02a4fe4a3a9210e58ebdab9e1a4e11c90617aa63372df78c4caff4fc120a46eac2cd1649ca351ff7e9a31b
- SSDEEP 6144:2ZTZvmEuUe8VnlRTNHtf2/DOyIJGlrxFTksPJDOm6:UTnuUb3Ftf2CYFT4m6
- TLSH
  T1C6A486C7F34CA22A2A6372B0B27D6294D63CD034132168B87C9DD9697B50C7693F9ED4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  invoicer/assets/js/jquery.min.js
- Size 112KB
- SHA256 bba4ede49be1027d052e5b2fe3ad41e7ec6534f2e9f56a8d549a8b9000ead34e
- MD5 c7fd762677b7da42f729251ef15b6300
- SHA1 e2788d52d53141472f8a4ef72c9d4e0f83274d9a
- SHA512 c00daa485e012c12f93705b912792de48822314f62bab675433d70e4879a6db77d28b1ba9659485e4e26dada148636c49bd3f74216543b51b28e4a224fd32bc6
- SSDEEP 1536:2jOhcTfIjkkYrrlJJQOPpTqgZSyN5z7VXxDg9vUEVZjN7fdOwrfumZQeAMpbEbma:2fgLV1LrfumZLb6UK4TlvJJJTUf8O
- TLSH
  T186B3A795B3D632358667F0369DAFCC4DF276195E23C8850A725C84662F31C68837AEEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  invoicer/assets/js/pace.min.js
- Size 12KB
- SHA256 5b5cc718704634518901a47d9748b628f5f4dc21b850175938cf11a1fb046759
- MD5 f85930f05f10c5a3e6c94663ef9a7dc8
- SHA1 35b8cc437f3857b09a6db9b2cd5293daa17e2701
- SHA512 843e2c86ed3feac0cdb04fd77fecf6f178aa1b5bf7ccf8fc00ff6f9816e504b5ade88db889c6e345dc975b7f8ee5924cd26b9050b35fbbd976f2a011cccdb000
- SSDEEP 384:N6lPvkEp9P+DELih6pMrOqcVw3or9FOJAECp+7F7LBv2SY:NkPvjf+gnMrb13opwGECpoF7NvA
- TLSH
  T16042B7CAB5D2B021DAE36464827F0707723E567EB40F04B8E168C8D43D78A5D692AFF4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  invoicer/assets/js/popper.min.js
- Size 29KB
- SHA256 341b061c115c20a6d2c7d5c272583514637444be58109a0dccdd029765fe1222
- MD5 e5f9b5ff418b38379e81c7615ca15868
- SHA1 71042b7a5477f03f2fc9aafd8ece17b2b5f7616e
- SHA512 62898af17ce5b48042fcabd54f8b0239e1a56cc816af35d40a03b0f11f80e879f3d20c1508b1451b34dd3f090c7e249b70a0834fc89e95de489cb6f2a7966037
- SSDEEP 768:ZbSqVb0rS9wJCI1qUp/V4h3tVcF3l8Y+gEWR95GH3elKF:ZV9wJVTp/V4h3tVcFV8jgEWR9QH3eW
- TLSH
  T158D2519835C1B539463BE16A842B841CF3766B172389920772BCC5A90F70C649B7AFED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  invoicer/assets/js/spin.min.js
- Size 4KB
- SHA256 47c173586b07dd2a42b754e22d4348a5fc2f0a110b934b242f453c97cb24bc47
- MD5 80799e64ed2212c700ac0d797addabda
- SHA1 aa481e20b891f7795b00938b1de0024e2a1ac1ee
- SHA512 abc6f5bb335fe93588572448758a0d28dc1d60fe6a6fbba16be571cab6d1994379c2492b16574340b5133c181dec56406b86abe7e949efe877806454feb4069d
- SSDEEP 96:Bt0yCO1zoRYcixjwPHxbCB4go3qFS/NslFnZb:BJCOtoWNxjsaFkW
- TLSH
  T19C91C61CB3C1701B2BA3E195705F9489623168115E1FD4D8D2B8E2A1AAB0D64527FF7C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  invoicer/assets/js/validator.min.js
- Size 5KB
- SHA256 06e800743d845b0c838397abccb837f8ae9a81d5676dcdf739ba7b4458d5fe68
- MD5 9475d993b37069614b78f9c6698e4b11
- SHA1 afc70043c7fdd73c78ff65f18191cfcb432ac437
- SHA512 b4cb6ed546a98535a08db30350bec7b9461e5ef4cafc6e2ad9c266fe9ab994e3dc052c666f415bdbf5a3f099e4aa8133bda13d559b376a76b2a88b3131bd5ea9
- SSDEEP 96:HIMyeDa53vlsuDvwldfWAOhTa9+xcuRzBiFThvhx5c925BTLDfFb5i/Kpiyh:HIMyCa53vmuDvedf0lb4FThZo2fhA+h
- TLSH
  T1FCC13349366321921F9670F5829B828B72B97B7CC50A405471EE84E06AF8FC567F7F38
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  invoicer/assets/plugins/accounting-js/accounting.min.js
- Size 3KB
- SHA256 db23fbd03e3fc87667da403bbc3a552fbadf5f680e090134bcf7232dd781d21c
- MD5 3b9cb7663698791585f7f3ec4a54248f
- SHA1 e987c16b9ae7cc0dfd2cc446fea1c3a5a6aa55d9
- SHA512 26ae81aa21bc0d4b81e46cb26037c0b354b31f8b77e892339167b5ddaea2ea6a906836722a67da8332c0293c1917113215a95c7bc28e4e5e7837c28bf5bc7da4
- TLSH
  T1CB51439034A2F4979665267380EF410AE379DE8AE58C98C5D0C8BDC03E35C98E175FAE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  invoicer/assets/plugins/amaranjs/js/jquery.amaran.min.js
- Size 5KB
- SHA256 e2b0b2e52556bc69593e379982112b3259c612842cfe4d70673863a66fc71042
- MD5 cb007a1dee9872367223ec1c058f7404
- SHA1 54b3b1f968ac01d211a557ab4955fa87fd37e757
- SHA512 ab08067ae65fa977ada7f1f4fd6e19a6d92edf9b5cd3d8ed22c08cbeb838c87ffef89df91dc06672f43c7396c262e7f990da1175468c7efe004a8c9210721811
- SSDEEP 96:TZrdyKmvTkEe7vYH1xBQnD/lYDyZrhbAvUkDioEBBJwVWakRmg7AWkXV:TVdyKqk/7vYJkD/lOMrhoUkDioEBBaVZ
- TLSH
  T1BEC13F46A14E7C334A63AD79906F0609A9374EE07D07D43CFDBA65C94AE940822BFF34
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32