465b6f7bb3a160c7b9041bcceaf4c8bf7d6ccc8a8cbc55e3f0569951c56b4e16

Sharing

Copy URL Twitter E-mail

General

Target
player.zip
Size 17.1MB
Sample260908-apavcsycmc
SHA256 465b6f7bb3a160c7b9041bcceaf4c8bf7d6ccc8a8cbc55e3f0569951c56b4e16
MD5 a9a527b0b7b200378e61b099d54ede9d
SHA1 ecee3c59d34300d567b1080dd0e6141e2ef6fd32
SHA512 13998108d0cdb482f2e213c47a871a3df8c5528aeda04abb409b6ce679028316236a4092327b138c58eb6552d6e0631b513ffbba913e7a795bd3fe7392df245d
SSDEEP 393216:ZtBMcq/b2IRBZh6alRqKW7YCU9ArOLRUvNT3dxbMPmxrqxnX61:TBIKABZ8OWcCU6qLRUVJxiAm98
TLSH
T1850733F4E1155A56D98F83F6455382CC1E8B0511FFEA99AB32A835AC501BA8C7039F3F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  css/fontawesome/webfonts/fa-brands-400.svg
- Size 675KB
- SHA256 3f73a3d20bf0a3038e6bb2f60a2875fb02887f5aeae3b7ee35ff1a7762bd0057
- MD5 38975343b586296e9b73e6b56cc3ec5d
- SHA1 87d67ea88d204556ed08c82f355777ad565d842d
- SHA512 c82c0f52b7054626bb3511afde35e085b793b302593f160309a81fc000ed45fb20447b6555df1ad37e3018988727ff73f68ec6a53b210e9f7f0c220ee8f977b5
- SSDEEP 3072:qxCv0Rzj36Ggr0JTQUHkzq7WkLHQ6TzFa2Pxtxqpch1UzXmSDaK:X6/y4P6T
- TLSH
  T186E4F15C93A4C2B8FBDB0EE98936BED6366B35FF39103254C278A56028727784C4D59C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral1 behavioral2
- Target
  css/fontawesome/webfonts/fa-regular-400.svg
- Size 141KB
- SHA256 eace65c64fa572dbb0f8285a0190cd40752c8b6c605f5d8e90298e7307217cd0
- MD5 da8a235bb207c74eea21507f3a86a53b
- SHA1 525b11c9028de774938dcadf7f656261ec454008
- SHA512 09e21da6b0314ed284f827ecc2c89cd81a8157a54d15daeadff47ec0ea5ec46e4a8ceb63f6ddf4aaffb73103b699d3f0c1174562f8d1fb9218a3d9cbb645eeb5
- SSDEEP 1536:a+nVm/kykinvidEbqODs7wUgxWd9spvNp8mwm7+T7sVpxluvX0bPVsP8CNVcQBSL:fE/kYqwnws+XWN4WnV
- TLSH
  T18DE33359E754D6BCFBDB4B95853A7E90226A72FF35143260C778B0A02C3277C8C9E588
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral3 behavioral4
- Target
  css/fontawesome/webfonts/fa-solid-900.svg
- Size 797KB
- SHA256 3e564467338fb1db8596fe502fdd1d4da983bf5d7e185ac8cf5e0fce679e9ac0
- MD5 7726a281c1d436eb038f78c6e9048c96
- SHA1 2fee7231344f29683a232cc601f98b08514c3c82
- SHA512 c474882b89bc42b79da6c2088d3ffcda1f2920d5e3c52ea810bb3334e94ceef36e1ad3aee5f977e834df944356f703aef056881047b79f8df7b1c0786ff3527c
- SSDEEP 3072:kD8MoBCyOF/s45EdGzPqQZc/4qm1rDK8/lVHflUylgJHL1N0NgdGdYq9iF1R2cH2:zgPqFZmz4DxO
- TLSH
  T12E05546CD364D1FCA7C64BD98A397E91269E65FF36203124C278B5A02C327BD4D8E58C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  documentation/content/install.html
- Size 6KB
- SHA256 c1ea130474a0e2f18fee56648448c9e78075b1cb79739dd357f751231faec751
- MD5 a493549ddd062db2b8744ac560d05ec4
- SHA1 0edec73a53dd0436e6c7ddca2cb9be614c004e4d
- SHA512 54e7bda1cce36bc780340f3ad5cb34a3e357ab027cf247c9fac3ae29dcfa3057bd5b6c6e019273aaf6426537bf8ef6e572d0d2cc0f587d7444d0b22296403e52
- SSDEEP 192:X3R3f76VZBpelaqz4MYunrCK3A6r9d7wpwkYI8tnihw:HROVwlaG4MYunrCK3A6r9d7wykYI8tn5
- TLSH
  T1B7D1C70789067327C2520AB1636EEB5FA36150C2632B8B563C97617F275B9470D736CF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  documentation/content/setup1.html
- Size 5KB
- SHA256 5f04f8cd9237d5f137b0c2cd163735beea6e4e0e665af95e3d10276cb5a53b03
- MD5 f5bf860414826666d733f5dfa7da4378
- SHA1 02d1ae2eea3fba377df66c4223df9de825a4ae35
- SHA512 8a90ae9037f9fee255f8d4ff3b886a21ac3f493efe96c8b317f6d137f1ba985186050ad72afc1c4fd1f829f38d168217993eff132363abf17c63e3104c3bda14
- SSDEEP 96:X3R3f789VoT5J0Cpz02cpnP3pv3bNcADWNkEVFI4RGS5UMeQ5zIQKs1pEpBhfFIS:X3R3f76VSBpMBvp1YFVK4RZiZXqjkDFr
- TLSH
  T1B0C1860B89066527C2620D70B36BE74FD77050579327C65A7CA670AF27A36474A336CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  documentation/content/setup2.html
- Size 5KB
- SHA256 3d35d95213e76b9a242bcc53e95d100c5af0651a45f835d70f85476498d88aa4
- MD5 0009ea7969a5bd8d6078a857fd00340d
- SHA1 621702ec8bad42d2fec6efdf74703927c163dae7
- SHA512 4d5472adbe1ffd0dff14b62c31fe09a78f480c01e92aa268507bfbf1dd8951c0739b09675c7a6e8ab7a488a6388a857f7c216f4586e99c59f1f3f0a0748f87be
- SSDEEP 96:X3R3f789VoT5J0Cpz0vc4CnP3pY3bNYADWNkEVFI4RYV5UMeQ8zIQLns1pEpBhfl:X3R3f76VSBpGCBYp5YFVK4RBznZXqjkh
- TLSH
  T13DB197069D06A527C2620D70A36FE74FD270505B9337C65A7CA620AF17B3A474D336CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  documentation/content/setup3.html
- Size 5KB
- SHA256 5ffc6a8b7cd55bfa47033c9add2d11593aa01b21e65436a6502a720ca0d729ed
- MD5 8f7524892c7c5349722d84c249b0a4d1
- SHA1 335ef45509a7d0aa4052d80289112be8a8e9f30a
- SHA512 2a7f00926a21b200cb77d81299f217bd5a1704270e1ed24925bc8640dd95ab1acc5586aa2a7c91f0ec2babc2d62e5081cc3ea733593f152e7fce04d6af42a45a
- SSDEEP 96:X3R3f789VoT5J0Cpz02cpnP3gF73bgJO5gvDWNkEVFI4RGV5UMeQmzIQKs1pEpBv:X3R3f76VSBpMS7a9YFVK4RdiZXqjkDFr
- TLSH
  T15CB1A50A9906B527C2620E70A36FD74FD6B0501B9327C6197CA660AF27A3A474D337CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  documentation/index.html
- Size 1KB
- SHA256 84670f80160b3958191ed666b9a72e818c0f4af5fde73bedce968e04f847c68b
- MD5 eec4662c6d9263dcd313d8613203b5bd
- SHA1 2269a24d6763799d21e4b489bf87da0fb487ad1e
- SHA512 2bf6a39718534c74553c1680d742a9012de974d8560e9015ed869af7388030f7e124409c753ecfaff2a75215369c085c1f575a4cd76723f1be862899bfacc2d3
- TLSH
  T1FB31562945463C06E2738630B7F6AF01F5B2414783140E58B5F2359FAFF584612933CD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  documentation/lb/jquery-1.7.2.min.js
- Size 92KB
- SHA256 0fb170f24675c84f8228ad6b61d69bf6705030949cc2fec316b3a006eab282f8
- MD5 b11ced65f32fedbe9bf81ef9db0f3c94
- SHA1 fdfd441e66831bfb8809e8cb69c2c3cd26b5d7c2
- SHA512 864e5aa02e74823de70e3914a9ba75413c9559e4508f72ee7d23993acbf6488d69ef13a50e5b465bee3a709b36664f38aefe9ec0b8d9d86f4873f1ac552c64cb
- SSDEEP 1536:8YRKUfAjtled3TmtaFyQHGvCXsedOgRc9izzr4yff8teLvHHEjam7W5X3yzSiLnM:VUbCGvCu09s2o2skAieW
- TLSH
  T19593E7D9B2D67123C7B731B850AF510BB17698AA784C8C50F068D8E4BE74A48907BF7D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  documentation/lb/jquery-ui-1.8.18.custom.min.js
- Size 20KB
- SHA256 525b011242bf15b38eed6fe403a8df9b2dc440b7b39ddef2a51a04b1525fdf30
- MD5 743b059708b371779cb4bd96784ade5c
- SHA1 6311d1f51fc9f388940c8232dc969dc8c23f91ce
- SHA512 9e2ce8341065baf7f3bbfb58cd669567f6c831bc32dd5c6fbbbce7ab17e62e7fd19ea22d5c646733f59e17fc061511dc7565305f31dfbc860043499da65e9685
- SSDEEP 384:BNMidEZiDz1UHy3gTKb2kVaDz/Z6Zgbvp5+fXE3PR0FgJNv9v:7SSj2kY/Z6+pN/RjJNv9v
- TLSH
  T15092C5DEB1D3749183E7B7E1907F850A7135A8A0754A0848F122C4E5AEBD99C607BF3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  documentation/lb/jquery.smooth-scroll.min.js
- Size 2KB
- SHA256 2fe3e9a117263c3bde89dd3eb8a47932d17ffda1e3e419ed45e08357811c7a82
- MD5 a448ceb290a4ce69e96e96245ea8e5fd
- SHA1 a03c92e0e94389878ef3f6abd9dd04710bb603cb
- SHA512 dd43eca4042e29d39728a106eff34b9d8e9dabb8ef17e0337f3b47421ba4a6353e9c5d49b102ca448424ff446ac7f6a38dc942ebcf65eee51ea6b123ae3a5f1f
- TLSH
  T1235186CE3109E19243DF7275E82F4A09B53060A3224E6094E644DEF43EF6B7448BAF64
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  documentation/lb/lightbox.js
- Size 11KB
- SHA256 3712eae563cb60f2f0368e5ed3101339856078d6dc1236b825d29f70931f11f3
- MD5 eb8c3fcc4db919d00d73f8cb4aa27136
- SHA1 b28680b73f8e07b1307363192cd4ee75b9f818db
- SHA512 2161c4f79bda82cfbfd02640e9d71ab19ac22d7e23685cbe7efee66147e4f8b79100c9d0322333e175c31ca2a0008ced2ce3207e5cc87638b7ee1e47c108bb65
- SSDEEP 192:ABiX2jndiWpZCNkRJMaF9zqhYJ3qG2Z7Ia45ZKVuFu4nx2Wia54/Z/C:wiinQmsSuDOhZoe
- TLSH
  T13C320D5DBBB31122D4A7304B1F2F87652B3D6217AC07EE58BD6C81D85F801249AA7F28
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  form/iepngfix.htc
- Size 1KB
- SHA256 585105cdc8b7a37c4a17ed2db5e84e820f609b4170794fd7b9a247826cfafafd
- MD5 3a6038a978947adaf997f79dd9024c2a
- SHA1 846ce9a8fbfa3f8fecf0f46694133f70f259b1a5
- SHA512 510ba6fb15d519de56eacf6b16740337ec55d37aabababdd8338d24f1e94fa8ec1fb3a8f6ed1377d52970fbe616a722ad678ea2840bf9a6f1f0378910e008431
- TLSH
  T10231635847F7462BA035023CD3A7CC0CEA37C039172642AA746D86A132E197C93F5EAE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  form/view.js
- Size 1KB
- SHA256 6660d0fd33f9b97769cd5a3ae34ad37de3dbecf9cd3cb6d72441fa3518efca55
- MD5 2fa3769c4337abb2efae6ed2448f979a
- SHA1 777f12acd0f9bb0116e61147a0a6da561f4e6945
- SHA512 1bea987471b53e0a06ce81ae5b99c5900fcad4de5ef9ea78e58beae4cb8c41bd1be4f4cac9ce539082539838257fee32eb0834c164ba9a66e26f96a17eaf5759
- TLSH
  T1AE3175B235CA99E1567A648B093FD40591E031F53B05E0F2F8E8906756207B4A2C399E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  img/pause.svg
- Size 195B
- SHA256 ff0f9fc030a3aafa314bda9c97b8041b33e1d6bf5f19e077c86d3937ccc44426
- MD5 d33566ba187c314ad57b3dfbce93d755
- SHA1 04994ef62609c5ba0a3450a3a59fab4d510a7771
- SHA512 88bd4c43d71057f521c67c7c4e807bfbcea8149e374578a86ec010a227b7313119e5dbba5c267c96c47d7620eaad4cd45725af91e3c899d1f71fc253b28f7781
- TLSH
  T1B7D022A4D16C1905AA08C220523C203704F9A0CA930CA08EF5804510FA448A6A82ABE9
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral29 behavioral30
- Target
  img/play.svg
- Size 177B
- SHA256 720f613a24478f3d1d33ec790d541db13cc6c9e6465a776d5397bcfacabf8765
- MD5 a89cc02d7c7de115b7e027e68a93ecd8
- SHA1 fcae0dc7503841e08cb008e3625514dd5187945f
- SHA512 15743f4231dd8dbb1c423bb95be7033c9591766ab8fa355b64e56f4b261d0efbc0a66133e56b241cace43f1730f498517284a5fdd00d0c7480017bec8cd200e3
- TLSH
  T108C080A4926C9D145D08C210573C703724FDF1CB535C419EF9508511BA444D7AC256DD
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32