ae42869e00bca9709b1ae2fdde9ecc52b1bce42160a83f554c7921b237e5a36f

Sharing

Copy URL Twitter E-mail

General

Target
The inheritance cycle complete collection _ eragon, eldest, -- Christopher Paolini -- Penguin Random House LLC, New York, 2014 -- Random House -- isbn13 9780553538090 -- c7eb936c56bb1d45295440c0853e1d2f -- Anna’s Arch.epub
Size 4.5MB
Sample260908-ernw8azwhy
SHA256 ae42869e00bca9709b1ae2fdde9ecc52b1bce42160a83f554c7921b237e5a36f
MD5 c7eb936c56bb1d45295440c0853e1d2f
SHA1 4d60a5ed300c6eb8cc4d33a43d9057f1b5b211dc
SHA512 729a827fd18eaf4ed312abec80960b3f39686e224051cccfcb23866efb697cf8a457c6f94bc1c01726bc4b80cd3558a3f5387bdd9e9fe375a30e7097f88923a0
SSDEEP 98304:NDigN4bzGPmVAEuv5S/fqD04pUIWoHUmGzcfEL+SHsuqgVTu7E60MRGxQnrNsSYF:NDj4bXVARSwlWxjLgfEL+Osuq6Tu7EsQ
TLSH
T1FB2633742C510D07E2A37F7158A7CE57AC6F456DA9D06A2C4F2520AF0EF0BC04FAA769
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Targets

- Target
  The inheritance cycle complete collection _ eragon, eldest, -- Christopher Paolini -- Penguin Random House LLC, New York, 2014 -- Random House -- isbn13 9780553538090 -- c7eb936c56bb1d45295440c0853e1d2f -- Anna’s Arch.epub
- Size 4.5MB
- SHA256 ae42869e00bca9709b1ae2fdde9ecc52b1bce42160a83f554c7921b237e5a36f
- MD5 c7eb936c56bb1d45295440c0853e1d2f
- SHA1 4d60a5ed300c6eb8cc4d33a43d9057f1b5b211dc
- SHA512 729a827fd18eaf4ed312abec80960b3f39686e224051cccfcb23866efb697cf8a457c6f94bc1c01726bc4b80cd3558a3f5387bdd9e9fe375a30e7097f88923a0
- SSDEEP 98304:NDigN4bzGPmVAEuv5S/fqD04pUIWoHUmGzcfEL+SHsuqgVTu7E60MRGxQnrNsSYF:NDj4bXVARSwlWxjLgfEL+Osuq6Tu7EsQ
- TLSH
  T1FB2633742C510D07E2A37F7158A7CE57AC6F456DA9D06A2C4F2520AF0EF0BC04FAA769
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  OEBPS/Text/t79.htm
- Size 890B
- SHA256 336a7d5b26cb7a634030e815a5c726819e071a916f24a8f115e289408a433af7
- MD5 3dc7e6a5da2293ca8b0751cdb3994670
- SHA1 1bfe81a9fa32b307aaec9f7a6c25298c37873ea6
- SHA512 fd40ae57b310ae8306a11d231c2b17a951dac9a34ea9b4172afa2f0c3e6ec17716be14bdca8ca354b34562a26eb56546e5247bbaa97663dd552b5f31717fcb2d
- TLSH
  T13F11EF9783522163E323C4F0A1A1AB0A34D1F047CAA90E91B4F009A85F49DC4528B99C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral3 behavioral4
- Target
  OEBPS/Text/t8.htm
- Size 640B
- SHA256 9328c20ab63baa4f23e65fd66fa266ba322aab8f870ad5b85500f0b50f9f3280
- MD5 1b9b2f3caca3c3251c0678b8f1e201a3
- SHA1 176edb02983fa94a648faba2de4296542694eb42
- SHA512 ebb106535f2df14efbb6b74e6e743075aa8a9383afd1a44bcf1e120145758ae466f9daf843a9abf8f54471f501e0be85f5df68270b85b76b29c8bdd52053d05f
- TLSH
  T18FF0025F52155252B3018860F4E1FF0664C2A007C2FC1C90B4F516BDD78C2C5519B5AD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  OEBPS/Text/t80.htm
- Size 8KB
- SHA256 fe2a240ac259618ca98aabd9c271eb18ba2f1610b6502385714821b8486a2905
- MD5 6080c666378fe5c9b3e7a080a529ffe1
- SHA1 17be913a28883fc42a726d607e4b84dfea7e7095
- SHA512 8392229d6d1f65703f4766aa48a64be546080f7c106eefff0851b483b6baf0c14c7fbcdf51bc18d71722c0786d00db2b4806490abee532f35e840929f3f61c81
- SSDEEP 48:2ts58ypG5OpeRLpzyTdop0QcRsW6ZPpxBZPWuiBZPSUBZPiBZP3BZP9BZPXBZPzW:jG5FzyTaix1yJacLhIn8QQroY1wyMr
- TLSH
  T10002733059D404BB89E3E6D0F66D1F2BF58BD905FE177E24A2E005D28BA7E52BE03419
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral7 behavioral8
- Target
  OEBPS/Text/t81.htm
- Size 9KB
- SHA256 d279cccfb2709ec0fc26af16e86789d997af308b3b8faa4964290d4d593d634f
- MD5 a424f90315c37e6e043b10a604231838
- SHA1 b1155089c7b5f673977bed5ca241949b0d9cb52b
- SHA512 e5c6baecd8688a93f562980339a4a7330e5b5885fe83e0ba975a2f50295af4aaa28aa38ad23a644f203875a17b6182b9f49d33c26c93e7c7f2c3f23218584fa6
- SSDEEP 192:joFbuvAbbOeCloh6bkLegRsp2XDKIPFuPoGhrUhmeX2P4Te3kh7DBne8r0KelcyS:8Fbhr5h6bkLegRZNPFuwGhromDATe3k7
- TLSH
  T1CE22A397B3C1137B07730269B54D56A2F31BC5BCA2668B2055AE94FC2751C2DA23F2F8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral10 behavioral9
- Target
  OEBPS/Text/t82.htm
- Size 17KB
- SHA256 4109d5e2eee16451ffa67c867c3648346775625a8a04987bee06209585ff0c40
- MD5 9ccadd7042c7ef1378318de8bd071630
- SHA1 a150d0c50f2c01888320e91a82982eee07b6a71a
- SHA512 1ef86c5b38bb48bb50f6224670af505a024484e6769a0869881eacd6b622bb785a87c2b396eb53dbbd3c744db184e535dd6aa643f310a29cb967844b988c67d1
- SSDEEP 384:8FcffSeFiRqXvRSDtIJhRkJYEgQ4khM0QiniX8RfG+w1fu6ho:GW1+ERfEgjkhMIw3bo
- TLSH
  T15B72815BF2C6033B0A638294B18C27A6F397C13893619711A5F981FC2726C29D27F1F9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  OEBPS/Text/t83.htm
- Size 24KB
- SHA256 168cf2cc523afc5ce653539e32e9d8496acdfc598c5a7d64523a56bd66725d44
- MD5 002cdcd7ce73e93ae6e6fc433ba586ea
- SHA1 1d30e702994e941d64d9c0250e62d6bbcd797fb3
- SHA512 c80e80efdeab0614c39451932e99470e39aa8cc22a8ed3e022d1b5791405b57621b9168fed92ebab969dd73e40eaf7bf671851b23c7ffdd4acdbb1bd0bfffe43
- SSDEEP 384:8FXpx/LFPvjzTK9U7mbCYCYVq4geDkbxyDjt1gCr2CLKrB+sxE34iNJqBGjRWe:uppLV3TKOqbobyB2CmN3EvRWe
- TLSH
  T1DFB2C71BB3CA033B062392A9B58D67B5F757C03C9262966155F881F86325C24AE3F1F9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral13 behavioral14
- Target
  OEBPS/Text/t84.htm
- Size 19KB
- SHA256 22a4168f1791333b3247305401719830f1a22175eed0ef1e1a131413eed4736c
- MD5 4073f00b4b9d24ed92b37a83803059d2
- SHA1 413f6e16780a1e0f1084ed5e7523d47836e8667c
- SHA512 64dfb8c3a09535fedbb9e170e0a0d622f467bc747cc79b7380c27a9a9b7c1263c21a924bd8c4cdd1d05291c6260e6fbe99aaeaf7a94b34f4b5a618ec33351d09
- SSDEEP 384:8FU1uwsokwPqx5IQW4HEEaUdt/xSTEn8IBpFtcayjOWePmi:9sAsCWEEFxgXMniNjvYmi
- TLSH
  T16E92B42BF3CA037B07339259B09D57B6F257C03C9661966219EDC1EC6326C58AA3F0E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  OEBPS/Text/t85.htm
- Size 19KB
- SHA256 a4bd68892f98a0fc53474ab3cc955e75316f2daa2724b0ba8a8c8a73d67a2d41
- MD5 88ee97d211dcb717ab54f182bd00d59b
- SHA1 25f860d69e6d8b7f7b75d9fdcb6554fc94ea12ac
- SHA512 0fc2794cd2a4359687f8931d97310e2fdc39a4c7132b28da9653568f7623864afcf9b31ffb918cb92c6fccb371403fc8154f4e3897a7df2ae83661d60b2b72ea
- SSDEEP 384:8FZaTY9+arJbVwHgTh0kBvEXuZ37w55S8eI9rMK9Vy662JKeWO4:RNammBvdZ37c5OUAK9Vyv2Eep4
- TLSH
  T1DD92841BB3DA03770A634249B18D27B5F353C43893A2962266AAC5BC2325C38D67F5F5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral17 behavioral18
- Target
  OEBPS/Text/t86.htm
- Size 17KB
- SHA256 b612985c3d6fae4dad9b80aaa68232c881ba75bad99fc89517f12c2e7c179901
- MD5 c06133a8fb3164ea948ba06bd89dfe93
- SHA1 e2c4182f0f3196b2c64ed886f7d0a0f50318d57d
- SHA512 9c645008fd505fadbdc1f6dcc40bc5efbc466faaf55bd93106385fe9977965dbddc70e38f20291235caea763f126b4ced1b495befca97db13d0dec1cdd6b2149
- SSDEEP 384:8FKSntfmwmIY+blKR60k+oT6Cd3hHHQc7dtoPMp6Z0mkE1:FStfmwhlf+rwrJRfE1
- TLSH
  T1B282732B73CA037B0A235298B5DE17F5F24384388362A65266E9C0BC6325C28D57F5E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral19 behavioral20
- Target
  OEBPS/Text/t87.htm
- Size 13KB
- SHA256 22ecf4e33c4ec5f92b1ac1b483dd86527b35070d1fcd8cb280ca029b9ee422d9
- MD5 7ac967a93f390c3b5de7e696bff05f60
- SHA1 cf67c03b7af0429843f66cb3081c1fbac9cca69b
- SHA512 24f3816de49f9cc7ea253e0167290b982652e31fb03c96549ceecb7993d49f0b93c90ded6c484687e94ad9efdfa2fb7bc9f56b52de2fbc6d9c3150e9872e106d
- SSDEEP 384:8F4247KxoENyO45vK5bt7SqiikZMMo2uG0SqxnX:Y47ShNQVK5Uc1Mo2wT
- TLSH
  T12152936BF3CA033B162392A8B19C53B6F783D03C93619A6155A981FC6315C28E63F4F5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral21 behavioral22
- Target
  OEBPS/Text/t88.htm
- Size 12KB
- SHA256 46ad961f53b51e2b30c796d8535098542fc3bb8d4457171b2916698b1b96902a
- MD5 a48b112d363068d349b4fdb69c133e5d
- SHA1 558f17433ecd2397c48f81905d52a6747985c246
- SHA512 10fc69ce59214589ad85a1baa5bdb6225404b521146bcf9fa79d9f1544a5659c93808ebe253cb55e9b981ddb31e372d4ab6b1dbc66515f5207d51fec774d3f7b
- SSDEEP 192:joFSsm4pGMTNPHjO1TEdd5bwnI195aHn3o2UB4QP6wSK6BAc0XoIv5nn5aVomodB:8Fhmc1TZ0T4d5VaH3o2UJVi0XoeR5L9
- TLSH
  T1CB42B417F3CA037717238299A59D13A5F683C03CD32256A255E880FC6726C26D6BF6F9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral23 behavioral24
- Target
  OEBPS/Text/t89.htm
- Size 9KB
- SHA256 7853e6c036e420b006a8bfaefb17841caacb43b86d4e6bb789c8dd48e32291c2
- MD5 be1129bf9d42938a7f1f128c49f6ae14
- SHA1 a13d33414f6d3dbb2e39e2073ee8c83858e24457
- SHA512 de776f6f820c2a7523241fbbc17b285c307d96e3e1c0f346ec85615252835b6f69b6695356a7ff5a5a0160d79bcf8cb234a8d67818c0f8bca0ad9c5d6c402ded
- SSDEEP 192:joFgi1r7ELh119BodPWLKS91zksvPAvgx4yGSFPEqDXh9p5TR6cOThNIRBb8z+Nd:8FpnEL13jesH7SyV5/b9AhNoNh
- TLSH
  T1D012A46BB3CA03370723936EE09C57A6F7578038E3625A1119A9C5FCA301C65CA7F5E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral25 behavioral26
- Target
  OEBPS/Text/t9.htm
- Size 3KB
- SHA256 8ce23617eadbdc349b32689377dff059b14cd4853a0651ce9e477d9ad5cd4aeb
- MD5 14babfd229be8058132ca0059ca6265c
- SHA1 d15c196a42928802f572baa22c2a51860df3fed1
- SHA512 ba289c1a4534b7b7bd055fc2a49b5b753a746b3ddb2498157aac346d207ebbb9ad0e6b098f81c2b1b4ad47af463ac131a67d6ef7ec86b1152503e03de7012601
- TLSH
  T1E361509733C011B75B5BB2E2A0989B4DB5D2B487D5012E92B6F947D15F23C84B3320AC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral27 behavioral28
- Target
  OEBPS/Text/t90.htm
- Size 30KB
- SHA256 cc91c53aa5035a84d4803b991270222897a78e85efd3e6d011d3eecf2bece041
- MD5 ae581a60f2568520de47995a680fceb8
- SHA1 d8f63f39547aa5ab770ca3a9d16bd2a09541792d
- SHA512 27ad209f7303899a899d227a27afc9fd7c08312ddbf886f168f7985c5eee819bf0fc82084099867d6a656b74feb3cb82564cd544947df5b365f0e2b098f31245
- SSDEEP 384:8FvW5RXZK1xQDRDBWcT02jHiNUXjnV4ZGqTrnFRV+PGDUufuDp6Te4gonMMKHhnO:+cA1WFr3jviG0FRtoAuVQe4UBzQ0k2e
- TLSH
  T132D2D62BB3CA033B07239259B19D17F6F697C03C83A2561255E9C1FC6325C689A3F5E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral29 behavioral30
- Target
  OEBPS/Text/t91.htm
- Size 12KB
- SHA256 016842dea09cf5b31e4778bb0fe52a2354ac845235b8e5b6ed27dd38ed671e2f
- MD5 79eb827c601020924714aff50bf52777
- SHA1 69cb9df2acc392c667d3a048980910f26fb28f15
- SHA512 73213698cc9d19cc7ba1bd6829356f40a274beba655f45c3ee5c96056494517eee14be5a5c358578cd9b10336e7a6b1556b7bf820f39a6929cbe0db0c8571d0d
- SSDEEP 192:joFeyzN4RdGTqp01PFQcr+8TC7GfxWxw073MIGLkXtTpEWUqB96ql7zz5OY:8FZNogep+7+4C404IGLSTHxlsY
- TLSH
  T19E42A32BB3CA03370B239268F49D47B1F697C03C9352A66226AA81FD6315C19963F5F5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32