a01ae5a030df74e01fcb8f3ad9d213e428fcaa2ae232cadaaa769d4712fda83a

Sharing

Copy URL Twitter E-mail

General

Target
dev.zip
Size 14.7MB
Sample260908-pmpm3afe63
SHA256 a01ae5a030df74e01fcb8f3ad9d213e428fcaa2ae232cadaaa769d4712fda83a
MD5 729921ef792e137b56af06cdeb522427
SHA1 ddf94b28a0832cb3c58699a1648b24edf91d7903
SHA512 a8ea5206d446f30a677c41ddb6dd69c73b67428be7f808dc99e559a5482b46f2f781e3f6efd900c1aff15b38d8e93c1f18e0396f08156c0c5a4bcf554e719063
SSDEEP 196608:gMZcBVDXKMFsMYi42stYyK0xJe8+qNeHPiv1dwIiouR+2vV5YyK0xJ08/ql2vfUs:srXN29i4bg/86ivrPH2veL8dUvw2Jevf
TLSH
T1E3F63338BA314433D24F4B3410FE5FACA13E4FDD61F29D54E6B232A1590698279C9A7A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  var/www/html/garantizacion-de-facturas-y-cheques/Catalogo_de_Productos.pdf
- Size 1.4MB
- SHA256 ebcc671c35a632046c54d4d341255790296b6d26405a7fd8469d11aeb93aa1b9
- MD5 fc85a3f951c809d62974a50dd2f9b6f2
- SHA1 ce09e843ce09941fc360e716931d4209a4191ac1
- SHA512 b47c900988afe0d4e2185b58fd7a64178d329411d355b72cbe69e66c7effb54f66a788e41833704cb8dbeccbb0bc7259be0fad375500e14bdfb005b5b7cf557b
- SSDEEP 24576:yitJVmzcsXoiAGlbC/kdRIVmPlwJY7YzFf+5qpwQVbeOmR0FEpjsVYXEzus:yitJVCDXoquIcKlwpF2qm6gwpY4
- TLSH
  T1746533249A23143ED0E2465D69F831CC3123BFF7E6F2E99025E1D2DA8448FA3B54D25B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral1 behavioral2
- Target
  var/www/html/garantizacion-de-facturas-y-cheques/Mobile_Detect.php
- Size 79KB
- SHA256 40017d54a6451e78f115110bcc006778d488114c68716b18135d4cdb8c8abd6b
- MD5 e8da77289d0160e6b5e1947971d08082
- SHA1 2b56ac288b6d9f0f1455718dfc416f6513d10062
- SHA512 652ef563f246ca4eae1e57896ff5a108f386535d1fc7d1695bc53f076a0f76a7edb84e25c7241c3ace8e445deebaa4d508d90302592decb5c973504ac55e0a96
- SSDEEP 1536:a1tqFdzCiqO0UVhzd39+aLWuqFdI22Djy07t5373HfzhoPaENDNYeYELaGxZLg9d:ktqrxqCp39+KqI22Djy0ZJHiNiEHk9ke
- TLSH
  T1FD832BFA5BE2EB220907C835FB0D3081F5371127AA695492F86E1B265F8572C407DEF9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  var/www/html/garantizacion-de-facturas-y-cheques/fonts/fontawesome-webfont.svg
- Size 433KB
- SHA256 ad6157926c1622ba4e1d03d478f1541368524bfc46f51e42fe0d945f7ef323e4
- MD5 912ec66d7572ff821749319396470bde
- SHA1 98a8aa5cf7d62c2eff5f07ede8d844b874ef06ed
- SHA512 4f575d52331de91a2e32cc3408dd0eaf0cf25b7244d34b226314e3647e85ce284f86e3b7238c6c8b9022dc4e2787bf51620849290cdcd5d4c4bc905f289d2156
- SSDEEP 3072:PLac0AVfCwGzG8LY4kh53s0eOnz8WjKAOvX7LYvglcD4ZME8xYWDQqJpFDBl4qjm:hCG7bFv9gSS
- TLSH
  T17594C96CE9910B79CBDD42D5957D0E90132D81EE28783E1846BEA8F05D06B2A0FDFBC5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  dev/telecheque/garantizacion-de-facturas-y-cheques/Catalogo_de_Productos.pdf
- Size 1.4MB
- SHA256 ebcc671c35a632046c54d4d341255790296b6d26405a7fd8469d11aeb93aa1b9
- MD5 fc85a3f951c809d62974a50dd2f9b6f2
- SHA1 ce09e843ce09941fc360e716931d4209a4191ac1
- SHA512 b47c900988afe0d4e2185b58fd7a64178d329411d355b72cbe69e66c7effb54f66a788e41833704cb8dbeccbb0bc7259be0fad375500e14bdfb005b5b7cf557b
- SSDEEP 24576:yitJVmzcsXoiAGlbC/kdRIVmPlwJY7YzFf+5qpwQVbeOmR0FEpjsVYXEzus:yitJVCDXoquIcKlwpF2qm6gwpY4
- TLSH
  T1746533249A23143ED0E2465D69F831CC3123BFF7E6F2E99025E1D2DA8448FA3B54D25B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral7 behavioral8
- Target
  dev/telecheque/garantizacion-de-facturas-y-cheques/Mobile_Detect.php
- Size 79KB
- SHA256 40017d54a6451e78f115110bcc006778d488114c68716b18135d4cdb8c8abd6b
- MD5 e8da77289d0160e6b5e1947971d08082
- SHA1 2b56ac288b6d9f0f1455718dfc416f6513d10062
- SHA512 652ef563f246ca4eae1e57896ff5a108f386535d1fc7d1695bc53f076a0f76a7edb84e25c7241c3ace8e445deebaa4d508d90302592decb5c973504ac55e0a96
- SSDEEP 1536:a1tqFdzCiqO0UVhzd39+aLWuqFdI22Djy07t5373HfzhoPaENDNYeYELaGxZLg9d:ktqrxqCp39+KqI22Djy0ZJHiNiEHk9ke
- TLSH
  T1FD832BFA5BE2EB220907C835FB0D3081F5371127AA695492F86E1B265F8572C407DEF9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  dev/telecheque/garantizacion-de-facturas-y-cheques/fonts/fontawesome-webfont.svg
- Size 433KB
- SHA256 ad6157926c1622ba4e1d03d478f1541368524bfc46f51e42fe0d945f7ef323e4
- MD5 912ec66d7572ff821749319396470bde
- SHA1 98a8aa5cf7d62c2eff5f07ede8d844b874ef06ed
- SHA512 4f575d52331de91a2e32cc3408dd0eaf0cf25b7244d34b226314e3647e85ce284f86e3b7238c6c8b9022dc4e2787bf51620849290cdcd5d4c4bc905f289d2156
- SSDEEP 3072:PLac0AVfCwGzG8LY4kh53s0eOnz8WjKAOvX7LYvglcD4ZME8xYWDQqJpFDBl4qjm:hCG7bFv9gSS
- TLSH
  T17594C96CE9910B79CBDD42D5957D0E90132D81EE28783E1846BEA8F05D06B2A0FDFBC5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  var/www/html/garantizacion-y-cobranza-para-empresas/Mobile_Detect.php
- Size 79KB
- SHA256 40017d54a6451e78f115110bcc006778d488114c68716b18135d4cdb8c8abd6b
- MD5 e8da77289d0160e6b5e1947971d08082
- SHA1 2b56ac288b6d9f0f1455718dfc416f6513d10062
- SHA512 652ef563f246ca4eae1e57896ff5a108f386535d1fc7d1695bc53f076a0f76a7edb84e25c7241c3ace8e445deebaa4d508d90302592decb5c973504ac55e0a96
- SSDEEP 1536:a1tqFdzCiqO0UVhzd39+aLWuqFdI22Djy07t5373HfzhoPaENDNYeYELaGxZLg9d:ktqrxqCp39+KqI22Djy0ZJHiNiEHk9ke
- TLSH
  T1FD832BFA5BE2EB220907C835FB0D3081F5371127AA695492F86E1B265F8572C407DEF9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  var/www/html/garantizacion-y-cobranza-para-empresas/fonts/fontawesome-webfont.svg
- Size 433KB
- SHA256 ad6157926c1622ba4e1d03d478f1541368524bfc46f51e42fe0d945f7ef323e4
- MD5 912ec66d7572ff821749319396470bde
- SHA1 98a8aa5cf7d62c2eff5f07ede8d844b874ef06ed
- SHA512 4f575d52331de91a2e32cc3408dd0eaf0cf25b7244d34b226314e3647e85ce284f86e3b7238c6c8b9022dc4e2787bf51620849290cdcd5d4c4bc905f289d2156
- SSDEEP 3072:PLac0AVfCwGzG8LY4kh53s0eOnz8WjKAOvX7LYvglcD4ZME8xYWDQqJpFDBl4qjm:hCG7bFv9gSS
- TLSH
  T17594C96CE9910B79CBDD42D5957D0E90132D81EE28783E1846BEA8F05D06B2A0FDFBC5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  var/www/html/garantizacion-y-cobranza-para-empresas/index.php
- Size 17KB
- SHA256 6435e785494e21ccc9aaa4b63c164e92051ca599b8eaf5177498851342b7bb47
- MD5 fda9893020fe7e6f4abeb3d9c6d24d4b
- SHA1 d7b38a8afe2b65559d1c1a8ae30aea49e416ff4d
- SHA512 08c5a77f54b27831133ff22dcd5ad2f776b4566e64f825890123ee0972c05169d96677275c6e309dd5d8d675d50c6390246544f759872fa13aea40a574b6d061
- SSDEEP 192:YvS0EqIAuxa8KadXbAIHqyNlzRkCm/V1oia+hNQEX:YvS0Eqma8KadXMIKy7RJ8VO4XX
- TLSH
  T1B672E83194F50633029781C2AAA7AB2B7ED2DA07E81B864176EC47D85FCBD87DC4364D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  dev/telecheque/garantizacion-y-cobranza-para-empresas/Mobile_Detect.php
- Size 79KB
- SHA256 40017d54a6451e78f115110bcc006778d488114c68716b18135d4cdb8c8abd6b
- MD5 e8da77289d0160e6b5e1947971d08082
- SHA1 2b56ac288b6d9f0f1455718dfc416f6513d10062
- SHA512 652ef563f246ca4eae1e57896ff5a108f386535d1fc7d1695bc53f076a0f76a7edb84e25c7241c3ace8e445deebaa4d508d90302592decb5c973504ac55e0a96
- SSDEEP 1536:a1tqFdzCiqO0UVhzd39+aLWuqFdI22Djy07t5373HfzhoPaENDNYeYELaGxZLg9d:ktqrxqCp39+KqI22Djy0ZJHiNiEHk9ke
- TLSH
  T1FD832BFA5BE2EB220907C835FB0D3081F5371127AA695492F86E1B265F8572C407DEF9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  dev/telecheque/garantizacion-y-cobranza-para-empresas/fonts/fontawesome-webfont.svg
- Size 433KB
- SHA256 ad6157926c1622ba4e1d03d478f1541368524bfc46f51e42fe0d945f7ef323e4
- MD5 912ec66d7572ff821749319396470bde
- SHA1 98a8aa5cf7d62c2eff5f07ede8d844b874ef06ed
- SHA512 4f575d52331de91a2e32cc3408dd0eaf0cf25b7244d34b226314e3647e85ce284f86e3b7238c6c8b9022dc4e2787bf51620849290cdcd5d4c4bc905f289d2156
- SSDEEP 3072:PLac0AVfCwGzG8LY4kh53s0eOnz8WjKAOvX7LYvglcD4ZME8xYWDQqJpFDBl4qjm:hCG7bFv9gSS
- TLSH
  T17594C96CE9910B79CBDD42D5957D0E90132D81EE28783E1846BEA8F05D06B2A0FDFBC5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral21 behavioral22
- Target
  dev/telecheque/garantizacion-y-cobranza-para-empresas/index.php
- Size 17KB
- SHA256 6435e785494e21ccc9aaa4b63c164e92051ca599b8eaf5177498851342b7bb47
- MD5 fda9893020fe7e6f4abeb3d9c6d24d4b
- SHA1 d7b38a8afe2b65559d1c1a8ae30aea49e416ff4d
- SHA512 08c5a77f54b27831133ff22dcd5ad2f776b4566e64f825890123ee0972c05169d96677275c6e309dd5d8d675d50c6390246544f759872fa13aea40a574b6d061
- SSDEEP 192:YvS0EqIAuxa8KadXbAIHqyNlzRkCm/V1oia+hNQEX:YvS0Eqma8KadXMIKy7RJ8VO4XX
- TLSH
  T1B672E83194F50633029781C2AAA7AB2B7ED2DA07E81B864176EC47D85FCBD87DC4364D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23 behavioral24

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24