9bf5b5d2714ed609c35e7080728ac4290fd25bf5c668480f2a4cf11cd6c6864a

Sharing

Copy URL Twitter E-mail

General

Target
cloudmail-cloudflare-cpanel-v2.zip
Size 16KB
Sample260908-ppa8fsztas
SHA256 9bf5b5d2714ed609c35e7080728ac4290fd25bf5c668480f2a4cf11cd6c6864a
MD5 33ac2bb64160b459b67bf2c7c8fb3fb6
SHA1 f70c0e6a5fd7d02420d29707940d2a8c778aa9ac
SHA512 1975f559db7d7a1991e7dc811771ecdd603d5fdf1779ec1fddc63e3c7360dd53222167d60da520e3c3a42d9e801d26fbbd46e9673e2032a919c7bd7e35e909ac
SSDEEP 384:VwRWRGs5P/kRHPubl6tdLzTuqgbp61zq+z1TCqdcBPiFF+TEFSki0qCOln/Oi:VwRWssd/kRHmZ67X5/17OaIo+oFs0qC0
TLSH
T1B6729F363B9CDF66DF4B9074916A67B3605CFB348CE790AA3362548988875E7320E511
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution

Malware Config

Targets

- Target
  cloudmail-cf-full/cloudflare-worker/src/index.js
- Size 10KB
- SHA256 f9c617993c7590e674a2d15f6a54f76e986dd6613a169e58698d4e17e8b01e9a
- MD5 e80167831fc96776d68df121a8924ca9
- SHA1 c6a57146a35ecb1c75718b1291a3fdde9f11dd10
- SHA512 df599d3ae2eac25aed5dab5e91f5aa5adaf23711f2b7468075c49cab2bce17f3205bc5fefd130a3ed4982410530d746ff1a666345094063847a945ac3c15a8e4
- SSDEEP 192:BaZV4z1dPIal3wI71Q5I5jx1B7LwYkKAhlYBQj5GdHqWKoxIN/Isvra:BaZS3vl3L71Q5I55vnkC0Gt6FXa
- TLSH
  T11D22944674F6351106F3A2983E57B414B026F20334DDDAA1B61C83C93FA862DD6B7B8C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  cloudmail-cf-full/cpanel-frontend/assets/app.js
- Size 9KB
- SHA256 0f448862d9303365d9ced5a99c26f5c3594604fd095ca41a0a2567d5535f05c9
- MD5 9d4a8361c9fc471556398da40d1600ea
- SHA1 780fb9912e4f3a3a8be8fa5ef58ce5e4ab37fc05
- SHA512 854a8fe428a5a994ae50989b808375d730960989f282c213beec8e5ee76b1c4ad06051648d1352f2826bd48d26ba5bf0db505f81623917a4c230037e06db5db8
- SSDEEP 192:xVtS1+TCaUe8b0M7aZ4UH3jbQ9KAoEZJLWxK2iCitATi3iJbAGslIy7ljajaMEPx:xS+CaUe8brGtXjbQRfLWViCiei3iJbAF
- TLSH
  T1FE22861510FB263908F746A9B55F7411F0F9D00AB9CBCAA0779D20891FDCD2971BEA5C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  cloudmail-cf-full/cpanel-frontend/config.js
- Size 380B
- SHA256 584cf55d57d05272d6845d8ce0c1c62cc336c5186b5f02b7be7cbc9bdb6b46ea
- MD5 bddf877c1a043e71a1b47ff15d2c7e8f
- SHA1 c89b25599dd7e0d37b16706a52495a120b26c161
- SHA512 3eea7a2e0e1ccb59c7d29c887e2036749bfa34c5f35b5faa0bb29aef1cf816007cf0abf6899d200bc2ab94bc90a2166787780f6ca692f660c61ac1bb0063f35a
- TLSH
  T13BE022B3F256926090932391B012275CF69E665448FD1093AB26A50E2D1AA32E512A6A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  cloudmail-cf-full/cpanel-frontend/index.html
- Size 5KB
- SHA256 1cd8e8caac3970b364a5a71ea0204a497dacb993505aea69a00c77a591f50ab9
- MD5 5eb5179776fa68021b18b6dfb228404f
- SHA1 e50760df5ee0ac92ab76285d145377fc8ad79776
- SHA512 7f90b3326dd7f6c77561e11a2c6ab2aee2a8dff5c84993375335eb994931fd2bb023c1efc26012d36393d35c2b60b1947f8a0d12d9528d70f7e36a11b8315387
- SSDEEP 96:vBMQ5STSV/TRfFUv/DPF77ROQDR4Kw+NcreXakTqnl6YyRwJ:vBMQoefWvTFJfFNieLT7LE
- TLSH
  T1CAB1DC6090FA457201E791C579E67B0B3ED1E607CB9B1114B2ED1BC40FCAD86FC5B02A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8