18bec174ec6d3f6e64f34f701d336be9e3bce4f59072b5d730dafd1d003197a2

Sharing

Copy URL Twitter E-mail

General

Target
poc.zip
Size 55KB
Sample260910-wxv16ateka
SHA256 18bec174ec6d3f6e64f34f701d336be9e3bce4f59072b5d730dafd1d003197a2
MD5 537e0f27a168566284012a6d7842ae3c
SHA1 0d8b640b9414bac17dbf8d519e3318b7aed9a988
SHA512 72e1811077f572f2a53113dcd529d7db7a46013fa9b28a8a9c664f7b70a8eca1ef994bc4196de5c0365e79aaf397fce22ec50d88fc0446616f55d77998b2c644
SSDEEP 1536:UxxBtxAkj4huaL8/SEn3ovdfPw+2W+ZxO:4BokjIU/jn3ydf7/+ZxO
TLSH
T10F43D039475894ECD32FE976C07D275722EF6006AF44391E2A8812C8CF8E15E3E77A59
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  poc/fpdf/FAQ.htm
- Size 10KB
- SHA256 292eb87f381c15a9ba9156eba326d69ecb270f09a7610c611f41b1b95a501418
- MD5 1fcce1d66184d9eef62eb2baad227d67
- SHA1 99dacab0a364bdf76b4db173d87823620fe7f38f
- SHA512 3fd21cfc8d23e78148e992df47be48a150e0bae32ac92178a444d0f965ed9caa35122c2c43b964a79f0f857c7ae1dccb6ffebf43e69c3156a5ea6e77916bd290
- SSDEEP 192:6H6X4cG2jNxwgGuTCDhJhFIVPk4Nljrwxd:QBcGoNxwgGg0hFwPXdrwj
- TLSH
  T1FF32953247529D7704E38ABC6711B3E1FA36D098F303B2A174AA42C7B6543116E6B9DD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  poc/fpdf/changelog.htm
- Size 9KB
- SHA256 d3837bce7259ef15c153ad335c64aecbfe38ae45476007cd3272ea10c52720f2
- MD5 e17a1f633a2269bc3a9dedc9cbff102a
- SHA1 00fcde5278e7c44de1f3dbe7634d5a64adcfbe2e
- SHA512 1cfeedcac48effcc28a9f905333b5e2f0b054d544e4ac5a1c2cea724fc9f01ece1b82cb833dabcc876756efbadc366c886c860df4f1391a0abd23fd839bf070a
- SSDEEP 192:gVb/nkEnvSIoz6vDHxan+Pp5bbclWTO7Q9p56sWMsGcZZeM+I:8wELDRan6qWTtEHZee
- TLSH
  T18722A7E73605AF68147742ABF2CE922FD32980FF731253B814BE850B2B4A554437779A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  poc/fpdf/fpdf.php
- Size 49KB
- SHA256 bc39714b133821300d5db438f5b33c8586f650a6beb21fed93375c4cb6a16739
- MD5 3858983d405bcb842877b615b25ca346
- SHA1 82f7e7a6e8e5c5752a72281357af5653163e4a4c
- SHA512 035be383b2b2e08a7b10c16b99a4b89a5330bcc387d34e237b01c0a164b400a5f98d8510bf25eaabbc7862c14d30ec8dd7c4e1efd0cefe2e47ec9623e00a3c68
- SSDEEP 1536:rYvc+Njq+vuS8glKy+UP9bM7a15tvAa0I0HEXlgHfU1U:rYvc+NG+j9KyVlb4a15tvAa0I0pU1U
- TLSH
  T147337287B8195EEAF1B300D6B37F4681DD9FF2300A225197B4DE905CAF68B2C42195F9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  poc/fpdf/urldata.php
- Size 2KB
- SHA256 b7c4b0668adeba1fea26883d15111ff807b14458f6dea5bb0ab7bd57c84a4230
- MD5 10186a92823cc0e52acadde0466deae4
- SHA1 4ec6bf210ab76a6423b73352728e3984b7849861
- SHA512 0e0179ce220186a74f789cbac2bcf7a5bdfba5b77c6a673f382e8921823d781cc368acb0509b5d2df149cb8f41cffe3a26a3147ff007862919354ba0cfa57e2b
- TLSH
  T123413563758341720C7F64B45F687187FB7A4137F9108288BC1F87E90F755A859549CD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  poc/fpdf/urltable.php
- Size 2KB
- SHA256 292614e75cbbad8e84ebd7619f0a68b281ba90066190f72f135696f76f0db83d
- MD5 518aae0807dcf37e1311042cafdeb81c
- SHA1 f5c2e326cc4f2ab3d13f2b9de0b92b8f08d53252
- SHA512 6330180b2ffa03a4c982061eca6efbddfea67b6c2936d598a5e0869eb42964511b20149a4f1a069d64523e90185e4801b4186170309733adb2bf96e9c8172fc4
- TLSH
  T17F415273798381330C3B68B8576D748AF7684137E2208188BC4FCBEA1FB55B849649CE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  poc/index.php
- Size 19KB
- SHA256 4fe96a114f015b55135e7408758bf4be15e772ed556c56d8367afb50d0851d07
- MD5 403e107c07a34c2b6985bc8ab11e7167
- SHA1 8d3243745abc8c3f87ade22480ab85dace096d1c
- SHA512 5406eb673e6e4e40ec0156e52181d79dadf4aeb5d2d67ea9ddb80bda0a557eb628bf44fec6554687211a6d21f8a3f0d0da295a19a6c7add8c1313e8540f5e0bd
- SSDEEP 192:S7nKtk62HzKZ7SkwcyXaYc0swkdKQrC248kv+N5kWsGY9qG1++skvcaZxbF:SV6IKpwdaYcfDKk41+dsxbskvc8xbF
- TLSH
  T1949272A0A0E82C3280BBB1B697999F44FD55C103DB46514875ED37D31FB3C01AA3BBA8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  poc/urldata.php
- Size 2KB
- SHA256 b7c4b0668adeba1fea26883d15111ff807b14458f6dea5bb0ab7bd57c84a4230
- MD5 10186a92823cc0e52acadde0466deae4
- SHA1 4ec6bf210ab76a6423b73352728e3984b7849861
- SHA512 0e0179ce220186a74f789cbac2bcf7a5bdfba5b77c6a673f382e8921823d781cc368acb0509b5d2df149cb8f41cffe3a26a3147ff007862919354ba0cfa57e2b
- TLSH
  T123413563758341720C7F64B45F687187FB7A4137F9108288BC1F87E90F755A859549CD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  poc/urltable.php
- Size 2KB
- SHA256 292614e75cbbad8e84ebd7619f0a68b281ba90066190f72f135696f76f0db83d
- MD5 518aae0807dcf37e1311042cafdeb81c
- SHA1 f5c2e326cc4f2ab3d13f2b9de0b92b8f08d53252
- SHA512 6330180b2ffa03a4c982061eca6efbddfea67b6c2936d598a5e0869eb42964511b20149a4f1a069d64523e90185e4801b4186170309733adb2bf96e9c8172fc4
- TLSH
  T17F415273798381330C3B68B8576D748AF7684137E2208188BC4FCBEA1FB55B849649CE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16