cb10b1d033773013963256aa7c1c5647bfc914050c4799200759dac3f1e3ebd4

Sharing

Copy URL Twitter E-mail

General

Target
well-known%20%281%29.zip
Size 21.2MB
Sample260924-pf7kasdf68
SHA256 cb10b1d033773013963256aa7c1c5647bfc914050c4799200759dac3f1e3ebd4
MD5 7a8dab6cceaadc094bb5574497e48a72
SHA1 2eaabce8254363dffeb22589b23fd1b19c26ab2d
SHA512 421ba1aaf2615044db354665c9a025abb281b090758b2fa232c8573a4e12a4535c3215238e59434d8cd4d6dff92837be8b33f4e662d674e2b3abff99633227de
SSDEEP 393216:rWMn04xQ8YdLvPIvjl1APIHQ+dDJw0jKvQv2xrBRMNvqqPQvknCT7A71i:rWy04drjHhQ+40jKIO3WB9PQcUc1i
TLSH
T165273338571C3A66C10FCA3698A911D9B1EB030665517DBFFB0072542E8F58A3EF3A79
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Targets

- Target
  1/assets/fonts/Simple-Line-Icons4c82.svg
- Size 192KB
- SHA256 765a0a929ac8a6de777d030a6f67070fbe8aad7df148491a2114ea61b9ea3721
- MD5 00ce23caac2c875bcc6db8e4afe5c532
- SHA1 12589d702c2091cbc56c7d5c3c99d9ad0a20de6b
- SHA512 f58d97ebd32f728af1f90a6212440ab780aed98d69eb78d692c144b42fe2f2fe05c07bcab3ba8010b98a5bb3cdf7f5d2e484fcd903dd571a5617c452052943ae
- SSDEEP 1536:ZDrLS1c3Bja0jFnnWdQ1Lq2bz/bgq4fO7GpwelxXC+xq2VzqBw6/vgM7uGqVTQwm:ZnXFxo0zaGhxCseC7CEdhCudjJJq8
- TLSH
  T14A1495C9DB34A2BC49C9D3DFAA381538385E94EF3B718A34D368DE255A83A158944CCD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral1 behavioral2
- Target
  1/assets/fonts/dripicons-v2.svg
- Size 97KB
- SHA256 2c1ce9e2c6fa50aadaaa63c72eeb45bed1f61bdfa0746619c21f33d8d59a4ef0
- MD5 835984438066bd8944a7692e331152a7
- SHA1 8b96ab043fcb2c805bbbef6a1ad87ba052fc5f2b
- SHA512 4edec4a2002883aeee69b48a69df70c4b228ca3c1fc16818713889f0710222ce98cb7b9090aba8e83c0a127ac8be43d1bbe001a243946c9eb4da4139b1a76855
- SSDEEP 1536:7Z5M57ZXWF3iNrkxt2JQFJwLAfNd8Fqyo3HDj9ckqe9B:FS57Zk+rkxcUfNv37qEB
- TLSH
  T16CA32024EF2E307E6BDB02414D7D61D5462CE2AB213D117A5AECD6F0460FD26AF1BE84
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral3 behavioral4
- Target
  1/assets/fonts/fa-brands-400.svg
- Size 644KB
- SHA256 3747ee9ff64691e96b4a3025a6095d5a265df0710e14ae9458eaaff20d3e029d
- MD5 e4fed0a589f7130c6ef834a029854646
- SHA1 47680ca53c0690fad856e098619711e3ab4ec406
- SHA512 e2883b699d0178e28ec28c74637073968b86f8621bc77bdd814c92cce92e3c42ed3f152dcf4b7d17186bbe074223b6f7aebde79277b160a8364e8bfd87c919fc
- SSDEEP 3072:zxGunzj3xwg10JTdQOHzVOvwjmNxPIGx4fyoxtxmU450o:omdONOH
- TLSH
  T1A4E4C11C93A4C2B8FBDB4EE98936BED6366B35FF39103254C278A56028727784C4D59C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  1/assets/fonts/fa-regular-400.svg
- Size 141KB
- SHA256 55bc29883182817a4c32c15b0d2ce02284c9910541d2ccb286ca6b2fdeafb99f
- MD5 304f31f4585cf09768f9d4d69574d2d6
- SHA1 d0297f3c651a20b06afb020c3a0236868736c22f
- SHA512 b27380609117c5df5f6595e9d25148c104388df7c98c0cb51be0868db65027d8a40e9cfb3802359a835e75c73b277e609e2497b130a6d4d0354a5542726f68d0
- SSDEEP 1536:CRngm/kyN3n+idEbqODs7wUgxWdj7pvNp8mwm7+T7sVpxluvX0bPVsP8CNVcQBSG:yz/kHqtnws+XWN4hnV
- TLSH
  T184E33359E754D6BCFBDB4B95853A7E90226A72FF35143260C778B0A02C3277C8C9E588
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral7 behavioral8
- Target
  1/assets/fonts/fa-solid-900.svg
- Size 797KB
- SHA256 b4937aa8160069c51dba7b52733560cf910d2aa611215dcac2e76a8c874293c1
- MD5 c8ea4c79af12c22b2b6073999137156c
- SHA1 873d1fd6c733f2a29278aff3287dedd304dfedb5
- SHA512 04bb46faa34810e298819d5dc8006f243eaf22e92823a964263425b8f7d0e8c91745d7bd7af88b470b36486a87bfb8e0e1885463b500dc71587c2f69cc14627c
- SSDEEP 3072:pD4oBCybiysnDEdSvPsgZlyKumWrxK8UlVwKsmylgJHL1N0KuG+Yx9iF1R2MHTiH:z4Ps4qmB9QMH
- TLSH
  T17405646CD364D1FCA7C64BD98A397E91269B65FF36213124C278B5A02C327BC4D8E58C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral10 behavioral9
- Target
  1/assets/fonts/feathere8ab.svg
- Size 208KB
- SHA256 7146eab2fe35f28d1dbd3c3792f4aaeae9242a23465bda642e5f0a57f01bb15d
- MD5 90f969db293a9077b0555139e6c9b20e
- SHA1 a281829bffe16f4fe9badb7acbf7e0309f98494e
- SHA512 3b68eb286db5afa4ef1a4e0a30c2b1d2279d952555a817445e28002b7764a45a5f6c0ead3bc9e9622326f99050c48046a8c5ce08877dcbd27765b4b4cd0057d3
- SSDEEP 6144:QAfhpjvljQU2z84Cfarv4IEcsQlUlX4lsHHT0wuIGOsaSmnjpfQtkUN91UIm4WJf:3
- TLSH
  T1E72487A4878925BCAC2EE28B7419FD64D31D206771D8DCB4996C0CE10D62CEBDDEB187
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  1/assets/fonts/materialdesignicons-webfont97e3.svg
- Size 3.8MB
- SHA256 bf901e2c81097223008551c72c07fd20d404e8d994739c90c638f9b3387d2845
- MD5 40cd6e2c274fae87190a1c094df6a519
- SHA1 587fb4a311c8218198a63ca0bcb8de4c06216d7d
- SHA512 49a1b0dc6d5b09531faef667e8892a0a9a34afc80e9a86bd10be3b7e7d229146496616ad6d47f03473c80db054e563a3c218479a7907eb1842c531a289ff9c39
- SSDEEP 1536:E5jTR4fUuF7ZIN5Pmp4TA9+Pr+OyTsHrQwtwdG0cBSFqahxk6CAyY8N1HYKykoYX:OpElpo5R85F/iaF7o
- TLSH
  T1AA069EA8914086A8C55473DBB928FC24D40C346B3AC9DED8D2592ED71E72DEF9CCE187
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral13 behavioral14
- Target
  1/assets/fonts/themify9f24.svg
- Size 228KB
- SHA256 f7af2e096c85c2ed6f68bb086f792c67f2a6041cbb814fc2796912b2eef4fe76
- MD5 9c8e96ecc7fa01e6ebcd196495ed2db5
- SHA1 f5af112fb5aa7c4f665acc21a38b035bbb62327c
- SHA512 ae9f6754ceaa13f1c8a9804ec32cab1de6248dd87db1b87c0a62612d23f4bd8f480f3c7bd3314d2a1ef0229b9f4c2fa262fb6874fad5f22139274f1062575dd0
- SSDEEP 1536:DGolEp2guSFmnwtZz0tmzE7fVX/4ZxTer6rK9AtoXUkS9rXnX9lKH2nFguhSdEXO:LQ0Rs/HIXc4nmFTJAP
- TLSH
  T1E73482C8EF6312F49DCD43FEE73748ED296D0CA6B4628DA4C66C7F56849391C4A0A8D4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  1/assets/fonts/weathericons-regular-webfont.svg
- Size 180KB
- SHA256 e1bd62a72dc31598b1f10cbafe01a9892716902d738fda2a947bce41aa93c1a5
- MD5 ecaf8b481729b18f6a8494d9f691cdae
- SHA1 c3b440c8a72eb2816bc6c52fb3d6bbf878b6fe23
- SHA512 baefa426c0d718336fa084da3316812b5280ec4f65fa41d68f2243dfb06ca7d37eba094893d07fd46cd6bda7bb7f47811ead4540b521aff84f992b6c403f8206
- SSDEEP 1536:2ggFvBIaCBG3roYopHF72Xv9ssuW2AdsaFVxyTyVUj6mfCFgI0K3xe+CjeirQV+D:eBkpoSW2A/V0T0dx9oAKEcb7KnrI
- TLSH
  T1CB04442CF9400BF9CFCC42B4667D8D64532D835E18363D24467E99F46C0EB7A4A9EB89
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral17 behavioral18
- Target
  1/assets/js/app.min.js
- Size 5KB
- SHA256 3ebc0a7b9209bc29d036d6c363a3dcf7523fe5aec58fe5be291f63226db04150
- MD5 208db838729dd2921afddb56726e1bb6
- SHA1 6b6757ac23a5a800dd7710e53ba5f2561c650382
- SHA512 8407571ae5392eb626c5aa773e48dd1377cad18830a7a3e49f9f1104a795ea38a455108c1b3a8b49bb8579dd71423e89290028ed383a21f6864dfdcb40948606
- SSDEEP 96:6hBK626NA9DH/0e4DOcfQCfRiLcfQCfRkuUVCcfQCfRW6I3TtnUAVHSHPLC0Mnrl:6jK76NA9DH8e4qcoCfR0coCfRZcoCfRI
- TLSH
  T13EC13F09F62254B781F7A9FA56AB190823377D28D7034629313CD9E50CBAD2D7931B3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  1/assets/js/pages/add-product.init.js
- Size 150B
- SHA256 31f058f3986a716715d165a4c738e6f41debf9571e2eccbd3e3d23617d27d39f
- MD5 311604465698377bc1b5b8a436f7b969
- SHA1 e821267548560ca995ebad909babc7a5c366ed9f
- SHA512 164359c5ad22b2e07e43f65f292bd8853ce8d8dc485b95d574998e09ff5b60791c750fc2e5c595d43baf5ecb063ba6b04ce004d1d239c77fb956d35b78dd771a
- TLSH
  T189C08C38E63EB900C0FA00574C360A80742E3B1F58001355CB522E2E894C01A680B105
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  1/assets/js/pages/animation.init.js
- Size 399B
- SHA256 0730bdfc8a76b56ffc18182c1e45e2a38f68997c89e73e986cfbf6703a315992
- MD5 1f4a69142f74c97e9ca82db26f739ee9
- SHA1 b1035033c6c60e4a227dd8a8b1997d2c808e2700
- SHA512 6f87c908bf5bbf37713e0ef01965b5bd21bff0965d1d4d71dee8c6f01469c2180f9f199068f904af4a760954770097301db3221b8a44f4612f65280784a4ab28
- TLSH
  T14BE0688DB43193E007DF3373290F81016D327D238A9C503C7678758C0D5868C232363A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  1/assets/js/pages/bootstrap-tables.init.js
- Size 1KB
- SHA256 73e101fdd5e5f223c6059db78307d77f12f13c7c4ca2c89e781f9dd50fedbedd
- MD5 5c75028c4283f74f5f6bd2834e76e4c2
- SHA1 c7e620a1bc15a9eb85b611825c417d6f31a2644f
- SHA512 e6fec5996aa88fcc359416f1e8530faed8f37ea035750a8ef53dd3092289607448b1602e52dfbdff770fc9d0ed75adb389c51e484eca1e2db046ffc042ffb75e
- TLSH
  T15A213F6871423197069B40F8F27FA60AF16E645AC84E0871A1D7E0542F3CE113E3FE2C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  1/assets/js/pages/c3.init.js
- Size 2KB
- SHA256 51f995a8f09c394b9120c86cf908b68f4b571b840a5a005e8113a593f6c0a571
- MD5 0c588c8d32a701e95c0ff8ca7cfce14c
- SHA1 4ff39fccbc2342b9d013396aed08043b095ba3a0
- SHA512 657e104a5de8e99e47e945e9cbf4e190b4b2d32244cf054c22472855caa1aa42b0ec4d7a14f8a60ae5a7fe9f53866064101d3e2ce8fd9becac56f83e1bb003f3
- TLSH
  T158512F1B804EE36AD505A42CC481AE6DF1D1EC43B87092A4EEF2535BFCE66119074F2F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  1/assets/js/pages/calendar.init.js
- Size 4KB
- SHA256 e29d5398aa994e5e683a0c5c945b18d821efb1275ab84051feb8253f7a65a20a
- MD5 be13dcac15aa3b840762bfc91067d0f8
- SHA1 20f897b849c92883c94a7334661413843e0d5de8
- SHA512 c93a5d9a804c82e26da299bb1f2da6dfd05d1d1a6a816afd541c2896a0b5e236b7d8d50334dc35de4c61a1abb7da238f801616e0f34d8f42715c74fe13c94371
- SSDEEP 96:Y70axHKXlZocthnHkmx9xU4xBJqSqhFO5J/StvnznFNLt:Y7VxHjQhWoBJ1qhEf/szjJ
- TLSH
  T1B8916F1A1C7980F5437B54EE829B6A1A313A497AC8035E00E1F57FF41DFAC0143BAFA2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  1/assets/js/pages/chartist.init.js
- Size 9KB
- SHA256 c42965fdbfd852c043cb0a809f3110d34aaeee64ce3bd8a0b11a59704ff4c592
- MD5 6f377eaf9b58166ad9d4e9258d66920e
- SHA1 2edfd962047ad61cd19f849b536bf08df38a0ba4
- SHA512 8bf532c3449d4e4f9ab7bd1ace567e500aece13053f61d5f5cada936cae3c05926db44faa2a37a9f36f1f7971a155966e5c151f9b43d191021e0f67e17084925
- SSDEEP 96:aEGScczY/lzcUlmmyGVhONuZ6b8FxKPgDVMd1JyzHixpU53cF+DcxC9P5F+n/5SQ:dccKPlty/w+zdyrixoUU9Bk/5JEhS/
- TLSH
  T1DE12A82FCC2B6393836B327328276E0973FC12756A9C5124E1B5F059783D5169337B26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32