681433d8e855bd19f5810e2567b7547a06906ed778a0423b130a9bf986f2b5e6

Sharing

Copy URL Twitter E-mail

General

Target
tidebound.zip
Size 11.8MB
Sample260925-w3m8hatcpe
SHA256 681433d8e855bd19f5810e2567b7547a06906ed778a0423b130a9bf986f2b5e6
MD5 016d5036508e1182a746e11de12b1cca
SHA1 3adc5a55b210fac07f4cc11b118b7ccdf24b90b7
SHA512 83c9b790d7c359c11b3f5e203c6b60d48abd3ebc90947f4eed6a081961326ab3883a7816235a2bb9559ab2d8a3d577f4e420f8b607a57c2085b956cba72649b6
SSDEEP 196608:hPbaQX72RPpxBe+Du36QiqV6BVQUTKcTCOiuOM7mC0lNfRkUC9oTWP0MCR:pvL2RPpxBeBiT/GJO76JRgoTWsxR
TLSH
T14CC63389F719D473CEE68AB2B062DD2FAA6E0FA9898D15D6031C1C407DDF5C974B4283
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  tidebound/Moonshae Isles Collection.pdf
- Size 727KB
- SHA256 b96561e19d02afd763821ccd0cf889c88aaf59063225607fa2876c2ebd0eb3e5
- MD5 2ac5ecf2c79b83d946faf7bf38a4471e
- SHA1 612443aec36070775f82e122075e119b2536e4cd
- SHA512 0e367099dca0eed154e4c699b2808c512dec39562b6fb773562a9f6243fe31ac6f10bdafd30522add17a5c8ee38ee113c9308da96bde493ea150bbb2af342b27
- SSDEEP 12288:WiVkCtR/ltfgYnei6PBnt+o7rwyFN2pZKy:Wts3gYnei6Zt+o7XNvy
- TLSH
  T1DFF4C470F8DA8C9CF88BD64981BA355E4B4EB12B77CD7884052E0F59F002695BB836D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral1 behavioral2
- Target
  tidebound/Moonshaen Runners - Campaign Overview.pdf
- Size 11.7MB
- SHA256 af9652a30c565e6f9e214804d8c8b07f06b9862b07853206b7e6e9c8ac69c68e
- MD5 26b12f61683cb1ea6bdb9cab7df3444c
- SHA1 f37f3d3ea5d594ea406f7e75a6e8fb9244fc7c49
- SHA512 9e904c82307ddd825ed1d11f0b249715719a40985e717ae5456b5505f17178416a0a945b121157fb169d50a52ce5f0266898157ea3171f23ff87f056d757993a
- SSDEEP 196608:5792nMtlLwfn9iy03wLkRCOokBYrb4AFcs+Uc6EO8jkfDTNHwSupB7h8mQVIXo1:5InMT0fn9im4oXn9xkjmFwV7mn6Y1
- TLSH
  T15BC61231F8CE8C9DE88AC60999663D5E4B1E752FBACD34D9012E0E45F002692AFC75D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral3 behavioral4
- Target
  tidebound/api/index.php
- Size 4KB
- SHA256 b8ab51038a5781d1c7c387383a703d4b50a7f6d93492f31c8117d341f6cefb37
- MD5 156352924d0cdc54d9521f745c7d11e3
- SHA1 6472bb24a0b9518fbc074aa1b8756c80320889f7
- SHA512 9cda318ecd0eb6ad4ee0ed86f612b3ceaf1068067efd596e6c68c190571a361fdf5a876d58c105354edfb763a575eff5aa1beebcbd22e9aa3d6e1e9b03df20ac
- SSDEEP 96:AKmk7IfEM6CrmHmKQmsYwWGV43u66wsuDureWef2mcQKyoVKI8uguXs6ZokVz:APksfElGvYM4R6MuHepcNVKws6Np
- TLSH
  T1C6912B5D65696FBA636597E9E784CCB96522DCEC137201E3FA1C368C04EB0FD0B39890
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  tidebound/assets/js/app.js
- Size 172KB
- SHA256 3ff1c4459ab8edb50c5547f6c6403b7d1744ed0a60c8cb573e3d72b06f56d432
- MD5 f8a3dbf7a9a5fee3add7417872f4ffc3
- SHA1 dd348507de5ecd84158f999ab5a615d77c45f919
- SHA512 e1fa82358e770a11b4347f0a26fddc424f3d791fdf573e0657f4562f2ae1ddc5de6e8c7dacc0f7e9ff1742595312a220476c1175701386d049d53c88ac990129
- SSDEEP 3072:E3WfhS3ysDzoUteeCToOP4XowZCYzUVVeVjBn//p4/ksLuU1jq0Qs6n9LfyZaWs7:GWfhSnzfMP4xznVjBn/h4/ksLuU1jq0a
- TLSH
  T14504E66A75D328350613A0F9DB9B911578B28217474ACD007C9C92F46FE8C3967BABFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  tidebound/src/Controllers/ShopController.php
- Size 8KB
- SHA256 3e04dea41064ce61c4a53f9ba616d0bb190e6c29c288d5562ec5dae4ff86422f
- MD5 2e4cf40fd7fb9090b09279b46319e17a
- SHA1 40d67205ab6fc0aebd0b8ba34a242fd3f1d21366
- SHA512 041026b88ca9b8da4d7fa3800919698ffd1dbfa068a692cdd6b4b8ea2318ac6dc767ee425553e3b8757fe97072f572f74284604066d1d419096887b85f6b426e
- SSDEEP 192:fW0jbzyV/QAlLzYUwm7qAtVjeAV3YFocK:fOjBtVxN
- TLSH
  T1D302631874775B3003EB506E8B8385155306A92366C0CD82BD6FA7E01F2066EDF69FBD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

execution
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral10 behavioral9
- Target
  tidebound/src/Database.php
- Size 1KB
- SHA256 ff0d493b40012d03688645fb2bf1b2a08438e84707bf85f4be6cd026ba4c4667
- MD5 cbeec4d4b05f300c0f9d0012d3acd4c5
- SHA1 69e1bad4eec5244abbf1b3f4d39078d342eba696
- SHA512 53088c4e96681673c7157cb4aa2d1cfba5d95af1539ed346dc0314dd5dd7f510fb8e6ed97e8635cec638583a2cfa48e3e86b7900ea6e0c843c3396794732b6af
- TLSH
  T10B21325B31AB86A6416BE055CD0BD0547472990B020CBA13BE2DA280EFB017CEEB254C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  tidebound/src/Router.php
- Size 2KB
- SHA256 70112d8b2d9d94f7e06314078a2c4cefad814c2143693354f47433585985be99
- MD5 b48110ac7b7b7fc7d9111b1fbfdaae05
- SHA1 8e14a67e5e5a749f8035d74eb200967f03e6acc2
- SHA512 6c0a06a1bcaf38468c59639df0998317a00fa9b742df0ca093f3f747ee7a11b81e06a2125deef7322ce649c3f11d63550f399b985ee097024c92ea26a5d37bae
- TLSH
  T1B841A759B4DA1D900143B2BC4BDFD918AD6640130E95ADC3FE5EE3548FA602CE930E2E
- MD5 SHA1 SHA512 TLSH
Score

6^/10

execution
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral13 behavioral14
- Target
  tidebound/tidebound-prototype.html
- Size 58KB
- SHA256 ce7be22591812be4d5ba03b1e7944540dd2f3e4f50f4595de03f38a97f886cf5
- MD5 7bee1c56957238bca4db7453182f9e0a
- SHA1 a714d48e6a98d809a5a322853ac3c855dfa8447c
- SHA512 c5c008e241644eed53ba924f751d3dc34bafdb7a0a58dd3f22edaaf2ca937927f143f495bf4d3ca3829e4baffaeae682ddaf51878aac1d5054e6a0feaecc0148
- SSDEEP 1536:R4vMxYt+h6pDbwjQfAB3pVge/EazpSywMEQlxSr:7h6p33fqDge/NpSVMEQlxSr
- TLSH
  T11E43E66A71D338361413A1B4EBDB8615B0729703464ADD107DAC92E0DFDCEB866B4BB8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Enumerates connected drives

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16