b77d0365554bb39c752c40649e132a64c606bd78eeb860978a50dd29ebec32bb

Sharing

Copy URL Twitter E-mail

General

Target
saveweb2zip-com-uppervalleylegal-com%20%281%29.zip
Size 5.5MB
Sample260930-prphvsyapd
SHA256 b77d0365554bb39c752c40649e132a64c606bd78eeb860978a50dd29ebec32bb
MD5 7a0d9468438e8b6b6069970eccb65157
SHA1 b4454e5e6b14098e385e4a694ad9e6fc4825447a
SHA512 2e52fb71d3cde70996c844d4bb9ff50d503f1e48561d7458565fec2b10d4b3fc5bb37c556b078812dfd7e9364e618c8e9f7031a3e518f8433abd302927d2f29d
SSDEEP 98304:rkIDjRmgqDGj9Mo7lVKW0eyBza2FcVzGX6xcQNuIHaqc6nqa8uplzDwcQZFG//Kg:fRww9Mo7lVOHB2UcVcquIHtqlujzElGh
TLSH
T1FD463348E2CF21F9F586F9341430AAA8F8E439D753661A647F18E3FA816F8F54444B8C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Targets

- Target
  images/Linearicons-Free.svg
- Size 201KB
- SHA256 02dac01ab22c87a7f5ca06b5be560b386dda31d63b1fef85fc1c8bf7770684fd
- MD5 2781bf543c08d394dc78dec86989e3fd
- SHA1 6813c599f27c0bd3ad8e0e1f480d04c692824920
- SHA512 3014cf6e2cb214e2d6f17a19b50eb36de0049d57142666a74a77820b2d3f1d099fb194b15800c3bd77fb4c6a4449a3f3b49f7b335df175506e955f17718dd53e
- SSDEEP 1536:ax2PivdbuJPFQ52LqAOlHmziYxpmNFre66eYmnusM+MvDGBArIagriGkumTS8cb+:aZdbupi/m3
- TLSH
  T10F1435C8D77087F4EEC90BAEE630597C606F506E59220704CEAF896DFCD699FC41849A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral1 behavioral2
- Target
  images/fontawesome-webfont.svg
- Size 433KB
- SHA256 ad6157926c1622ba4e1d03d478f1541368524bfc46f51e42fe0d945f7ef323e4
- MD5 912ec66d7572ff821749319396470bde
- SHA1 98a8aa5cf7d62c2eff5f07ede8d844b874ef06ed
- SHA512 4f575d52331de91a2e32cc3408dd0eaf0cf25b7244d34b226314e3647e85ce284f86e3b7238c6c8b9022dc4e2787bf51620849290cdcd5d4c4bc905f289d2156
- SSDEEP 3072:PLac0AVfCwGzG8LY4kh53s0eOnz8WjKAOvX7LYvglcD4ZME8xYWDQqJpFDBl4qjm:hCG7bFv9gSS
- TLSH
  T17594C96CE9910B79CBDD42D5957D0E90132D81EE28783E1846BEA8F05D06B2A0FDFBC5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral3 behavioral4
- Target
  images/ionicons.svg
- Size 326KB
- SHA256 a627d9068c1235d9b3c95c405eb6ecb64a290b159cf5e926c0d96d89b24cd5fc
- MD5 621bd386841f74e0053cb8e67f8a0604
- SHA1 3f1ca28fcb042d2bcc6ee6a4e3dd817e5132eeea
- SHA512 37c77eccaeca00e005cf5b7787ab52fb1a45c5a8fc0b9e176e5eaf12fc080089a0e634f8eeeb7fda2b55c83dcf6b7b6a40281bad0ed9f248968e8725e627b9ef
- SSDEEP 3072:VuNxDz4hYeM1hf0xiEcY3YP0SJZYF63bCGiN7XR/H2WnlhzvXrdPwRJrdfh2CUG0:VuNxDkfRIZYQ34N7ZHrPwVdfhgG5/MvJ
- TLSH
  T1FF64F428D8A65478CAEA03C18A7D1EE4473DC2DF1A2D3875596CA2B00E0FF6D579FB50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  images/plaza-icon.svg
- Size 477KB
- SHA256 48112ef88f4e66b0d414115d829d89f4c4927582ec24b8c6d8500e82d4b1afa8
- MD5 4ee1bc0e514369fbf075fc38627e7c1d
- SHA1 087580921230b1d8f74e3f1468a29d34d42ac8a9
- SHA512 e77707f7221bda1729efe97ce462c7757129214cb6f616db9c09e79abb0f45f19688d7a2c65b4a4b0cbd9a2d9a027ec012b4b68651f3431c4b5f948e93e565f3
- SSDEEP 1536:oIvEmCt6pd+O9lPX1ZWCd+X6/Q5hK04wh5zohQnH/E+Fy8CTU8T8+87T86CTU8Tk:qbQ3ZM3j
- TLSH
  T1F9A442C8E72157B8AC46EB9BA5085D683C0D74BFB8A76C38C16E4FD80ED6DDC4B51089
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral7 behavioral8
- Target
  index.html
- Size 19KB
- SHA256 9d7a55c392fec083a71fbd74b63e6842916ca26f0c23ae3380ca7b3fc1ca8967
- MD5 3aac7b56fd046adaa1e9d42f1e5cbc27
- SHA1 8239d5c18e39e9093f1c73eb5fc164c96fd095dd
- SHA512 43c8060d5cd10ba4d19c9f9ddfe823d167894d84dd9c7a9e80c55ec8270451634267f921779c097e49c6d24db54e7529bcdb4f40e2e42312f0ad788e1473aeb3
- SSDEEP 384:/4wrNVO6+XuDT0yuerQUEuCWjCdzdV8M7Hj9:g6n0ve8UEOCdzdaMbj9
- TLSH
  T19992336698F41517025292A568E97A1B7E95C20BCF4B2E50B2EC0FBE0FC6ED7CD2311D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  js/email-decode.min.js
- Size 1KB
- SHA256 2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8
- MD5 9e8f56e8e1806253ba01a95cfc3d392c
- SHA1 a8af90d7482e1e99d03de6bf88fed2315c5dd728
- SHA512 63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee
- TLSH
  T16021D5743A18107E226A0133E56F66CEE1F23715FD17E440408AD89566E4FE5063FED9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12