e6dd96f40a68756ed5b17b90965ed9ccba6c1fec0781f66daf4338cd2f2918b3

Sharing

Copy URL Twitter E-mail

General

Target
ftx.zip
Size 145KB
Sample261006-phl2daa16r
SHA256 e6dd96f40a68756ed5b17b90965ed9ccba6c1fec0781f66daf4338cd2f2918b3
MD5 0ea3656f9b1e3d43d09969b91c0a5c3b
SHA1 13f0a69a4a5d6d45eb939808ba01bbfc3d2c24af
SHA512 08e8b09b33c9474dbeb967b584fc842759d6cdadcc1157d0e33cb7136d82b84d394f1dbcf23bfc9a91e36e38108329deaec74ca2e4ac9f808ed2c65042240846
SSDEEP 3072:zbjqx8x9kyfU+FcjP4UqZNhW9f6cENYzZq3yd6SHrpKaM6LH:Ox8x9kyfURjTcPqf6cw1yd6SEaZ
TLSH
T140E3137282A64EFEFFB337BCF8662525D1503739103974867D04009B98262FDF5A496A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery execution

Malware Config

Targets

- Target
  ftx2/error.html
- Size 1KB
- SHA256 f17376b0b7ade8c24d17405d6c2d2a8ed5d8aacf1ca16efff18e96bd2fbe0220
- MD5 ee48901d9c8fd41b99ca875d7c6b0df9
- SHA1 c2b548bba5e2a9215b80375f019bebbc02953220
- SHA512 e3bdd12d8924ba9d11cb7d36ab4fc1aa0710fc992e2024f46be2cf9a47fb631af22cf766d43b729600e8b0d29e82ac0764c8b020c0a0af435c8e541000d217c5
- TLSH
  T1F531B19B56E310027923A0A41FB667412B80C027C24FCEA93E9CB348CF955D6ECD378C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  ftx2/index.php
- Size 6KB
- SHA256 b732918a49e8adb724cdc0b8044ed37aeb8c04aee4083837023181e32b690944
- MD5 92b07d509487c2ab63171b0ac02e5ba1
- SHA1 c66d274e0025cf9ed5317a29537097bbc8df2bae
- SHA512 65567f49d1a2e667c08b5f1cd1f806e3323d3987e5611dddc4c5daccac5f790a80062f2cbeee7908fffc1db7c89ae10da6c83a8d17791f27f32c72e3cb95f01a
- SSDEEP 192:f51EHXstivR7t/2kMKAYXiyBhCCcHCq2BFbB4uFlOGJg:gHR92kuyraSFmuFdg
- TLSH
  T1F4D19626B5B741244B67D898ABEBB195597A522B260CD1007C9D03CC6FC832CD3F67CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  ftx2/page.html
- Size 6KB
- SHA256 716676e160bfb06e6ff24d6a9119fb40789ce4531bbdd65ad4dc8f4fc2ba83d6
- MD5 46aee3f95d3fdfab42f1d42e0b8cca23
- SHA1 cad37d394fc6c6620d8a5a812d319fd3c2858a44
- SHA512 1c0a419db701bb845e39324078a5bb91121266797ab4e2704c82cc9b00392475fdd5ed821d637f72fef6e33aa1f681b13c62d4e026dab2228163649e28ebba1b
- SSDEEP 192:BrRS2fsVcOgyExA9vzp9wRp6kU+RvVa2HMpgf:BrdU4vVa2n
- TLSH
  T1E3E1A44783A742795C0A92AC5BB639043066C807E178F9F43FDF1445EF4E5E068AA7DE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  ftx2/pdf.html
- Size 3KB
- SHA256 f7d3e8189948ee6a043b2b0ecd9779235ffa100355fc17347e784c88c5121bd9
- MD5 0803a722a2bed28f3e85ad4abd95ac38
- SHA1 739295453ed5cbb431354a78e6e11d5bfae57474
- SHA512 aee0ac9b76a59ea4cc96f3ebc3d4081bde5d9fbc2aaf4999495e933d019aaec10040ccea9af005efe412d6531e3b841945c7035e1939a6f96b0eea43642f79b0
- TLSH
  T13871C7AB3E160405A302D0D1BE83A745650B7517BF0BCCB6B4DF9279AF855B8A2673CC
- MD5 SHA1 SHA512 TLSH
Score

6^/10

discovery
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
  discovery
behavioral7 behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Looks up external IP address via web service

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8