463ca8a3cb23f539a287fa76d040d5f5bb290e8d0a4082120039166959a13654

Sharing

Copy URL Twitter E-mail

General

Target
Dow Credit Union.zip
Size 6.8MB
Sample261012-28197ssvbs
SHA256 463ca8a3cb23f539a287fa76d040d5f5bb290e8d0a4082120039166959a13654
MD5 cee47fc0571a2c2e305f1f18c4818536
SHA1 5ab194139f9c628f7c96abd0f8da73eee04dd465
SHA512 03b8406f62099c34060fb6b45c18ea7fb4c57b56993598c7d70188f8ac36e51c37bc03abd51f25f9778c003e9174acd6d87a0da28a898ce2deabb884a0a0852f
SSDEEP 196608:/FKoKWUdKjb/8RKNTqPy0U/cXBp8R6Sn0wpVf7AFpm6m:/U9pdKjyFHxp8U/9fmb
TLSH
T1277633D78058FE10E6BDE1752AAE4CFE17CC4051E86CF37988C782E50EE94E86A5097D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  Dow Credit Union/cod.php
- Size 4KB
- SHA256 f1d0671591af41e016314b1c79f6fe1b167f51ba0c7c9d065c3294dc5ea5af97
- MD5 9e31a275eda5452c0490eeae9b8e530e
- SHA1 50b7238799ca8fdfa12bdde716b8bb0660a56901
- SHA512 61bda4ba0358041d8145e6c630a8832d7bad616157681ff5fd81e237cb495b1fa583ce83538bcb32694d310cfeb9eb855cced3e9b1bee74b39d3b3a5bb0fcec7
- SSDEEP 96:9G4wXH+nPlaRrj4NUIl69l9tUrYgxbkCqq9h:bjGX50ql9usuVh
- TLSH
  T169A17028950224162277C8506F9042DAFBE14113CB47165C7FF8636BBBD19AA873BFDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  Dow Credit Union/done.php
- Size 4KB
- SHA256 edff39eca69c6123d8a47732eb92a58293cd8a1de30d6b51784b96fde2d22e4c
- MD5 6ec50f8bc0b3b3d678b5869670097bfe
- SHA1 5a00892d725cc1987e7484f4dfbca9601b4d87a3
- SHA512 fe42eec19efc48096fa5bcc5d032fe2ac8bacbc06315e2e653058937147a6933e53bd5dd6008a8951837348a618d98193a087f06769008b5d3fe65d663f221e3
- SSDEEP 96:WG4wXH+nPlaRrj4NUIl69l9tUrYgxbkC+Mx9h:MjGX50ql9usujh
- TLSH
  T1A0916025951624163177C8906F60469AFBE04043CB17165CBFF8626BEBD18AE9B2BFCC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  Dow Credit Union/error.php
- Size 4KB
- SHA256 acd5145314ce0b71c5dd68c1e251a26c55d993bf4eaacc43a0c86116e47e1419
- MD5 4405fe80b0dff6f50d7685ba34bfab23
- SHA1 8126cd6077eca61e43165147a90a95db950b214b
- SHA512 d545b5f8f0f69607123fbc3a4832c6c81238b9125901cfe665391bae6c10f817719e54eeac5346bb5c54d33a165dccff0b04a30064d0999d4a45d96ff212d6ac
- SSDEEP 96:9G4wXH+nPlaRrj4NUIl69l9tUrYgxbkCMexf109h:bjGX50ql9usuxxfkh
- TLSH
  T1C2A16228951224166277C8502F504599FBD08113CF47164C7FF8636BBBE189A8B3BBDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  Dow Credit Union/login.php
- Size 4KB
- SHA256 2b9e95ea97ee1515acca8d1a128a723a48f6f3425eff042566f1e9b1207cfb5e
- MD5 32541e134394e25492620e464e897e8b
- SHA1 10af585a5d6f8c1cecf088c69095f016ad9bdbcb
- SHA512 6513dbaaee5f8b0fc8bfe48306c5ad49d91b72d45b4615d94e69941d540a2e1960f31ff7d4858feb25d2a98e198b63dd92e7e05b9b0e0beff16d23ffe727ebfa
- SSDEEP 96:9G4wXH+nPlaRrj4NUIl69l9tUrYgxbkCbexf109h:bjGX50ql9usuwxfkh
- TLSH
  T17AA16228851228166277C8506F50469AFBE08113CF47164C7FF8636BBBD189A8B3BBDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  Dow Credit Union/processing/done_files/13.884592655f8e03c201b2.chunk.js.download
- Size 62KB
- SHA256 eb2a9aba22bfbb8d136886a5132fb6a792c27788e24e1b634252ecc5648e1680
- MD5 4829f49ab033fa8b25fb85fbaffe4544
- SHA1 08ce0a04ba4c3d07bcae95fc5e565334ffea6f16
- SHA512 faf758513724215db4d6848a3de7148a959f2a5cf2f1aea3d08bb13ae7c7e1269201db4457d695ba26f16182c9c0099722d08a3b9a717f4dbae91786f850a98b
- SSDEEP 1536:zqA03eVNANA5Ap8ApMCzuHiyy/uSurP4Wx4I:zD03esbp9uHiyy/6
- TLSH
  T1CE530ACFB149B438429329B5D13F3206B6332539644E40A8F54AD1D978BADAF8227FF5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  Dow Credit Union/processing/done_files/AppMeasurement.min.js.download
- Size 32KB
- SHA256 9219086b4f2c3bf77854b2e06ccd97ad32b9b7a140e65ff8b974a3bae6c7854c
- MD5 d860c16ac938f7d839f0ec158d02d0f0
- SHA1 8710f81ed151233677f7e32b229cb35293dd6840
- SHA512 31832074a21601bbede57d360d753f69a244f9d3cfbb066d1d36688af8f1cd34783bace431f103a2fc668833faf064c5a69b2bf85948c1505f719a952f4aba03
- SSDEEP 768:GOMjWPr+mBE10/Y12DqSEKClrlkxDgVsG4aFrcemyFN0:GO5Pr+eea82WuduT5N0
- TLSH
  T162E22CC535EAB46E165271F43D6F180EB139CF5A8C8884B8E081C9A16874EC651AFFF6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  Dow Credit Union/processing/done_files/RC59736ece5d774b119d38fc68ef2eb150-source.min.js.download
- Size 10KB
- SHA256 39ae1bc342ab3e5bcc2addce2eaf8b0f3be7f72150062e9a84247e16ae0e2634
- MD5 26f9989f3f46e84c6a3418b55f50d0d7
- SHA1 46eb0b5510db60f722d4bbff60888a7920579d60
- SHA512 7908eea2e88afb43a598b724630ba8d1af86837136ad86e6dbc43af7cde0f40accc7831a3bfd9f951b10c51ff3447f4492e849675bc7b4099d599ac80b80691e
- SSDEEP 192:/Bs4TClAD5gqrbD4Ac3pc1UoL7zq26hSz612BXc9VaVcV0Vd/yc0qP/uh:/K4TClASqrbDFc3pc1UoL7zq2wSzu2BG
- TLSH
  T1AF22120F717A8261879DB42C63AAEB30C9FDA2D451601978F532DCDCA302DE76AE714C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  Dow Credit Union/processing/done_files/RC849ce307447d4dc2b8dd22487b9acfcc-source.min.js.download
- Size 1KB
- SHA256 b928d711f95f3cd0bb07dda3be302e8188753ec6be4bdf4d264ad346f2d702ed
- MD5 845f1b24d9202c7cbf3a7b02a8b48651
- SHA1 621ba99d518e5f94e9b7bf8aa7acf581a4cdb7c0
- SHA512 66e4976182f8f98fc016bc9341be9b160d4a21e2a9650fa7effbd6d07edc016af6150074af8ebca7738edb569b17332023ac4c63087e08fba0b7d9a85ff3975c
- TLSH
  T1C331983F8360C6E318BD495F1742F3B4126222905477C0E2FEA289C5156BF179686ACB
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  Dow Credit Union/processing/done_files/RCe772dd6bca1a41f6bd8809cf04bb8ce5-source.min.js.download
- Size 3KB
- SHA256 173ca9ca5f6fe589e0027f4c9ee50416b296b47572ce040d852823c028a325bc
- MD5 abc6d96a4b658841973944631c6dab2c
- SHA1 df70cbbc657e52601397a0da0c152f8e275dcaf2
- SHA512 9c47a3c4a43715c6956d4c8fc2b866f17013b8c493d2a4e887470d39d13ecfd538e5e8951c7aba0afefc206f4a068eb6a9726abcd9d1e8b845447fb06fce1f2e
- TLSH
  T18E61C866FE9AC63084C2901A11FFA7477076250A2C81944DE5A2E8E8F870E73A15BCB1
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  Dow Credit Union/processing/done_files/launch-a5c4b6620207.min.js.download
- Size 431KB
- SHA256 609110db4b3c60bdad0c149e5343a9685d518e6f76ad69592be39407046ab272
- MD5 b84637409e7aa008320ea8f1d47ca879
- SHA1 4961b01753df44630858f7c2dd4240b063b97c7c
- SHA512 55aa1216068ee03b0d96f20864b10627923722c3326ed01176cee2bf5bb7a0490849864132fceb0f68782b3ca269944555fb1bcb521d1a1e83ebae657d56ad3f
- SSDEEP 6144:KqFmYLU1veMXAciW/UyVPSyuac0mQPhYu5NN1yq:K+W9i3yuSmQPhYu5z1L
- TLSH
  T17C9419CE32D9B0A503DB6075903F220FB27A6D95680DC020EA52E4D97C7959ED273FAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  Dow Credit Union/processing/done_files/main.6fcb8eb0fec27376.js.download
- Size 4.4MB
- SHA256 503474cfa816700e3fb5048655bee576feccb9fdc05eed04c5c19ad554e0087b
- MD5 5d4031df0a2e05fbe6ccb1fe8f0188ba
- SHA1 f2a8228f2abd9a31d18fc4da1065c8b64cd54064
- SHA512 c934a1ae297b0ef67f8c6bdfbf7c81801e405e01a7c666fb487c39c6c5d12b6f4af9dde2711e0f939dd0efd2a23fcda974defc8068621d19f0451be2952a6b1a
- SSDEEP 49152:wKwkgpOkgpJy9qK0WaaIMk2Exslt9p2dBL+APU2/mP43tR7hjR2rbyiJva0r+BSy:x72Exslt9p2dBL+A/AG
- TLSH
  T1AC265BC57251702A42A74065807B0A0FA33A6454C485816CFBACDCDEABEDECD627BF7D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  Dow Credit Union/processing/done_files/otBannerSdk.js.download
- Size 383KB
- SHA256 49582965b8ddcb8f728f5b4d33b2c73e138690f5c6815bd9918de94f62f4b80b
- MD5 8f46b8ed79885013f6b4ab379c16ed23
- SHA1 f8c43241a222a19be699509e614c79c5ff5f6133
- SHA512 ec0f12fc1400fe868ac0f312db91cff067f268b895ca10123389f919bc6aa593b0f0c26f69fc4377966451cfe3e381318645eaedc11a4255d9ea0607079eaa87
- SSDEEP 6144:FIybCAg6gxjpmhq/18VkxZXF7uRAxj9wmBHkD8OGbb:Wqgxj4usgj9bbb
- TLSH
  T1FB84074D7590753587E762B9C02B024ABA3074AEBC56849CB00CD5F91BF9F821D93FAB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  Dow Credit Union/processing/done_files/otSDKStub.js.download
- Size 20KB
- SHA256 85fd7a9c8e7bfc99a1821be723e54a408364c1f4d7c363d529011ce83a88b8ca
- MD5 e0a74c707d461f9edbaa50b8f1aa7d7e
- SHA1 9d0e06953cd818a32063304ca2fd8bd1526cac11
- SHA512 a1e8984a5f8a418af4d57ddc5d248c48620b5d6db15285c6b9fe2397842bae618152ae1ca9ba583595b9852ea8f31b29157d1074952f00573439325b4dbd864c
- SSDEEP 384:cwJ+saGwAqK3GzVUvzV/dnbalzotiDjDfx2HtkMOsx68tBO/C:eDG7VNbKzotiDjzx2HtkMD6Wj
- TLSH
  T10DA21A8AB500AF344AD351EC9937E29E7532746D64CAC0B07C86D4E026BDD4F1A37BB9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  Dow Credit Union/processing/done_files/polyfills.3dbcfa8c3dffc463.js.download
- Size 92KB
- SHA256 2ba99e2051fb99440b9b3e30e3daa3c562ee5366c67b3872135c577d0f685a43
- MD5 1ecca643d555546b752195db337d0528
- SHA1 0b9b96fbb1b9234395f0025b0d3dbf521e38a54f
- SHA512 7318f6c7fad4c83ee224483ae90edce7c7e1a74aa59a1002c06d4929cee06edc2c6666a57782ddbca224e361c262623ffacc326ebde3bb8da5b6d0a60154ba7d
- SSDEEP 1536:iIKhXUhjHiDtsT/NmiHw4PDYwf+CxzP2D:i8H/MiyD
- TLSH
  T15C931AF67652747583E362B1917F000BB23A2991B41C8868F315D5D83CBE85A827BF3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  Dow Credit Union/processing/done_files/powered_by_logo.svg
- Size 5KB
- SHA256 5fa00d047acd959697b9d7772c31dcd37bec33c70c6fbf80ab8316205d1d286d
- MD5 63e737d3544164d2b7f4fbca416ac807
- SHA1 030370aa38715e4c41589633f69d0bfe8255d46c
- SHA512 31ee1bb536c0e50f5568a415ea3308367bfcfd11d2a6f7dff1c8e3a982f7be790c240a603cd4c6e187672824b8e5d07646049a28c6a88a7b001eb9a0142f312b
- SSDEEP 96:mD6VAMcWnVRSNUrN3Sky4gNeLSYiJ7iFsAkl2+heNm7iprXbep5DkoG23b+WYYY:p9bSNURZyNNnRJqsAehheImprmDkozYV
- TLSH
  T193B1A9F5AA45D29C391E8984CE37A964551FB4EB7BFE83D06192D332E40EDE0F900C18
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral29 behavioral30
- Target
  Dow Credit Union/processing/done_files/runtime.4d4971833a0c1f1f.js.download
- Size 5KB
- SHA256 2fe676ac381693765f511036e3c9137d6f8252b577f0ddb66721fa477debbb01
- MD5 b3c4f5fc73174dface4e18d02d414b79
- SHA1 afa00b16b20e1fb9efbe9bcea9592dc413ccea8a
- SHA512 22eddde95cb61fd8ebb3b39ec7dd3a596e5772902c6785f8f855238d0e31de9fbc3c520f16636a883ee227c2356704bc7d7a7ba2f8e0a68d97e96d758de2b57e
- SSDEEP 96:yBCUoRH+qk8hQ9bJIaleC61zcqc7mzJBT/apsU42l9pPbeVknV/KS+I1qxlx/MX:1RH+D8u9bFleC2pcazJxKsUJ9ZC8RKib
- TLSH
  T1AFC1D7691D24F1AE33D7CFDF2C39A653DE9A40E9500498A1E52AC4D9D0DC490643F936
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32