fca864242c5db019a8c2bd42bb21741a881e3b78e35dbf159913f91463f80103

Sharing

Copy URL Twitter E-mail

General

Target
Hone - Installer.exe
Size 2.9MB
Sample261013-2hlf3acv21
SHA256 fca864242c5db019a8c2bd42bb21741a881e3b78e35dbf159913f91463f80103
MD5 9f7924e598e927efdb223dbf87040c02
SHA1 41e70aca5570f42a23f5172aceb888a66c8f0189
SHA512 e3ac1831ae154d7a9fab8edfabf1385aff8ecab666f6ac9e6b6f41a1a5ecebaff619bb51d15243a82c0ec8ab3ae2368a7d75735e875221a0144b25c668eb98cb
SSDEEP 49152:rtRfRxxE87vxpsrFpIvQXiwKvUDcbpkPstY+XbIw3UhsooAFhR8MJ0YHzc125:r3ZzPN+TIv+oUQbpcVCbrkhsbc8MJ0Yr
TLSH
T160E53373D2F48135DA129A3139F4C7AE8162DD1721390BBEB780F994F936BC3534992A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Hone - Installer.exe
- Size 2.9MB
- SHA256 fca864242c5db019a8c2bd42bb21741a881e3b78e35dbf159913f91463f80103
- MD5 9f7924e598e927efdb223dbf87040c02
- SHA1 41e70aca5570f42a23f5172aceb888a66c8f0189
- SHA512 e3ac1831ae154d7a9fab8edfabf1385aff8ecab666f6ac9e6b6f41a1a5ecebaff619bb51d15243a82c0ec8ab3ae2368a7d75735e875221a0144b25c668eb98cb
- SSDEEP 49152:rtRfRxxE87vxpsrFpIvQXiwKvUDcbpkPstY+XbIw3UhsooAFhR8MJ0YHzc125:r3ZzPN+TIv+oUQbpcVCbrkhsbc8MJ0Yr
- TLSH
  T160E53373D2F48135DA129A3139F4C7AE8162DD1721390BBEB780F994F936BC3534992A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery persistence privilege_escalation trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Drops file in System32 directory
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
behavioral1 behavioral2
- Target
  $PLUGINSDIR/app/cmp.html
- Size 5KB
- SHA256 5966979a422c2526dd77897fb643639d82b16bdb89d8fa6e8615d3b32169af3c
- MD5 17241946e51074e6877c43737b94ad71
- SHA1 16918c53471fe3f35fcae1e9902870d91c50d957
- SHA512 b4b6e030fd1abe19fa308b32f04571a7c1c1f78a7cb789f169b37b54f281ec66d16e4cf0bbbdad81642bf28e266a6b2af7c19cf5106c683fb7f443bfa3110e05
- SSDEEP 48:tZrc0/GdshWpo1rckthAoShbEHaLKNGiNQtvmolOGR36tgtr/GTvJP8AscaV4Li1:4V+8v4jHa2NGiivmmpWsBVuQFwlE5vSG
- TLSH
  T15DB1DB1A2D5914A80077E3385B6B6208F72AA1B72105CA067EACDE513FB152BD58FFCD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/app/index.html
- Size 28KB
- SHA256 57155de56b2bc5166ce4e5ff8c662ab0e4ba7413380430b645ab89f782bc071d
- MD5 a3e8ff633bbfd29d97d525108392f030
- SHA1 f48b2acc9ed821bfd390186f284206de0da20737
- SHA512 fb649c872c172bd8d4fe49257d77d526404304e8414b94be5759fd84e5bffaac04184e50a22ef0453e51f2e852fc36c139cda86f07056237278a31aa6b20b35f
- SSDEEP 384:vNqP9FBykznWRJ/seq06INLglby/xSL1LaAT1vnErLxN0vsu5SwU:GnWX/seq06INLglby/xS5La05nH0u0wU
- TLSH
  T136D2B811CA36102DB277462E75E2BA5D3024C127E5638A7EFA5D9674CBCB18B1F13B8C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/app/js/app.js
- Size 25KB
- SHA256 3a2ffca7ea388779ad6d02523ac40372e9976acda72219243d73ac2ddaa23454
- MD5 a0461f9874888ead671debb03ddaf4c3
- SHA1 fd438e9dcc97dd00ee86b6a050dc716026e2543d
- SHA512 f0dc80d1aabdfa55901935ad456ab9023bca71888926ad3b724eb3b1047a6041d0f5e2591d2e796be01bb420bc958530f818d600cdc3fa379f1df69bad376e4d
- SSDEEP 768:0+ycDQYITdIb+eH3A4nzaYHJjifG3yRrH+K8T:0+yUQYcqge1K8T
- TLSH
  T163C2968E967912789A73633EAF1F4608FB32112F1505D6173AFD85814F7141282A7EFE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  $PLUGINSDIR/app/js/block_inputs.js
- Size 789B
- SHA256 f8dbd6793b35f7a26806f4dabad157aaafdf6d66fad094b50c77d60f223fd544
- MD5 b5b52c92b90f4283a761cb8a40860c75
- SHA1 7212e7e566795017e179e7b9c9bf223b0cdb9ec2
- SHA512 16ad53ede5424ca1384e3caea25225589e9eec9e80e2d845948802db90fad222f709a7b651cd7601a34ba67a0627433f25764638fd542cbd4612871308e7b353
- TLSH
  T14301D2D864D3A87A597DA328536BE748F7391964905A1054F0DC8C64BAF003BC16EDFD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  $PLUGINSDIR/app/js/libs/cmp.bundle.js
- Size 391KB
- SHA256 039d5d4e442cc360b6f54923c53cba5432d80727b8d614a3ee99f7c70307bcae
- MD5 48ccfc31db67a9e9d6decd5b18df96f3
- SHA1 2086877b894bd0ddec2ae80dd853e47fcbdc638d
- SHA512 e369682bbba708ea66797024bc2885e85a4e2b4ac6a4005cc648a7a81d8a4b1c3691c5484408bbd847c40ee80d12e72c5d9722950da020b284843c10d05d0963
- SSDEEP 3072:iyUYM9z8F+GxPMqbOISP88WEAtvgnnhLCVJkNO7Z6BEFltnxKg8rq0gU:LrF+GxPQWEDLmkNO7Z6BAly
- TLSH
  T13D842B8D7991B0E617D722F1802F900BF33A6458784CC490B660D8F1ADF96AD927BF6D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  $PLUGINSDIR/app/js/libs/jquery-1.10.2.min.js
- Size 90KB
- SHA256 bc44d3631ffef1df7960e359f02002d3ada45ee05205c2cf1edd85da2f518144
- MD5 44e3f0db3e4ab6fedc5758c05cf27591
- SHA1 2d408aa1d35661019c95adcc60b78c0727ed25b4
- SHA512 4d4844e53e686fc59a52e86588f328dca3ed6fdad7195c58942a98c51755a24981b903ee7c7b27785375eaad5a7d9501cf74b999674b79f214e66103bad9efdc
- SSDEEP 1536:O4mCgi8DyCuXXFiJ+L0kJQsJVPEKuQRZdC/RAfDknv+p0WzH/Io9Z7qABZnu0JFV:OGsKYAI2p0WP9bDrJ7fak
- TLSH
  T1D493F8DDB2D1B06257BB21BD006F540FF236195D280D8850F129E8EABC74A499277FAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  $PLUGINSDIR/app/js/models/notifications.js
- Size 5KB
- SHA256 c32495d55eed52f47dc7268eeccb90fb6bdc5686135ed089416c6bb8f703a578
- MD5 911451f65b2503d23bc27c6a6aa6af72
- SHA1 01d3654b23ef7f5adeb4097bd851e8c100a7b2ab
- SHA512 06edaebb0bb2980a7b6d6baa31a9c0894a9bb5f14a91468ffb8f182d98f04bb811df2a4c37f0b56d612603528aa21f390eaa7cf885874ae770a24dce2f9b249c
- SSDEEP 96:sOr8u1s9FHYYdfHsW/GZwzpJGf8mui+U8QrGjqTxoOxoYsdfHsW/GZwvpZGNjINU:sGu9GYl3rNQ8K+JQC+N5Rsl3rxeEYIo
- TLSH
  T1F5C1AB5F90BA00A7057293A819370342FA5753AF49408CAF737C5EB40F311A6B4E5EDE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  $PLUGINSDIR/app/js/utils/analytics.js
- Size 7KB
- SHA256 6f2d8337004d6de83bc0b61985c53b78fa35db7581740363250e18032afd2103
- MD5 75fabab6b87d59df79ff78eaf0c0fc25
- SHA1 5bea989fa02686dd3ee8bff82bc879ad906fb703
- SHA512 9c1232ca25f323bf7aad2e7860c7f4ff907b3166ae8134349ffbca185be7285f0c5366ee776a106a932285ff021570076f952abe5921d5e3c602f20a4dada793
- SSDEEP 96:LlYkmHqvnymegiGeARqPl9VHlnZrJGvt+QP2EZc8kukLQsO2LT+gObNSPIwUPgz1:AHqPeZ3GV+kC9zNObNSPDzaw
- TLSH
  T17BF1EE5428A9A1A0A87373B78F5B2508E77116273540E9263AEFD3511FF6E4286D3FCC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  $PLUGINSDIR/app/js/utils/commands.js
- Size 15KB
- SHA256 160ca35f80aeae58f6723c37cdd3e52cbb4ef56e659fbe105a8edab1f0f35ace
- MD5 ccfc18e42871f7eb701c54bc1833dcfc
- SHA1 7da62247f4383148109c198aee1e26c21484104c
- SHA512 f6a08520790106482faf6345ab534210f14e8b5629880f875af8f4210a3d1b7efb24e05dbeed895e2044034a6d535a4b4cc2dae34f5b15e7c4960806c2d0340a
- SSDEEP 384:2Ur5Hs8cD+1uUPULQq06WCHp7GvvoWqEWOnvsUmd:2MwGUd
- TLSH
  T1C872EBAA68A721651933B73DDB9B0215FB33083B11465C147EED46917FF6402C2A6FDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  $PLUGINSDIR/app/js/utils/cookies.js
- Size 1KB
- SHA256 9d3cb3822e20d6f5157faa02dc69bdaef44576c3fb5523e00aa152107ce30287
- MD5 6c60e675f8c8c68c0174b644d3a63a2a
- SHA1 3635a3fe07ccc4a6f33a986ddb690522d0611abb
- SHA512 1dc9ec7b139bcf37107ecd673c01e4fcc606332ea1645a4a1b4e5d95f817d4c99d5964cd3d941a6a526689341d9623b17b4efc002cdf4c73404299d52b1be452
- TLSH
  T17721E0087580D81EC5725739AE286778FD30992611C6D54DB88CA4F02F30C169DBE9FF
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  $PLUGINSDIR/app/js/utils/modal-events-delegate.js
- Size 1KB
- SHA256 267661f932a2ea78d8c7a98cc03d1b18d7cb8132deb84636772ecd1fcfbe4857
- MD5 117e4fdbdb0ecf211c8bd909efd337d1
- SHA1 9f8684d856b7c95bdffb139217dfd89f41373187
- SHA512 f474ee20b59d3d0c11f9f6aee6b6e2b66f7025beaec9841f88455e60533dc96cb4e27910be0dae92b0028c5578932b7f459fdb91d594ad010f72a3b3af6addb1
- TLSH
  T13C31D54D36FD173AE5B7172B5B2F5F8CAB72120B09054A26B2E69A804F354241196CFF
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  $PLUGINSDIR/app/js/utils/strings-loader.js
- Size 5KB
- SHA256 9b833f9e058ddb31ada44764449fe030f05e241dcefdef46886a74e30cd04ba5
- MD5 8ac781fa72423fc5c4c21a8c4138b709
- SHA1 50ad1d7f383d6801c57f916e46c1c17f79222725
- SHA512 f78558488968b1151b189545294a0bb97131c0a4d5dc0fa61ef168d999151e0f12af271389aae985d129adacfc6bf610b0191fb912ffdf8e97283829e2802604
- SSDEEP 96:FXS/WSBWlbBtDhWFTnTeWsNkEj1I/6Wfwk0lx416moPdXDKP8j8yZrME6:FXSuQwBBh0nTevNkEj1O6WGe0muXDK0W
- TLSH
  T132B1ED58289354118C32B764CD935264ED6A4917023996F3FDEEC2686FB149E82F8FEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  $PLUGINSDIR/app/js/utils/utils.js
- Size 959B
- SHA256 97539ac4a2581a09d3e641c0e31e482afb94f894dd809b01c6a4d855f86cb76e
- MD5 f2733fda6c80948a16d2b0100115309e
- SHA1 69c2c8c07757d4bbaa9bd7800237c6dfdd1d4440
- SHA512 113770997ed0bd41d70c57410cc6d3016b780e249077b097b541963a5edb5aaafb70e80904d208ed18b31640172fc2c1004691789926941fa6bdfb10637a9553
- TLSH
  T16C117DD06982A275A5B17333876F3F0CF36A683547651150B0D690543B909C98AA9CD6
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  $PLUGINSDIR/app/js/windows/cri/cri-controller.js
- Size 7KB
- SHA256 25189433050fd446dd3ab55709e5dec291468c7b230a2fc7c79b8eb0f980a29f
- MD5 9e4881ff4a128852bd204b34b26672f6
- SHA1 28752aec491aa1dcf0686b7f5913dbafd8764029
- SHA512 6ded880d597cda28bb45ffe12bdca4ec85744d2919d7d2b4a597620f206e259ec7d01626987b3379b71ce2b94fe964e53ec5ac03ca60d546a5ba334c6bb0d366
- SSDEEP 192:u6jVtOyl2EY/aLmWCyQNxaUkrsewWk7e7:hVkyl2afCdoIeK7G
- TLSH
  T10CF1109C3CF986A094B6637BCF261618F772011B2501A93679FE87440FF5E404A66FED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  $PLUGINSDIR/app/js/windows/cri/template.js
- Size 1KB
- SHA256 016ef6ba4ccb64f2cbdf63357d180f0d3a5f74857633556b311eff57be8d023b
- MD5 2f82acef2d339db31fab5c73edf8af19
- SHA1 d9138de6fe1320cd232fd6e1971fbbfdb9225bd6
- SHA512 90311035970edf2c1d0175c9b718c731fad4f58ad5a0b43a2588e2e6132cc09deff1d49328174408c51fe3082d62612f7a2a6c25179ac474101468ab68c2abcd
- TLSH
  T188212E24441C90331B7B979BDA13276CE9519301D80B7D3871AE43A82BF3B828E62359
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31 behavioral32