79dd41a69bb382a98935c5f33a77a619aa10dc3e3d9972aae0a0dddc785fdf77

Sharing

Copy URL Twitter E-mail

General

Target
Email_Verification_usingIdentity.rar
Size 10.7MB
Sample261027-hlchsach56
SHA256 79dd41a69bb382a98935c5f33a77a619aa10dc3e3d9972aae0a0dddc785fdf77
MD5 da779454e6cd2c1a62f50a74ec0404ca
SHA1 0dfde318f58984f8c3966470a31f97151572e4e4
SHA512 69f6c710a3b5253fff469dbe07d25f9b301bbec6fc3fd2a113819317ef75c93973525800d2dd2d1edaeed74384ccfa99c7c8b5423bf9752d239c874a3f977e6f
SSDEEP 196608:HBGdFtnG8I2OR/xMLMwXQdfh8wU9TWvlj46rYZixXcuzwcjuB4Hzudn28ltKo3iR:HBWiOM/mMwgMXNIYZ6rs4T622tma6
TLSH
T11BB633A32498186BEF5BE329F327B1DFBA31536C8D370D06DD5A9198645232C333AD85
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery execution

Malware Config

Targets

- Target
  Email_Verification_usingIdentity/Areas/Identity/Pages/Account/Login.cshtml.cs
- Size 3KB
- SHA256 83025867b5b4eb72cab35e16103127df312fde83338190f3805924be03ab807f
- MD5 3a030b19d36a9519896acbbc19b68271
- SHA1 9b5040d9b9b8a245cde1667051c8b1a2dceed721
- SHA512 2c7d821684105c57710f65eec323a12ff5d8a41cec77d87ec4d19f34d577312dc5be534f81ada85c014aa7311b7752fc0e19de69323f059943b8ffcb6721960d
- TLSH
  T14C8121DB278F55221AB622B7FE809142FBA7951B01DF9914FDAC86855F7A004C330F99
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  Email_Verification_usingIdentity/Areas/Identity/Pages/Account/Register.cshtml.cs
- Size 4KB
- SHA256 75ce3380c49e295151f6570edecfaa087a9aa38e327b5700a7593283dccde668
- MD5 7f2236a39520745362624432b5a88ac2
- SHA1 6dba84705abc5f2c2f3a9d0f2bb6b4643e185900
- SHA512 6b050f1ef107e4c8a4ff0be40a794df0e8d055e258b2b54d2b3403ddac2785e6a359a6c2e294fefbaab48fa2948840070bbbf8b467c4f365502629c5eba8d31f
- SSDEEP 96:Jo4h4T2nXzV5UIU9UWUEUIUiUevyHrTmA+4wtyN+h6hu4fOM16No80Jny2u:9K6JQyHrTf+4wta4r0U2u
- TLSH
  T1C0A141DBAB8B2A1346767263FD044106FFBA921B09DF99017D7C86895F3E844CB70E48
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  Email_Verification_usingIdentity/Verification/EmailVerification.cs
- Size 1KB
- SHA256 fe3cb76ac50c860b27732a4988c1014ee82db410df139f94d6b2a08480b9638f
- MD5 abef539b3d43e4e829298c78cbcf2ba6
- SHA1 85a00aa17b7c4b256d72cb16348b19410af922bb
- SHA512 f6e87279be7d32a6745fab9e27bc4466dd0a5bee7ad311c8542fbc7c399d7d9150a6405ac4388ca32fbcf21e6ae306a2bc00d23173fb80a7dfc8fef630ff0b31
- TLSH
  T1621190491946EB8808F62323BED27020E633131B1F5266707CFD42C14F75E5636B4D56
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  Email_Verification_usingIdentity/Views/Shared/_Layout.cshtml
- Size 2KB
- SHA256 bf1b5b4ab40f8c503e89bbce9209391f7ed6f6f664a2464559121e9bdddff7f7
- MD5 0762b8888cdea5e950f853a4a668f257
- SHA1 eaf0c442d0eafb252998fba307517733704ec9f4
- SHA512 73e917790c23a475786090f814fb87938402b29e534d40eb60eb90bb832fc7eaa1d1472451936ba3974f4bd474e64084b8fd943b02f8f1e35d12b37354e5505d
- TLSH
  T1D741CC253CC0786B02F2489F6B67C259FDD0D047D145661A30AF638B0FB2EC98927E58
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  Email_Verification_usingIdentity/Views/Shared/_ValidationScriptsPartial.cshtml
- Size 176B
- SHA256 9ef82fee87759dfecf2638af263085e669aa14a40c723d556d790d65a525ba11
- MD5 04c9739bd41a158c3fb95b9ec3020c94
- SHA1 4b5e5ef4ebf7354cc35c7dacddd6bc3068f19a47
- SHA512 494a1460e2f47f69d8dce662a3434186396336dd0b7622da13d79dc08792c07d8019ddbcbac1015c84375d714cab50167f6191d6fa7d31c4294565c7ee09506b
- TLSH
  T15CC0808D3C0D857D0D7318F44071D19D6070D5007073400FC06D05D21D54FC40D07CC0
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  Email_Verification_usingIdentity/bin/Debug/netcoreapp3.1/Microsoft.AspNetCore.Cryptography.Internal.dll
- Size 41KB
- SHA256 8d98a9261908496b1a3cec4b6f52c7dc3f623e2e3e316e1c6991d257e704ca5a
- MD5 33b993cfdc249c0876cb066176fe6514
- SHA1 cf31b4160c24bc28cc210bd24e115865d137d7f6
- SHA512 d017526a6581187fe234fca49b4a386e0a36047ac4eb415192874faef0a87f0e6879cf927bc06bffcebf911c3019d8a5cdeb49e4ed375bdafd7e3a87a06c21c1
- SSDEEP 768:C9VluETrrYmjiNAm6dBuqPlrJ7q830J/6nkK0g2r98G7Yl9z4lr:C9GETnYmjc6XPNcJinktNr9q3z4lr
- TLSH
  T143137C06ABB80407F9EA29B199F1F9522934F2837B62EF6E1154E1D81C637C54F2036D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Email_Verification_usingIdentity/bin/Debug/netcoreapp3.1/Microsoft.AspNetCore.Cryptography.KeyDerivation.dll
- Size 21KB
- SHA256 48f2fc0ed3426d6cad061721fee525440f7b91c40ce2de5d59b0c02b8d460c1a
- MD5 d45cb205614a2a144982d1ee9132b77f
- SHA1 8244035cd6cbcbc06e783e4b8019c76ffe11ee49
- SHA512 6061c3558948f42553869d4b36e03c499b9ddd379d8cbee9d486cbdd0d8a1e3c5b6566cbbb586ec85d03914988b7bc29df2e944976aaa8fe0eb54593917bae53
- SSDEEP 384:FDoZCS4WYP61QnsWs57Wj7HRN7ODikGER9zF3:l7WhJaSi+9z9
- TLSH
  T1C6A26C9DEB588117FCBA6D7096B5E6463D3CF3872942AF2A2499E1191C433D49B3032C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Email_Verification_usingIdentity/bin/Debug/netcoreapp3.1/Microsoft.AspNetCore.Identity.EntityFrameworkCore.dll
- Size 96KB
- SHA256 f86d621575135ae10e48d1e17ca7ee386038682fa572af98e79c17e50cb5706d
- MD5 82f33c358b634fab33af449238c418e0
- SHA1 bc3337ad9aee2b8fbccce3dd95f6aadba6884054
- SHA512 0df6eb7a33760f5af69ca2279b432fc837a360cb90338aa73edde050ef5e0b2d548d5bc51980c16398c71d8f6d67c256a03562259766e0890af75663e52e1ae4
- SSDEEP 1536:CURx9ohz5gX6KurlzDLfj9n3uOU5/o4a/HQxA+zq:C5z5gXjurlDLp3ZU5/y/HQZ2
- TLSH
  T17DA329C527CCC636C3BECDBB71659626C6779A43E025B29C8CDD95FA2531B28384C1E8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Email_Verification_usingIdentity/bin/Debug/netcoreapp3.1/Microsoft.AspNetCore.Identity.UI.Views.V3.dll
- Size 343KB
- SHA256 80674f795fc0efd1bb6aca29ba17340a6d41ececa043f2e153ca5e3fb075ec08
- MD5 2284b0b76b0bab30137a84cdd787aadf
- SHA1 ccf25808a886b5e02be3e9e6f56e9003e9187d25
- SHA512 c4b070f2523639c14420937dce00a310b06558a3a80d579727ebb79a38f97bef945dfc90171ef8276ed6cff22db427bb2e4b4e3263b12013951c6e59b32960d8
- SSDEEP 3072:5U0oBLDd6cSixsy5vkpfWnidGVpJr7wL5Ej/+U+Hm/O3Tu6STjpvUTfKk7O+rhdv:dydbxsyZjlaYiXzE4ALG1
- TLSH
  T10674A61A53E58612E52FBB79F46128099437A9037876F78C5DCCE1EA1BD3B929D0038F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral17 behavioral18
- Target
  Email_Verification_usingIdentity/bin/Debug/netcoreapp3.1/Microsoft.AspNetCore.Identity.UI.Views.V4.dll
- Size 347KB
- SHA256 9cb0d047881c01e62fffacf39084a81a6f065a012ae5ef60173d0d916d080d11
- MD5 5f5dc6ea6431ad00dc8ae6a14ac964c6
- SHA1 b985d86d6d1f20a9b111f83895615196baa3f33a
- SHA512 1f18b6e130fd43158af75d659e48432f7136e5bf065a04754dc9b735459311d8365503566768577a9971d06cada64ca1131d41a664c4a8b008fd3045c9b398d6
- SSDEEP 6144:+OcnXOZd3K1ZQFgOb4XabMpJB1N0rra0nnQeTtKF6ELjNtIycVUw/7WDHrjBwdrt:+T8afUP
- TLSH
  T12874921B17E88516E62FBA35F4601846E933A603787AEB5C4DCCE1E617D7B428D40B8F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral19 behavioral20
- Target
  Email_Verification_usingIdentity/bin/Debug/netcoreapp3.1/Microsoft.AspNetCore.Identity.UI.dll
- Size 199KB
- SHA256 133274dedbf3db3db204a70ae557e2264b1d976b55ff03b3a742271b376206fa
- MD5 bfd4f60e327de9004cbe40f22f2ccf75
- SHA1 61a69eacc72219e081fea7a4428ec3296c4f9cb9
- SHA512 198fcf3dc5054336af484f99b62d5637a79d837b10744a04d8a3aa95a7790da1f261b3d952663ab9adc088c9e17d94bc4bf983589b0419b489d52e7cffa9cf94
- SSDEEP 3072:e+VKOTc17XszFy8+qIjRfYl5de4i/3cIieT7zCFMpLvNTZV1:em4J8zFujRue4RIievzC4L7
- TLSH
  T16F143C4A93DCD307DA3F0F7FF030456A9F69A107E5E2E68D4D8C9AF82992741E8507A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Email_Verification_usingIdentity/bin/Debug/netcoreapp3.1/Microsoft.AspNetCore.Razor.Language.dll
- Size 915KB
- SHA256 a286006552d2c53ac0b9bb0e36a0f65b43b5b1ab6fa3b220c113b8da81b1b052
- MD5 ed09b18020f7dc4cb7a126e0e457450a
- SHA1 952c64d217fcdf11617cd4e87be6781cc2b95a6b
- SHA512 b61207f1c5f1110ea8c094a8cf44aba65ba46fde91f5c09e375f00d8e9bc38ef9faac99209e29f33f65a9bbddc424db4b9668882fd6d95cb4332452a2c8ec1fd
- SSDEEP 6144:c87UxRT4nfkvfbpCFW74RzWsQPTDAjMeg8SrWhiX1tm+9MoYAAeG5fTOkcsy6gM4:kxRsML4R1ymyOd/grpdvU/4H8hvHGaO
- TLSH
  T17115391073E817A7E9BF9238A031260C45F7FC5B66D3EB8F1C04699B5CB6B416C05E6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  Email_Verification_usingIdentity/bin/Debug/netcoreapp3.1/Microsoft.Bcl.AsyncInterfaces.dll
- Size 14KB
- SHA256 11c0e8fc6419910ace4f55ddd2330f1373704f996c32ae4336c3f11d589d2c34
- MD5 70d5e04957ca93f7db2a9a2f3a09ec53
- SHA1 885973b3cea40a9acebd90e8947ebe49ee4b1b54
- SHA512 44ab898ed2a7432b605c237735bbd9df6f2471d74680f23f85b978495e26e5c61b3a401cbf6ad55cfe8bcdf450810f1cefd2a3a70c2cc8007b0ba4a62a76fd95
- SSDEEP 384:bk8O0uMWep4oWfcyHRN7WEXFRS4lr2eLC:b/+1vzC
- TLSH
  T179624A51CBA85203ED73BEB0A2AAD8037C3DB7E35D61852E0455F6951C93BC5CB20A3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  Email_Verification_usingIdentity/bin/Debug/netcoreapp3.1/Microsoft.Bcl.HashCode.dll
- Size 13KB
- SHA256 4e15ea3b7be1eca481a3ae7599da818538dc68895d711588a05a21affa0ae835
- MD5 ded1b4671e6ff0d626ee2bb52df3320d
- SHA1 80c4967b6aab0fedb8b77f9b97394bc7f375caac
- SHA512 6fdb08f98fe27f6fccd6433f3e58bcea409b71fc86581ba740fd518cef1d316c059486e6c8333cb89eef8593acad2ce81d4652e805a984fa34f648a4fcc47a12
- SSDEEP 192:oEotsad42WV0tfW8W4GD5dHnhWgN7ayvWv1z1Zk9gTFqnajTfkzGA:FKf+2WV0tfW/dHRN7+/hl3fkzGA
- TLSH
  T12E523A528BB88203EEBB6DB296B4E9137D3DA3D36D11822A1919F2450C537C1DF25B3D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  Email_Verification_usingIdentity/bin/Debug/netcoreapp3.1/Microsoft.CodeAnalysis.CSharp.Workspaces.dll
- Size 743KB
- SHA256 20af2f68b34fc234a59aec5d1f1da428b12e8973ef1cf0fe8e0c80a8d9a4f211
- MD5 f126b905a41bbfdf3059507889dbfb55
- SHA1 19f1e7e8877eb82a9332b4f6b8394ae0190a40a0
- SHA512 ed93347f459a1b517f12e655e936be7a599c05ce25c13ced1f974a6e0c3a6daa2a0a50155caee2d1d7520c47c9eb03563502d4b28be7e5570c724709d275832c
- SSDEEP 12288:mc8xKPl9p50gHGkWl/vr1s56/q7rD1im3pRCm1tJhBYfjl9E5f:fqlz/G5NlPYfjlUf
- TLSH
  T1D2F47D6937D44B77E9EFA331B4B404194B75E282D64AE36F1988A1FA4CC3BC06D4437A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  Email_Verification_usingIdentity/bin/Debug/netcoreapp3.1/Microsoft.CodeAnalysis.CSharp.dll
- Size 5.0MB
- SHA256 d0144eb8f2bf7a73350590ab6e46c549960bb0c791cb186be49b5a4ed290adc3
- MD5 669d48d43f79bd45f920f5047e143246
- SHA1 c5b2c78d21ffb125732dd6645650a3f0279f85e1
- SHA512 12296aed3ef3fd5209d257464c2da74bcf68d8d413fc2312847fa8fce040fdeade077c8eed16be9367cd084e3acddbc45d6bbadbe2eb77395ab3f206adf11167
- SSDEEP 49152:bZWAfp8eU9ZwkMg+uiCaCUW1c3i75MqNzYkBayx8lRHSpqfgD+UxbFlJvp5Sxmgz:YC8XhZ57sHGJQGVal
- TLSH
  T10A367C02FFD84F2BE0AF867AA472644543F6F6D46347978B6098F8AB1C537905A12373
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Network Share Discovery

Network Share Discovery

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32