54baf2987326452d5855c9b8b0a708592608e2b4241fea9f6043ac500bd82ef2

Sharing

Copy URL Twitter E-mail

General

Target
dayflow-hrms.zip
Size 15.9MB
Sample261102-b9pdxset6w
SHA256 54baf2987326452d5855c9b8b0a708592608e2b4241fea9f6043ac500bd82ef2
MD5 13f072a1fc82266bb53037d9fd8ce57a
SHA1 1fee6c9ba3687f9932401cc0a51ed07af88d7ec9
SHA512 064eca06a3f0db98e47db6cea3ebc220b46c62f0debe23a344ab8fbaab05f3515649b89d4c6f96a72b2c0b6fa81f55e83e96a3d3b4df6083aa77a55e83b98e2c
SSDEEP 393216:HDe93LBieSY/734wx84flrAzL/6dlrHJmIs4IpquiNTDf5VfB:HD/3Y/734wxt6arpS4ACNTT5
TLSH
T16DF602ABD57C9C1ECE6F7375F06AF104199DF248154A7C016AAC0387BD8A9F01B66B8C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  dayflow-hrms/client/dist/assets/index-C5FyOnTR.js
- Size 269KB
- SHA256 6bb0de0d5cf9e93e9e1caa2876b9f90fd9d4687fbdcc96ac270ea35d2eb67a20
- MD5 2c41575d2b78eac1aa9f9651c1299d2e
- SHA1 c9aee127fe48589ad59484decf4eefbd523d8596
- SHA512 3300c138f33ffd186670823dff8e2f67d672d6b6fab0d49ef9f96ebf6be2d687b1d71b9a2e8c312de0abbb109b1bda889600ac742c2e53f9bf5a192f1897d8fc
- SSDEEP 6144:chJ3XWbkIfYjY+avTt9nz39azwRJwXK1sN/TynP:gAvTt9niwKX92
- TLSH
  T1B0444CB87165F6D6BF620AE5007F400A733E2D1A680D44F0A125FC6A277950A71BBFED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  dayflow-hrms/client/dist/favicon.svg
- Size 453B
- SHA256 03996e7073b1985ad04868b2192537ca7ae42c8eaabf5f83ac518aabdc831e57
- MD5 ccae4cf03e0e44ba7efeddb381877b6e
- SHA1 57071d1a33f6f7ef1fd97bd733181497df1c7aa2
- SHA512 7f1e2d6f40af1d20c3f9255b638d6aa1c5f7cb17a9ee4c4b724264661d96a7410e14e00841a296200cade00b8b40ae2b06c01581740ba3f16808002c402b6380
- TLSH
  T183F05C06D198861BC708C506D75164292B1C54D3D9C2C510B19D9F1B1F994D31D873BC
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral3 behavioral4
- Target
  dayflow-hrms/client/dist/index.html
- Size 683B
- SHA256 5f0984f0d09a9a31d624331d59d08b6179b1bdfdbfe905ab5ed948640fd544dc
- MD5 4349ad515d4ec78e2306d25dc83f4736
- SHA1 d3bde0fa2bef92418995467474e43d72790c7bef
- SHA512 501d9cfbaf28ed1d75ff1e38601d9b860b1835296b53fcecc084c3ddbddcf077ec05a22de93cff2a1971535335af38ae57bc08dde96cfe43755c4fb59c3113e2
- TLSH
  T15901238360E48405032042D66DC1F815ED43D28B4B8CBE4875FA407CCBD8BC28BEFAAC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  dayflow-hrms/client/index.html
- Size 585B
- SHA256 8ea9be4ec66b1663d8e4128f647096607bedd2e21f5d4de0236e935c74c25a46
- MD5 4a95feab814329f3094d37561ea1db28
- SHA1 b89f08a809e51a377c8466cec529cef7c75c953f
- SHA512 0a8d704bbb3d7004173705fa7fbca39de8b194348cc34e66e74f0bda1828937493ce52f2ddd560500bd791d8c87247f5618ae6c66d7c706c2cd07a5f859c71cf
- TLSH
  T1BDF0E1D390A4C405121085A56D91B5099D46C09B5BC87D4879D94075CB95AC08BD7B88
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  dayflow-hrms/client/node_modules/.bin/baseline-browser-mapping
- Size 834B
- SHA256 76718e7c5bf14d479a53b33e96925f655e908e35291ab4ed60e709c46e1ec4a6
- MD5 974f0dddb07b5573f1742f587abd318f
- SHA1 cbaf91ac41cc1485a9dc09e5528d425c3e9abf7e
- SHA512 d06ea6f035b74fe2be253f6807bec92b126d0a011e0e7c41e8bfb110d420b09bec20b243e8d91f6e2b4b48527939ad6343ffef6db30ba57e628b1591af1f262b
- TLSH
  T14A014C23A1A44B30280C02E80D451026755973937CB92B5AF88D7B082F9835CF1D2B8F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral10 behavioral11 behavioral12 behavioral9
- Target
  dayflow-hrms/client/node_modules/.bin/baseline-browser-mapping.cmd
- Size 341B
- SHA256 11d30dbb85fe64099a02153c2a56e0128de678125a92f00d4175497b8e735c71
- MD5 cd705dc1f50d9c9a948c427f453c7cc4
- SHA1 3cf29b65025cdfc8d0bc1ce42f3af6e04d57d171
- SHA512 a95508a0b5364e82d81d9ac09d6cd877640d32225ed3a41b6694d05ede28c36ecf4a45c26ffba378ce5209eb4adaa1029eb64f45b7cc579e2539d176e058b20e
- TLSH
  T112E0C636F1203102393A9BB060432A422AE3B65A500302B5BC3808EBAB003405BCF8AE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery execution
behavioral13 behavioral14
- Target
  dayflow-hrms/client/node_modules/.bin/baseline-browser-mapping.ps1
- Size 873B
- SHA256 c329cbf021bcef4808042139875afd4946833e2564a0e92ed8950bd4f7442ed3
- MD5 2c070a4c0c561e03344cb884e75af46f
- SHA1 739fcf89ae3fc7afee4e2a8e102f2fd599a46b8c
- SHA512 8fe4c8ee4e8b4b33424e2902814c51729542dcb9ea3cb7146e52be6f53e1aeddbf4246f0d14422123c2cce19233012db1b097f288310e040ff06ad693c94aebf
- TLSH
  T1EF118C28BAB07B6AC60A9FE223A51E166255C55B24545E15EC0C3F825D7021C23FB776
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral15 behavioral16 behavioral17 behavioral18
- Target
  dayflow-hrms/client/node_modules/.bin/browserslist
- Size 816B
- SHA256 e407b1254f96d2de19774b6d4761aa747f8b725360597a8c396f564152d61871
- MD5 8a2872bc9d5e4a92ae307dedbecfaa87
- SHA1 bc553a7c919ed64b1825a1c49f81f86f4b2000c5
- SHA512 fa0273319c07ca0b6b693540f2a549f2ff6783672b3052daf7fde66f0a1c46648abbcbc0edc08c37a7f789cd2fc2c89be84442c024d5cbeed9e7ac5753819769
- TLSH
  T179016B37A0A44B70280C02E80D451026765973937CBD2BAAF88D7B082F9875CF1D2B8F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral19 behavioral20 behavioral21 behavioral22
- Target
  dayflow-hrms/client/node_modules/.bin/browserslist.cmd
- Size 323B
- SHA256 bf1c15a36085a0c506d5dc0928bbdeed5114bbd60c14e83c84f2a03acc1aa5ab
- MD5 977d39f6c72318bf7ebc6dd7e6af29c3
- SHA1 2b9eec0fc012cb3e56a7e907399de52ae26d969e
- SHA512 7ed1202e3066c0c71601c4d8bf4267e83bd41fd5dadbbace8876a00e33126a35211aacc23252390b7342636adedbc6de5c7be653314b7a8fa0ba4bef7d0e0ecf
- TLSH
  T111E07D7AF004344A35379BB19413274276E3B755914301B5B83844FBAB417455BCF5ED
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  dayflow-hrms/client/node_modules/.bin/browserslist.ps1
- Size 801B
- SHA256 29aadbfb1ce80642e7c4d82a68013b8e22298eabb2b780fcda40e960fd9fe114
- MD5 d52e6901815f55dcf787321773b39636
- SHA1 103f41bea7148fa6ce757500e4149320b2e0eddc
- SHA512 06def432bd292cd487ac9278b22203d1aa877f5273a0e404e5efbe831ead466394e447b429573107e2ef92b45f2a68a9122564aa40b28d4381f26b933a58bf7d
- TLSH
  T1A401482878B43AABD2469BD317751E00A355D56B15440E25E4083B8247A062C23EB775
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral25 behavioral26 behavioral27 behavioral28
- Target
  dayflow-hrms/client/node_modules/.bin/esbuild
- Size 816B
- SHA256 a68f48af05fe83fe687a76d26cfd697876caa2ae30035e963d8f28ab1b6dfe8a
- MD5 97ff66b8338cca1ed757c1df2e4aa7da
- SHA1 922cbd6a227d5980a90e4f92f763a33a4268031c
- SHA512 cb16203b2e54eea2d0d3b17acd59050a263b5da4f452eb929da54acc6cd85c116e1883c08654d8b3c73d08314c3093e2a4db9411754379e581564279a69d82e4
- TLSH
  T107014C33A0944B30341C02E80D451026755973937CB9279AF88D7B082B9435CB1D2B8F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral29 behavioral30 behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32