71e581173b222d5099c9eaff2eef5ff2099febf32a95ea8eb37dc225af60bab3

Sharing

Copy URL Twitter E-mail

General

Target
serail_tools_backen.7z
Size 5.4MB
Sample261113-eggedsft6v
SHA256 71e581173b222d5099c9eaff2eef5ff2099febf32a95ea8eb37dc225af60bab3
MD5 ad41e7727f1020ec58ca69054e60b658
SHA1 78ee2065cdbadfa5f67434c83b6609e35055c0ac
SHA512 72f647b67d358a49e53258f6e31fcad75d3823ae6f023e893aa54faa22594bb5c5b8d6f668a4c130d2761b1af54939bfe6cf8783f5822082540aee3a0d8d2421
SSDEEP 98304:7/PSN2p4u1KCqYoj00tvy2vQpY9GrpHdgA3WYiyWrNRgw4nCvCKvhvLNi9KOM:zW2nhqY40vgfsRaAv1WrNOfCvCKFL49G
TLSH
T1764633F867491B35FB462CFEBD67ADB021F3D115A1A7E286B0F118831A5F0C8B41929D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  asset/index.html
- Size 2KB
- SHA256 20d71a51cc45cb4854f9eba50fcee7614cb66bd58349b26d2e6d9590d1e8231b
- MD5 2b75da9e4b0b914d15b7b46210c28c2f
- SHA1 b85197a835545fbdfb7e81c22643f8b3b718aedf
- SHA512 0cf1a9c2b8abc384a2eafb78e86acb35b760133b367d5e7a93f4902e2bf0ee1f8a4f68c77c584aa0fde5632fcb8834d825c956952ccb9b030bcfdba3134fc572
- TLSH
  T1D541A6D67D80F8CC432559AE0C3B701DF16D3D285574F8C0A385C8F66CA4A9E8566E76
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  asset/logo.svg
- Size 10KB
- SHA256 4a81b169ed99ff8ef074f2f4a556e3c0e4c915fbebc98fae8ffc819e4ba7674c
- MD5 c550ac8e3d3d8bbdde7b41c7869222cc
- SHA1 d28f82892dcb4aac291198b0bcfa927223771b1b
- SHA512 4a28cd0737d4a9f3a68b1f0490c801961fb033a7323ca206cc0036e2624939e6ffa0384877efa30127b033e81547a4c13ddb817715972a1637fc9a77b8acad85
- SSDEEP 192:e+NX+R+nq+37+v+Y+6+S+0qP+z2idf7CJPpW1aiPu1JqxjiX87b7fgDgvjc4TGui:e+p+R+q+37+v+Y+6+S+l+z2lxfdqZ5pO
- TLSH
  T1F12230B683409BF59DC0831483E5786D31FA99A1B0B882EC9BAB5146DCACCF750BC5D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral3 behavioral4
- Target
  asset/precache-manifest.256b4a2fe0263c92b561b663ccd583c2.js
- Size 657B
- SHA256 c1388fadc6592f9585d1d952e049f7e96fe2c7e06f8aedf62e75aa5e8427251b
- MD5 256b4a2fe0263c92b561b663ccd583c2
- SHA1 a09eda1f9983874c9d7eeaf17e2d0f0181602dc5
- SHA512 6aa02d838b091349050dc4d9bfb2f95073403ca6efe54b70199b94d696ba00ca504500409ca3a736810fab91f0679f9e715360686eb9e45e36b11fa6cab42e00
- TLSH
  T131012BA0CCB8EE33986E48F9842E0420F07C71471525B811B69C36EC5E4F23C4E35B49
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  index.html
- Size 1KB
- SHA256 12a1b162e333264616245d82eae52fd038e32fad9bbc367c01e1660f91ba8c05
- MD5 0e9b00e6aae584857704c6e01fa51556
- SHA1 95d572715550481f4c047e08d43ec9d5f2aa0240
- SHA512 2dcd88156888a72a238c8950b9549587e92d774d9f5371062bc4e59d4c071ff6c11c786068ea06506db3933f17249f1c6c07fb46745ea35f572d239668665b46
- TLSH
  T131313026688062610731402578FBD1ABD765818F9B0DA44178ED315FAFF2F224EB74F7
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  logo.svg
- Size 10KB
- SHA256 4a81b169ed99ff8ef074f2f4a556e3c0e4c915fbebc98fae8ffc819e4ba7674c
- MD5 c550ac8e3d3d8bbdde7b41c7869222cc
- SHA1 d28f82892dcb4aac291198b0bcfa927223771b1b
- SHA512 4a28cd0737d4a9f3a68b1f0490c801961fb033a7323ca206cc0036e2624939e6ffa0384877efa30127b033e81547a4c13ddb817715972a1637fc9a77b8acad85
- SSDEEP 192:e+NX+R+nq+37+v+Y+6+S+0qP+z2idf7CJPpW1aiPu1JqxjiX87b7fgDgvjc4TGui:e+p+R+q+37+v+Y+6+S+l+z2lxfdqZ5pO
- TLSH
  T1F12230B683409BF59DC0831483E5786D31FA99A1B0B882EC9BAB5146DCACCF750BC5D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral10 behavioral9
- Target
  asset/service-worker.js
- Size 1KB
- SHA256 631c508fa522fa670ccad3dcfa1016fab90e36d1fe24d52394aaf1be2fecfc4c
- MD5 02328abb5f871a8e828261e995017278
- SHA1 0c584d52af11dada5f06ff131f4964dd254fa739
- SHA512 19d6ff83de51ea9dd554c89a852b0ad94e06c5d7d30efa359a025fdbf134de4c1fa3c22057134e64f728563ab4f01baf0b7cf0650e3c8521fb9ecbc151719c1e
- TLSH
  T13F2124F31964153B4A560595C70F116BBA258608276A300294F626AA3FD46290078F94
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  asset/static/js/2.b1f31153.chunk.js
- Size 1.1MB
- SHA256 867bfe599f0b6fdcbec99cca7dfa35631a143585c06c73352162cde862eefa6b
- MD5 12c67c41301381618b80796f5fad8e8a
- SHA1 4211bd9b8ec108f9c6d1dcce4bf50cd6b3248b8e
- SHA512 3329db27c4ee6ac44915124af3b355969a0e085ef621e6c2e36e57303a68bceaa10986ee8023118310531e419bb3599d9c8b730207712293d3cac7ae0b1c9ea1
- SSDEEP 12288:xQ36HlMO8Z/0T20W7rtyGEamsxbZ9+CpsoqXgib1tiM0sQ1wFvu6a:x06Hl0CT20W7rtdEOsQ18y
- TLSH
  T1234518B47251B0A293A763E1407F140EB23AAA1D780D4468B751E8F97C7D9CB5237F3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  asset/static/js/main.702d74c6.chunk.js
- Size 74KB
- SHA256 0737462ebc306c0a06e16f07917a8fb233a4e31b8d445daa295df963ebd60125
- MD5 2758105aed79a7471bfd473ccee1ee95
- SHA1 caaa40e160157bf1ddb5fb476568a45a56781ab9
- SHA512 ece458b0d760a1db28282c5853b18b69310e23992e5853677e6229b6d7f695b1db7786e67f15bf8a000b1b7a127d775e2de580c59526092b9f1fd1df051f0cab
- SSDEEP 768:nPUcxuewDszdLD3voi8F8/prQbFyF4FjLRq0jFDNo+jkv6pbI/0T2ID:PUcx7f9D3j8FV/AcNVkv6Y0T20
- TLSH
  T13F73D59D3A82A05444FB56E68C7F561EE3793B109075D174A0FACCCD3B653EDA233A28
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  asset/static/js/runtime-main.c8a21426.js
- Size 1KB
- SHA256 b13a85a9544143bfc96bed1f8e2a7683fd1b6f5620fd4029b8743008fe417a9f
- MD5 77df9e7334e219074690addc28b03498
- SHA1 3e94c3c2deda8ca646775401e94f8ca3eb10cad7
- SHA512 7da5be1754538dcfb5ffa3e8acd88179cdf7466a4c267942ebc264e32399f047d799820e974371d288827c63dac5e396dd3a3e2cebb31e7cb62fea8ada5ace75
- TLSH
  T1A03133E936E0F89C435B585D082F204AF2696D7511B8F1C1D388D8F27C6884E916AEBA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  asset/static/js/runtime-main.c8a21426.js.map
- Size 8KB
- SHA256 2fd4a984643202acaf0146e5710c763b3aca86f11f705efe2773f4e1dab38a13
- MD5 6a20da7e8ae5b2b1ccacbf52c6fbf9d9
- SHA1 99cc05b819ed6000e4a0f11dc9fe29aea5467bc1
- SHA512 a3ed21d753d59437a4cdbdad49b4e92d3a5e3d3031e4fa898c4fb453967679d5120db83cd171ebe1d1154a85f09bde3a0c6bc7f5b0ddf15896b181c06fff4b79
- SSDEEP 192:fWhBqmjP28tfU1SVoUprvSw0EvEuLgnfXXL1R+h4WgP3kj:fWSqeaU1SnJvSw0y9AX7hNPu
- TLSH
  T1560232A63577F8B342AA2FEAF11A14A9F88DC0553D7032A5559C88E800F4D10FEEC967
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  main.exe
- Size 9.7MB
- SHA256 96d2bdd2688e4e3ba47993ea9e49e67cbfee76eaa089c46ce8d84062a08c8686
- MD5 9c6a1c2d6def5f5be6b2c6d087297376
- SHA1 03bec6206a90c10dedcbdd39104ba47955ad351c
- SHA512 ebb385465c21c09911d88590ebaafd2c6f82386420644dd2dbc8654b1176e9b71ac1377b3f966ce452b1bd7b533753e7b9a0fb94d1c98bfd195603f5d266a166
- SSDEEP 196608:2YETB9HSWl9pJK4z8g7k0THJprCunSqiNydqN:QHHVLk6jeuL
- TLSH
  T1A3A67E47F8A614F5CAFEE23082A193217A7178A543307BE35F9486BB1626FD47A3D350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22