Overview

overview

3

Static

static

1

0.57.44.24...dc.zip

windows10-1703-x64

1

_metadata/...s.json

windows10-1703-x64

3

_platform_...l_json

windows10-1703-x64

1

_platform_...r_eh_o

windows10-1703-x64

1

_platform_...egin_o

windows10-1703-x64

1

_platform_...tend_o

windows10-1703-x64

1

_platform_...d_nexe

windows10-1703-x64

1

_platform_...form_a

windows10-1703-x64

1

_platform_...bgcc_a

windows10-1703-x64

1

_platform_...shim_a

windows10-1703-x64

1

_platform_...ummy_a

windows10-1703-x64

1

_platform_...c_nexe

windows10-1703-x64

1

_platform_...z_nexe

windows10-1703-x64

1

manifest.json

windows10-1703-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0.57.44.2492_hnimpnehoodheedghdeeijklkeaacbdc.crx

  • Size

    6.4MB

  • Sample

    230724-rqr9gaef2v

  • MD5

    b92bbcfd3c31f799c5863d78154db555

  • SHA1

    86b1b058e1e7d2f1f35e830db446b59e15670e5e

  • SHA256

    6f6bc93dcd62dc251850d2ff458fda96083ceb7fbe8eeb11248b8485ef2aea23

  • SHA512

    38be0c179619c045a321d1fa2c67dda8419a33075a87f548feed9a858f5ba19b5b980c53d4a3bb5b745c7ce566b53773785aa1f7677e37dd5793ccae76e83787

  • SSDEEP

    196608:t9+jC/EDtY24xYzXBXqn+uPo7NKP0XSGagLKhzi0:tkjCQm1xOXBGSK8iGaOKhz3

Score
3/10

Malware Config

Targets

    • Target

      0.57.44.2492_hnimpnehoodheedghdeeijklkeaacbdc.crx

    • Size

      6.4MB

    • MD5

      b92bbcfd3c31f799c5863d78154db555

    • SHA1

      86b1b058e1e7d2f1f35e830db446b59e15670e5e

    • SHA256

      6f6bc93dcd62dc251850d2ff458fda96083ceb7fbe8eeb11248b8485ef2aea23

    • SHA512

      38be0c179619c045a321d1fa2c67dda8419a33075a87f548feed9a858f5ba19b5b980c53d4a3bb5b745c7ce566b53773785aa1f7677e37dd5793ccae76e83787

    • SSDEEP

      196608:t9+jC/EDtY24xYzXBXqn+uPo7NKP0XSGagLKhzi0:tkjCQm1xOXBGSK8iGaOKhz3

    Score
    1/10
    behavioral1

    • Target

      _metadata/verified_contents.json

    • Size

      2KB

    • MD5

      8b6c3e16dfbf5fd1c9ac2267801db38e

    • SHA1

      f5cadc5914df858c96c189b092bc89c29407bbaa

    • SHA256

      fd986a547d9585e98f451b87ca85deb4b61ee540c6fac678d7bedabf04653095

    • SHA512

      37048ef8fadf62a26caec6ee90ac192429ab1e99424e5c68faca90c0dad68642c761fdcac03fc38fa930841f91fa145a6943ec7f168d4f2fa426f1f092c2f502

    Score
    3/10
    behavioral2

    • Target

      _platform_specific/x86_64/pnacl_public_pnacl_json

    • Size

      507B

    • MD5

      35d5f285f255682477f4c50e93299146

    • SHA1

      fb58813c4d785412f05962cd379434669de79c2b

    • SHA256

      5424c7b084ec4c8ba0a9c69683e5ee88c325ba28564112cc941cd22e392d8433

    • SHA512

      59df2d5f2684facc80c72f9c4b7e280f705776076c9d843534f772d5a3d578bee04289aee81320f23fb4d743f3969edf5ba53febbac8a4d27f3bc53bcf271c3e

    Score
    1/10
    behavioral3

    • Target

      _platform_specific/x86_64/pnacl_public_x86_64_crtbegin_for_eh_o

    • Size

      2KB

    • MD5

      604ff8f351a88e7a1dbd7c836378ae86

    • SHA1

      9d8d89ae9f13d6306e619a4eaad51ede91a5f9f3

    • SHA256

      947e64be43e821562ce894f1afcc3d09cd7ff614c107fc94250cd3ea5c943302

    • SHA512

      85b1eda4c473e00034ee627b7abb894a77e521bc6a91a91a4a3744ca7511cb0af10b9723d9ecc2ce3378dd70b659df842d8c11875958cb77070cf01ec0a15840

    Score
    1/10
    behavioral4

    • Target

      _platform_specific/x86_64/pnacl_public_x86_64_crtbegin_o

    • Size

      2KB

    • MD5

      88c08cd63de9ea244f70bfc53bbcadf6

    • SHA1

      8f38a113a66b18baa02e2c995099cf1145a29daa

    • SHA256

      127f903cc986466aa5a13c17dfdd37ac99762f81a794180339069f48986bc7a3

    • SHA512

      78d2500493a65a23d101ec2420dc5f0ce8c75efac425c28547121643e4fb568e9d827ef2c0f7068159e043c86b986f29bf92c6badc675f160b63c7b3512eb95f

    Score
    1/10
    behavioral5

    • Target

      _platform_specific/x86_64/pnacl_public_x86_64_crtend_o

    • Size

      1KB

    • MD5

      75e79f5db777862140b04cc6861c84a7

    • SHA1

      4db7bdc80206765461ac68cec03ce28689bbee0c

    • SHA256

      74e8885b87ed185e6811c23942fd9bd1fbac9115768849af95a9decf6644b2ea

    • SHA512

      fe3f86e926759e71494f2060c4ed3c883ebcaf20cb129a5ad7f142766c33fab10b5fabc3c7c938e0e895e27ea0ac03cbfe8d0eeabf5300a4ad07f67fd96cc253

    Score
    1/10
    behavioral6

    • Target

      _platform_specific/x86_64/pnacl_public_x86_64_ld_nexe

    • Size

      2.1MB

    • MD5

      0bb967d2e99be65c05a646bc67734833

    • SHA1

      220a41a326f85081a74c4bb7c5f4e115d1b4b960

    • SHA256

      c6c2d0c2fc3e38a9bfa19c78066439c2f745393f1fd1c49c3c6777f697222c76

    • SHA512

      8ef8689e00e4b210a30444d18ed6247f364995abeb2fd272064c3af671eedb4d9b8b67ca56f72febf8f56896d4ea7ec4b10cb445ffa1c710c1f312e9da0e4896

    • SSDEEP

      24576:HPHonIwYZJ0ykwVO7Owf31yJKzCtxO8RSV4lY+PbeHVxCtjFV4lBNeSAmfGqa+A7:HvSMRwf3SKmlY+PyPvnM2Gq+

    Score
    1/10
    behavioral7

    • Target

      _platform_specific/x86_64/pnacl_public_x86_64_libcrt_platform_a

    • Size

      39KB

    • MD5

      0ce951b216fcf76f754c9a845700f042

    • SHA1

      6f99a259c0c8dad5ad29ee983d35b6a0835d8555

    • SHA256

      7a1852ea4bb14a2a623521fa53f41f02f8ba3052046cf1aa0903cfad0d1e1a7b

    • SHA512

      7c2f9bf90eb1f43c17b4e14a077759fa9dc62a7239890975b2d6fd543b31289dc3b49ae456ca73b98de9ac372034f340c708d23d9d3aab05ccbdabdc56a6314e

    • SSDEEP

      768:xlP+1fzyUNVU5LmKxeOnjpD5eA/eUnUUxvT:xlP+1ryYMTekpD5eAWjuvT

    Score
    1/10
    behavioral8

    • Target

      _platform_specific/x86_64/pnacl_public_x86_64_libgcc_a

    • Size

      129KB

    • MD5

      c37ca2eb468e6f05a4e37df6e6020d0f

    • SHA1

      ea787e5eadfb488632ec60d8b80b555796fa9fe9

    • SHA256

      c1483ed423fee15d86e8b5d698b2cdab89186ce7ff9c4e3d5f3f961fd80d7c6e

    • SHA512

      01281de92b281fb29e1aca96aa64b740b65cc3a9097307827f0d8db9e1c164c56afcdfa0bf138ea670a596d55ce2c8d722760744e9fc9343bb6514417bf333ba

    • SSDEEP

      384:Hf0mOXYmeKzQUIdedRFvT5p1Ee2HyAlL3O4:Hf7OXdmWRJT5p1R2HyAhO4

    Score
    1/10
    behavioral9

    • Target

      _platform_specific/x86_64/pnacl_public_x86_64_libpnacl_irt_shim_a

    • Size

      13KB

    • MD5

      4e8beda73eb7bd99528bf62b7835a3fa

    • SHA1

      dc0f263a7b2a649d11ff7b56fe9cfac44f946036

    • SHA256

      6b835fd48df505eb336ff6518ce7b93bb0ed854dadaa5c1eeed48d420291f62c

    • SHA512

      46116b8babc719676d68fd40d2ac82f38a3d13d8a482adfc6fc32a99170ac3420e52cc33242ccd0fa723abf4fa5edbb9ce16a09c729bf04ae4afbb2f67a1e38b

    • SSDEEP

      192:uU9v4pXizdrEuxwk3vp20tprpdSGFwDqO:P9v4palvvc0tpFdSGFwmO

    Score
    1/10
    behavioral10

    • Target

      _platform_specific/x86_64/pnacl_public_x86_64_libpnacl_irt_shim_dummy_a

    • Size

      2KB

    • MD5

      f950f89d06c45e63ce9862be59e937c9

    • SHA1

      9cfad34139cc428ce0c07a869c15b71a9632365d

    • SHA256

      945b1c8a1666cbf05e8b8941b70d9d044baafb59b006f728f8995072de7c4c40

    • SHA512

      f9afbb800a875edcc63dea4986179e73632b3182951a99c8b3d37db454efd7cc7192eca5ac87514918a858bad6daeab59548ca2e90eada9900ef5b9f08e62cfc

    Score
    1/10
    behavioral11

    • Target

      _platform_specific/x86_64/pnacl_public_x86_64_pnacl_llc_nexe

    • Size

      13.4MB

    • MD5

      9b159191c29e766ebbf799fa951c581b

    • SHA1

      d1d4bbc63ab5fc1e4a54eb7b82095a6f2ce535ee

    • SHA256

      2f4a3a0730142c5ee4fa2c05d27a5defc18886a382d45f5db254b61b28ed642b

    • SHA512

      0b4ff60b5428f81b8b1bcf3328cf80cbd88d8ce5e8bdbc236b06d5a54e7cf26168a3abb348d87423da613ab3f0b4d9b37cb5180804839f1ca158ec2b315ddf00

    • SSDEEP

      196608:tKVqXp3Qev4dg6ilfHM8KLM2J3jqjnkZ:uqufB

    Score
    1/10
    behavioral12

    • Target

      _platform_specific/x86_64/pnacl_public_x86_64_pnacl_sz_nexe

    • Size

      1.8MB

    • MD5

      9dc3172630e525854b232ff71499d77c

    • SHA1

      0082c58edce3769e90db48e7c26090ce706ad434

    • SHA256

      6aa1da6c264e0af4e32a004f4076c7557c6ac6d9c38b0c5de97302d83fa248c3

    • SHA512

      9e9584241a39eed1463d7d4c1b26ae570b839aa315778ff3400c61341eba43b630307de9f1532a265ca82ea69bdea03ec9d963e59a18569c02da8285449870fe

    • SSDEEP

      12288:gXqUSpBjwQO2o8k+7zjidg4euCAauOILffvCpGy4Wh3BTFmHpq82K2/KsvPyla9d:gafZwcOdNe2auOepCBTFmJq3Kf8ksr

    Score
    1/10
    behavioral13

    • Target

      manifest.json

    • Size

      573B

    • MD5

      1863b86d0863199afda179482032945f

    • SHA1

      36f56692e12f2a1efca7736c236a8d776b627a86

    • SHA256

      f14e451ce2314d29087b8ad0309a1c8b8e81d847175ef46271e0eb49b4f84dc5

    • SHA512

      836556f3d978a89d3fc1f07fced2732a17e314ed6a021737f087e32a69bfa46fd706ebbdfd3607ff42edcb75dc463c29b9d9d2f122504f567bb95844f579831b

    Score
    3/10
    behavioral14

MITRE ATT&CK Matrix ATT&CK v13

Tasks