Overview
overview
3Static
static
1background/index.html
windows7-x64
3background/index.html
windows10-2004-x64
3background/index.js
windows7-x64
3background/index.js
windows10-2004-x64
3inject/fallback.js
windows7-x64
3inject/fallback.js
windows10-2004-x64
3inject/index.js
windows7-x64
3inject/index.js
windows10-2004-x64
3ui/devtool...x.html
windows7-x64
3ui/devtool...x.html
windows10-2004-x64
3ui/devtools/index.js
windows7-x64
3ui/devtools/index.js
windows10-2004-x64
3ui/options/index.html
windows7-x64
3ui/options/index.html
windows10-2004-x64
3ui/options/index.js
windows7-x64
3ui/options/index.js
windows10-2004-x64
3ui/popup/index.html
windows7-x64
3ui/popup/index.html
windows10-2004-x64
3ui/popup/index.js
windows7-x64
3ui/popup/index.js
windows10-2004-x64
3ui/stylesh...x.html
windows7-x64
3ui/stylesh...x.html
windows10-2004-x64
3ui/stylesh...dex.js
windows7-x64
3ui/stylesh...dex.js
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
background/index.html
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
background/index.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
background/index.js
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
background/index.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
inject/fallback.js
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
inject/fallback.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
inject/index.js
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
inject/index.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
ui/devtools/index.html
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
ui/devtools/index.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
ui/devtools/index.js
Resource
win7-20240705-en
Behavioral task
behavioral12
Sample
ui/devtools/index.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
ui/options/index.html
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
ui/options/index.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
ui/options/index.js
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
ui/options/index.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
ui/popup/index.html
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
ui/popup/index.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
ui/popup/index.js
Resource
win7-20240705-en
Behavioral task
behavioral20
Sample
ui/popup/index.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
ui/stylesheet-editor/index.html
Resource
win7-20240704-en
Behavioral task
behavioral22
Sample
ui/stylesheet-editor/index.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
ui/stylesheet-editor/index.js
Resource
win7-20240705-en
Behavioral task
behavioral24
Sample
ui/stylesheet-editor/index.js
Resource
win10v2004-20240802-en
General
-
Target
darkreader-firefox.xpi
-
Size
722KB
-
MD5
cdb9228e70f7c9ef0f242dd1c82c71d4
-
SHA1
603d13618ad9b808a0c578b683ce0298d5f89f9f
-
SHA256
1d6965c6b92f1e5832ff6a1f14f7d73fbca4cad94cdf26ff4ada8a1da5a31d02
-
SHA512
766e75e27df7796f3af072cc73f56cd14073bc6ecd2d828ab7d91c0b25199fa1b1ba36f3f9ee6ec6271cebb257014285c8341fcb0852f71a19ebf4a95c23b20e
-
SSDEEP
12288:+XTP0noUc4zwn7lx4z4gsOWK0sGz4I+XHZo4BNqR3fWJavcVMR1QimGYUpaE8T2y:+XTEoD4MRA4g/0sGzs6aQfcavcKRSXSy
Malware Config
Signatures
Files
-
darkreader-firefox.xpi.zip
Password: infected
-
_locales/ar/messages.json
-
_locales/be/messages.json
-
_locales/bg/messages.json
-
_locales/bn/messages.json
-
_locales/cs/messages.json
-
_locales/da_DK/messages.json
-
_locales/de/messages.json
-
_locales/el/messages.json
-
_locales/en/messages.json
-
_locales/en_GB/messages.json
-
_locales/en_US/messages.json
-
_locales/es/messages.json
-
_locales/es_419/messages.json
-
_locales/fa/messages.json
-
_locales/fa_IR/messages.json
-
_locales/fil/messages.json
-
_locales/fr/messages.json
-
_locales/he/messages.json
-
_locales/hi/messages.json
-
_locales/id/messages.json
-
_locales/it/messages.json
-
_locales/ja/messages.json
-
_locales/ko/messages.json
-
_locales/ms/messages.json
-
_locales/nl/messages.json
-
_locales/no/messages.json
-
_locales/pl/messages.json
-
_locales/pt_BR/messages.json
-
_locales/pt_PT/messages.json
-
_locales/ro/messages.json
-
_locales/ru/messages.json
-
_locales/si/messages.json
-
_locales/sk/messages.json
-
_locales/sr/messages.json
-
_locales/sv/messages.json
-
_locales/te/messages.json
-
_locales/th/messages.json
-
_locales/tr/messages.json
-
_locales/uk/messages.json
-
_locales/vi/messages.json
-
_locales/zh_CN/messages.json
-
_locales/zh_TW/messages.json
-
background/index.html.html
-
background/index.js.js
-
config/color-schemes.drconf
-
config/dark-sites.config
-
config/detector-hints.config
-
config/dynamic-theme-fixes.config
-
config/inversion-fixes.config
-
config/static-themes.config
-
icons/dr_128.png.png
Password: infected
-
icons/dr_16.png.png
Password: infected
-
icons/dr_48.png.png
Password: infected
-
icons/dr_active_19.png.png
Password: infected
-
icons/dr_active_38.png.png
Password: infected
-
icons/dr_inactive_19.png.png
Password: infected
-
icons/dr_inactive_38.png.png
Password: infected
-
inject/fallback.js.js
-
inject/index.js.js
-
manifest.json
-
ui/assets/fonts/LICENSE.txt
-
ui/assets/fonts/OpenSans-Light.ttf
-
ui/assets/fonts/OpenSans-Regular.ttf
-
ui/assets/fonts/OpenSans-SemiBold.ttf
-
ui/assets/images/birthday-icon.svg
-
ui/assets/images/darkreader-icon-256x256.png.png
Password: infected
-
ui/assets/images/darkreader-type.svg
-
ui/assets/images/mobile-icon-40x64.svg
-
ui/assets/images/mode-dark-32.svg
-
ui/assets/images/mode-light-32.svg
-
ui/devtools/index.html.html
-
ui/devtools/index.js.js
-
ui/devtools/style.css
-
ui/options/index.html.html
-
ui/options/index.js.js
-
ui/options/style.css
-
ui/popup/index.html.html
-
ui/popup/index.js.js
-
ui/popup/style.css
-
ui/stylesheet-editor/index.html.html
-
ui/stylesheet-editor/index.js.js
-
ui/stylesheet-editor/style.css