Overview

overview

7

Static

static

1

rosearch-chrome.rar

windows7-x64

3

rosearch-chrome.rar

windows10-2004-x64

3

rosearch-c...on.png

windows7-x64

3

rosearch-c...on.png

windows10-2004-x64

3

rosearch-c...t.json

windows7-x64

3

rosearch-c...t.json

windows10-2004-x64

3

rosearch-c...gin.js

windows7-x64

3

rosearch-c...gin.js

windows10-2004-x64

3

rosearch-c...es.css

windows7-x64

3

rosearch-c...es.css

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    rosearch-chrome.rar

  • Size

    8KB

  • Sample

    240912-lcztha1bjm

  • MD5

    add095c6e7d1d807288dac06fbee2ee2

  • SHA1

    90acae65c9b04dc8fb6f78b565e2f8a048ff3de1

  • SHA256

    07889c104eecd5296bfee588ec12a177ea8c5a7b57c87360386fe97cd088c288

  • SHA512

    9b860052371a1f3d12dc4492a78d9137ae96b874d3ff3b534c73c1986a4371fba1f473468431c9ae8e14542c1f109c044af80552a69f682453731a1a4245039c

  • SSDEEP

    192:UAlNBxBwGxjztxD/0QKPd1OZPbACsPMFyvhCpmH:bnBAGlztx7JKj6c3UcCpG

Score
7/10
discoveryexecution

Malware Config

Targets

    • Target

      rosearch-chrome.rar

    • Size

      8KB

    • MD5

      add095c6e7d1d807288dac06fbee2ee2

    • SHA1

      90acae65c9b04dc8fb6f78b565e2f8a048ff3de1

    • SHA256

      07889c104eecd5296bfee588ec12a177ea8c5a7b57c87360386fe97cd088c288

    • SHA512

      9b860052371a1f3d12dc4492a78d9137ae96b874d3ff3b534c73c1986a4371fba1f473468431c9ae8e14542c1f109c044af80552a69f682453731a1a4245039c

    • SSDEEP

      192:UAlNBxBwGxjztxD/0QKPd1OZPbACsPMFyvhCpmH:bnBAGlztx7JKj6c3UcCpG

    Score
    3/10
    behavioral1behavioral2

    • Target

      rosearch-chrome/icon.png

    • Size

      4KB

    • MD5

      a8984b5f08fb03eedd70f84c5c754ae6

    • SHA1

      c6e7159533c89882090892ced9a1ee754c3f567b

    • SHA256

      fa2c8060014cfddf3ecee1f12f9daa06246d213ddaa66a8a9effe7eb88f08f0e

    • SHA512

      5356c8ebeae99201abb1de713b64f1f3401973074c4aeb03b2faf0b60f79e909b1fea36014047948ba6bdb1b8ad0615ca4a92cc44bdc10618a1fbd6610373085

    • SSDEEP

      96:fB+BEq08BxCO3Agjxjo5qtHRC8/p0Atym/cIkr1QKbrdLZOZP:fAlNBxBwGxjztxD/0QKPd1OZP

    Score
    3/10
    behavioral3behavioral4

    • Target

      rosearch-chrome/manifest.json

    • Size

      416B

    • MD5

      b3e9678189250aeb163e5aa5e5ab0167

    • SHA1

      4f4e814a398534223c68ddafe32c610dd68a2415

    • SHA256

      09bcdc4d7a505c02d42efb28274ae38925204cb00f97ab0564f766f24236e6e0

    • SHA512

      d4a66e9610ee423e42f762413f906abec35548725dafe20e5a6939f3a549475a8ece53a4ecc25017ed04c29dc20dac4861608944fc41b0d5468f090cf6e9b5ea

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      rosearch-chrome/plugin.js

    • Size

      12KB

    • MD5

      246dc534437e126338fb15533f80ae54

    • SHA1

      751d4a68a43dc3fd4fe522fde2639f6da242f23f

    • SHA256

      ad5cfc5f7a3616af720b29f4e02581c9c405c743add9b8391be5e398aeecda36

    • SHA512

      eee6e376c99a869f53d785a533c06c052703bbc2be296d70ef4a7ec57ed2b6098664969b6d133a7419d9555f1834230bc113ec8f0a3a9f7f5bcffc0b00b911f6

    • SSDEEP

      384:lOnx05aJlodt0cCyCEujoCdsBwpnJo1kXaA54:lOnRlat0ECEujDMwo1kXaY4

    Score
    3/10
    execution
    behavioral7behavioral8

    • Target

      rosearch-chrome/styles.css

    • Size

      296B

    • MD5

      b15ff2bdb14c32e7ae73f0ad54f2002d

    • SHA1

      a25c63ffca6a28d0f85d0dca7992b4420fd44538

    • SHA256

      aeab50c00eddde057cbf787493610cf53d85230be9546170ae6f082455ba3d5e

    • SHA512

      f3fd6daf7d68bc9318033d104e121c57178dd79cdadbb28d76ac7b3e2200607337f03734d50e62c90bdaafc4de4a3e026e4dddaebfe5f962871994252055d4f3

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral10behavioral9

MITRE ATT&CK Enterprise v15

Tasks