83c987bea59dfdae378894cf6b050b3e776e0b9e3f01f6331bb374919ac84f82

Sharing

Copy URL Twitter E-mail

General

Target

Unconfirmed 4028.crdownload
Size

3.4MB
Sample

241012-wd8g5sshlg
MD5

30ab199c4839b6ff124ba3fff1a3408c
SHA1

67d3b3f1b95e81adf229020955c92b64ff3fa51e
SHA256

83c987bea59dfdae378894cf6b050b3e776e0b9e3f01f6331bb374919ac84f82
SHA512

c26662e5e0bd6f5931b909a54467df35e24deab9262f3a59a06a39ddfec79cbc010e40a3b82f8d12ef11ac327edf1f6a027978183e8022446e7d8f3f8eff2fb9
SSDEEP

98304:Oej9IbbZROztrVfaDa5vpJSnHmYz0g2Wj0+b4H2:OLb1+RaDaDMnHmYzaWj0+0W

Score

4^/10

discovery execution

Malware Config

Targets

- Target
  
  background.js
- Size
  
  81KB
- MD5
  
  636969f3ff5bd1f8496eb38cfc09fb92
- SHA1
  
  aa869fb812c3e18acc9c26f42e32ac432d3c2806
- SHA256
  
  2b5f841230e1824d804e2dae46ddae043a30e8c1152c95130203a5cf176763f3
- SHA512
  
  103165260baff44a6b0e3a70a2c0fcd74a35174ecb7640b2d0f8740cbd07329d1269f808965b279ed2df8e0ad59da4554dc7ebab658d7cb9b94b425fe4967696
- SSDEEP
  
  768:g9Z69xSfu8ZR7/ktNh3SFxhIixcRxnwUbOlr2kq4M7ORCa1:o69xSfug/ktNh3SFxhIixcRC31
Score

4^/10

discovery execution
behavioral1
- Target
  
  js/libraries/jquery-3.5.1.min.js
- Size
  
  87KB
- MD5
  
  b61aa6e2d68d21b3546b5b418bf0e9c3
- SHA1
  
  9c1398f0de4c869dacb1c9ab1a8cc327f5421ff7
- SHA256
  
  f36844906ad2309877aae3121b87fb15b9e09803cb4c333adc7e1e35ac92e14b
- SHA512
  
  5882735d9a0239c5c63c5c87b81618e3c8dc09d7d743c3444c535b9547b9b65defa509d7804552c581cb84b61dd1225e2add5dca6b120868ec201fa979504f4b
- SSDEEP
  
  1536:/jExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvaks:/Yh8eip3huuf6IidlrvakdtQ47GK8
Score

3^/10

execution
behavioral2
- Target
  
  js/libraries/semantic.js
- Size
  
  741KB
- MD5
  
  d1ccd3d6baac5c8718d86156f0706252
- SHA1
  
  9cf938ee2c7af6981c5430608ad8cb2f61a1e228
- SHA256
  
  b7eb6120e15b428977faf701dc2ee445b4b8f631b6fcb0b9744a7b34bc41a6e0
- SHA512
  
  48f5d69a5cd89676c9b2fd735f57ddd685d06eb270257416334e504e2f9f4c2a82350883667200d5b9275622a57f3afeb5a738b654d4274a6517d9aa9b13235c
- SSDEEP
  
  6144:0W/lkkkAVBW7+tBqw2a4MheUqMgWJvVqQiUg47jRZkdfb9pSkR4TbVvuqKKmpov5:1tJJvX1V/G4
Score

3^/10

execution
behavioral3
- Target
  
  js/page/additionalMenuItems.js
- Size
  
  14KB
- MD5
  
  8f4d7a0796fa7dd4399962b0cc2497eb
- SHA1
  
  0b221ea720115f2ecded94b1796d876f3297a329
- SHA256
  
  e1298f19c44da13cd2d2d47477bbcb9d5497c75196c31666acf13ed6fb1e8534
- SHA512
  
  2e402033da9473bcd15733f9e70c56ad7e701f872f166ec7539eff9c62b057c694e1e1ba882b3909d3f75138c74c602443d6098278150636956c037354f00084
- SSDEEP
  
  384:fUHawB47vqooQwVXqAGMjfO1tCC4TRU0UZiGfYilCi2I33yFAZqPy/7dS:M6wB47vqpQwVXqTMjfotQTRU0UgGf1lE
Score

3^/10

execution
behavioral4
- Target
  
  js/page/avatar.js
- Size
  
  51KB
- MD5
  
  ed510e079f14344094373e0366d177b5
- SHA1
  
  13c39653830267189c631aa994a631087359228d
- SHA256
  
  596851f9d7dfd5bf5bf8e4c9d879ecc1ad5d4ed7318b8010a39471f912e6c9a3
- SHA512
  
  277fd2183a4075239407b69cf76c6394109c0595102f8fc476b0ad41b6eee7b161871dbaa7f1657939b8b6f7825d2fdd920d651df30ee6e337081452aac858b0
- SSDEEP
  
  1536:vc6c1PEPUVf6w/8eePTAbH9U+T9BUmaye3yeC9T0ED0hIynmYFO70nZiUqmM8o/s:uhUE9iZwT4FO70EUWy5Ijyh
Score

3^/10

execution
behavioral5
- Target
  
  js/page/comments.js
- Size
  
  11KB
- MD5
  
  dac8f382d99c7b2527e081c76b7f474e
- SHA1
  
  e7c7e63c2371384f2cb8309b858a29395f456ba2
- SHA256
  
  383a3f049f824200960e54a9d2538b560b9f4d9d7cadda64fe6c639b3360827f
- SHA512
  
  1af0400f426920101a7a82a3aadc32a0e258b78bddc1aed6b77f1fda1e08e5e650ab08869fb3e9406dbc69ee7fadf4a60812ebb83a6c4744209082d01aea33b0
- SSDEEP
  
  192:3IagYEziNbuyqY5k2ZfZ+qnhipBbrMPbpLybnD:4agYEwJqY+2ZfZ+qnhipNQzpSD
Score

3^/10

execution
behavioral6
- Target
  
  js/page/fetchAngular.js
- Size
  
  4KB
- MD5
  
  45eb465b803061f4d55f4257e2d46781
- SHA1
  
  3bf7570a9c01a420ec3df5569a380efbe09c74ac
- SHA256
  
  7ac444f7b374b60721679a4866c9b8c427978e9acb8bf4c386bc6fb8273da13d
- SHA512
  
  e42d9b4f389d707d030fe1f58bdba63bcee90217a7a0efcfd121030c84a59fcd5cab52f3927a4c89895c58c3c6fb39de1315dab5d186875e68e7866e367a0f01
- SSDEEP
  
  96:y5nS7jZGj6NpY8oq++E0DeHa2+/N26u+9q+nUoVPWAvBAoMPUtsUP0Pg4PJ:y5nS7jZGj6NpY8oq++E0DeHa2+V26u5j
Score

3^/10

execution
behavioral7
- Target
  
  js/page/fetchAvatar.js
- Size
  
  3KB
- MD5
  
  e612e782df1ddffac3fda6e082a9e002
- SHA1
  
  d79c806a7f75259cc6c20eba352d94efe75802ad
- SHA256
  
  596b1673673f771abf92de8e5bf7bbdf28449ccaa928f67a623ce48b344cfad6
- SHA512
  
  1080f37a85a531dc952777cd58a3717a2b002e72c56e9a6c56c9ac1e930fe3c921862008ecf0082e7ce9de7aa8d0051bc670a0fbc6548a6c630fcf6990b71fb3
Score

3^/10

execution
behavioral8
- Target
  
  js/page/fetchServers.js
- Size
  
  2KB
- MD5
  
  15d0661554aa91162684fb53cac673a1
- SHA1
  
  36ad25884ed8612e6ddaebc4555bd4b863a563c1
- SHA256
  
  3ac722b1f287a677359d0063d45ace2ea58f01637c00a3d3ff73d8e7a1d27a8d
- SHA512
  
  5e7798ffe720640507c74bd01201f11d75d4b1f3a3fb6d00f78f001db6f4fb47cd6a2b5bbc2c86ac479e4ef0d476d3b03e09e694cad69b24f3d7470d8c01be31
Score

3^/10

execution
behavioral9
- Target
  
  js/page/friends.js
- Size
  
  27KB
- MD5
  
  98d4e6176462ceb9a6fc0e2e658628cf
- SHA1
  
  934fda951f548b850df3d96832977b71ef1692ab
- SHA256
  
  9d16cda27ce453fee4d046a426ce4393a84c0136d649ce89749e2ead8315ef55
- SHA512
  
  db0f7844d14cb5d317ebbf26d97bc2c3e94ba48872986db56afb2e32afeca4ed05a7771cae4832a5668de0a535bc8a27001a3e7f2536509f564390e9e5538b7e
- SSDEEP
  
  768:Pu9uTu4u3uRuiubutuUuUuvukuGuAusuyukuIuOunu/uUuzunuPUuB79uKuxDRa8:Pu9uTu4u3uRuiubutuUuUuvukuGuAusl
Score

3^/10

execution
behavioral10
- Target
  
  js/page/gamePage.js
- Size
  
  139KB
- MD5
  
  db9a86b4c70ca79916922204d3b4e5f8
- SHA1
  
  f909ed7969d7f92cdccc21de9f4cec5c8f1f6143
- SHA256
  
  1eb3e3264444476ac537f8d319a22b2ca05a5654928b52acc14c05c9dde3795d
- SHA512
  
  a36bc7f4cb61114225a1bdae7899e6f4616f382ac30b88c796e87ef260b0b97edfb1ea2b5aac618895e121627cd90ad2ff7afa47cf57c120ff713e4b4edffaeb
- SSDEEP
  
  3072:eH4qeKP/kPR+gbZxtx3R0hg+aA+PQSbQSkQSpgz+gzZgzbgz+gzj56n5cluMCNaZ:eH4qeMM+gbZxtx3R0W+aA+PQSbQSkQSE
Score

3^/10

execution
behavioral11
- Target
  
  js/page/groupPage.js
- Size
  
  4KB
- MD5
  
  9cebc1c23b4b51327fae10fc320ef966
- SHA1
  
  c4d9c7f1b9428873da4e86e8436132b0e4d395b2
- SHA256
  
  82941cf5b48cacc54db4a5713e9337e3760a3ce39c5ceda8e922359dbe7de610
- SHA512
  
  854a2699c8853f2b8cd14c285c1b7142cf2ace799cc65c84ea43a45353ca4ba25aae9e126e33da433b7dff766e4f7758102d57d3301ce6a6bce5e88f8dd054f2
- SSDEEP
  
  96:xEnsWPmsKie5jgjh3iYiOLM2Eu4tL8P7iJ3h0:kCJjch3iYiOLMrT4D632
Score

3^/10

execution
behavioral12
- Target
  
  js/page/home.js
- Size
  
  50KB
- MD5
  
  6356a83f692aded8b9849101c4d4bc7d
- SHA1
  
  6301a93c1ed9e75b4c08d1ebc46c09c9195f1846
- SHA256
  
  e2743a9907611228cc684b9039e45bfb6ff72afb7ca0e3a863b11f26d61f8aea
- SHA512
  
  80a696bf16b7ee45676a2cdbea558cdcb3f8c30f698ae2d861677c11da01c0c29d84613f4a9c607a8fb4b265ab358355109339a93a749435f3aab142731cc510
- SSDEEP
  
  1536:bmBuvrBuv6Buv6Buv6BuvAlOjLtE79EqfYMTMqi//UYq6QBEQnh/1hE9LaR9Rc:bmSZZZe/GdfYMTMLCh/1hU
Score

3^/10

execution
behavioral13
- Target
  
  js/page/invite.js
- Size
  
  791B
- MD5
  
  47ef35f72bc0e369917f83f650205b8e
- SHA1
  
  8b6ef4f224e27a9e5ebecdaa4a313793a0ba7f42
- SHA256
  
  5225bbf39fcb08646b97f82bb0b23e26c206e6a184a4ce3541a8ecf83acf0dfd
- SHA512
  
  ac8ab4b8131a53115771717d091403d018c9546dcb886dd227c885d1f81b00a2b5f601c7bb123803f33b663c622cddf7f04c8d429a06ccc6c1b451851e9f3369
Score

3^/10

execution
behavioral14
- Target
  
  js/page/item.js
- Size
  
  5KB
- MD5
  
  5957262abd56ce4e06adaf24fb14470c
- SHA1
  
  91f602918ef1786d547d5ffd847a29e76d754043
- SHA256
  
  5b7e247e392f474829c2ee9eedda2687d82b4f0d01a479c13833a21bff50be09
- SHA512
  
  68d3d79d811f4951fc4ae1ac14a2998882786101bc4918f6860d159a88ff24593b4aa701878c0e1e55fece2c1c0ad7fc6cf5e7a0e3e6d4824c488ecfc894807c
- SSDEEP
  
  96:tiLDdx4sIoJY8XWX5Zuj5FBJSH32100ocW3a+9zI6da+98aOd+V/SSPqE:tKpJYSo5kFBJSH32100ocW3aEc6daEKo
Score

3^/10

execution
behavioral15
- Target
  
  js/page/options.js
- Size
  
  19KB
- MD5
  
  d349807a55888fd49c79853e5139e523
- SHA1
  
  26fa11242660a2cb618e64790a3d8831d91e8df8
- SHA256
  
  ea8bf91fd9cc6ca695165816ea2da1da5b633e17cbc91fa37f206019a5698cbf
- SHA512
  
  d7abef1df30bbe34b5ddb8dacae46ec65b5de890435e7072f7d52baba0ff35f537910d8b31b24dfd660e82c682053ad5735b1df29e6f92a26b06168a7f55ae2f
- SSDEEP
  
  384:Pj2PiXieWb/eOSybhVRXKrn5iK8VvqiCHjHCQAiGWiiiniHAini5qifkiEiJitij:Pj2KS9XXKrnAK8VvTCHjHCQdmLi9i9xH
Score

3^/10

execution
behavioral16
- Target
  
  js/page/profile.js
- Size
  
  34KB
- MD5
  
  251e5662e264e001d2cc48fe55b25e33
- SHA1
  
  49df5fdc4fd0487c4ab08acfba775b10fb122f89
- SHA256
  
  88c351f36965505aecb68862dc6fcf20d088e3689ba3022643bb60e369623c60
- SHA512
  
  48d7de282dfddda2f75427d96fe94ce02eae8d9562b8a1e89668e22cd930862ec6595c10bfd233f662f469eec9385017829005a398e941a8b95c3ac569da3926
- SSDEEP
  
  768:Bw9W7uyoDhoYkEDZ5fEH/3uoEt0RfxGEqPHhs2TUTlP2XM2xAEx2x+DXajB:+9W7uyoDhoYkEDZtEH/3uoEtofxGZPHQ
Score

3^/10

execution
behavioral17
- Target
  
  js/page/profileThemes.js
- Size
  
  1KB
- MD5
  
  a45824c52706f6fb663222115b6f48ce
- SHA1
  
  6c352a1c20cd7880d0f373fe1281225e983a972e
- SHA256
  
  f111f6d0dfdb27b2dfca8a054ad640f55a774867f2f28f6655fcaacac640e0e9
- SHA512
  
  e99a9e1bba0f94fb813ab801d6766d8433055ab3faa7c07e07982525a8ba7afb9834be42a17bb9ee093450a76b836961b4b5a7819a898e931dccdcd1c71141da
Score

3^/10

execution
behavioral18
- Target
  
  js/page/quickPlay.js
- Size
  
  20KB
- MD5
  
  d5a26f831ba011cd855b77ba33bf291b
- SHA1
  
  629bf29341e8c922f236ed9c1b5b8f3c7b7fd062
- SHA256
  
  c69da924177a2c6d757716c0d79b5505d593c9ec5a60116bc93e3e3cb72f7880
- SHA512
  
  3576bd63ec661e8bfdba0cdbfd050cf7d2520e40f300bc6e7e8ba86dcb823cb967024856a54ef7651041c925f1b94c9f3fd15bd74b64aba68139e9b5eef4c038
- SSDEEP
  
  384:mIKKojbmTqd3XVhO75FTbbOm+D5XTfZETbJDDDjH:DWbmTW3XVhS5FTbbOm+D5XTfZET1DDDj
Score

3^/10

execution
behavioral19
- Target
  
  js/page/resellers.js
- Size
  
  2KB
- MD5
  
  9483be183b5cfd091e5e0d5bd012a1c9
- SHA1
  
  6f262d171823141d13d2c82726bdb7526c470c35
- SHA256
  
  4d1299edd41d3b7c2b5de33189501f90b1f5385f1fb9b53a0e0a9390607e5b8c
- SHA512
  
  f1fc48085a2845b6e77d09da2e8c36fd90c8abbb262abe0c9b06f4308a55381f7aa0ea347cc11b0f30bea9e8c112851fcdd375e9f011a4e670d05cc6bd3e1c8f
Score

3^/10

execution
behavioral20
- Target
  
  js/page/ropro_shuffle.js
- Size
  
  12KB
- MD5
  
  9700b4528c7c86805e0c51d0715f8253
- SHA1
  
  ad2d168bfd96ac3bab2b2a1f5dc22519e5d159a8
- SHA256
  
  6f0c423f1ca2553ba86fb512a15a9af535c9b4573b69d7819e46f1a66eb908c5
- SHA512
  
  43684bda88c2487f53bc7a8265aeac99a18be685054bdcaeacd7e86bd7d6c60de04361a187afafca926f2ddad1a5138a4e7d46034e4d2c497ad436ed8d25edac
- SSDEEP
  
  192:4qduMLC8gORdkH74fG9MjyeDp4Z4XPSt54XQc3kDZMq:D8MO8fRuUfIMjyeDpQTMXf0Dd
Score

3^/10

execution
behavioral21
- Target
  
  js/page/sandbox.js
- Size
  
  65KB
- MD5
  
  480261e2f962e631ab58accc5f7c3ef3
- SHA1
  
  13a39e5af870cab962a7747f8755f717d47883c7
- SHA256
  
  3e73a305fad0473ccb27fd2810350163d88ac6414506fdb3948ead681075ec7d
- SHA512
  
  a998f0e3612e34108af9893b495bbdc4630a0552e570e681011235f45d1a5f22582116b1dd0b7d9ea63e2504ba41b9f34872fcabfb7304045e10e87a9095a7af
- SSDEEP
  
  1536:XkG6x3v/NYJmYW1ZK4Ktt799SjF3Dr18Z6Qe9s6PSz2NVdk8+3WDiXCX/K:Xk/x3HNYJmpK4KtXIFJPSz2NVdlkES
Score

3^/10

execution
behavioral22
- Target
  
  js/page/subscription.js
- Size
  
  1KB
- MD5
  
  afee2edf1dac671975bd8f93936d2403
- SHA1
  
  da97a85c781c4a9766f22ab6e9f7a39a112fc428
- SHA256
  
  e44d69ada353232f808cc96d20d656c78da4145f439b9fa97d7eb3f10e05ebff
- SHA512
  
  604c644d9d3440de2d1d932d415a532a2db34061137f5bb88db62dc4fe2ae0f2587399096ffab6ddfcbe2755a8e58057e7c9304667b3c884d8f1a2849823186e
Score

3^/10

execution
behavioral23
- Target
  
  js/page/themes.js
- Size
  
  56KB
- MD5
  
  d8f5d7fbdc8628bd4c631f897c7955c2
- SHA1
  
  2137858b8353c24537d67b7f83f3bb300ee53b21
- SHA256
  
  fe82a8ad80e2e4bfe4e25ff37e604010074338fe3d86bbb0223cec533788e569
- SHA512
  
  8fd95cc46e2eb5c77c7ff7db2bdfe2fde29c2beed26bfd53fc00aacf4079ce689eec735a64de23fff73536b7335c939d5130e538100c000164c31ff4f80771e1
- SSDEEP
  
  1536:AvRy1w5IHauv7HBVoYVaxTCqAqlC8ouo/6V0XlS7OIMaDE:K2w5I6uDjo/RCqAqlC8ouoyV0XlS7q
Score

3^/10

execution
behavioral24
- Target
  
  js/page/trade.js
- Size
  
  171KB
- MD5
  
  b46a75903d28e36321da00316e2dc44f
- SHA1
  
  7990fc64ec6eebfdb5de5b4de8a5473d794926b5
- SHA256
  
  859bbd3929faaf2a6c6b4245421a25f9dbefdf97b19c50fa3c1fff69dda013fd
- SHA512
  
  62cd7767ac982a8bff3f351b7a0a2a3341dab15595e378e107c66ba389e2b25b3434efb6616ee2c3859d3c8441d8a680947c5985cb66eb9a46d10f19098d16ce
- SSDEEP
  
  3072:fxde5+lGF42sqTjaeBzjmfmqyljWuv8ujouz1Ju+DJugrOtEqOti2tNsOtxelsRx:U+r+TjaeBzjmfmqyljWuv8ujouz1Ju+z
Score

3^/10

execution
behavioral25
- Target
  
  js/page/tradePreview.js
- Size
  
  8KB
- MD5
  
  eb16a4696bafce4accc011479055192c
- SHA1
  
  b0051a62cddb367e45b51c6e53492308df88e4bd
- SHA256
  
  2c6798376b03012e3ddb7e9a3fa4227620b4b0c895ed5acb6d372e2ac4852ba6
- SHA512
  
  a9b6d758a7c50277ea1c7090ea43388f3cad7333f7a053ccea9daeb17748b88b7a2260fdbb276d7de7b974e17c60f476461f9120a6f94aad747dac11b9864810
- SSDEEP
  
  192:obdtTSjFfY1p7u57xjN+xGXxZSFNmICgPgYgZ:obdtTSFOQ7mGhZSFNmICgPgYgZ
Score

3^/10

execution
behavioral26
- Target
  
  options.html
- Size
  
  101KB
- MD5
  
  0f9507bdb1a7b13aa0aaa3efa2f5991b
- SHA1
  
  8bc882861fdf56adc27188f031791f94439a86c1
- SHA256
  
  721803d13f772d38ab9a08d144943d8f106a97d5ec8e1b8b4b083866d36db370
- SHA512
  
  89898544c559e6bad3bbb3c28b31c3e16af665f57e40f09da3e58a3cf5b04e1cc18aae2659de1f3b034b105b273582d68f91af27b729726daa129bf32257cf50
- SSDEEP
  
  768:OI6TylWsB6s9KQ5qFpJWX5/F2rlMgMhcsLrGJj:X6TyHR6DWX4MgMhcs0
Score

3^/10

discovery
behavioral27

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27