bb4f0ae6d5ded6f7934a019c0d613d123cca0216f4ca7f9a089b5417983c3720

Sharing

Copy URL

Twitter E-mail

General

Target

Valorant Tracker - Installer.exe
Size

2.1MB
Sample

241119-s5mg7sydln
MD5

23770d1d1d7e1486d0fe725ac45bdd32
SHA1

7137e3d1ac4da7a8539edc968c322216a8ff78f4
SHA256

bb4f0ae6d5ded6f7934a019c0d613d123cca0216f4ca7f9a089b5417983c3720
SHA512

5f6430f4d45d28e927f577198b9852281f6a4fbcab93118b6e62645e7fed114efe4899c682611e5726dffd49fb2657ccac5c2652ff6b753a05de6558db8f652b
SSDEEP

49152:lGTdxE87vxpsrFpIvFbJo+McPe34szYOcNgxicbvq:lGbPN+TIvFby0eIrOe1

Score

7^/10

Malware Config

Targets

- Target
  
  Valorant Tracker - Installer.exe
- Size
  
  2.1MB
- MD5
  
  23770d1d1d7e1486d0fe725ac45bdd32
- SHA1
  
  7137e3d1ac4da7a8539edc968c322216a8ff78f4
- SHA256
  
  bb4f0ae6d5ded6f7934a019c0d613d123cca0216f4ca7f9a089b5417983c3720
- SHA512
  
  5f6430f4d45d28e927f577198b9852281f6a4fbcab93118b6e62645e7fed114efe4899c682611e5726dffd49fb2657ccac5c2652ff6b753a05de6558db8f652b
- SSDEEP
  
  49152:lGTdxE87vxpsrFpIvFbJo+McPe34szYOcNgxicbvq:lGbPN+TIvFby0eIrOe1
Score

5^/10

discovery persistence privilege_escalation
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Drops file in System32 directory
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
behavioral1
- Target
  
  $PLUGINSDIR/app/cmp.html
- Size
  
  5KB
- MD5
  
  d7b8b31b190e552677589cfd4cbb5d8e
- SHA1
  
  09ffb3c63991d5c932c819393de489268bd3ab88
- SHA256
  
  6c21e8c07ce28327dca05f873d73fe85d5473f9b22a751a4d3d28931f5d0c74f
- SHA512
  
  32794507a4b9a12e52ceb583222cb93300e38c634a72ea3f51a0189127aba60cf476fb7918942355a4f826185d7071e876cb40348ba34cf5d1ca7e9546ccb310
- SSDEEP
  
  48:t9rc0/GLAoShbEHaLKNGiNQtvmolOGR36tgtr/GTvJP8AscaV4LiMt7ByBZXGz+p:4VLjHa2NGiivmmpWsBVutFwAk5vSG
Score

3^/10

discovery
behavioral2
- Target
  
  $PLUGINSDIR/app/index.html
- Size
  
  20KB
- MD5
  
  c7b752acf6d1e10f3aca2c67b1ccf4d3
- SHA1
  
  ab793cb43e0c2b5af0fdcbf90d0d29d5d3e164f7
- SHA256
  
  69b9f99f6611f953d94984ac35bdaf9e9817f689e1e3614976bebe3465c613fc
- SHA512
  
  120addd79b7ade4f35b426c02631c8167d81080fde30a01b989453113f7547784e525d53bede41ede0c9b3caca8513060753ba51f75bf6936d32ee597d642576
- SSDEEP
  
  192:8sdqpDNDPkFHmY74+/qmtRCtmK8W9I2gHHMlxh8B39LJ/Hab48JgJnc5w/93mJ8D:+WNaM8UnbjPk89+mppHL
Score

3^/10

discovery
behavioral3
- Target
  
  $PLUGINSDIR/app/js/app.js
- Size
  
  21KB
- MD5
  
  de88fce9253d26e0c61daa1783baa775
- SHA1
  
  07c5848354a247056baad369059aac9d3c940ecc
- SHA256
  
  993f140f9f4e5cdbdcc657a3c159328bf58b3483dbc27c451516a556763a79ba
- SHA512
  
  71ddd47ef7ed7c02fb31e8ffa2ea6d1b5178dbda2ab37bac208e088c8ba2127e0cf5eaa74ee7ad5809fa69e534853312c6c8775c68aeda63bf0e4a5caefa39b7
- SSDEEP
  
  384:4X+ycDQrcljKdZGb9plmt902wjI3A4nzwF52xxYRifG6wBEoR3FGHWdeLj8T:0+ycDQYlOdEbdmXH3A4nzIAnGifG11RL
Score

3^/10

execution
behavioral4
- Target
  
  $PLUGINSDIR/app/js/block_inputs.js
- Size
  
  789B
- MD5
  
  b5b52c92b90f4283a761cb8a40860c75
- SHA1
  
  7212e7e566795017e179e7b9c9bf223b0cdb9ec2
- SHA256
  
  f8dbd6793b35f7a26806f4dabad157aaafdf6d66fad094b50c77d60f223fd544
- SHA512
  
  16ad53ede5424ca1384e3caea25225589e9eec9e80e2d845948802db90fad222f709a7b651cd7601a34ba67a0627433f25764638fd542cbd4612871308e7b353
Score

3^/10

execution
behavioral5
- Target
  
  $PLUGINSDIR/app/js/libs/cmp.bundle.js
- Size
  
  347KB
- MD5
  
  deb60b40df89edecd35ea3d1410ef7a6
- SHA1
  
  9899f48d1b29c6a51e4b80ce0579ec4f51b72c74
- SHA256
  
  2eed337a035bfcba83bdf00686f236319bfdcdc5c5b4d57541cf855bfe4fd67a
- SHA512
  
  484daa9e6423c4aa90b310f7c957f850109afd4ef30ff0dc57e05d7ea30f9ae12dbed862197ac9f1ee99b26a7204ba14d1a95d8a8a6f5064a825e5d861fb8705
- SSDEEP
  
  3072:vSDSLzJgixPFNRISHo2ZDkNOqTOqSP88uGtkLxrtQ8OaxPyf:bxgixP+29kNUuGtspi
Score

3^/10

execution
behavioral6
- Target
  
  $PLUGINSDIR/app/js/libs/jquery-1.10.2.min.js
- Size
  
  90KB
- MD5
  
  44e3f0db3e4ab6fedc5758c05cf27591
- SHA1
  
  2d408aa1d35661019c95adcc60b78c0727ed25b4
- SHA256
  
  bc44d3631ffef1df7960e359f02002d3ada45ee05205c2cf1edd85da2f518144
- SHA512
  
  4d4844e53e686fc59a52e86588f328dca3ed6fdad7195c58942a98c51755a24981b903ee7c7b27785375eaad5a7d9501cf74b999674b79f214e66103bad9efdc
- SSDEEP
  
  1536:O4mCgi8DyCuXXFiJ+L0kJQsJVPEKuQRZdC/RAfDknv+p0WzH/Io9Z7qABZnu0JFV:OGsKYAI2p0WP9bDrJ7fak
Score

3^/10

execution
behavioral7
- Target
  
  $PLUGINSDIR/app/js/models/notifications.js
- Size
  
  5KB
- MD5
  
  911451f65b2503d23bc27c6a6aa6af72
- SHA1
  
  01d3654b23ef7f5adeb4097bd851e8c100a7b2ab
- SHA256
  
  c32495d55eed52f47dc7268eeccb90fb6bdc5686135ed089416c6bb8f703a578
- SHA512
  
  06edaebb0bb2980a7b6d6baa31a9c0894a9bb5f14a91468ffb8f182d98f04bb811df2a4c37f0b56d612603528aa21f390eaa7cf885874ae770a24dce2f9b249c
- SSDEEP
  
  96:sOr8u1s9FHYYdfHsW/GZwzpJGf8mui+U8QrGjqTxoOxoYsdfHsW/GZwvpZGNjINU:sGu9GYl3rNQ8K+JQC+N5Rsl3rxeEYIo
Score

3^/10

execution
behavioral8
- Target
  
  $PLUGINSDIR/app/js/utils/analytics.js
- Size
  
  4KB
- MD5
  
  525281e9959af4c1c0d11b9243c798a1
- SHA1
  
  237a84c5b57bd132f48446d718b20640cb28c263
- SHA256
  
  c37f0699cf8ba7d9e3e0f73f1b2af65f4bdc2a31f44594ffc8c73e98b6c2fd1d
- SHA512
  
  fe5bafda7773e69c65dd63270e0306abcd39cb2d886b675ab8c714ae0833efde963b69623d468551a1ab37f1db1a1d457f1568f7a29d9cf0bb23bb0edcab5fc4
- SSDEEP
  
  96:LlYkmHqqVHlnZ4JGvt+QP2EvVVko3sO2LCgObNS1Tgzalh:AHq1GV+kcRObNSGza3
Score

3^/10

execution
behavioral9
- Target
  
  $PLUGINSDIR/app/js/utils/commands.js
- Size
  
  13KB
- MD5
  
  186f2a801c3d12b8b53e4b8f0510bd35
- SHA1
  
  567932df79e60d27d62752b1a1d72d6bf386c6b0
- SHA256
  
  bd6e86d0e6b33a44a1617458f0adff34a5cb0fc52568e03e5d74b8c72b5f379e
- SHA512
  
  eb87666e8fb40f81d9f14f61a6cffdba57edce1ab9b62c1df3ea3ffb0f96747f90465b2bee956c096f3762d25e90f5f130537046d8deba388d183cee1cc473c3
- SSDEEP
  
  384:PUr5HB8c31uUvJQ006W8tusv5qEWOdvAUd:PVhsj
Score

3^/10

execution
behavioral10
- Target
  
  $PLUGINSDIR/app/js/utils/cookies.js
- Size
  
  1KB
- MD5
  
  6c60e675f8c8c68c0174b644d3a63a2a
- SHA1
  
  3635a3fe07ccc4a6f33a986ddb690522d0611abb
- SHA256
  
  9d3cb3822e20d6f5157faa02dc69bdaef44576c3fb5523e00aa152107ce30287
- SHA512
  
  1dc9ec7b139bcf37107ecd673c01e4fcc606332ea1645a4a1b4e5d95f817d4c99d5964cd3d941a6a526689341d9623b17b4efc002cdf4c73404299d52b1be452
Score

3^/10

execution
behavioral11
- Target
  
  $PLUGINSDIR/app/js/utils/modal-events-delegate.js
- Size
  
  1KB
- MD5
  
  117e4fdbdb0ecf211c8bd909efd337d1
- SHA1
  
  9f8684d856b7c95bdffb139217dfd89f41373187
- SHA256
  
  267661f932a2ea78d8c7a98cc03d1b18d7cb8132deb84636772ecd1fcfbe4857
- SHA512
  
  f474ee20b59d3d0c11f9f6aee6b6e2b66f7025beaec9841f88455e60533dc96cb4e27910be0dae92b0028c5578932b7f459fdb91d594ad010f72a3b3af6addb1
Score

3^/10

execution
behavioral12
- Target
  
  $PLUGINSDIR/app/js/utils/strings-loader.js
- Size
  
  5KB
- MD5
  
  9c94eb933d8a43dd3825e67a7e30c980
- SHA1
  
  7ec7b16af6f399219209ba5967d377040486a11b
- SHA256
  
  96445709fde2613af50f4b8908296d4bfccdccb2d9db9febc34a9bf4dcc70ecf
- SHA512
  
  a662a299e31633f71a9b9675970359430fdac06dcc284fd7ce92919f244c7f921639f97a42356e993a95865e6c9f198dcba82c126f82065bf2009a31ec9b02f5
- SSDEEP
  
  96:FXS/WSBWlbBtDhWFTnTeWsNkEj1I/6WfwkUlx416moPdXDKP8j8yZrME6:FXSuQwBBh0nTevNkEj1O6Wme0muXDK0W
Score

3^/10

execution
behavioral13
- Target
  
  $PLUGINSDIR/app/js/utils/utils.js
- Size
  
  118B
- MD5
  
  a0952ebeab701c05c75710c33d725e7e
- SHA1
  
  1da8a2e889f1213d481ae3cd5571670c01e64adc
- SHA256
  
  b4f0c48cbfeaf8141fd44b12031e3f0410cb0cdc313888ffdb14fdf1d2341246
- SHA512
  
  5e5ae616d3fded7d2bf47a326242c4477ca3119fb52897bfb41de0be230ccbd6c3da2c00268b3973e9bf7b4f2886aba64fd9719b448662e4130ee66d87913389
Score

3^/10

execution
behavioral14
- Target
  
  $PLUGINSDIR/app/js/windows/cri/cri-controller.js
- Size
  
  3KB
- MD5
  
  4e4b4a9e2d86ae3c108105078db6d730
- SHA1
  
  826946be793c999316af6c1db10523950b18ea2c
- SHA256
  
  cee7fc5a36a01a439125be031923d7e7415ec56194255048098169a0108034b7
- SHA512
  
  1420065cd000ce9b9c39d27b5dc5f4055f67146e06573a03184649851c9745f0c0af2b5e35b41b5923703dd74e32f9ed95fc59a43db25f854584e319950beffe
Score

3^/10

execution
behavioral15
- Target
  
  $PLUGINSDIR/app/js/windows/cri/template.js
- Size
  
  1KB
- MD5
  
  76c1ef0cb437db144c2bed53a5a8a5d7
- SHA1
  
  aaab8fff649f8e46d1e9510018118ee9abe01498
- SHA256
  
  505d3c4de7d9cf8f0155b5b1a3c8792bc0ca2eda6781b441bd85455f144be22e
- SHA512
  
  822bf9feda91c89539d263c6c9053163e8dfa3c511195bc61a9b608b4687fb4048733323f03dd30a7ab661a4be4acf6c8d8ae7bb6723771122540a9551899c3e
Score

3^/10

execution
behavioral16
- Target
  
  $PLUGINSDIR/app/js/windows/finish-with-recommended-app/finish-with-recommended-app-controller.js
- Size
  
  1KB
- MD5
  
  eb6d6bd7e05d4477e2704dd87b57ca35
- SHA1
  
  f42672ec1e23a3f4bcc2952746d87ba8deff44be
- SHA256
  
  5ca97132a258ed1f36e401d70ccb95be2c9e18395e6010c40f61172914477de5
- SHA512
  
  1402d611f910cf5078e804175fa4693b591348d3e7cf6d0a6bbe026c259eb9e0bc285233c80cb2f4690674c3e927bc72fbdcbe758826b98fd02ecb3ed82e339a
Score

3^/10

execution
behavioral17
- Target
  
  $PLUGINSDIR/app/js/windows/finish-with-recommended-app/template.js
- Size
  
  681B
- MD5
  
  d1cb34b57cef7e28b9286454b197b712
- SHA1
  
  f3a964b319bab82d4eda07e126bbfd6dec35c349
- SHA256
  
  b61dfc304b46e8cd95d7b15bb93c6160b30523a1a093397a84fc8b8bed00ac42
- SHA512
  
  3a07de9c58134edbb7998f85e6d037a0cd066e32c4daa07594a949a7574f5693153bbcdb59739e1a92e847ab1128e2369fb30ba76a7b9cdfa9a37a409db691c1
Score

3^/10

execution
behavioral18
- Target
  
  $PLUGINSDIR/app/js/windows/finish/finish-controller.js
- Size
  
  1KB
- MD5
  
  138240ea22084428e9e25583e9156568
- SHA1
  
  e8bef7eab5b6e7040b996ec9504436e073444bd9
- SHA256
  
  4cb4e1aa25c15ae5f2e63fa4658a8acff0ce63e0f59cb6eb634df2dfe336e2ec
- SHA512
  
  e97b81b0ecd964e6e909019353efe4f5582f65763ac4197d754f1c4eea19cfc249900ae597fd33e29f531bb0d1c7e0f010793c59a2b0099fa75ad0b7d01ce8a7
Score

3^/10

execution
behavioral19
- Target
  
  $PLUGINSDIR/app/js/windows/finish/template.js
- Size
  
  1KB
- MD5
  
  f092de7ea66d8e920b345f38537fa35d
- SHA1
  
  82d107a409f18878307ae0cefe24074db64937c4
- SHA256
  
  b05f111369e12ecb4cdc6526dd554061eb31097aa0de4bd126ddc185b69d922f
- SHA512
  
  14942c0122f216c07595cbaae498f9c4d37a2d0fd95f262c332502befdf4566c7a042c4d85702c1d82a111123dde677096195e9efeb1d74eb1dfd4df84d01a23
Score

3^/10

execution
behavioral20
- Target
  
  $PLUGINSDIR/app/js/windows/main/main-controller.js
- Size
  
  11KB
- MD5
  
  15b665a5c915004e1aa7e9e11a710f7e
- SHA1
  
  7821924e42bb19d60c572ff80bbaaa04d7aaeefb
- SHA256
  
  84dc33e2eb3118fc77a38b0ca53af42c53f6eb85cfb1e8737dbe39fa03515653
- SHA512
  
  dd47f7bac0dbaac714e6d2fc91b4c24756ca4acb70bdbc4b54cd5216552d6bb85ba2e1c3c8445c5fb40d116dfab6569945cd74730bb7c8f3cf46e8d08f8afa02
- SSDEEP
  
  192:28RRXC9xThFzkzLZ1ksEIA6li5djpACga0U2FxVgMKV59GsZydwOVTzdfj5UEdwV:2sCHTTzkzLZhJit+y3ZydwKf6
Score

3^/10

execution
behavioral21
- Target
  
  $PLUGINSDIR/app/js/windows/main/template.js
- Size
  
  3KB
- MD5
  
  a118c7724c208f12083240cafccfd10b
- SHA1
  
  f89c676a215b869626737862a08c9eb07d440211
- SHA256
  
  63a43bb08403972d0f4b0e381bd264af14e826e0035242bc1baa9a815956b8fc
- SHA512
  
  9fede79044ae5de7baf5bfba0d5a515ce462a25420026ff45bcf1751e57510023cb40df42d08e880114f62b38ddb218355d5357b725df32a41ae4e6a18414cb3
Score

3^/10

execution
behavioral22
- Target
  
  $PLUGINSDIR/app/js/windows/modal/modal-controller.js
- Size
  
  2KB
- MD5
  
  b04bdfd1c7d09bdbdb94a2455fdd677b
- SHA1
  
  f000ba4866ff16d75bfd6cf446763498e19b12b1
- SHA256
  
  4565ee81ffe222b31982088b1c18850076e3acf59198ebce08118e12cbd87ea1
- SHA512
  
  3cb6ef0a16309046e7f407e7321eb12212b0eec09ec1a04b1d813f6c7a04546714865c3b398a93985041f598156ed905ebd23a64260801281b29ada9bc19ec5c
Score

3^/10

execution
behavioral23
- Target
  
  $PLUGINSDIR/app/js/windows/privacy/privacy-controller.js
- Size
  
  2KB
- MD5
  
  15bbec339f5046f525e3aa96d36c30ec
- SHA1
  
  f73d40bf06584737fe327f1eec6f4b0446545226
- SHA256
  
  14d9c60cd97f18e74fee2dd80b6a190eaccc526085991f356feb6b4d330a0fc3
- SHA512
  
  2b0edfd2d5efb3f739e56eb6f3bcfae4789af3e1639f5f8e5f7530f5af10eb1a61464d665c9d9b2f4eb3796f2445108599d8bea75f1709aa562feebee519da4e
Score

3^/10

execution
behavioral24
- Target
  
  $PLUGINSDIR/app/js/windows/privacy/template.js
- Size
  
  655B
- MD5
  
  cf8d2c26520d7c84e560dfa79e31dcd3
- SHA1
  
  716f2ec17480d5cc9c145bc147833fbfc39d36f0
- SHA256
  
  95c459eae0edccdb94702aea603a097e461daa0e5f37dcd0e30de7df665433a8
- SHA512
  
  d466dcf7e86a4295857020feea281fc89f519f6bf1e79c3b5e1046d0745c9c9010377b1941e06c9a9b2c78a4173ed9909332d5d6c39b05f460e8a863086c895b
Score

3^/10

execution
behavioral25
- Target
  
  $PLUGINSDIR/app/js/windows/progress/progress-1-controller.js
- Size
  
  1KB
- MD5
  
  82f0b997ed552c52a510a9f2ab29dc3a
- SHA1
  
  92aec3a656053c71eccdde610130f5d8008fa96f
- SHA256
  
  838bab990ce38372dfedb50eb0a270db705811729630ab8557c08bd1e9e8e105
- SHA512
  
  ecf67f877002d746eff8af3a50155aa381513ddafd17b6bff0188c85f0765579fea0112e82e1371f962b1f5decc94b65e6120f21fb516533dac35a2d541065bf
Score

3^/10

execution
behavioral26
- Target
  
  $PLUGINSDIR/app/js/windows/progress/template.js
- Size
  
  242B
- MD5
  
  92b145e6649ba0add3dee9a69d3fa91e
- SHA1
  
  4db1a45392ec973cc8a7eecf3a30a9a7ecc7a64d
- SHA256
  
  a7128a08bca53dd919cab3e5cb4dab31ded7ae2dafc957209b9fdd23f3b944ab
- SHA512
  
  747a087dffdba5c92d9f4c8923615d388b9c4c79d3b71d3cb90487aa37c132290a4f5107eef3055c03eadcb9614e20d4655393dc9251fab7e0ee2438f0d95751
Score

3^/10

execution
behavioral27
- Target
  
  $PLUGINSDIR/app/js/windows/settings/settings-controller.js
- Size
  
  6KB
- MD5
  
  378c18dd7d5cee6ca7c4ddd0396b535b
- SHA1
  
  d5f81d4fab29201fd1629dc4d8e6f918c0c30479
- SHA256
  
  b5c5dc5e0684fd97eb4c45896dc1c2de8a6a6fdc63b6aa83a99103c15787ef35
- SHA512
  
  c29416b3f0245f4826d857dc8c52c969071d2410c945bda96f38f59a9bc7137ee534d84865e5ac55a1e3cea6bb705c5d592725af709cd97e7f38ff05dbaafe5b
- SSDEEP
  
  96:5RFTr5TvuTlpwWXs/t2V9OqIJ6OFGR+4V6RjTmoSrOlidbtmfPNVC8V/pGHmI4Rj:5RFBjugWX8YV9UAf+4CeoSrGWmNh
Score

3^/10

execution
behavioral28
- Target
  
  $PLUGINSDIR/app/js/windows/settings/template.js
- Size
  
  4KB
- MD5
  
  28513de0830383a516028e4a6e7585a0
- SHA1
  
  d31fc3a6f4a3ce6c4afb82ff2342a1ed718809e5
- SHA256
  
  8014a7c919da249ba2f2196d9c9b62639d20851be426f3ffaef161cbe477c45f
- SHA512
  
  0f7321c2ae13145bb694368dae1b74e6fe20e6b09712da2178bc46e6aa65223ab84c38abbf0ed074c85b42dba1a238a5f3f8d1ae060a0af6df748c5befe11b61
- SSDEEP
  
  48:Zx8LQmDdbaoFRpm4+0A2AEeQmDdbaoFCpm4+0A2AW:wpm4+5nHym4+5nW
Score

3^/10

execution
behavioral29
- Target
  
  $PLUGINSDIR/app/js/windows/welcome/template.js
- Size
  
  1KB
- MD5
  
  17f54fca6723b983875d940d931e0afb
- SHA1
  
  01774cd5cea36bd74c80a708d6f77567e8091024
- SHA256
  
  42c546e9da748ef76fdab56b96fd511eb607617a9ba37b3dc420148b769d8acb
- SHA512
  
  401df9a54cd14c19227d91bd08b4775a7b437644b4ca0d1d636d3e07b04591f9c5516e80040ae6a79ba400457d15e3d80aa148a63de870a64664fc5a02f7a038
Score

3^/10

execution
behavioral30
- Target
  
  $PLUGINSDIR/app/js/windows/welcome/welcome-controller.js
- Size
  
  2KB
- MD5
  
  50f676754862a2ab47a582dd4d79ecf3
- SHA1
  
  1cb2f4b11f9f8cfc8dc57ff29d0256dec4811158
- SHA256
  
  6155691dbdd66290109afb91617f9cf68af6bd912991d5d27b922f5faa7f530b
- SHA512
  
  ccfc89e08fd36f0a694fcda17efb84ca285b6c62afe2e3a794fdad19b6882a4b618645f4d9171673ba56fb4c55fce336d6b8d26dec3a5cc11293ae2b211f499f
Score

3^/10

execution
behavioral31
- Target
  
  $PLUGINSDIR/app/progress.html
- Size
  
  20KB
- MD5
  
  359ae05967ebe29e7f7a3564f0fa3f53
- SHA1
  
  3c1a454e8f5445ec890c5c2c11fa9e24bbb8e4bc
- SHA256
  
  f2182497ffe118349d8a462cf0eef55f22798a17e91846b194b7298d860ae38b
- SHA512
  
  0b61dd5af6feef3e1361a9ddc32dfca2200af44507f8f4e2c0f73ebdcb79e690d1f7561d86bbcace1ba16c37f18d6d40670de2d3e16b88d710180665de51675f
- SSDEEP
  
  192:dXdqpDNDPkFHmY74+/qmtRCtmK8W9I2gHHMlxh8B39LJ/Hab48JgJnc5w/93mJ8F:d8WNaM8UnbjPaeu1JE36+
Score

3^/10

discovery
behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Privilege Escalation

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

Drops file in System32 directory

Event Triggered Execution: Component Object Model Hijacking

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32