5ed0bbfcfe1df11f8b94ed68eabc6948399c7e05caa9003f514a3943c0c7d604

Sharing

Copy URL Twitter E-mail

General

Target
OFPNMCALABCBJGHOLDJCJBLKIBOLBPPB_9_0_10_0.crx
Size 30.4MB
Sample260508-phackscs6l
SHA256 5ed0bbfcfe1df11f8b94ed68eabc6948399c7e05caa9003f514a3943c0c7d604
MD5 c3ce339882a33a07f571f1f8f9a66244
SHA1 4639049a79cc7a29c26c6c5627713e48473a89af
SHA512 74fd3e17974326d7df2db7a0ce8a77234145c9781f8f9bba97a9578bbc8682e45b8b914e48c2fb4e52daee151cccbae51d493ee4f59b63f73284758ebdef3627
SSDEEP 786432:8iECjl8CP3mDTzKCyFHd8YyFXku4gnvz7B/YzG9I7:8iFl3/m2Nd8YyFXkg3B/YzOI7
TLSH
T12067337B9D519966CC37C6BCB1E8B172E219A5B6421E260BE4283D937B30154D3FECC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  background.js
- Size 10.9MB
- SHA256 cc23752a1b2142f731016fe9898432a821b57455ff230da6957f5d4fb8cd16c1
- MD5 0a9013883930cec66cda974121e82935
- SHA1 9738356473e83b0baea1763f2767a297c80402c6
- SHA512 75b5c14e88c5a5c3a483826283eb61b9bbf4c4bf91196726a97b520456513c9e3b3f32b1b6a54802e1e34e0cb0e79cdf9b0a30583d4016b7443bc65ea8e42578
- SSDEEP 49152:a975q2r7E2b/spaLsytULv1YEpXooBxmNBPhou0itt4M19vCirsVDDH+eBlCiUmT:apOgW6i
- TLSH
  T1CAB68D2E939971AC0A07774BF58D3535F0BC8DB6E752D1F158DD4A2A10E0E18922EFB8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  chatTab.html
- Size 540B
- SHA256 7d82a1b66958835162fd54f427b34df0e8f989498fa0f50f7bbac4a9dad40050
- MD5 63f4cf0e5bf76b4f6ef996b8838c8f3a
- SHA1 d53533e84f556e1f463e314f9bade70b1cf3b725
- SHA512 64e33b2fd1affe02e60c37c923d50d4518533935f7774d98b2f7b5df5f3bc6f0fee53166724d843c02c6d6f705d9672a8c70d1cddee6991b7b4b0c172278be2a
- TLSH
  T125F09715C9F34848614081A14AE0B2082B86C58BD38AAC0A3EAE76A49FC8348CCE7698
- MD5 SHA1 SHA512 TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral3 behavioral4
- Target
  content.js
- Size 27.1MB
- SHA256 fe7f59d0819215c14f8d9bc69aca763f14d169bea5b2d701bb655141cfd2f5c7
- MD5 fac375810e5f98b184e6d23a486c778b
- SHA1 8dd110d9f3dab476e82e7956af0a8f1764303e79
- SHA512 fa70db1ecb80fc6c397e65462f2831802c2a7d2a3e895177ce1eb21c3b86f5abe45872673e9d5d07ae9604bc7471e84c1731a8d650cebde63c037f87d8ba6ef9
- SSDEEP 196608:nhEnAtSXsZeuJBOP19F+TNUOs32MCFilmlF9BEGW:nhqAtSXsZeuw19F+TI3MFilmlzBEZ
- TLSH
  T1EF578DD9B2657479439392F4907F000EB33E689D9408807CF7ADD8E66DB8948627BF78
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  monicaOptions.html
- Size 338B
- SHA256 1bc16bccd1e880d185ba929e49b0cc1164ce13969e0f9dd0fd3a91b0eb4d63fc
- MD5 14b06334496a495bf24ef0f52c29acf1
- SHA1 d00923eadabfc9fff52d2458ca7609b135689f93
- SHA512 2ca8f4026ebfc685e5ecc60d92fd20906bf133655906eaeb26a379bb4c4ef83da4748c224a4aebc171db0b066feff042b79df53a7164972c00213764507e4bdb
- TLSH
  T126E07D55C8F18918129045505DE0F14C5FC6CBC7A3895C0E39D650591FC438CC9CB598
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral7 behavioral8
- Target
  monicaPopup.html
- Size 398B
- SHA256 f113a9af04ce73a6463cdc6599e551650c070c3e510ce7e7b8c8eac6b0b51388
- MD5 b35647d99c86c788fc0f5b231b189bec
- SHA1 0b9f21be81b1d07161c61450e429c232cc5c5303
- SHA512 bfdd30bc545e88326eb871ce23c4a26010e3ced5076c882ce0b44e9d648f8b18b3acdd496b6271c38d52f26ba9407980fab4b06448014339d213231e9f71d239
- TLSH
  T1B1E06885C8F1C86A015006611DD4F1596F8AD9C7E3851C09B9A960AE0FC5788CDEB4A8
- MD5 SHA1 SHA512 TLSH
Score

4^/10

discovery
behavioral10 behavioral9
- Target
  monicaPopup.js
- Size 3.3MB
- SHA256 1ee05a70242361625b5cfb5c7f850977f8bf7ff30d021c509b0152bb26dcc6da
- MD5 dd34638e1eff4fca1fa0b6f45cf2bd83
- SHA1 6861055ef4c8b56a91b22096ac14e129a601235c
- SHA512 260f8272d0bf4101a7ca0484b7c3cc9c9546def86d40a723c5579adf51b500a7d293a9aab668359bff104c03c9e75c84bc19e9eecd691c080b6b9e0fddb4aa99
- SSDEEP 24576:VKFBAUXnTEfGAUyWb5dSRkpIZ7bRhSVE9MW7HSyQsSA4syvxnE:sBAUGC5wRkpIYE9MiIvxnE
- TLSH
  T151F56ED57324D2AC16C7D2B9EF795581332D70B4704A8574AABFCAA42087B8CF71BE60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  sidePanel.html
- Size 577B
- SHA256 a789326751be96c056ecb831014a65d427e482dd45c3511482d4245b36f0446a
- MD5 e1a3384b28a42439faf3881f99c229fd
- SHA1 dd6204f21d35e7dadeeb4d8f6efba5000c67f4dd
- SHA512 676178c0b70d8bb9b2cada99ab1eb95a12e5017e7ac308676f4e9fce3d55a92b5f342fc8967d3d84d23529c3ab91bd016d8a5f852f4ddbb06d65fffe54f9f744
- TLSH
  T1B8F05949C9E38989615181604AE4F2082B85C54B9786EC0A3EAE76A49FC4308C8DB7D4
- MD5 SHA1 SHA512 TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral13 behavioral14
- Target
  static/global/src/static/activity/yearlyGuide/badge.svg
- Size 1KB
- SHA256 6a5559b60fd4ca60998b9f8e1c25b032af3cebdb2f24bf28e26ae669e3813912
- MD5 f44d7e2d84bf65e97283eb40e6fa09de
- SHA1 a95756232b081e285c2dbac07a0b48244c1c4cfa
- SHA512 a1ec5e3856b1ab2f25bee809a6ec32b4b6ba76b50b78a1db5f92fff5637ebf0da20c6f5c3a0c981345b8fe11bb04d6fb266a138313b8081a46d14d57c0e0bb21
- TLSH
  T1D0311209B3E9C661B10FC6EAEB11D96435531DD9AEC0C060C2F1BA1474771482DAB9D7
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  static/global/src/static/chatBox/colorfulRocket.svg
- Size 12KB
- SHA256 62ac29c147c6c2548d785f428ba53d3c6f2d1b02c1267c4897af77b7ce5e7b92
- MD5 a5cb61a5d7d4d82321faf3565d18d331
- SHA1 a6c0b57ecccca41330ca099eae2237af4ac51de1
- SHA512 35fe813b854fb29d424a58c658aa12b74f0d79537ba3a557b524b05139654500dd4ec5a575e029b11d4548a556b54fddd3316b60473c895b8ac0a80ca0503c90
- SSDEEP 384:6F6DqVma1SF6DqVma/aIjkP0Mflr2Yefs5c:6FKqXoFKqXyblq
- TLSH
  T1F442D5F6F6B8E4DDF0539B30FBAAC861132EA0BBF64143AD481DAF6954224C1D54F990
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral17 behavioral18
- Target
  static/global/src/static/logoPrd.svg
- Size 8KB
- SHA256 9b1ae2c71977bba2f95b1333650ccb53ce04704680a7086c2b504dcb17e79ea1
- MD5 c9e31f770aa4de14a5ef105bd032a35c
- SHA1 8b2a52ffa5cbe7b81d4ef11eb317964f840d6e30
- SHA512 0d1b5125fccd5efdbda8b427c0b529d0ee948ec12e152e80a6c2b4b10100bc88490c22f536707e964373fd2e3de4563bd03d92d65de8b37f931ed8b8a82f298f
- SSDEEP 96:Q9Wl/MuWNyZ5hhUsJ27bTeoOnF+6MniR/ma3PUaWZKlcCJLRjkodevF8MBUcfJSU:Q9WpGyZFv4gPUFOtdevF8sBSY6qOiAC
- TLSH
  T1670286EE63DC627CE94393B8EE8FC89B641B14ED77124B29E0692E94C14ECD7981D1D0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral19 behavioral20
- Target
  static/global/src/static/logoPrdLight.svg
- Size 7KB
- SHA256 8186d8997168fa6f8ba79b6210b905770f4474cbea70b4c5b4f416512dd59d51
- MD5 fc83f59c133ba64631cec28785993f19
- SHA1 251d0545c3db2161e1690dd8d9c766eb618427f8
- SHA512 ced4d765ffa2daaaac19695bf613d51e9f6ca2a3b598c3f2d48afccb2b24aaa1ce89164715211de42c0f02d9671065b1875c52a9d740914eafd0b116ada46dd3
- SSDEEP 192:Q99F7aHNbWlTT/4GJLjdRWvkBqcIp1K0rJbR:CLlX/H/d4+ILK0rJbR
- TLSH
  T131F195F2636C67B8A182D3B8E7575C9974AFA4EDE354873DC32CFE945047882988C4E4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral21 behavioral22
- Target
  static/global/src/static/makeItMore/makeItMoreBotIcon.svg
- Size 3KB
- SHA256 63b4daa0c2ee7fd266ed498f032081f691e1f6b12c699090d286d1d7c7420a19
- MD5 fa54b0e23f7ced1c1955341c0ee2af5b
- SHA1 c18ed07b7c1f09e2549004e0de33b177f2326114
- SHA512 5a5d907ebd23a8ae20e9bb7a679892923d09603f8a405c6dd57f696d74e5c55e9ff0de0d29642296de05644eee4278b061c25786521fbd27b8352c2e1213e3f9
- TLSH
  T124811435B3EDFC2AE1509178EB96D82450A9C1E6DAC04268C196BB2F91344C25D3F6DE
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral23 behavioral24
- Target
  static/global/src/static/realtime/close.svg
- Size 835B
- SHA256 dbfb972ff03ceb95c307ed5a7850e0634fe7e0c4fc4763b276658dc69338981d
- MD5 830550f892646024e8a7719db168a48e
- SHA1 e17a7a5957492b4ca6c5d170b5c966581e50c5e3
- SHA512 ad4447928103bcf8772646ffaadfb7cb5c80909fd2f1112023335e5db0464b28a6ddc25b3fe53590baad77f1cdb1fba82da38f1ce05d36140b4d019a960b3111
- TLSH
  T1C901ABFA58148284C0026B72F57B3494726E1CEA1E640AF8F4833A1278382D7C858AD8
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral25 behavioral26
- Target
  static/pdf-injected-script.js
- Size 181B
- SHA256 b6718449e46a1f27f1467e256e93d023d66a5be78362e60c7be5402884b500dd
- MD5 254c94e456579900e4d4ec7e128f4aeb
- SHA1 f78998f30c0e16752a9cdf54f509c3c2f2512982
- SHA512 3eaf15fe52085206e51783b5dae8b8d18596f4364dc821485a1e527c2e0e35e74883d157c440a64e4ca931c6d1f18e397f4209a0e8aa42b2d2be01c53e4f54ca
- TLSH
  T176C0228943FDC8B81B3180C36A61A3CAFC02024D244B0986026C013C2280B8BC080A82
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  static/pdf.worker.min.mjs
- Size 1.3MB
- SHA256 a7cf858ab0bbe21a00ef438c24a4ef5833c3d05935a294382c8d0773a8958f50
- MD5 1001f17653f487f58701874bef5a1964
- SHA1 712a4daf174b6bd03ecf7661753f16452f064978
- SHA512 7d35ad88c92daca4953640526b163f8f2c437c75843c710145cbeef6fe47bd02e2eece6a2e5610f9f6c6c072901c68ef9d42f5649135efd99ab5f8b029473f25
- SSDEEP 24576:PlWDs6u4L/NkLrZX8UGf9p7pRSVuemC7VF+QtS5a0+SK9wex6jHP85EooPNv9pW8:dWDs6u4L/wr9U9RSVuemYqV5a0Zowexw
- TLSH
  T1D9556CB123656C67C3E58AC310571602E578B11BF10C496CFAB8CDEBA4A58D611BFBBC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  static/youtube-injected-script.js
- Size 845B
- SHA256 03ac1acab4b96842407e529f1db61db4082b4d31aed12be6be11f22a8266ac2e
- MD5 c39a6bce704d650c2091df4efefe1550
- SHA1 cccbfd6063564e9d86140728068fc2ab1eed1b7d
- SHA512 0a63f119c2379a0120af186ab728e5fc11a2c53fd2e437342b6081101a78925f07c1e45cff1fb4d2abb027413e59ca3208b16d123c2aa06f255ebf1141bd5ce6
- TLSH
  T1FE01AB89A4B4E0E28B4B10B0E96B62147121A42B340698F27BCDC7D08F1A57ED5936CE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32