21e7f4f9f1d54c61b545f2aac1876af5be4e889156c1f6edd57f212a3d8ed174

Sharing

Copy URL Twitter E-mail

General

Target
RoPro_v1.7.1.zip
Size 3.2MB
Sample260523-akxtbsht2j
SHA256 21e7f4f9f1d54c61b545f2aac1876af5be4e889156c1f6edd57f212a3d8ed174
MD5 5b6110906626abcc851bfcb86e26936c
SHA1 5cb89c9acd715caef307a3a239e19c69e7fc9529
SHA512 5fb6ac97bb8e7194e61b1720deedf74d0baf3ebcc5ddf5b1cf9f66f955a56d8e80a42f9aed07da91196f3c282edd586fca89815ff93480aed0bb118bd343711e
SSDEEP 49152:uhxPBrpNCLnRs/cSYYCWSj2gyQHXgVEoh0Cg1imBvCYAiRi9x+HJcgzPrFeGYgwd:EBrpgscYC8sHXSWdDAyi2pjzPrFo
TLSH
T168F5339AF13D1897C86EFAB8F89E0756CE3081A52453F00724CF850985D7BEB2763796
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  extension/background.js
- Size 480KB
- SHA256 44408bcae96cbeb63b9628bb0334e3f85e63b82ab240234268a47ed9d1d2f209
- MD5 7a6dc41f9857e60b26ce35cbdd7d41cc
- SHA1 b0d679bbe437a31cab9534cf73467d63023873c9
- SHA512 96449a7ae7b96fec19bc5d688e44aafc5c34a1c72667f83f93ec2beaad04e4d6e2100216516c9a10ece216195cc91ed59571e33f3141f2b7234542c37a86b89c
- SSDEEP 6144:Ffyuwo8nP/wFl9omZaa/8kJsgmZ+FlqkGxWlXVh8wW4:FN7Xh8w5
- TLSH
  T176A4D8497CE644064A573079D6AF51C1B2B8EC03158CEC027E6CE950AFA857E2BF7BC6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  extension/images/Any_Dark.svg
- Size 4KB
- SHA256 51a2adf0f0dc3a280cc020e3339fabb8e691db837f8e4beb68c78a63db865273
- MD5 64ac67e969c6e1e6da6cc4f701cfa7b1
- SHA1 e22090552d38fb09e62f8620b8f23236b4c9b297
- SHA512 d4d27004e0c96dccdeb3cad9d0eb37da1d01292611a7fd71b1faf9aab814f51142488fe0cee61504c2c74ee4c13a1abeab95400b6d91e46b52ab55c866b568b9
- SSDEEP 96:gKssRSdItutb/b/ZbC3osGoqZINYFa/dD9lb+eIKjxt4N:gKRRSYuRD/g1aLcVD9lb+fGa
- TLSH
  T12281B6EC7BAADE35F250D1FEE4150491AF0354CAFB524104C7917F1FB4698890D689E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral3 behavioral4
- Target
  extension/images/Best_Connection3.svg
- Size 1KB
- SHA256 b9dd9f4c4b27e7984f37523e8dae276c90932c05b1d71e07650ed1026e9c8d5e
- MD5 9907932e14cfb837006fe63f77941a3e
- SHA1 1c4ecc691eb4805638f41d1bc59539f8b5cbb17e
- SHA512 625f907eeb894712540ef8a128126e1baf2fe3d0d01f32f53e7d7915abd84f629c8af90ae1a4b9758ec01100d095ce14a3b0ae6e2a1fcdbff8ec6170655a2b35
- TLSH
  T1C131005433B992B9B005C8FC1711E4A1271E69DDB36282B9C8116C3938832FCEDADDD5
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  extension/images/Demand_Dark.svg
- Size 2KB
- SHA256 d26a8e995a27f7b8ca69a71cd079d859822f107d1a33448d314414b3b0b33a2a
- MD5 5c7669e9c315a830569a6d4a216e3cf1
- SHA1 2053e7871d7b9269e09cc206ea52eca4215a65b2
- SHA512 4ff68b5022109a40a23a6087918e55e937b15603307bb510ff52d029c0e02531e5728510a8b0f8db4297fb2b4da9554a57a07a0f9d83ce9fc30ce3bb63302a81
- TLSH
  T1A35152A8273747FCE140D3F94B2502F92E9998C5658828F9C3B73CA5E0879ED1CE54E2
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral7 behavioral8
- Target
  extension/images/Downgrade_Dark.svg
- Size 5KB
- SHA256 d8d444375d1cd08bb65068b5975c6dda7194cd1809a585959abce3ab84e3b608
- MD5 1898d1e583f8802aadb4dbbbdbdb1673
- SHA1 e8bd12c31f4f6c8f44742d6fa3b649030cdbe449
- SHA512 c6f86092c314c858cf56c1d41aa610d7e32d3254f70c8355426c913e8074d348f2dbf2454284a1f0fe00134f38134abc8efe4b5573d4e7d67c3b94e7417ea3d2
- SSDEEP 96:cFbGvSGzCuxGiZ+1g8WdqrCmr2quTTiSPutBrWjf9k2eVBWEFeJMVIefAOwd6:T+TQqu3iSGfrouhxFeJMVZX
- TLSH
  T17BB1758C272047FCF98083F68F2525F8696B5097A5C87F78C27B2CF5D54A0AE9D264E0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral10 behavioral9
- Target
  extension/images/Newest_Server.svg
- Size 1KB
- SHA256 7d7d2c6b7a9d340417a3d353516640c64d4b5e455c1687063826f411caa46b29
- MD5 11cd3ada212c9715269f516dd6322c21
- SHA1 91e68acc9802cfbf9386b8eb858a8476f9e64354
- SHA512 88449dcf710ef93880bbf10d4a3714c65323624dcf5e3d516c3b68f9b62e538c833cec7182dbdf491147c94a62c7564447df060a480ae10cdf6507ebb583744a
- TLSH
  T14411B72863252F2CF05941F8CF2976E9F5292484A18452F0C7623CBAB01621C1AFB8CB
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  extension/images/Not_Full.svg
- Size 474B
- SHA256 a4d045a629b6b8aa9c726f649ed98c9ea7f50143e87326569f0ba93ed9354bd9
- MD5 2bbf472e6bf0215e3eb821bedc08ad87
- SHA1 29577a36dbdaa882e61b6f5b1c28eed4af63dc71
- SHA512 1e17866562c3075aa08ad845c785ae0a7945d9635c0c73af7ccb8f844c01f98e63aa92dd53e0058bfb0d76fd25ab29a797546a5c7102b6061425c89efc02e3a9
- TLSH
  T160F0826996881818C6B07BA55724F895E11DE181CBD500859D81373BACAF4CE5C3F15F
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral13 behavioral14
- Target
  extension/images/Oldest_Server_2.svg
- Size 1KB
- SHA256 66a7be26b4df8918cbd90424fdcf4927a556eede7e2bb6f3b74192d515bb8c28
- MD5 f0280ac55f26e9d72488b3ec0f3aa2aa
- SHA1 4b2aa6a7ff85d8166479173c90abbb6280620ea4
- SHA512 f9ccfa4e97c2e85ad4d86187e6d17c05c2c3c32b7f5244bcc6991d67ef89e1ab687c43d85626327e684b65ae2a56e060ca95eccd21502d8159011e5991a077af
- TLSH
  T1CF31111823228BADF8945078C7B7B5BD901118B33A35D1D4CB621E35E28919F747E4FE
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  extension/images/Player_Count.svg
- Size 3KB
- SHA256 fbec827984b0ccf3efbe566994d403a4a6f6613cdce3e68dc05f592ad65ca5aa
- MD5 d799f913bf1408691307efda646b418c
- SHA1 0fbaaace80e922c669c8af943ae0c690de33f7d3
- SHA512 b9424f0cc9ded8eb155b0a20863c5162374f5efd859cb83bf9b00accfc62fd5d2a4ba0f815a28def61910292b7d83be07754e087545f340855d29d0e4c2cb40e
- TLSH
  T1D871A7681535DB90FE0C70BC973AEDD6B7213BCAB6448070C7523D6BA8061B93E485EB
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral17 behavioral18
- Target
  extension/images/RAP_Dark.svg
- Size 5KB
- SHA256 f362a0356d6a7b558129e69f1a582e7bffbeba3486c7f6681e8c58ee875739c1
- MD5 fb12d674361e164ce5a65c23e3821f49
- SHA1 dbf0a2d741032787122069db56f7f1637fe1534d
- SHA512 1f6220be6e53a6b90bea7f6385ef1bf0aa136a240ca3a35263b474d04630a4fb486f84e93112ec5154dcebc688ed206182dd9b3ab3724af23aa804a51731bbd9
- SSDEEP 96:QXdcVtTI7r4c1kNzJv8AqCsWl4DZM2GCaCeRmdy8D8RDBS+WSTwdC6/7hEN:QNGTsvwFEAZMFZGCaCeRmdLD8xBRfx6c
- TLSH
  T104B151A81B78AB2CF590F0FCCB216474BF1958D99A8149F1C3A53F0BE8598590EF50E1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral19 behavioral20
- Target
  extension/images/Random_Shuffle.svg
- Size 2KB
- SHA256 c798b29fb0c5c09afde717e5c5a3a54edcb187e85c92a87a77655ac5ef12b57d
- MD5 d08587c8b47c9798f12fe3882b1d26cb
- SHA1 f266677bc9db9a77847e262644fe8d9f8733e4a5
- SHA512 3e3e94d1df422e8a541bc06ec2c2cb6080f031593adfb2f520566af3fed99997c76ce1921dc2e79d333fb83ce989421a224be9ea6f9c3e1843c564605ce66aa6
- TLSH
  T1EB41CE8422B48B44B9A0B2F9857424E279172CDEBC15C1B4E7B15D10BE414EE4F699EF
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral21 behavioral22
- Target
  extension/images/Rares_Dark.svg
- Size 3KB
- SHA256 29ae50b4b2b39ad28d444d6f0ddf4acbf40cfe1b703a5326852b677cbd8a7bb3
- MD5 676b418885eebd3766a54745c035de41
- SHA1 55a47cc1bdd8adee4cf9333aefa1cadd077d0804
- SHA512 3667be532ff8c338f9bd46f04a0751555eb5571ef44de886f9dc01ac2a6744a75c8468a540dbb522c3f3c81798b262c44d69718477871777af292403d78cd1c8
- TLSH
  T1AF81C9CD57300B7CF955E1F96E2978F82B5669C26F8C48B1C3BB3C62944A09E0D674C4
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral23 behavioral24
- Target
  extension/images/Robux_Dark.svg
- Size 4KB
- SHA256 16289944fad33d7c71d40515698d09e915b818fa72bc993b773a1b9ce246349a
- MD5 7b7378689d27a3a4a2b9fa75e863e583
- SHA1 7186e4579a5a52a76b6af353415acbd9b501bbf7
- SHA512 6892df81540d248a018e160e771b74668299e9c502d08647413b850d05db157eb659061edfebbb61798dc5b8d130968a9f881e0dfcc995191d2baf330bcd0bd3
- SSDEEP 96:LY+hFqPq/pqHZHV2W2bB48AHzZIM1nLrxEcHQNdPkwQHzJPFCD0Z:U9H8WuAHdIMdLrycHQ7PkwMzJPFCD0Z
- TLSH
  T181A1235826A1C37CFC44B1FE591298E85ADC18CBE6CDE4B9C36B3C81D4C90A5CE918E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral25 behavioral26
- Target
  extension/images/Server_Region2.svg
- Size 3KB
- SHA256 6cc222e7a53e8b4dadb5e224f62b6f1040cf2fff872e35d4ffc12db5cc0b1f2c
- MD5 505de4469af9b1338d48bc17e279674b
- SHA1 4ac4df84b2fdcc37f9a465fdefa4118808df1bb1
- SHA512 822722eee0b8b3b2dfa4cc0433b964ddbf86aa887eca56ddd06bb7c9f51a168dd6169d783d50a3de8f5a9be69738d72011407f7dd7f4c040460840c0584b6ba8
- TLSH
  T1097165D81B6AA7E8E455FBFCD53BA9D0AB0E18D57600D135C3A62C16D8130AE28D50E7
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral27 behavioral28
- Target
  extension/images/Server_Version2.svg
- Size 711B
- SHA256 c6df2f332226fd0340eace50d3075a3c54f63e19cd9d6b6c4e795ad2af59fd9c
- MD5 118243450fe5670508de47ebe3d27a0d
- SHA1 5f415ba6aba5c7025b63fedc97b632daf6337493
- SHA512 1e1438863e8405365f583c04057486fee93b131feedbc9fa38277734f5bdddc2ba9c5d57d495dafb67947125216e5e165e1355c9e906b320cce3de78ca402744
- TLSH
  T10A0194B81790CF28761583B4C33C31A67AF6C4C5B0A4D665C6217472A50127D7CB7DE7
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral29 behavioral30
- Target
  extension/images/Signet.svg
- Size 2KB
- SHA256 e88db12c205e24cb24b6b189380ec1ba0b9cab7102e0d3a3f7e3758a7a131909
- MD5 897eb0030945483ad6d88a3478626c68
- SHA1 d0cf50affdc4110d6c866747e2082384d2e47199
- SHA512 cb6dd1fdc19ebbb5fd1ba0062c580ac9c036a3bc4d4ba78591f4b178f2bc0a56a27a9c894a8ad01176653f6e6cea775ea2afe22ec545dca78f28977238814e2b
- TLSH
  T14B51D7D3A390D7F8F116E7F8C62878B13A5239E66B03D451C7E13C96E66845D0AB44C7
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32