d7990f3da46804aacd9b85d6d97b365933c08325137f4218b570cc28bede72c6 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
EFAIDNBMNNNIBPCAJPCGLCLEFINDMKAJ_26_5_2_2.crx
Size 4.9MB
Sample260608-pekddac13n
SHA256 d7990f3da46804aacd9b85d6d97b365933c08325137f4218b570cc28bede72c6
MD5 65080b631cf25d4e9c9ec415403dee24
SHA1 b0371785150707056f3ea2d22a29eae9ad22a0d0
SHA512 2ecb4642cd4e802584589f24da482d3370915ca2dd9fc78e1c634a25a4998ec074926b67d04332ba62dc1b206d99d79e19ff3edcfefcb091bddc463f6b5486a9
SSDEEP 98304:LSM1dE63nQ16tIXmcbDEzRMLpy/oesg2cmYl4wuH5:LSd63Q1cNwDElMLM3s572s
TLSH
T1B8363366BCF5C666CA129132F499F593B486411DA883F0072B094CDA4DBCFD48F99BCE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

adware discovery spyware

Malware Config

Targets

- Target
  browser/images/AllColumnsOnOnePage-Landscape_light.svg
- Size 3KB
- SHA256 981fc8698e327fa5a0999ad3cac9486f6832a64b4951baaffa74bf86bc091c4d
- MD5 31c15d0ed749280ce33654249f009d9c
- SHA1 f4b3f67933da9c884df6c957ffc446ac1c43f8c0
- SHA512 40a109a6f070e1dfa076e32a016ab3dc6c06a81a78e4a6f4b7afc928d9b08d96142c5d683e0b22e0d5b5304c2cb3f43352113881c47580578c33bdfbbce31b7e
- TLSH
  T122814566A118A419E881C71DEDE5C1E0B12DE5CE64A3C18CE3A74F0FB5A9CFB9C18F54
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral1 behavioral2
- Target
  browser/images/AllColumnsOnOnePage-Portrait_light.svg
- Size 3KB
- SHA256 d7024846f931e75c898d5d6d326384c4b304efa1ec1758bd5bc2e6d20a93806f
- MD5 0826b1a3497d32371a32f3740f36e9a2
- SHA1 fe08d664e446c7012ac280086b016e069be5e598
- SHA512 5c965fccc702244e94b1d966000841bdc38f43fdf6d8074c2b40f39a349159339ba3bed25d99c96d1a4ab74b83314a633c9585ba9a75b4866e85c26af51d8f3d
- TLSH
  T178813397A218A51EE981C72EE9E1C1E4706ED5CE64E2C14CE3734B0F946ACF79C24B54
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral3 behavioral4
- Target
  browser/images/AllRowsOnOnePage-Landscape_light.svg
- Size 4KB
- SHA256 3f88e0adc389998d5aa7c2aa4b0af38e30130dbac85ecb94b3500a4a96734ee9
- MD5 1ea21d0a3e829b9e8f86cdf578053b7f
- SHA1 67d30d373c9c7d285555b56cdc9cfd896d9b3477
- SHA512 60685075f519a997f4d7d92c75663abff4295635058eda1709a02b753258923f33c5703b2265312ad9a3d6a37a3fb1f79d40d954748b92d0be780da599cd3ea8
- SSDEEP 96:AJA7lssnlHJYVwtOGtONLTMN+GluA2wlpMmJav:JlnpzMTaf4
- TLSH
  T16791575AA118952AE881C31DDEE1C5F0702CD4C954F6C28CE3A35F4F79A58FB4C28F55
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  browser/images/AllRowsOnOnePage-Portrait_light.svg
- Size 4KB
- SHA256 64a6f990d3f9e934f8e66c40a61aa58066f1332278f3e8b683dd3e4b9fa52ef3
- MD5 90a06c79d01dfa712f71834a36a16706
- SHA1 fe257821f575591247e04cc297d87e9128a3da17
- SHA512 2a18c191aac3d285e0ce9dc4ae4ae91c4455bc47ca6986ecf7165b588231eb32af5e53c06516bfaf9aed4288a7be9197b6d1d15ef7a82c2fa6096271ec904bce
- SSDEEP 96:AJp77SUoVty+wNOGx9TMp+GlAA2wtmJav:C7SasM4
- TLSH
  T1CB9167D7A2186669E881C72FD9A2C1F1706DE5C944F6C29CD2E34F0BA8688F74C24F64
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral7 behavioral8
- Target
  browser/images/Close_icon.svg
- Size 628B
- SHA256 851a328c80c1cebbcb73e41d55973c48946b558eee931ee0de92b6e047a9487d
- MD5 9cc90e9c108f0a12daba3c44a4612b91
- SHA1 3e6e866aae31e42752236fa444727e5950375804
- SHA512 4a987ee898538694e0c8f2e646ffb30ae3fc07b6c2a066059cf733ee82ba5f6f06e3e3ca694ec0758676a3f9a7eb40cae0ae809f6fd36c450568faea1865b9e4
- TLSH
  T1B1F07DFF525C5DED341393A43AA46496A046F6B2F68DD2C5F3C262218D31A736610B00
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral10 behavioral9
- Target
  browser/images/DC_FileError_160.svg
- Size 3KB
- SHA256 f6cccf8aa5fa711fb320d6cec5bd8abf912ff7e0265c30ba767ed1a9805a894e
- MD5 a5c00e86c5889fc9d3754f18e35d1886
- SHA1 79d93d1b6c4d95d0c046394a15ed0fba7e782c3c
- SHA512 77f2e10fc8ff7d3ad2e208e78bd14bfdf75689d17bf82c63088fb401425b9522e521cedab1109367adf2e329c4297e4d2ac81774a35f3add50cfa5e4e193f60a
- TLSH
  T13C71A4ECFF7543F4F140E9A4EE2A0069B65F88FB17C242B8C35C1D5A84828BDDD29890
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  browser/images/Error/B_Illu_Acrobat_n_connections_160x160px.svg
- Size 2KB
- SHA256 7c3e5e23f6b8da4739112d8f6612ce29cdcd267433dc2dccd4960fcc09d45c00
- MD5 3c1df0f0a856fdf94353d33081178106
- SHA1 fab9a61168ddfa176ea2fdc24c7f430798ec5246
- SHA512 3b1e7273a5ea1ff33901df1f9014909c4f5c213cde2d0eb21b4d4ba97d3ba046306de058034b5283e2a772572bdf6996d293b01d461f9b1daf1a4927c1796bb5
- TLSH
  T1B55120414B8DC27AEA548A9CCF28303632B744C57378F0DC98175A86A0655FA8EB9C7F
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral13 behavioral14
- Target
  browser/images/Error/B_Illu_Acrobat_n_connections_D_160x160px.svg
- Size 2KB
- SHA256 39e1d6c825eac69fd77d45c7a2cf44b1d7f21ea66be5fbc68508d6c3cec2d8c7
- MD5 c53857dd6455dff4407de4dacee02fa2
- SHA1 34339eefb277b15da665899560b8d8f956d3c70f
- SHA512 5599d8708e1ab3194a5f416c76571a154205c0c986fc26ed052db05b7c6c04873e8b422e086c8162322df04e6ed866240d340e38fac57ff56aaffc55f56ee726
- TLSH
  T10A5144415B5DC27AEA41CB68CF18B07732A6A4C4373DF0C8ED93265190412FE89B49FE
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  browser/images/EverythingOnOnePage-Landscape_light.svg
- Size 5KB
- SHA256 49d04fd78f541a6f8cc29d69c1e51e40b584c36642c6ab2805e75af1a5eb6c75
- MD5 ff89f76e0c0fc743f7a34155e34348b2
- SHA1 e3990f5d939cdbebff3af881577c160bada03379
- SHA512 b9c80df68094c66ea3bb2aa0feef53b86117149acc569ce17955f82bb11f014c89f83ebc4226b3b1f3fde7b3ca86d2c222c34b7362533e9758be3ece34f3de21
- SSDEEP 96:AJu7G9qESMLWqwVebkTOjSxXrt4iibGSaBGitAeAyKJBGjAex2nOEB9BGq:b9vMLWqwV+wt49ktAeA8A5OY
- TLSH
  T18EC10F67031899A9D6C3C20EDEB9E490352D44DBE1E5F2CDEB630E0B98826F35C36A54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral17 behavioral18
- Target
  browser/images/EverythingOnOnePage-Portrait_light.svg
- Size 5KB
- SHA256 d1b4e68e0933d4207c9dcef5a22baae149a256c86028099265361377587946b5
- MD5 3636eb79d160a0cc432868691ad75867
- SHA1 4cb3754eb55e08b6b7c6ca6627c5c3773088230c
- SHA512 59203d116bf065bf198a605357d3e032f2b6b875c82eed1c2b010ba826787b33e84dea9af7c5fce9ed92533d2c1f41485ebe5580e88fb64d7f83c701de0d04c5
- SSDEEP 96:AJ17xIlJliW9MYEQ8pg9BsGq7qxlBYcRBGCADOQBGCjfJTO12pF:G9W9MYj2n7qeQLcfJtF
- TLSH
  T164C1E0275318D6A9E6C3C20EEDB4E0D0326985DAE1F6A2DCE7630F0B94865F25C36F54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral19 behavioral20
- Target
  browser/images/LocalizedFte/de/fte.svg
- Size 434KB
- SHA256 ecc6cdda54ff24498d16357f87009d1bd68423245c79392c9ebd74432bfa641b
- MD5 74eda8823642e9226877c76d41198968
- SHA1 ea194b95486d8d405256a46350519e4eda42e9ff
- SHA512 fe82956d3cb199d830c914093d1d7c9c30f620ac5cd03a2fcbad650aa136b6aa16df06acb72ed22b44fb0ee61c6ab97e02a76e5d9cd9d54186a8990088375f88
- SSDEEP 1536:zFLqFY5EFLqFSFLqFzAuP7dAkEfaKFLGUOg2+7nokKrYO7LG4gABTsDDMGKhAA/m:9Z1I2RGASNbzHF
- TLSH
  T17794A6D85B120DF8ED89C6E6E9C4125229CB90FBF9EC5AD4CB09C333781557E8436EA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral21 behavioral22
- Target
  browser/images/LocalizedFte/de/fte_old.svg
- Size 66KB
- SHA256 1f07f441efed62df6c748e8125dde8392ea1cec48808eaaf695105b1d1593df0
- MD5 cb95b910abe08288aba5d218da5cf075
- SHA1 d66658268f61ae473b091bf6d7e2c2cf8ba29e29
- SHA512 807cd8f652eb674f06c64ce8dc86518732d3a6c05ac00f98fcac01f05f2d3558b7a457ad28d3bc0c3e5abbaf7dd6a18ca24c6d40dcc1a1044eb276450cddd244
- SSDEEP 768:7qtTl/2wl8vBhvBTle/qgP7Ga7Pw1UT7f7APiOMm4dcSQ2GD8YLoEDCqJNKpNLFV:GpYBhhYNBAvMy2GDDiqJNK/pvFIEJ
- TLSH
  T1C06372D8773109D89F88C9E4AAE51131197E60FBFBAC54D4DA09D337AC2983E48F1E52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral23 behavioral24
- Target
  browser/images/LocalizedFte/en_US/fte.svg
- Size 405KB
- SHA256 6f107392f4378f10c93fe614e379b97d63e7da112b01d9d49e45009a12f09d8e
- MD5 0f3a275352993d142e51a31ecd193718
- SHA1 de918797f2447963a9b3c17bc1e85b6f653ffac7
- SHA512 2ba6ea1297e1eff601a1815529b6f691aadc1ba66e57a8564e73c4a1aff5639952c160936d69d6dad5f13c06e140d645966df777d723b0606d7c2acf24d1fa5c
- SSDEEP 1536:xFMWr2XVQvOQg1FLqFL5EFLqFSFLqFcuqlS2xlwzlS26CF/6EshkgaBTsDDM+Khj:uVfbyvdxCSNbzHF
- TLSH
  T1FC94A6DC5B120DFCEC8986E5E9C4125229CB90FBE9EC96D4DB09C33378149BD8476EA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral25 behavioral26
- Target
  browser/images/LocalizedFte/en_US/fte_old.svg
- Size 56KB
- SHA256 7b2dd590cf3f93d303468764ea27063b40e484590204e60b70ba943ed763d7e4
- MD5 e871b9a11be9c2e180d01edd4bdb0e80
- SHA1 8880ada2fb526ca445d194971d557cb867c381fd
- SHA512 a28fc3530978df8f57539eddb8c5673d28d6c05a6e8bd7f5c90e7d6507cb3c36a6aeda7afc84475a97edceb902200e533e040edc48689183f124d605c96620de
- SSDEEP 768:7XtTl/2wl8vBhvBTle/qgP7Ga7Pw1UT74zrkaoRg1+Dnbnm49hJ3/M3ss:fpYBhhYNGIbbx3EJ
- TLSH
  T1C84363D877210CDC9FC98AE8AAD511210C7EA0FBFB5C55C4EA09D237AC6993D48B1F52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral27 behavioral28
- Target
  browser/images/LocalizedFte/es/fte.svg
- Size 440KB
- SHA256 83b84581ae57e0ea33eb34c705410ce2178da7ba4bde560c78e51dc53fe96ec4
- MD5 e218e3d799401d922c40a675707028e4
- SHA1 b91e14607b71afe668762fa42279d33014b9c3e2
- SHA512 305f539623d7a27aa5510d717d76485b76d4b36bf179be703bce482b42e086f40ee9568af71d0b97a9a227522c8265bd8611b7ba03437ddc0f74aef1a91a383c
- SSDEEP 1536:HEFLqFe5EFLqFSFLqFzAun1dTIB5Vt0jJVBOlqAOg2U1fTIP7fb0jjBz89qkgABH:H4Z1I2rizSNbzHF
- TLSH
  T110A4A6D85B120DFCEC8986E6E9C4125229CB90FBE9EC56D4CB09C33378155BE8476EE1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral29 behavioral30
- Target
  browser/images/LocalizedFte/es/fte_old.svg
- Size 67KB
- SHA256 37af9fc4a4b5957776c017d559d5f3bfc98d7c88a7682c59040104b1955fa153
- MD5 e6fd07050a8e93a89b70515858205d5a
- SHA1 3180ce0d4893d251bb9b320efd89903be3c49e66
- SHA512 0f484c58bb939bc5939691158b0f0f6645d2ccd3754a551a29c38fe904cc90d8dd7ae87486f11e8b4a830cb76a757c6ace3477538723efdf2df4e505acf8da9c
- SSDEEP 1536:GpYBhhYN7V/QksGa94n9qylBKJgenCLaEJ:iJ
- TLSH
  T1B66394D83B310DD89F88CAE8A9E511211C7E60FBFB9C54C4DA49D236AC6593E48F1F52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoveryspyware

behavioral2

adwarediscoveryspyware

behavioral3

adwarediscoveryspyware

behavioral4

adwarediscoveryspyware

behavioral5

adwarediscoveryspyware

behavioral6

adwarediscoveryspyware

behavioral7

adwarediscoveryspyware

behavioral8

adwarediscoveryspyware

behavioral9

adwarediscoveryspyware

behavioral10

adwarediscoveryspyware

behavioral11

adwarediscoveryspyware

behavioral12

adwarediscoveryspyware

behavioral13

adwarediscoveryspyware

behavioral14

adwarediscoveryspyware

behavioral15

adwarediscoveryspyware

behavioral16

adwarediscoveryspyware

behavioral17

adwarediscoveryspyware

behavioral18

adwarediscoveryspyware

behavioral19

adwarediscoveryspyware

behavioral20

adwarediscoveryspyware

behavioral21

adwarediscoveryspyware

behavioral22

adwarediscoveryspyware

behavioral23

adwarediscoveryspyware

behavioral24

adwarediscoveryspyware

behavioral25

adwarediscoveryspyware

behavioral26

adwarediscoveryspyware

behavioral27

adwarediscoveryspyware

behavioral28

adwarediscoveryspyware

behavioral29

adwarediscoveryspyware

behavioral30

adwarediscoveryspyware

behavioral31

adwarediscoveryspyware

behavioral32

adwarediscoveryspyware