General

  • Target
    HCFEINLPKEGNFNFOKJFFFCDLPJCFDKIC_7_31_0_258.crx
  • Size 428KB
  • Sample260705-arjv2sbt3p
  • SHA256 19671c87ab15ce99bfbbfa0bfda792d1437254a838fdd86cfd1fa30befd12ea0
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      3p/moment/moment.min.js
    • Size 33KB
    • SHA256 0a3bb1e382060c6999c26faac38aed7e3d6cc03f7376a9a36b881a7e5ba923ca
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      3p/xregexp/xregexp-min.js
    • Size 7KB
    • SHA256 a29edac1a897dadada02d3f166074ee3a4f1f67bb553d5fd884ec38dea376919
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      background.js
    • Size 2KB
    • SHA256 4aa66c9367527b528f8c68cffcc9862f123dfea97093d533e197fa972b496b96
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      chrome/background.html
    • Size 1KB
    • SHA256 e41edbf49d34f04c444c75cafb1204d933e2f1e4f66710edc3cf371d3213fbf2
    • MD5 SHA1 SHA512 TLSH
    Score
    4/10
    • Target
      chrome/dce_config.js
    • Size 17KB
    • SHA256 c7f28dd59ec1edaa1f513b963ca272a71e112b042c8d1261e5a0e5cbeba17729
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      chrome/dce_context_menu.js
    • Size 7KB
    • SHA256 04b33e93855d7a88224658a325138effd9867d8c80482320f00afcedc77be95d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      chrome/message_controller.js
    • Size 1KB
    • SHA256 40d669363bb07ee9031f0e96b218e99344a032cc5b56099be9b3a760f7c32d72
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      chrome/message_handler.js
    • Size 8KB
    • SHA256 38f329400e93f59f06675c16111f339f05d1cc0450c7d2ea930037f8a5de716f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      chrome/server.js
    • Size 17KB
    • SHA256 22a32ec0cc3c981dfc63c6271898d4d2fcf65bf09cf868e87e425d4933fc424f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      chrome/util.js
    • Size 10KB
    • SHA256 bbbd5dc6a4ce36f0e224beb2bb450c0afadda030e1f9f1601f29a6dbab9bd09a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      common/comms_wcf.js
    • Size 11KB
    • SHA256 276a7c4f8d3001cd5eed74e6bc58c06ea6e7ff3c67d99b4fbd192f2ad07b84d8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      common/dce_config.js
    • Size 2KB
    • SHA256 e34124da4d277682bb52cd971c94c552b7a06dde86150f3b2817649d94070152
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      common/dce_console.js
    • Size 666B
    • SHA256 846593f8a534978eb7653117f60a89c6cb2ae5dc44cc4217758f1fb83cf82a61
    • MD5 SHA1 SHA512 TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      common/dce_consts.js
    • Size 869B
    • SHA256 e7abcbaf4202cea64151eb9e1ecd68ecb04d98de41d386ea7c3a238699fb7800
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      common/dce_init_context.js
    • Size 783B
    • SHA256 fd057afb85e93420deeabeacd454fcf20b5938c6c7878fe646d02f2d1db60f6d
    • MD5 SHA1 SHA512 TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      common/dce_locale.js
    • Size 6KB
    • SHA256 04bad33a85ec6dc9609478d3debdde4ed71e8dcdb9f3bff985656902b2d72251
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v16

Tasks

static1

Score
1/10

behavioral1

execution
Score
3/10

behavioral2

execution
Score
3/10

behavioral3

execution
Score
3/10

behavioral4

execution
Score
3/10

behavioral5

execution
Score
3/10

behavioral6

execution
Score
3/10

behavioral7

discovery
Score
3/10

behavioral8

discovery
Score
4/10

behavioral9

execution
Score
3/10

behavioral10

execution
Score
3/10

behavioral11

execution
Score
3/10

behavioral12

execution
Score
3/10

behavioral13

execution
Score
3/10

behavioral14

execution
Score
3/10

behavioral15

execution
Score
3/10

behavioral16

execution
Score
3/10

behavioral17

execution
Score
3/10

behavioral18

execution
Score
3/10

behavioral19

execution
Score
3/10

behavioral20

adwareexecutionpersistenceransomwarespyware
Score
8/10

behavioral21

execution
Score
3/10

behavioral22

adwareexecutionpersistenceransomwarespyware
Score
8/10

behavioral23

execution
Score
3/10

behavioral24

execution
Score
3/10

behavioral25

execution
Score
3/10

behavioral26

adwareexecutionpersistenceransomwarespyware
Score
8/10

behavioral27

execution
Score
3/10

behavioral28

execution
Score
3/10

behavioral29

execution
Score
3/10

behavioral30

adwareexecutionpersistenceransomwarespyware
Score
8/10

behavioral31

execution
Score
3/10

behavioral32

adwareexecutionpersistenceransomwarespyware
Score
8/10