Overview
overview
8Static
static
13p/moment/...min.js
windows10-2004-x64
33p/moment/...min.js
windows11-ltsc_2024-x64
33p/xregexp...min.js
windows10-2004-x64
33p/xregexp...min.js
windows11-ltsc_2024-x64
3background.js
windows10-2004-x64
3background.js
windows11-ltsc_2024-x64
3chrome/bac...d.html
windows10-2004-x64
3chrome/bac...d.html
windows11-ltsc_2024-x64
4chrome/dce_config.js
windows10-2004-x64
3chrome/dce_config.js
windows11-ltsc_2024-x64
3chrome/dce...enu.js
windows10-2004-x64
3chrome/dce...enu.js
windows11-ltsc_2024-x64
3chrome/mes...ler.js
windows10-2004-x64
3chrome/mes...ler.js
windows11-ltsc_2024-x64
3chrome/mes...ler.js
windows10-2004-x64
3chrome/mes...ler.js
windows11-ltsc_2024-x64
3chrome/server.js
windows10-2004-x64
3chrome/server.js
windows11-ltsc_2024-x64
3chrome/util.js
windows10-2004-x64
3chrome/util.js
windows11-ltsc_2024-x64
8common/comms_wcf.js
windows10-2004-x64
3common/comms_wcf.js
windows11-ltsc_2024-x64
8common/dce_config.js
windows10-2004-x64
3common/dce_config.js
windows11-ltsc_2024-x64
3common/dce_console.js
windows10-2004-x64
3common/dce_console.js
windows11-ltsc_2024-x64
8common/dce_consts.js
windows10-2004-x64
3common/dce_consts.js
windows11-ltsc_2024-x64
3common/dce...ext.js
windows10-2004-x64
3common/dce...ext.js
windows11-ltsc_2024-x64
8common/dce_locale.js
windows10-2004-x64
3common/dce_locale.js
windows11-ltsc_2024-x64
8General
- Target HCFEINLPKEGNFNFOKJFFFCDLPJCFDKIC_7_31_0_258.crx
- Size 428KB
- Sample260705-arjv2sbt3p
- SHA256 19671c87ab15ce99bfbbfa0bfda792d1437254a838fdd86cfd1fa30befd12ea0
- MD5 c72de85c831c066c68c17e8cd1912e23
- SHA1 45acbcb6ff6ef0740e8aa30ffbfc4eb8ee2dc237
- SHA512 6493e151de51eab465293747e30b9aaa76a0311ac2d629369ad512fecaac000c2e882d6eaf262cc69e2bf817bf8f53cb7cc2b15788f43ba5af4310936b6608a2
- SSDEEP 12288:R1gi3TI4CobsE5HRhZcdoxMhjC37TH7agg:Xp3TIlKHRUoGBMtg
- TLSH T1B094DFB7BFA68529D00289788738F522004B1FECD659274FDD308986DDF36C6535ACEA
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
3p/moment/moment.min.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
3p/moment/moment.min.js
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral3
Sample
3p/xregexp/xregexp-min.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
3p/xregexp/xregexp-min.js
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral5
Sample
background.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
background.js
Resource
win11ltsc2024-20260630-en
Behavioral task
behavioral7
Sample
chrome/background.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
chrome/background.html
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral9
Sample
chrome/dce_config.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
chrome/dce_config.js
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral11
Sample
chrome/dce_context_menu.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
chrome/dce_context_menu.js
Resource
win11ltsc2024-20260630-en
Behavioral task
behavioral13
Sample
chrome/message_controller.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
chrome/message_controller.js
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral15
Sample
chrome/message_handler.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
chrome/message_handler.js
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral17
Sample
chrome/server.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
chrome/server.js
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral19
Sample
chrome/util.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
chrome/util.js
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral21
Sample
common/comms_wcf.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
common/comms_wcf.js
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral23
Sample
common/dce_config.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
common/dce_config.js
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral25
Sample
common/dce_console.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
common/dce_console.js
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral27
Sample
common/dce_consts.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
common/dce_consts.js
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral29
Sample
common/dce_init_context.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
common/dce_init_context.js
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral31
Sample
common/dce_locale.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
common/dce_locale.js
Resource
win11ltsc2024-20260629-en
Malware Config
Targets
-
- Target 3p/moment/moment.min.js
- Size 33KB
- SHA256 0a3bb1e382060c6999c26faac38aed7e3d6cc03f7376a9a36b881a7e5ba923ca
- MD5 85e5d41eb9c451c16d4e784aec13d948
- SHA1 851e2df2acd5f0bc4ef10fcf2f50c17f7aa09c1f
- SHA512 97b8e880c388e9959924463b95112315d42e9b8eb2dbe929a7f9a76c9c7b3be8b3ca63bd7868cbe98e28edc109341768ba1547a6d8b659defd43a6888cfc31b5
- SSDEEP 768:NlQ7JIzRZ1jnWZqPPD0JvphaCSN2nBCPD:NlFjnVPL0tBS+Cr
- TLSH T19BF2A2C93197B402172222B5087F1407F23D88A1A84E5D2CF199E4D6BD7CD6D92BBFB9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target 3p/xregexp/xregexp-min.js
- Size 7KB
- SHA256 a29edac1a897dadada02d3f166074ee3a4f1f67bb553d5fd884ec38dea376919
- MD5 ab813dcdddf30968675617f4381c110b
- SHA1 105ee5f92248b5719bb99ba3bafa0eabfc0c7e99
- SHA512 c23ac55226d7e8bbba33917796907a12dbf3d3dc9f8cd27c2794139117f6325c9b09774a461c46783ef2bf3c56b52acccfd7c1baa42a882df04a9859aa318e10
- SSDEEP 96:gzixaljqIIPJ3tPqhX34zlbZ0f73i+4Lp0Pu3akhKWaNC7X1:gz0F38HCv/+4Lp023xhB
- TLSH T1F5E132D97A81F0A2E3F2326C04BB0446E67B7D9A5DEC9044F28495B139F0F17817AF69
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target background.js
- Size 2KB
- SHA256 4aa66c9367527b528f8c68cffcc9862f123dfea97093d533e197fa972b496b96
- MD5 34e7fe48056ad25a4b8712444e3c93f7
- SHA1 4cde08e2018960e95216f1cd39e692a34cda25af
- SHA512 87800a86f54c41ac5055aa3e28a621ebaae99217c530dbb87db2035d37ac78b1978c614a5cea9ad05dd693218562359b56554402c00b8d1fcd38af80f0eb48a1
- TLSH T1D451F048999925275EB22379CB5F4404FF6A18270706C6123A8D97D01FB4A18E2ADFDE
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target chrome/background.html
- Size 1KB
- SHA256 e41edbf49d34f04c444c75cafb1204d933e2f1e4f66710edc3cf371d3213fbf2
- MD5 6941d7a3f2baff9ff1a9d81dbf148a81
- SHA1 34739a79fb1f03a31cee408ac5b7622c47ee90ff
- SHA512 9891e7b54216ea0ae434c86927d823346d0fab43e2339b00d1c892cc201b5cd962ce36b196f3f058426a09be486038536b1710ff0916d419be1a74ef944282d1
- TLSH T1DF21C35B6CC6C86891204DDAE5F2F41DCA08E619C3D4DD9AB1E818B7AA85BCC0C57FC4
- MD5 SHA1 SHA512 TLSH
Score4/10 -
- Target chrome/dce_config.js
- Size 17KB
- SHA256 c7f28dd59ec1edaa1f513b963ca272a71e112b042c8d1261e5a0e5cbeba17729
- MD5 918b7d171c1268087bac2e6a96a39501
- SHA1 ab7c166e39241276f9eeaeb44f920168ca049088
- SHA512 cfafc05590a0dc588dc3767a8cf187a69e67d9f173e1838dc38f0da538eaa63321b14686c610b40dfa3bc1f410be924ca524e99b5fa62fb27fb38363913990bf
- SSDEEP 384:nCS+1XEy9t4BLQ5N/LJ2N//pYy5Ky0Urs6:CS+1XEy9955J2x/pH550Urs6
- TLSH T15C82B841EB5D2D2B823331B5C80E0584CB7CC6A518985C1BBD5ED76C378A47CA2AAE5B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target chrome/dce_context_menu.js
- Size 7KB
- SHA256 04b33e93855d7a88224658a325138effd9867d8c80482320f00afcedc77be95d
- MD5 d79194027aa8e733ad01d61a0231d6a0
- SHA1 d70ad33a32d09724dbc9500934d9f15184817b5b
- SHA512 86a8bea45e46095f69701a18f8a68d24454d13051628f0af002808726b4d1cc37d638d5060ab2d1eb3ee6d3a9a6dc354880a4eace14825a633f05205c030ef34
- SSDEEP 96:kkNk3WNFJN0zbAZR9sUcLDrz7CQs7aajd6f3smba3q63J7Bg2mk+CjSRCltqB2wz:dUkz/0/z+DXDb5NZSYqYwTg2ihptYR
- TLSH T1E8E1A51D28A723326F7BB0F0A34F70545F2592632A08EE61B89DC7888FC55E481DA7C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target chrome/message_controller.js
- Size 1KB
- SHA256 40d669363bb07ee9031f0e96b218e99344a032cc5b56099be9b3a760f7c32d72
- MD5 1b23522792965dafd6fced09e2852906
- SHA1 22f07c9a0a8c1f550977c9ccafc5bd79a23aea98
- SHA512 0f5c67e3f9a088dd9927cc2076b6ec543d283945feb3d04bb6e2ff11df4b1a19d021a1e6f45755b2acca73a6333e075ae14e02b4168113c42ee16d047494c93b
- TLSH T15531BB8EBD8F651E8BA2728EF83A7A526A44D301321428F2B1DC57DD47B901C874738A
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target chrome/message_handler.js
- Size 8KB
- SHA256 38f329400e93f59f06675c16111f339f05d1cc0450c7d2ea930037f8a5de716f
- MD5 df1dee517fdec717ba1bf01ae8ab8d49
- SHA1 64b0a87daf00ce003381b4e46be7c2cd3427b564
- SHA512 437f30511e54bc2ef1deac91984f0581b2e52d2018fe7fb229b22187e417b8b34fdde3abbff936c7578a2074c0aa11822aaef7d5e5bdae3eb290a613e77a3ec7
- SSDEEP 192:AZFpBZRFv3s6dR1c482nhgFSxJxkzKw31OE:iDJnhd+9Z
- TLSH T13002424AD8E02727DBB372BCFF1B7902E725A1235B10DA327D5C53942FB90848951BC6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target chrome/server.js
- Size 17KB
- SHA256 22a32ec0cc3c981dfc63c6271898d4d2fcf65bf09cf868e87e425d4933fc424f
- MD5 cb7b1fb3d77c77451ab3279777f56c25
- SHA1 1fb41465dcb5c8d9a131a1d15de09bb87c6448f5
- SHA512 ac0946c8e548505c0a45d8cbebce800dab7d39f30cd8dba012ee33c67856c170c234001247263e2ef7cb0f76ec827ca5b76fb3061ffd1e0725397812f77b9605
- SSDEEP 384:nHaaUzgXjo8sfxJTKde8RYYMobd4cLPPaQGdM5n:n6aUccJ/+RmcrQ8n
- TLSH T14882A84A268253775EB232A08B4B2049FF2D226F0501E2147A4FD7547FB5C18936FEDE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target chrome/util.js
- Size 10KB
- SHA256 bbbd5dc6a4ce36f0e224beb2bb450c0afadda030e1f9f1601f29a6dbab9bd09a
- MD5 7da71ba0813b18ac454ec803f701eef5
- SHA1 f12e06c0a45c6cc04465df27aaab978ac5bee8b5
- SHA512 2bbd83e688ff1941d40b43b8e97f86d0ad3662e4121e8a0efc47231501f533e26a9aca2950c1750916ec0281dfd57649b035dda4057d284f91ead21bc64f3286
- SSDEEP 192:aNxycuSEc505TDgmLgbgTI+NFHArEDZwtkyEth7UStQnC6IW+1DAcIjzKQxSidqm:aN2JciVgmLgbg0wLkzC6IPAcIjzKgSi5
- TLSH T1C12295156D8A22E65EB27375DB3F5188EA3B41330205DA90FC5EA2614FB1C6002B9FFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target common/comms_wcf.js
- Size 11KB
- SHA256 276a7c4f8d3001cd5eed74e6bc58c06ea6e7ff3c67d99b4fbd192f2ad07b84d8
- MD5 2f2205a7de9d9d167f507fddb574793e
- SHA1 8954e6880756b16b2b0a64bc279bef058413f2bf
- SHA512 82973496538e530f96208d65b86d3e359c646902e232b8c14a39c095440bcd30c4b82dfa7e73a605c3b586f2954bbc9416fd671255ec58aea93bf3b03f2162c9
- SSDEEP 192:Wdwj6RkeiuagsCuo5cYKpCJquU0FizZA6oPeGkwdGPdjsDWnrLaG06ecn00w7dLI:utM0FdSGzdGUWrzdzw2/Dr
- TLSH T1264254485EE32667ABA3A2B6DB2F56A034688003374CDE107D0E73941F4D75C9784BCA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target common/dce_config.js
- Size 2KB
- SHA256 e34124da4d277682bb52cd971c94c552b7a06dde86150f3b2817649d94070152
- MD5 139c14be7825868324c6f81b6de7556b
- SHA1 11dc7d4c7e372ecc67f41219e9422f2dd8f2bed7
- SHA512 4ec775b7932f6eb892abc2b716324ce3052cab0ef0f341f2b886db91faad2dfd0b854d65e4e2ba80fd44125a5889607e681e46e7e25fdb8cc15176fdc3ccbf54
- TLSH T1F551228376AE0A3B81155052C7AE00DB6FFC9F710F85585A7C1D712F21A42AC8369976
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target common/dce_console.js
- Size 666B
- SHA256 846593f8a534978eb7653117f60a89c6cb2ae5dc44cc4217758f1fb83cf82a61
- MD5 be2a7f90d03117bc31fa05f76b61b42d
- SHA1 064b010898eebe0848130078ccfb4b76c21af418
- SHA512 c52a015e55e913735505f497806b954833e6dc5f6ce00163c5f36408915b3f28590822897d2a1c7f103b5f5a5a4f322d3893fe80370eee8f9034b0783dbd4a73
- TLSH T1270178480CCE703E452877385E2B18CF22AD5934258DF269FEF4264E65D1F6C011D62B
- MD5 SHA1 SHA512 TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target common/dce_consts.js
- Size 869B
- SHA256 e7abcbaf4202cea64151eb9e1ecd68ecb04d98de41d386ea7c3a238699fb7800
- MD5 959b445fa4e18497c38e50b716abd3f0
- SHA1 eefb4f6a19df9fd9ad8a97d3a95eb62c15cc4b56
- SHA512 9e020c8734f9c30954ad20175e0a2dcbdc1bd4c5861f99a7b752bc8911b094657dfcca9d5fe82f8f61c32d3e7adad4a010eae2de6fafd813c83ccf2d50f94aff
- TLSH T11511AF3263CD1B339A5D58E2C41D12E3FFB17B5435B0621550DFD11D30956B2905AAFE
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target common/dce_init_context.js
- Size 783B
- SHA256 fd057afb85e93420deeabeacd454fcf20b5938c6c7878fe646d02f2d1db60f6d
- MD5 d412e778d87abec55bdd36bc5dedf5c9
- SHA1 a1f0e123c949499de8aa2c2ec361783b5aa91fb2
- SHA512 b2bf361ac4e5521efe4a0f4bc0f1ee13773028818b9ef360fb7604d791f625e647d6c7c4cab797a6cf63404a94a08e75362f5eab8deaba21d048237ace48609c
- TLSH T1020126681AFF2C18641A10AC8F4EC01A32E2D463C28CC591F1CD05689FE067906EEFAC
- MD5 SHA1 SHA512 TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target common/dce_locale.js
- Size 6KB
- SHA256 04bad33a85ec6dc9609478d3debdde4ed71e8dcdb9f3bff985656902b2d72251
- MD5 ea6877d3020338e4453cf89cdc52f08b
- SHA1 ba8c98fe6b1061eb0c35fd968f864003babf7ee8
- SHA512 bf817fd697f80ba7774ec659c85a6c4baeab95a3a2565d60b3c909e7eb9daa3bc81526985acac0a1af9b69d83e1597fb93292e371ff8ef79568f6a1fe163d240
- SSDEEP 96:FPSX/naMuvhuMXrMYJiW9lG6ezNMRkvo06Fxa0ouWrOEgpZmhjF/rh87kQalbiyK:xSXvatgRzCRk+Fxa08rAgZphQUZqN/
- TLSH T1D2D11E8DE3E91F27A533730C255E409693AC98250ED42903FD4D831D37DAEA9B5B1B83
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.