7cdc9e7933961306d798196f80effde6a8425e3683b82150ddfaf61a465dc51e

Sharing

Copy URL Twitter E-mail

General

Target
BloxPredict-Free-extension.zip
Size 25KB
Sample260706-v5hkcses2k
SHA256 7cdc9e7933961306d798196f80effde6a8425e3683b82150ddfaf61a465dc51e
MD5 fb58629d93de64fb5b149583b0884fae
SHA1 d878b50da2c921aed53cb5971a77b0ebba5785b3
SHA512 80c16480a933f5bc3f88e39347192c9a1f90ab9302bb0b1d933e95b458dcfc08f8c11dda3e5d72911970d33a403abd4024181322d4847e61a8ce8ed9e7bca786
SSDEEP 384:mdbQf4XQ5gyrE6Qqs59P9NxBxRzbTL2XfdmNgbABu85rg+sowWywtmraN8XrHb9m:mdcQXLyA6Cl97P+cLfWWywtLNcrHX0
TLSH
T195B2C0D0E7335822CAAF0E7983511965CEDE43897E54D81788C083DD3B683762A67E6D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  BloxPredict-Free-extension.zip
- Size 25KB
- SHA256 7cdc9e7933961306d798196f80effde6a8425e3683b82150ddfaf61a465dc51e
- MD5 fb58629d93de64fb5b149583b0884fae
- SHA1 d878b50da2c921aed53cb5971a77b0ebba5785b3
- SHA512 80c16480a933f5bc3f88e39347192c9a1f90ab9302bb0b1d933e95b458dcfc08f8c11dda3e5d72911970d33a403abd4024181322d4847e61a8ce8ed9e7bca786
- SSDEEP 384:mdbQf4XQ5gyrE6Qqs59P9NxBxRzbTL2XfdmNgbABu85rg+sowWywtmraN8XrHb9m:mdcQXLyA6Cl97P+cLfWWywtLNcrHX0
- TLSH
  T195B2C0D0E7335822CAAF0E7983511965CEDE43897E54D81788C083DD3B683762A67E6D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  BloxPredict-Free-extension/content.js
- Size 9KB
- SHA256 c987cff3d4c339a8a4d82edf35ce663d3e4d83cae81633cd0171a0b9f98e6096
- MD5 a04f4ffda7f8cb83048c2f48d6aaa682
- SHA1 ee4331728b1daccef0a19d675eb02104161c8b36
- SHA512 54500d3fbb5f609816b2ae96d8cb16f91fab02cdd805cc5edc0e20a80375169ac53e689be457c20d1b0011befa0a08056fa627abfb142bf7abf058979c8c3d25
- SSDEEP 192:ST5AnoufdpDufQAmHADKclbRC1gE/35x7kq/AhGRFUatlmUHSX:E5SoufLO+AKMdC1gm35yP5X
- TLSH
  T1BD12DCE062B6767D837B40BF06FF9781B13405836807C049F95E40892FC599667FAEA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

execution adware persistence spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral3 behavioral4
- Target
  BloxPredict-Free-extension/icons/icon128.png
- Size 13KB
- SHA256 6fc867eecd682ff2a0a6a209cb137a01ec99606ca40d04229d7887c969e64add
- MD5 69d64f77c7063ebbda28db273dbfadbb
- SHA1 ed36bd9598da3bb8f75cbbb67ce7c5a460c06fcb
- SHA512 5609a7e8ffbca98128a10342143dc1d2ea22ad06727ebdde836e28ff86701fc0f308c384a91fbb636edfcb34a8285a3bb6e048b2cb161efa83d0a11418e55802
- SSDEEP 384:vqs59P9NxBxRzbTL2XfdmNgbABu85rg+sog:nl97P+cLfe
- TLSH
  T14452E1B4E5DAAD6B0AC917B3C360343CCF2E030FB5B6C928144185EE4A0417A6F8A816
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  BloxPredict-Free-extension/icons/icon16.png
- Size 502B
- SHA256 b8cf3d50adb0ad577e89a84c3d9eb14c55bbcfc8bab4ab58a80c0598f84ff65e
- MD5 1c0e09828684647726a72ba4cd75167c
- SHA1 aa5c53087be3d08b801f88aaaa721c1cbfd28956
- SHA512 786f4f5e90f904943f2431f87f18ddfd46d9aa3195f1371989a6915df11bfc104255cc015475026216239feb83dea9a99ff24ff73d22bd5586dedf22078ee1ac
- TLSH
  T185F00EB6AD666A30AF268644C362E2E9A021FC994646640AD0B200FE9A267232590A31
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  BloxPredict-Free-extension/icons/icon32.png
- Size 1KB
- SHA256 fa380b945814aa9eba0b4a2551af2878cb2c1060a94a2c625ef1d2f8fc327f88
- MD5 3cb69366a649006be0c7240f7caf3b21
- SHA1 c27574dd89753fdf2ceeb4d15e25237a568c0d39
- SHA512 7b080f419b4e46f179259ef528b5a788a76a8ac93be4d9651df16e32db8a2c21ae94f543590312bb38e1187eb4be1f3c07b83623c911be8b01515a13b166a5f8
- TLSH
  T1A721EA4BD1C014DCF1E05F331A1B0051AB65C06A2790B4514D75D55BB38EF675BE3CB9
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  BloxPredict-Free-extension/icons/icon48.png
- Size 2KB
- SHA256 63b0220f48d1faa2005ae8b2fc0e9072000ddda4748975ba4893b03183d8e58c
- MD5 3249bbc4b0239e67736c81bb0ea81af5
- SHA1 ba220a37e5e71c644fdd6051dd48193cfaf7d023
- SHA512 eddc17af23173681e3aa5a2227d11004a8b69dab55969aafaafdf9ced0d0371af65aefad42c268be3968bc428679ebc6a5f44ac1ab7fa2c7e6862986d082ecd5
- TLSH
  T1D8413DD61F01DEF39247285DEC691C0A5D554FF69145D5183B048D6D3B5803B28B72E3
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  BloxPredict-Free-extension/manifest.json
- Size 678B
- SHA256 7476b1941770b7696416ff4462fedc04a32e1600cf1345bbedaf68b8cdb647a5
- MD5 41a91c4b42ad696f8dab0109ab765ef6
- SHA1 184172809f111689630147ad4a9d1c652019129f
- SHA512 65875138b8f13facd849b6dc01d1f00b5c4209bdfe95aa699422010a65a7318890e19ff2f05079c529c62d40a79b984ec3199dd33d502fec605c04a03e720204
- TLSH
  T1AE01F421C5308CAF038C977821E60D83E2811B478E80BC64B9DD810CDFF866E46B7B88
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral13 behavioral14
- Target
  BloxPredict-Free-extension/style.css
- Size 7KB
- SHA256 032080222cc9bdf633f353200bda865b8d26d10c104e987a7aa0a051128e5a70
- MD5 f4994c573f1bbdac8355326c713cde5f
- SHA1 1c6552475baeb7b30558c3b059e15d05569eaf16
- SHA512 58abfb30f48955f1306ea873c140460398f5bb3b6d764d832aad672b2c800f178750891af1a13d550b811aed4e5529777b7d3cb1fdfd6b533256958e89151c6c
- SSDEEP 192:9TENMWOxHzf+NU156QOrO3BubRavszRgOVJO5Z36mOYR9o:WN4ff1SklH6
- TLSH
  T1E3F1DCA0E5D37664B416414F14A3FF9EB26893039917C97A9F93B06CDF832DB9C35208
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral15 behavioral16

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Checks computer location settings

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16