General
- Target bypass_paywalls_clean-latest.xpi
- Size 311KB
- Sample260707-prv1mse12l
- SHA256 5c9cffe04fd7729ba3f7303d4e78a7d264a9a313ebb3e1d477fed3bcf2b9762b
Malware Config
Targets
-
- Target README.html
- Size 77KB
- SHA256 b8912e9879c9dc6b4ef3c6651194a41de44d8d2267f6409e071f9aa4a9f0d801
Score4/10 -
- Target background.js
- Size 89KB
- SHA256 2aaa0fb63072f678639557de7a1f4481ccdf52f16f6117d90f7c5168af181766
Score3/10 -
- Target contentScript.js
- Size 53KB
- SHA256 f902ecebdf2f380dfb0e3d94dbf6207044491fe6ded9b7c38a37a55900fb14be
Score3/10 -
- Target contentScript_once.js
- Size 16KB
- SHA256 1062b52f0e2ed6d942349e0ad7220e0ec8335264ddc789374b0e4b5d63f142c6
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target contentScript_once_var.js
- Size 2KB
- SHA256 49f53d6b37843030793c30090d72610fcdc463da1a8bee051c35017edf7ed339
Score3/10 -
- Target cs_local/contentScript_de.js
- Size 67KB
- SHA256 3c72212fde6d65ed1b3cfabda24386e25482214025b7f0376f2b30f5f0222b8e
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target cs_local/contentScript_en.js
- Size 265KB
- SHA256 50dd8d22e59b7a194a0c0f9daa9914b21b46a751ded554a16c0ce1e3cf8aa766
Score3/10 -
- Target cs_local/contentScript_es.pt.js
- Size 35KB
- SHA256 f99a4b2970537ac133de3a68db9b6a38ea9fa5577cb73f3b528d57ce668d9095
Score3/10 -
- Target cs_local/contentScript_fi.se.js
- Size 5KB
- SHA256 29a1b0004b721ee31068df86cbd6ff07c5ccf62684c22f593d46d908e130902d
Score3/10 -
- Target cs_local/contentScript_fr.js
- Size 85KB
- SHA256 b06b43d1e9a769171bc69e7665b04f447fde555b6b1ad4202074bd6a87d3f4c1
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target cs_local/contentScript_it.js
- Size 13KB
- SHA256 b8b4e95956a5080cdf30fa0e48315df6433a1ec02b2d18107cfac363b7027320
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target cs_local/contentScript_nl.js
- Size 41KB
- SHA256 4243405b277229d4c1cedbc74e8a1c164cd9ffdb975364624ce4d616ef9980c6
Score3/10 -
- Target cs_local/contentScript_pl.js
- Size 4KB
- SHA256 48e65f81b65c32e4b1c447c7ba77df58920921b1c18f5234a0f5cbc9b52c947f
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target lib/purify.min.js
- Size 27KB
- SHA256 dbabb5b205a333ec49c8c09e7fca30ef66df0523bb8bc0fa9ea843841f111dbd
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target options/clearCookies.js
- Size 1KB
- SHA256 75f472cb82462028e58519c4b851d46729cd63316a052a429f3b291f715c598b
Score3/10 -
- Target options/htmlviewer.js
- Size 24KB
- SHA256 9b94570af945e5b421e9dc331099b4c44ec6537734375ddaa3bb6542b6092cbd
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.