69be2e52a27ad470d7aa938a4164f4ef895c80816f3f584db7b1d71030162cc8 | Triage™

Login
Reports

Overview

overview

3

Static

static

3

ad-blocker...und.js

windows10-2004-x64

3

ad-blocker...und.js

windows11-ltsc_2024-x64

3

ad-blocker/content.js

windows10-2004-x64

3

ad-blocker/content.js

windows11-ltsc_2024-x64

3

content/an...ild.js

windows10-2004-x64

3

content/an...ild.js

windows11-ltsc_2024-x64

3

content/an...x.html

windows10-2004-x64

3

content/an...x.html

windows11-ltsc_2024-x64

3

content/co...ild.js

windows10-2004-x64

3

content/co...ild.js

windows11-ltsc_2024-x64

3

content/co...x.html

windows10-2004-x64

3

content/co...x.html

windows11-ltsc_2024-x64

3

content/content.js

windows10-2004-x64

3

content/content.js

windows11-ltsc_2024-x64

3

content/lo...ion.js

windows10-2004-x64

3

content/lo...ion.js

windows11-ltsc_2024-x64

3

content/sa...ild.js

windows10-2004-x64

3

content/sa...ild.js

windows11-ltsc_2024-x64

3

content/sa...x.html

windows10-2004-x64

3

content/sa...x.html

windows11-ltsc_2024-x64

3

content/te...ild.js

windows10-2004-x64

3

content/te...ild.js

windows11-ltsc_2024-x64

3

content/te...x.html

windows10-2004-x64

3

content/te...x.html

windows11-ltsc_2024-x64

3

content/vp...ild.js

windows10-2004-x64

3

content/vp...ild.js

windows11-ltsc_2024-x64

3

content/vp...x.html

windows10-2004-x64

3

content/vp...x.html

windows11-ltsc_2024-x64

3

executors/100.js

windows10-2004-x64

3

executors/100.js

windows11-ltsc_2024-x64

3

executors/101.js

windows10-2004-x64

3

executors/101.js

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
EPPIOCEMHMNLBHJPLCGKOFCIIEGOMCON_5_13_0_0.crx
Size 7.8MB
Sample260722-pfl9csef58
SHA256 69be2e52a27ad470d7aa938a4164f4ef895c80816f3f584db7b1d71030162cc8
MD5 bc714055db3a4590e6d1629925214850
SHA1 069b492fb22889a575726e86c5e56cc15b60c231
SHA512 713067e852f887596e719ad7e16e671599ba2f5ffc3f54f5d7618b0e64f7d4df4b5ee1e4a9a4525c86e4baea4156556ae1cd7e0312e124a19852a024c882e78c
SSDEEP 196608:lDEGNheOVkCtddq6JiZA6S0WLLtBuqgjanXy:lheOTt2ExuFWi
TLSH
T1A88633BBDB94CA15E05D72B8E824F00F59C7A08DB149827B5650DC1E4929CE9A7B0CFB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution link qr

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

ad-blocker/background.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

ad-blocker/background.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

ad-blocker/content.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

ad-blocker/content.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

content/anti-male-ware-notification/build.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

content/anti-male-ware-notification/build.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

content/anti-male-ware-notification/index.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral8

Sample

content/anti-male-ware-notification/index.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral9

Sample

content/consent-reminder-notification/build.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

content/consent-reminder-notification/build.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

content/consent-reminder-notification/index.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral12

Sample

content/consent-reminder-notification/index.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral13

Sample

content/content.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

content/content.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

content/location/location.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

content/location/location.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

content/safe-price-check-notification/build.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

content/safe-price-check-notification/build.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

content/safe-price-check-notification/index.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral20

Sample

content/safe-price-check-notification/index.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral21

Sample

content/terminated-connection-notification/build.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

content/terminated-connection-notification/build.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

content/terminated-connection-notification/index.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral24

Sample

content/terminated-connection-notification/index.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral25

Sample

content/vpn-notification/build.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

content/vpn-notification/build.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

content/vpn-notification/index.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral28

Sample

content/vpn-notification/index.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral29

Sample

executors/100.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

executors/100.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

executors/101.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

executors/101.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  ad-blocker/background.js
- Size 181KB
- SHA256 c96c45773b55029df9563986438566ad8c503ac33be2a687cf9ba55d894750f2
- MD5 fc151edab395cd9110018f86792d869a
- SHA1 ccfaab01c6dd12e05d435cc2204319462561d906
- SHA512 0e16905b1ed302186bc80973a161f6c628df2c46258a7dc5cb5d711dd80ed65085296e2e79b5b1ba16b67f1b1d8e0eebfa895cd29015a78aa7652b06823b0250
- SSDEEP 3072:YgNJKQ0mo68DF+L6c2EdP7Zvw2r6V4Fi5Z0rlm3X37:JWDF+L6c2EdP7Zvwa64onL
- TLSH
  T1EB0409B2724F696942EA4038203553D0EF244C667AC9945CF93A6DEB7E49BC070FDBB4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  ad-blocker/content.js
- Size 245KB
- SHA256 657f32e2492f2acb0bd3949bfb96e38792e59df08596d4aa186fa2bac0624485
- MD5 bbf9056abcdd1ee69e649251edb4ac73
- SHA1 6a6253bc499665666ede4d1fa6c571d19113e4b8
- SHA512 a59dcf9411ae8351ae107640930ceb03c55538fb10a04d6970e29a3c3ff7c4e363aea7d782dc4efe212687b0cfb9c2f3f92da70477ade9379511bc374b970772
- SSDEEP 3072:Y6q7ee/Xsghi8RSOEjHsCUGB4V8AJQUtA3JOvf58Xi6V4Fi5Z0r1:U7eePsgDRSOkH5UGBQ8A6NOvf58Xi641
- TLSH
  T174342BA33196783B46EE01DE64310241FB1C19D67809545CFAACECF63D58E8262FDBB6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  content/anti-male-ware-notification/build.js
- Size 3.4MB
- SHA256 1e66906a835aaf759535e9ba42acd8286ae83867747a7fdfa43996b6faad4744
- MD5 83db07ba3a16e1fcbfe96ead798800ef
- SHA1 01880566f4f1026340fd70b81ab9a3a1f58973f4
- SHA512 e760de86c71702e8ab2654bb950f0074f09a7097424bed4e58b1f9e13589d53e57414532b3164968dc378c64f831fda2657206ae28c378b41342df37e06c7738
- SSDEEP 49152:0OeXv5rIdAn0a4faL9wNTtzA/8GxeohkEriceFKzQkRCBH34EBMeI7hlgsC3hU2P:qW0e
- TLSH
  T1B3F5C7D42730A3BC998EC7DDDF7EB8D8110B70EDAA3A41C860594AA4A192FCDF915DC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  content/anti-male-ware-notification/index.html
- Size 178B
- SHA256 3ddd4e089d1c2aed5eeb4f9128df3c333fe2a383ae11f9bbe88144e1b7bd77dc
- MD5 29f139022ad45ae293351e206db0590b
- SHA1 eeea705d53437fdcf4d65707b6a94ed154832c86
- SHA512 b20b81258e37a54b6b2c696f35c00711cd93044d9aae7dcb7355c78be1558e83758d58f2966cd469b61046e42de52fe6d933b7370ad82f48f33a36119727887e
- TLSH
  T138C0805F7C075051C51056542CE0F75C548BF658B1D2889444E361554DCD3FDCC4715C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  content/consent-reminder-notification/build.js
- Size 3.4MB
- SHA256 7fc8a203701028231c1b95364386246f2a93c3d4e760e7efd173dc563b8fdd71
- MD5 25c36db37fc07b9e5fe90611fbc1b3b3
- SHA1 4d67a77799c906d9434f5fbd090bce6898ad49dc
- SHA512 74141243e995d1b6422db6ddb4007f064a393dd64ee5c694ac804ba52bc0df9d4eedbad3fdd91910cc7048d8d8344060f055a83610b7a6875eddaec43b2a6680
- SSDEEP 49152:GEyBw0h0Imh7zx3+KRCSnAB83TXZgb8trqwe0I5vEv:j
- TLSH
  T1B8F5C8D42730A3BC998EC7DDDF7FB8D8110B70EDAA3A41C861594AA4A152FC9FA15DC0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  content/consent-reminder-notification/index.html
- Size 180B
- SHA256 5e937c0eb3b98786649f5f9604885aac476059a3dff5fb713fe96061fdfa6dd0
- MD5 6c10d124c766b42b63fbe205f1a508dd
- SHA1 b90ee0cc4bd5b5445a60a5642fd055346f6dc715
- SHA512 327a1e668bc387596bf3d6266752b37e5e5bf8671e08401ba15db08f2c683b0deb1f861593df53cd7f23aee25c4ccf1ecbf171adb6bf257a3ff8bfd6115b283e
- TLSH
  T19AC0805F7D451142C56056542CF0B75D5487F758F1D5CD8094D3607549CD39DDC8B35C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  content/content.js
- Size 147KB
- SHA256 4e45a8932a6f5893868b01ac58c62c7fe41a7a9b008a5d5f9ca36266de50eb27
- MD5 6fbb0448b7a1434968aea20eb4d8ef77
- SHA1 de8ee9c4d1f1061818dc032f2573c66d522119b0
- SHA512 591f1ddef1f25c204b355a501fa374da57f7932a46e1088c4706a96780a9728925b73940aaf3466a9035162cba0819053e205fe402c5522727482ba780a5587c
- SSDEEP 3072:tsrnajtXmLNCi2Fa4YTpCjfYiYP6xBIQ/zN0lOiONFnH:trgNCi2uTX0SQxH
- TLSH
  T1C4E3D9CA3295F0B513D7A1F684770002F23A2464780E5054B7EDF8EA787A9DA9637F39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  content/location/location.js
- Size 6KB
- SHA256 5822cfe41e79f2f831b38d46ff412614f2e4fc36226bbb8cfa8fe647bfe3d3a3
- MD5 ebb0ff7a4cfe7f567905b09450406d55
- SHA1 9de60acce65b5e8cd91090aeb30a8ade24fcb44b
- SHA512 0f5c1c34bb8023638ffbfc70e3bb94f028eebcb1ec3a93494740b706ff8f98d46bc18f68c729cdb10f2f03b99256fac2a63917cd8e8b5591c11f5c24e2bfd956
- SSDEEP 192:xfIl4RKyjkyk/fyhrhKOWr/hsXNNOEJHXyEaq7M5:xY4gTp7OWryHOqHXMq7M5
- TLSH
  T17DD195E6978B9C9407D9E145FD273601523275DF300AB048BA8C78DF2529E4DD22BF74
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  content/safe-price-check-notification/build.js
- Size 3.3MB
- SHA256 ac22e9e7bc1613046f7758a599c6ef71e4efec302c8e6750c08243afbd718513
- MD5 2e26a1acea711ea57b59ab47f809e365
- SHA1 d8656f05eab8e5a4a61e68081157d4f3d84c2495
- SHA512 66f9dbffdd98bdfece88ff6b97df76450a090cb01067df18e077fc680bd6d138ea1ae67db2d31afa6f194dbfa06ee555d4e2206bff5092f2fe061099541e111b
- SSDEEP 49152:Gb6Bw0HXtwwq14y0KapmntK7I3ulyfrtrqwB0X5cy1:l
- TLSH
  T1B3F5B8D42730A3BC998EC7DDDF7FB8D8110B70EDAA3A41C861594AA4A152FC9FA15DC0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  content/safe-price-check-notification/index.html
- Size 267B
- SHA256 c810783f54a6c57f41e1c4933b312d14a000c01c8f689f063b7464eb57f6d4f7
- MD5 679ca12cb8e2c20131def7da86e605ad
- SHA1 87e4d0bd8431dd3c6666412950f9a0777b3ef4a2
- SHA512 035fcc0fa9365e55e0d73717c9e04930d355345cefe59b88e6de7400e2ebb530abf6d5152512c913e0bf8432e823319b34ae2b7adab095a739287a086f6a52d9
- TLSH
  T173D02B1D98510042E12041645CE0B328198BE509E3AB4C4468FB30228F4835CDC47294
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  content/terminated-connection-notification/build.js
- Size 3.4MB
- SHA256 3d71331e8ee500c94fd5af557c5199bd94839a7788bc2436e5dd0b81287e9335
- MD5 0f8944fbce912c545f35518984ed7eeb
- SHA1 fec3402f628f062924d3afe629024371b72e8600
- SHA512 c800447f29ef6268be733c6ed40d8a43c31e17f2b4d26649917de2817320835cf09bea15d4eb36773c21141ce0cf762875f0967d2bc52c7767cd64633b516f46
- SSDEEP 49152:OOeXv5rh7krJgu27InwNpxHB/7L/GKo5wd8AycCzXSbepHzdy9cAWrXyG13y5BOx:unct
- TLSH
  T137F5C7D42730A3BC998EC7DDDF7EB8D8110B70EDAA3A41C860594AA4A192FCDF915DC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  content/terminated-connection-notification/index.html
- Size 281B
- SHA256 fa802e72d4aa4e235425bacbc72430be2d3d59ce6e9e40ffd6e8ee9d6471dec4
- MD5 9868f98aef0a2172af421437ce41442e
- SHA1 53d2142f4204bd14e6c080fdea9c457dd103febb
- SHA512 1168c7ecc97f8b7ce162fc917e2f52d88d505d28f191b8aaea41ec6a05d412b634d02350dff655d22322168756df2e88c205f050839461c679a77aac1dbd0535
- TLSH
  T167D02B5E28520181D61141B51DE177685457D94DE5974C5065FF20318F45388D88B3A4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  content/vpn-notification/build.js
- Size 3.3MB
- SHA256 9f4bfc208a2110dd815b5a136389b5c56158bceac3b56b35635cb07350c716cf
- MD5 8c349d296796699f841f209a7f424af6
- SHA1 d500f6adbf592797568e33ef5e2b0c582c5edc28
- SHA512 2b06da379545bffb67065c058bdc42c769f65dc5e53239a466faab2f41610d32b028641f7371bb5665df389f47ba1dfc37a26351199ab70555069a9589c1b27f
- SSDEEP 49152:G4wBwVHrTjwxMO7aKBimngH7I3u5yTkiPqw0005gpO:1
- TLSH
  T16BF5B8D42730A3BC998EC7DDDF7FB8D8110B70EDAA3A41C861594AA4A152FC9FA15DC0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  content/vpn-notification/index.html
- Size 160B
- SHA256 570506b4a013d9284529ee963fa1aea98199d9996c82fd42e290304367481973
- MD5 e3984780fadba26c16c73904cf1d5530
- SHA1 6da79c6e5bd7529bee36999f42143b43240cd57b
- SHA512 abc9d2c2407524e58ed475f24ccd8e982f94bebbb6e55d3c6d4303bec4321d5852609d2039be507b9856861c45d0036c5b82d32240ac0192989326b8138de084
- TLSH
  T1EAC08C8B7802404189505A882CE2B31C8453BB9CB4838C0006E2E0A119C93B9DC47198
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  executors/100.js
- Size 4KB
- SHA256 a71b66420f85cbb1395499dec09b6ca3db6542f919e64a79dac8418a24843a7b
- MD5 32ee5ec288b6c273798185c3f0d4162c
- SHA1 4e03373ae2f53686f7e9d5db125c71f6d5620a3f
- SHA512 9e9743e2eec0a7b57dcfb1eeae3bca64122c51c279d88a9168a332f69db48d8de20f4962d37aad155b666e32b4fc0dc4ed0f22f7916f830670cd13ee11673fb0
- SSDEEP 96:6Oala303Uw8RJLy++vCmhCpviwl4nsssv84LhW1Jc0QNBW6BYyV6Hk8GUPB:61lWLYcnhUs0uBfBYyYX
- TLSH
  T128A1D919B386366D41D5119DF1BFE108B127AD8621930C58C68924D23F1CFBFE1AAF95
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  executors/101.js
- Size 3KB
- SHA256 ae73a05ca17764dbc0839d6b42d7fcb3d9e8af2f4b03c0d381cd963445ed679a
- MD5 eb07e119e4039d222a4e85ea5748d8fd
- SHA1 4e10a375c9ff31819d6439dfc3cf405ea4011ce9
- SHA512 f192caa12c11673c7551553707bead383effe540fd9ce1c2a042d16936c0b84a7aa153ba11c46611c77c11a3bfc38f839dda9c14502cf9f95fe7d684badc96b3
- TLSH
  T1E77196383584333A79DB07DEA6F491487B246764B02684E1B2CEEC162B55D827931F0D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy