af011ffb2c19a15cd1f8ebde1996575f5d0ad0928e5931f745f4d6ee29f4161c

Sharing

Copy URL Twitter E-mail

General

Target
nkbihfbeogaeaoehlefnkodbefgpgknn.zip
Size 4.5MB
Sample260723-g57ycsxthy
SHA256 af011ffb2c19a15cd1f8ebde1996575f5d0ad0928e5931f745f4d6ee29f4161c
MD5 0c540538afcff9e596d62dd6d6423258
SHA1 47ca92300b30a424ca9ee2811020706639a3759e
SHA512 60fcb54dfba7441cc7549130432eb533172e217e787e22645d00d63145b83706d42d0f0f6bdb85d48ad1f2cdfb41c08ae395f8d8f8989c0aaebb1ea3c61df708
SSDEEP 98304:sKLZn3RTyIRE2E8ODkYgYRgEKUrYJpEd6AjzeLXh0:H3NYRFZYJWdvjqLy
TLSH
T12826333CE4ABA67FFC9632200878675F948E3A5333115E323699176C4E36BC566F42B4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  metamask-fox.svg
- Size 2KB
- SHA256 63460a5753c47f2c58c3caa61921e336dd428d4cd435ce2b8ba3f099c5883fa3
- MD5 f4996138606cfa7014efff76c2f2b00d
- SHA1 5e93e9539ca90071f290d668e379f066169f1420
- SHA512 27de54ef4e56ddab16937ae960d1569e36cd149f331f55fd722b968f7d0d562cce2865cef319cc4ba13939071a39b32d1b42b3bf2c7a2235bb4a524e56768fe7
- TLSH
  T1C451EDD8B3084369DD148B6C5E5F257A20177CEDB168A5C09EC6298560B8BBF8CBCDC5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral1 behavioral2
- Target
  metamask.html
- Size 27KB
- SHA256 ff27b0dbcf22b91d028e2f76930336eb1deafe04c9490c384ab6ed8e5b41df75
- MD5 2a9b1e5a63116f0446ef72bd7461b3f8
- SHA1 e33ce9967977c503437eb82e89b4574b0d1d6285
- SHA512 767cf8634784e7e32c168267c5c94d6be277acb509fa63548350777583fe9efc2e4c3a339d400ef67a162b2c073b3db53c212405e4bd9344046e2307a2c76f3c
- SSDEEP 384:NwlB72IrjgIFAFPAtmQa3Mu/of2pXRMmiz6zSJ:NI52Yk0K/oupXymiz6uJ
- TLSH
  T1DCC24EA0AA88E017F67B862E55D0F60875DAE60BFDF30C5DB454D1008FC7E5E2A792E4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  nkbihfbeogaeaoehlefnkodbefgpgknn/MetaMask_files/arrow-down.svg
- Size 152B
- SHA256 ece5fa6a0277d1c59ec2ffa5cee1adde4ad4a791840eac66d7f5bf3be914b2fd
- MD5 d86f6e980c9236997baa68f1a45bcdf2
- SHA1 75225c9b49b703c3e6ce3867310acab9795509af
- SHA512 c2ae6f9a720f41d99d4147c6fc0dbab0edafff72728681f478839e0e0ec02f92519fec84aa12d2f72dfbb4979424a68eb2ea42ae716138549bc99b90ef801087
- TLSH
  T181C02BFD8338C983AE04C356147CDD0C81E5680285CC07EDC0930E003368CD3A481771
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  nkbihfbeogaeaoehlefnkodbefgpgknn/MetaMask_files/common-0.js
- Size 854KB
- SHA256 6a4f377a05f629a483faedf3d404caee7852149d0a7f207a071dab8e9dcd5c04
- MD5 091bf434d5dc34b48aa6136eebc27ca4
- SHA1 041dfe7fec17e173447698493247d25dc3b81dee
- SHA512 b2c3efd4dff9f81b17db8fda50c235615012d369d3ab179d02fc25b730a8dbf37041b1a3c1f746600887f8fc1b2bb3a13197e0f2e994178431ad185780329432
- SSDEEP 12288:oD3A/r6RacXXeUZ1+ft4Nhp99pihXoHlLZLe/M56OxQ6fBXRj+dM:oD3ir6RacXXe2K4vr9pVbLdAOxQ6fyM
- TLSH
  T1FC158E8AB7117E7D07D326E6B41B621491348A64B04960EBF9EC488A1BF5DCD903FF39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  nkbihfbeogaeaoehlefnkodbefgpgknn/MetaMask_files/common-1.js
- Size 1.0MB
- SHA256 3914bbe5775937bc4184aeeac145b2853422f5c9d337dbafa71502e5a691f247
- MD5 f4fb1391c7c017769d914f5696d75afc
- SHA1 5d54e38758b12fbf960f560538831572ca162c3a
- SHA512 90736bfcc5e4297a1349120ba36e8dd055ce619aa18825c2361aa575c8ab72057b76a6a8f6021fe0b6243f9d0a9feddd5913c97a56c3c4b87d9288470570c7d7
- SSDEEP 12288:RPR7iLZqXwHHMf9x4oi91Lb/Wd156p0psG0yLGQ27VRC865BfYKdcq6OwC:1NiLo6CpsG0yLGQ2JRUtcq6OwC
- TLSH
  T182352BA57360E5C046E779BDA43F1100E27E283D61FE90D0F3D9C8E5AA654C9A23BE35
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  nkbihfbeogaeaoehlefnkodbefgpgknn/MetaMask_files/common-10.js
- Size 666KB
- SHA256 8929d77ef2827e6ec9020d1a92c231ba6cae572e6c2bc170c830d921572d78cf
- MD5 89c8c78bc2d19d5528406e44b04767b6
- SHA1 addf5563f77744f81089da95b4ddfdd225e7f12a
- SHA512 4c48c669dee134b38e2c0d31358a84d996e60c3fbf945e4dd3243e684d80041d564ca986d2c398673a506edf06304ac35e75b7ae985b5834cf53b0af8e26e7cf
- SSDEEP 6144:OioXokvPPIwhg8JmqsEa2v2R3hGx4ZWMOO8leaUwXZX9+XtmlUCFmdZqlSEnN9Wu:GIwhgG+Pcbs8MaU8X9+YFgvs
- TLSH
  T1FAE43989BA61F09157E322B5502F450BF278992B3C0C4464F358DCE96EB94ACA17BF3D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  nkbihfbeogaeaoehlefnkodbefgpgknn/MetaMask_files/common-11.js
- Size 326KB
- SHA256 900eab6da1a4c1e7e83b945c0a0967862fb07af32050dccdc55a20862dd7ab8e
- MD5 8001fa547223bf17d455912b46be8631
- SHA1 4dc041266e3378b3b14e3c514bcb83afb1a12a0c
- SHA512 9d2282175caddb8416cf783cd1a2d2cb071b46e12f362b31d7eaf3564e362f51e2bfd201ae174d889a3875d48c56b6ff8183f12f44111570f23f4be086567d92
- SSDEEP 6144:4yrvaqt3JZ1r05lzTrmbZ57BokUPZfy9y8tD3NUU3Ct+3NzwiwevLIDw317i4HeL:tvaqt3JZ1qmbZ57BUPZfy9y8tD3NUU3+
- TLSH
  T1AD646DE27251ABE44FC325BC327B1209E37A455A70C850D8FBCD45E669E69CCD233E29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  nkbihfbeogaeaoehlefnkodbefgpgknn/MetaMask_files/common-12.js
- Size 471KB
- SHA256 44f8a6157399903504d9d3259f977e65e8f7224ec0a1a180b8d5fc6b09fc1538
- MD5 05a8ceff39cb17cfe077fbf5fa42d0fa
- SHA1 3f46ab1d6e7c8cd035b4a509698b99ba7df098b5
- SHA512 1fcf0f68663d28f4e94243f3391565eff3ffd2fcc5c9fbf02aa4ee225c59d47f0898b2f39f841a9ec3ea13aae2f25ef3dfad5bdffebf115108c34a6ab40ea076
- SSDEEP 6144:UViUASswofNfBalpvSzZUIFgsGTNrP/VMXrQTP9D8aezwDnElw/IvuBn4T/du8:AwFfWBSv+lTP9D8Vz+nWvtI8
- TLSH
  T19EA43A953161B9E003C664EC543F1201F3299C36A0ADD4D8FB9D9CEB6ED298C51B7E3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  nkbihfbeogaeaoehlefnkodbefgpgknn/MetaMask_files/common-13.js
- Size 553KB
- SHA256 7f4f679e3c7d47d9da4e69ff52a246123cb104457a397f559408a19c72b570af
- MD5 cc0979d70b4edacd057399f4fc6c529f
- SHA1 8d78212c64ac0b2e13b632a194627ab8b44c49f7
- SHA512 72123154ab591a8ba98f033a44293e5769f4111307c613afa01979c462629491a8ecdfbe45bae2f7ab136b4bd81bc668a3a0857de7a8d61b630d8f37e5770cf0
- SSDEEP 6144:qph7+dPVvfJnprsZgPQkKin4qiObTFNURIswhm/hrEWidfBcSH/FOcuNa/rDl:awBVXQkSUF+idfBcSHcNQrDl
- TLSH
  T117C43BC5B1A2F0A553C769A8503F100AF23E5929B04D40A4F759D8E72DFA98DD137F3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  nkbihfbeogaeaoehlefnkodbefgpgknn/MetaMask_files/common-14.js
- Size 263KB
- SHA256 5f29a597620410d2de0a9b283bf58151388847654f4f1a4db57ff65c96fb98e8
- MD5 91e4f8626af5203f3e788053a11d9c39
- SHA1 2bba654a1d555f9520688bfec4b04827277dee8c
- SHA512 891d6c56305f92106538b7211b59a2f237be457e4ca8d6d7e69abaef3f11907089b9b3a6f02bb09135a1cd25be1f4d9ef3ca713c6fb4fdf37b989ff1dcd0f8a7
- SSDEEP 6144:iLFwyZkco/dV8t8RqzBSpW6QzrTg2tyJXlKIvV3xN6n4wJMw5OZ:QU8t3BSpYrEg+lTjLyMmU
- TLSH
  T174445A86B5B3F67D768F7578903F2006F13F264AA01859B4F26C6E962D6488CC437F19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  nkbihfbeogaeaoehlefnkodbefgpgknn/MetaMask_files/common-2.js
- Size 649KB
- SHA256 8e036e63281a9183a50079567eedb1f687356913c5dd61a7c7d4d7dbe34bfaa0
- MD5 aedef18d75803e93976a23bf8357f725
- SHA1 8978f91440ad9aad1beaa966af16d7fdee16b2bc
- SHA512 07cc793ffa2c0ce0168179f78810753c7fbd2d9dd3d7cab3c5add557f49be29a1c0915b308aeef1b4f0aa65dca44e9b795722061d2bfb6b8667a7bd9cbe2e64c
- SSDEEP 6144:uERpe5m9AcUw/V4IMrbsl1xxER9dw3VQUcA/L1LL6/hA34lR708:omqcUEYrbKER/MQApLqrRB
- TLSH
  T1E3E4278437A1B06297E73AF9503F0105E27A8839709C14A4F7AC8CE76EA59DC9177F39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  nkbihfbeogaeaoehlefnkodbefgpgknn/MetaMask_files/common-3.js
- Size 764KB
- SHA256 ca6bbc2b1770d3b7674342499bf489ced2638513c40e16cb42c3caddf2e6c671
- MD5 2d244ecdba7d3ccc33676b268658b8a9
- SHA1 d2ca6bff141ebe6d89330fb03bca5ea9edac697c
- SHA512 a89438431200e4d6912eaa89e6a53f502b1cf5dd167cf61291387848a90f4f2f8a72921877b4d80bdf3e068f359216d6042b0e23a9ffd68827d03d49b6239337
- SSDEEP 12288:JVaLjURJoaztuR5MQocK0mYP2nHMje5vE/OMo9q+EuTpeAGxlsep:rLzMR5MQocinHMje5vLMo9q+JGLp
- TLSH
  T14DF41AC17762B5AD4AE635E9F42F10019236E92A30CE1497B7EDD8971EE4088913FF39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  nkbihfbeogaeaoehlefnkodbefgpgknn/MetaMask_files/common-4.js
- Size 292KB
- SHA256 4cc3e04793c931fbc61836bd0b54fa633ab601906c4d552ed9d275cf0bb6ec27
- MD5 d12d787b910173ebc54e6d3f3d637bc2
- SHA1 e7e9c7e16c636a2e2e7e6f0a85448e3f2136d48d
- SHA512 89676a2ab73995cdb715fb88d1da9277428dc584e2043e5d040a675fb135f9df70738060748233b8242d224275e3697ac543f8058a7da01a9ae143a688f74df2
- SSDEEP 1536:WjjjOh5xXeuaVCbdUhz3V2uHuk2245iO0yQHuB4Od8dJIH67kfUQs+z3QNRywqwl:WjyyiH29tOBFCdJIH+ywHGEYPOolMMW
- TLSH
  T1ED54D6857B21EA501FC23BF9A02F0205D2B5067C30CD5051BAEE8AFA5FAB69D6133F55
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  nkbihfbeogaeaoehlefnkodbefgpgknn/MetaMask_files/common-5.js
- Size 651KB
- SHA256 d3ea5f4fd33a3e6c9f6e45b328428a4c96688a9a349dde358a588cafc8700cdd
- MD5 e9a7d0e995694c74eee97bcf6f2ec121
- SHA1 d1b53b91ee8b53d7518309e850d9ff26afb97d35
- SHA512 95620a823be603c8f80372aae8c40de30370e0c51a3d49a5b62b0bd27d272afc1ca00fc1e4bcafb0866322deda7dc3f51ba82c5f2305967dd7afdb0b303039c5
- SSDEEP 12288:LuQPAtyrl1IK8D0L7initubKCa7+/eWcjNoDK3fgwPI1k0:qQPVI5dC3gjK0
- TLSH
  T14FE43AC07362B16046EF35F8A19B4110A139D96AB49D10F5B7EC58872FF58CE927BE38
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  nkbihfbeogaeaoehlefnkodbefgpgknn/MetaMask_files/common-6.js
- Size 475KB
- SHA256 beae029780f997cd11b0bb5bde01c9703776e9aceb6eb3cd7d5f270135e7f27e
- MD5 f2c50bc8d93e7d16ff87eec1bb4d5cad
- SHA1 7a8551d13e1236e0fd17dc8791122dd23d4cb079
- SHA512 181b8b806a7f8c2db8473306bcc7bddc0556b829c027eebdf728bc4bfc09bc59699263c63819a92df5e613e6eadde65bfa4c9bca976cfad125c184929e7c1f1f
- SSDEEP 6144:3BWb2wwCZ/pY75wGi3J4FAO4laiuZubI5Au3pohXLD9wIljwHYwrvjr0:3BWb2wwCZJ4FAqoU5GX9jjwrjr0
- TLSH
  T158A46C8472A171B287E624E5A53F0009F23D9824788C14A8F6DC89F63F669ED9177F39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  nkbihfbeogaeaoehlefnkodbefgpgknn/MetaMask_files/common-7.js
- Size 745KB
- SHA256 b9abadbd79e0b129259863f87f4784d0ff26bc1df101c3ebfac5f5c9107d8638
- MD5 c94dd3854d92c45bd6d1964d1c24cf47
- SHA1 23b57198ffdc51758763dc518393d78ee3fba3b1
- SHA512 67240452a851eca1868b2ca2aab06f48ee552964121c55cfa428c523b80aa15de682557d6b263f3bacb656d13f7e7545eb89ffa592c05d7b4770c484b3f961c4
- SSDEEP 6144:ORCcMncdR2B6t7CA/gDtfWswRRs1qrCNvms1e17eLc8tn:2CcMn8bCeSzwR7rams01S1
- TLSH
  T165F41B8872F1F052439775A8002F100AF17AAD29784C4468FB9CE8F67D7699D967BF38
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32