872da44f006e3e93bc9c7926cced37639ac6068078ca675e1338919854e9bfaf

Sharing

Copy URL Twitter E-mail

General

Target
Microsoft.VisualStudio.Services.VSIXPackage
Size 5.4MB
Sample260728-sjdceayepb
SHA256 872da44f006e3e93bc9c7926cced37639ac6068078ca675e1338919854e9bfaf
MD5 904d80eff0090d16a1ddfe65a7c54d7c
SHA1 37b0f0ec196fbe4b8b483bcf8bc701a1b9b3a41f
SHA512 f26599cac18d94f9a2eff1d7931f056c99f7933f0b420adff61b9a1615dda5e3bbddbc8e78afbff054f8542024ba8ecc43fc357cdd88cebecf7ffe59aecf5241
SSDEEP 98304:yd8kF2FWZMbI4siIe7yFWZtsIF6nA2QaMe+Ms34K6hc52s360BSwQ5U0UzE3OrCm:SQ8CbI4si/7y8vgCM4uc52SdSwg5+X
TLSH
T1DD4612A1B4F98541ED1DE0B3F8D1E1039E6C67C5A0B2F80395ED168B7C11DA28F66DAC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  extension/coursier-fallback.jar
- Size 163KB
- SHA256 37f69f027973d852f48c79d8c15b0506e1d2fecb9aa6a94615d1b56a6364143d
- MD5 453eb82d85a91de8162e6ac96c1d19f0
- SHA1 1c836269b74531b8bb31d4f6ea583d6118880465
- SHA512 2d851d136663249906dff4e89b1ef6aaf4497407f26c7c4fe7e72943662f68f62ce5ad12121d1ac91bb29929cda9245b80bce6ba18bd06a6120120b90c407867
- SSDEEP 3072:NfYvob9mOQ3gVMXl2UqRx3wdrzVtR86jLOpHWExWurrLMieazd:NfV0x3gVMXYRx3mfZ8HBPRrXzd
- TLSH
  T14AF3E01937A488A1C7037A38464FC737F868016BD665B43E7AAD04CE4D1DA9E7F236E4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2 behavioral3 behavioral4
- Target
  extension/eslint.config.js
- Size 1KB
- SHA256 dd5ac055459631fc532ab0ff362b1cfd1a95ca5c9f43524feb0bf66882bbd76b
- MD5 e2a44dee298f8a72751d020fc58acb64
- SHA1 599f275400c6ef9964d38ae7917446ec6bf016fd
- SHA512 338cf52fa46159b11a5cc7320eb0cb1b9ea9d04fe7a8c9792ad7af509f3993c328f4d22005e275027c647b875d6a8c8588abdefa21f4353352a5852d0c71517f
- TLSH
  T18D21EB09DDEEAC221680A45ACC7A4AE1B0A0825B2CA1FC85BBFC55B81F0D2CF147264C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  extension/icons/book-dark.svg
- Size 622B
- SHA256 6f0d690890215b63944ea1c697b7186bc85352b4d9dcb604c2abe3309cb16cd1
- MD5 d192a634be1b538513f1106f4edc37b4
- SHA1 f9c6e1c06f19957315d97d604e152843207b7714
- SHA512 4e98afa51b4d8b0af56f1bf2490c74e9f55a3fe7791713be5ef7afafc5334b352ef005f1d0bd09a7b06b3dd80d46d76dd197f8791da16102217831207036bf59
- TLSH
  T15DF0DD58A055D4048708C31682FA84544295D9968108109BF3853AAFF247DC78E562EC
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral7 behavioral8
- Target
  extension/icons/book-light.svg
- Size 612B
- SHA256 ba88349425ed45ea133c3708f64d7acf86caa3cbb69f650ce87eb12e2378294d
- MD5 ad645ab6593f174139d30efeda20cc88
- SHA1 ff6bc30bf18dcb5555970f8bf8d5f3cf40a0e869
- SHA512 cec0bac3e3deaf7bd1a6b67fb44f3298b59701d7b0100d170135b3fe685af57d4e76014dcdbf6de0414e017f7c83b4006f62bce516784ec251e347f56a7e256b
- TLSH
  T1ABF00218A056D4048B08C316C3FA84548259D55A800800DFF3853ABFF247DCB5D572BD
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral10 behavioral9
- Target
  extension/icons/bug-dark.svg
- Size 698B
- SHA256 6a0956f34b649aabd3be5e7d12b2709a1d04117fa49da9b45f6855de80e1abbe
- MD5 4d984c43b9f5e80aeaaf6599f4d64cc8
- SHA1 142f1a57add61b900630fbe0bef3abac45c30f82
- SHA512 1c0c1fb3ae46e21a76d9789a2c3221f9a219fd1dc735d9867b1310b04a31e91679bebf6e94b14d7ed3534eb2177942ddf354687a4e0c79c3b89fc0a97d52d8a9
- TLSH
  T19B01106C69C5E18CC408C322C7E6A888414AD08A44CA44EFFA8126BFEC0B996CC5037C
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  extension/icons/bug-light.svg
- Size 698B
- SHA256 2a1e13f7183ab195a7db2ad90811404c75a6bb1440ee815041977ce90c3673c9
- MD5 cc4cdd031b54018697e0726942de3d95
- SHA1 097ef2fbd4e38ea2e3de35cf1d8b70a97db51e40
- SHA512 faf75ba9420fc745e21c6888d2d17e5b4d8921a602507a78fbbc7495612953b77c23ab9999db248a2b7949c3dce055641d797fa6a223b5f346032cc640001757
- TLSH
  T1CD01102C29C5E18CC408C322C7F6A888814AD08A44C644EFF98126BFEC0B99ACC5033D
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral13 behavioral14
- Target
  extension/icons/cancel-dark.svg
- Size 937B
- SHA256 c5e7c5ab81449d85b56b22bacd4dc8a559e0a504c647d92e810e4a8b5634b148
- MD5 57fa898b6664ec50da97981db6102178
- SHA1 247bdcd8b927aff673516447a868c093cfaaec98
- SHA512 2cb2f851c0def30a9f8f8dab2cf6c41a68e5ae7d3b4d724ad58213d5b201f324227f21d23a8094dd75461f1341e95062bc81c294d59d39d75538019a4691c683
- TLSH
  T10C1144EDA154A744B4364BBD9D2536E034EF58B61FFF86B0D00398A276301F0DE44A9A
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  extension/icons/cancel-light.svg
- Size 1KB
- SHA256 8145587977cb885fe502091b05ad1e70b044db9dd570995a69a606d329bc3ae8
- MD5 3e54e0822f9b706dec7793e23fe8b553
- SHA1 70704d1f1dffdc1ffafe389862171aeecb69ce01
- SHA512 434103f6c0c38f834f7eb0c503b0e41c810a27fd6958639ebfaa62aadd3596b71e140e8213cc2a2c9440de4ba3d52b18d1939dfd7faa88c86cac08a84d182947
- TLSH
  T1D221AFFC619096E5F4D10BEF5D203AC431EA7CBA3EBB81B4D1038851627D2B64C0C99B
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral17 behavioral18
- Target
  extension/icons/cascade-dark.svg
- Size 348B
- SHA256 879a5f5c5e73da58c0759df0f3797f9bbaf3391fe68df1d29919e5ad4f20d0c5
- MD5 646f3ed5ae65fca2e8670c56f76da468
- SHA1 4af0592da56228a5e8355b72141fa3238dadfdfe
- SHA512 faea4985167a3eb655a00cd1868b82f8a2d95326e54d8fb3703272b8fefb58f4de2a45316dce8be04dc2b6fa01d37fd401ff9242743bf9ec9a38f218c3f18be0
- TLSH
  T1A6E026A7B165CAC84309CF31D71F90EA205180DF7C8C81B491903502F8C45F35C89AF8
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral19 behavioral20
- Target
  extension/icons/cascade-light.svg
- Size 348B
- SHA256 677bdca134a54a81fd7e63a8ebdaa6b390f0c3b262a7718b2f77aa96d7000bf4
- MD5 6c21992596e6cf732f73c17c8ebf201a
- SHA1 35575da50907df1a3dfa548e2a2377b06b2d5327
- SHA512 4405196ba6d08ae44ef09a7d41e658f52492b9e8ddd180df8107a700841aef873b772b205125093bb8c156d40abca45f8b836837a147b41b646f8c586db0d926
- TLSH
  T104E026B7B1A5CAD84309CB31D31E90E6206144DFB88C80B4D1903502F8C41F34C89AF4
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral21 behavioral22
- Target
  extension/icons/class.svg
- Size 284KB
- SHA256 2341920f366227092e0c57b46a07858f1533c5f9a4c92ab8897d8c46308fc6d3
- MD5 6f57f11a694ad61050955f619db6db1e
- SHA1 f16a9d8ca6af91b0c330b0c2171b659d42cc0529
- SHA512 ec338125c0a59da0beef847a34fddc26ed1e99c23d54090f70293efab3dd94d951060398e4a29a33bc3ea4bf2bf1aaa795baa5413eda806d0b9eef7371560e97
- SSDEEP 6144:MhMFUJjHQ05ualjWaTSv1FutByI4/aGgamyfHDMHCX+0QfjGbOh/xq:Mht5BjpcFuKXgsfH1aC
- TLSH
  T1555429719683FA9CDA68795054A49DB39C682D8F77076504D2CCEC3EB2BD9ACB21C03D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral23 behavioral24
- Target
  extension/icons/clean-all-dark.svg
- Size 2KB
- SHA256 1cc867f6c2dc478858d05f3a5776f89bffac2e988ad79109877bb65e34863577
- MD5 e1035a504147c0da6d460acd64ad58d1
- SHA1 125eb55bd535b2855fbff45167644a2e187cc93d
- SHA512 9d0d99cceea24a89cd989f84197abb2c9fe8846845726afc9ccc72f35e91efb4b351487236669b241c1bfc25eff7b1ef29ec0878ab08894194731ec0688bf885
- TLSH
  T1215155E5E21880E8A11D0B34AE596617822F78F7AB880845749DC091FF91163F7BE7D9
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral25 behavioral26
- Target
  extension/icons/clean-all-light.svg
- Size 2KB
- SHA256 1cc867f6c2dc478858d05f3a5776f89bffac2e988ad79109877bb65e34863577
- MD5 e1035a504147c0da6d460acd64ad58d1
- SHA1 125eb55bd535b2855fbff45167644a2e187cc93d
- SHA512 9d0d99cceea24a89cd989f84197abb2c9fe8846845726afc9ccc72f35e91efb4b351487236669b241c1bfc25eff7b1ef29ec0878ab08894194731ec0688bf885
- TLSH
  T1215155E5E21880E8A11D0B34AE596617822F78F7AB880845749DC091FF91163F7BE7D9
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral27 behavioral28
- Target
  extension/icons/clean-dark.svg
- Size 436B
- SHA256 44641f8cfe2d84fdb6da78f8ab517c042bda8e20c0676e891a9208bc1376e8e2
- MD5 81bacd303b9a93b9a324a4e4a96002de
- SHA1 740d09107c641b3a7d67889a046fc122c62b01a8
- SHA512 3620f24d8b6d4d96a1d76bf3e10ae322a34a8042d44bac515c9812e5ef93aa02474590e538d79b5ee830e29e2942e7792ce3b9d7f9ec7a7b65c3713d5aab1c8a
- TLSH
  T1B4E0ABFB2C1E8425951486315A2D71FB307B187B9698088ED0E524D3FAC5AF28E025EC
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral29 behavioral30
- Target
  extension/icons/clean-light.svg
- Size 600B
- SHA256 c8fddc2a956dee4c9d3bf6e1c9e518f4d52a0fe553abc547d7b3628fe2fe8089
- MD5 4097fe2cc7e9533ee28ab16d42a5eab4
- SHA1 6eea37a7de43cfe4c5a453d20098d028bb93b5be
- SHA512 0d8be979f3ab8e85a819089c12518dd9f09da624d2e47b3ed0e5fafca912e8badccc2f9952bd5848fbfe373a99c4dc0a9902b60008ea80db2753e546908cc2cd
- TLSH
  T112F024E932554799C40C087AB13EA0C230621CBF1F8983C9E9627E5372FE1B58C5DA97
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32