a39fde2c20fb54ae2b0a644bf5444461446720f1adbac0ac49f22e4dab89482a | Triage™

Login
Reports

Overview

overview

3

Static

static

1

aea-remedi...ent.js

windows10-2004-x64

3

aea-remedi...ent.js

windows11-ltsc_2024-x64

3

aea-remedi...xhr.js

windows10-2004-x64

3

aea-remedi...xhr.js

windows11-ltsc_2024-x64

3

background.html

windows10-2004-x64

3

background.html

windows11-ltsc_2024-x64

3

background.js

windows10-2004-x64

3

background.js

windows11-ltsc_2024-x64

3

midway-con...ipt.js

windows10-2004-x64

3

midway-con...ipt.js

windows11-ltsc_2024-x64

3

midway-err...ler.js

windows10-2004-x64

3

midway-err...ler.js

windows11-ltsc_2024-x64

3

midway-pag...ion.js

windows10-2004-x64

3

midway-pag...ion.js

windows11-ltsc_2024-x64

3

mpu/MPUMes...ler.js

windows10-2004-x64

3

mpu/MPUMes...ler.js

windows11-ltsc_2024-x64

3

mpu/midway...ion.js

windows10-2004-x64

3

mpu/midway...ion.js

windows11-ltsc_2024-x64

3

mpu/midway...ain.js

windows10-2004-x64

3

mpu/midway...ain.js

windows11-ltsc_2024-x64

3

popup.html

windows10-2004-x64

3

popup.html

windows11-ltsc_2024-x64

3

popup.js

windows10-2004-x64

3

popup.js

windows11-ltsc_2024-x64

3

sentryjs-a...ted.js

windows10-2004-x64

3

sentryjs-a...ted.js

windows11-ltsc_2024-x64

3

sentryjs-c...ipt.js

windows10-2004-x64

3

sentryjs-c...ipt.js

windows11-ltsc_2024-x64

3

src/AeaNat...ing.js

windows10-2004-x64

3

src/AeaNat...ing.js

windows11-ltsc_2024-x64

3

src/McsNat...ing.js

windows10-2004-x64

3

src/McsNat...ing.js

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
chrome.crx
Size 165KB
Sample260728-wy7rcaba22
SHA256 a39fde2c20fb54ae2b0a644bf5444461446720f1adbac0ac49f22e4dab89482a
MD5 4ccecbd4314d0eb7adb2e2c66e56d897
SHA1 6124eaca56db5ccb24c6f733766412368bce65b4
SHA512 3aa2516ae5a1ba9e3ba5485edc5b70829cb4b5bd5f70dd727ffbfa19e8bec706dbe834360c8d2885db06d4987f9bca81108632b8bceffb5a126c37c740858f17
SSDEEP 1536:FsRQBinzz+hQWHjxfO+ismLn0PClOfiABNhD0BPvL1PbInIvNgJ7O/H6o1kMqCr:xBiuet+lmL0PnxFDq1EUH6o1P5r
TLSH
T120F3E021B9F0B165DAEBA5362CC9118DBF770947D6C2DC42398E885B4F603C40E7F29A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution

Static task

static1

Behavioral task

behavioral1

Sample

aea-remediation-content.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

aea-remediation-content.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

aea-remediation.xhr.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

aea-remediation.xhr.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

background.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral6

Sample

background.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral7

Sample

background.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

background.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

midway-content-script.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

midway-content-script.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

midway-error-handler.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

midway-error-handler.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

midway-page-script-simulated-via-injection.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

midway-page-script-simulated-via-injection.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

mpu/MPUMessageHandler.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

mpu/MPUMessageHandler.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

mpu/midway-pin-utility-extension.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

mpu/midway-pin-utility-extension.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

mpu/midway-pin-utility-main.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

mpu/midway-pin-utility-main.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

popup.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral22

Sample

popup.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral23

Sample

popup.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral24

Sample

popup.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral25

Sample

sentryjs-api-injected.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

sentryjs-api-injected.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

sentryjs-content-script.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

sentryjs-content-script.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

src/AeaNativeMessaging.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

src/AeaNativeMessaging.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

src/McsNativeMessaging.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

src/McsNativeMessaging.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  aea-remediation-content.js
- Size 2KB
- SHA256 3b8e5ded60d2825a4d3c612f4278be560a74c87e7079ed6ead80f3b943dc9a01
- MD5 23610d2db66cdeda8b6d4b51a65170c7
- SHA1 bedc7b970f6937ab223cd70569910344566e9fbf
- SHA512 bc620cf0061e1f02add7da439cd5f7d03cd7b9ccbea726d764753fce5584400d96ba651e3080d45369bb535900767978d1204ea20f8c85d76d2f64d1c371a2d5
- TLSH
  T1A351116918E34152036F693F63BFB2486735C8171204A9047DAEDBE6AF50BB04B63FC4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  aea-remediation.xhr.js
- Size 3KB
- SHA256 60e0e960872a1f63678c9e5698576efa8770aa2ea370e0f3d617e6302a4ab00a
- MD5 915de8e2889a8a3b36b7467a16919910
- SHA1 9e07f01f8e024bb700e1f3822fcb78e963f13a84
- SHA512 e6dd6b4d0939d7236825ec58b65719429379376e64fab84bdaac9467e74854ebe0157c6d5a6b6fd57860e72385615b26cc3b9f361f1e0962103bc660676440bc
- TLSH
  T1A0611E89A8A31032492B29FBD6EF662D3F72541B2544D9483D4E83805FE4AB64376FE4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  background.html
- Size 149B
- SHA256 9be10e0ade79faefce7e256554acc6b33504241ef5eb0ea2c8735f946ecdbb89
- MD5 bc9d1bf733f915b5b92313247170c860
- SHA1 2a0250e54d08f77e7b33de909f733fa0853a4fcb
- SHA512 f504035dfeadac9e5d94cdcb50f18123a17cda28d37c24d1c36890538423c2e04f38ecef2430fdef9f97a0d0a4d164b63ac50ce7746a9750b6a6a80d66c2749a
- TLSH
  T129C09BC958F0C95521440D551EF1F7051D8BD1879641DD4C3AEF71711F457450DD365C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  background.js
- Size 31KB
- SHA256 0e0adac03b3b8690f2eb85026534a468349ef206c09fc5bd134a3a4046bcbc99
- MD5 0a6b368fc4de77231d2109634dfa8c94
- SHA1 dafe979839e388328017fe5e7a65ffd847172c6a
- SHA512 39a8d945865b36a1722ee59115c5b9776070f3997866a371140a8745393660e798849fd226efa7dfdbdc572db61874a1516a5c73f06fb0acf6c1f073ca0ec0b7
- SSDEEP 384:ixtRc7fLpgvnE8YfciTP1zsOO2CVMO1RMHIedl/OtH/n4zcnF/il/AOC:Wc7fMnE8YfpSOO2CVMO1RMXSH/nHKG
- TLSH
  T1BBE2651565BB0823096360E9BE373001262484076289FC197BDDD7941FCEA6EDAE5BEF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  midway-content-script.js
- Size 8KB
- SHA256 6bb3799b4b030a5656b3d77be0f8b44ae1b7838e2d2a82d4cbd50707e49e348e
- MD5 08e9fe166f50385f8b026035d2ca378b
- SHA1 be178b00c4e18de676f8b25a4d35b9932066b6b9
- SHA512 88d3d092c7b2b4e14290a7db3fcfb0c6dffa6f26375a7d94ba28b0cb2f013cd99faef9cf53739816699be3db3953f80bffd329c1e21e42cfea2768af382b8bda
- SSDEEP 192:RrdK788TJueBiHzEpN8iQ+iEi/Fz8qiYikztiB:RrHLYN
- TLSH
  T13C02331D50A201718A27E0DABBAF7151573AE0533418AA367BDC93F04F957BA91F3BC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  midway-error-handler.js
- Size 6KB
- SHA256 0acff9a6cc03cc12c9da9fd4b1c2002724a80a366c288a3ec13dcf12cb0f9036
- MD5 679a774a4430925984f53c8b5048db31
- SHA1 85b37e12e0791bb7920a6ad69566fe51cb6f037c
- SHA512 e93603f7f779b7b3ef4d77323c8724eb7ebff7155aefdb5a2efb4618d0c89dc1b007f7c3c02dee0558aa01ef9f0ba75d161daff8b5cf0f88d694815e5c9f8b34
- SSDEEP 192:vv07kiQD8j3vqz3q/YfA9uyojuqYKk9RXnhrgjuOqBu5LKZ:vv06JVuQkzJUUZ
- TLSH
  T113E193550EB6083F0A27209E7B6B704A3D215403A544ED45BBEDA3CA0FE9564CF877FA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  midway-page-script-simulated-via-injection.js
- Size 11KB
- SHA256 0964343f766f62e33dc64fbdb82b98a7326d943fe0cdde50ac4aa82a3baed956
- MD5 f9728c8982df250575ac6be5588fcd84
- SHA1 a8b6318765dcbca0d379600403ff6de296262983
- SHA512 43f77d7cea822e4ad2e979895d46838ddd2b4fb04cd45215dd2c10b368d18d7b9c1aca05cf9c4864893225809cf9f29d793f51d70a6d2f598d3eb8bdbad06440
- SSDEEP 192:TSVuPgvMipP6ZPMsiqP9y+2SHw2o1Ls9C/XFnJnkeo07UmeoGeleoRj4BeleocKs:T1VOj2u5WKKE4
- TLSH
  T14142954A18F310B58673F0ADA76FA1267276B057300CED687F8CD7601F864A9E1B7AD4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  mpu/MPUMessageHandler.js
- Size 3KB
- SHA256 043ea9ff48e086fcf8d8fd640ce09924595ef0af01e1868173d80f697c3e9b29
- MD5 cdc4cff825bf3ef12f96074d48e7a79b
- SHA1 29a33e3c88dcb285cd0b47bc6d227721107c3a6b
- SHA512 fd5e99a62501ed0281e34555c106ff90d4c96646d7b85429e2805a8f424143bb0edfbe960bc67f8c9394eb0185cfd0c5696d42dd26ead09de66c3fdedcf4f5d3
- TLSH
  T14051030A599F0D194627506E7E9AB1404332C2033744BEB6BBCC03B59FAC79C5BB27DA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  mpu/midway-pin-utility-extension.js
- Size 4KB
- SHA256 c738c68287dab1b362a4f35116a1e0bbda16f17dff0c68e4ea702649231b7caf
- MD5 dcd214dda7135c711a9cd03fb2179697
- SHA1 b24f308bdbe8e67479be7b1a8b11f071d7086cc4
- SHA512 a804382a81f9b3081d4cfd710ec0189d1500605017ffdf3eb5bece6cbcf58d48ceeb15ca50cb51f8fd0fa14af86570d00165b5b8748617d436582d6f2ea183c3
- SSDEEP 48:6TCezQ08mG+IgzKtYN3sG+6hM9SgmU+idjNrzi+s7HV5rykIzkHP/YTf7cKHhQWk:yCec0M83LSljNr25V5e08fochQXdVY0
- TLSH
  T166A1E24AE9D1182B2127503F3ABBA281123494435310BE49BBACB5F55F6C9E4B777BCC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  mpu/midway-pin-utility-main.js
- Size 4KB
- SHA256 66f9f499eb3481d0556d920e79fdc4d571e55cfae2256ec8639ee20ef357f5f4
- MD5 ae165651ababbb67f6c8a7e67124364b
- SHA1 a1a3c371f5eaa7440bd5f14661be33d349d73443
- SHA512 72c82a70f4b0509aa3f501e3f676cd3e5c7ca4bbead5afb0e7e35b117b550a91e7dd832c07a92e4de2fc9712989aeab746a74de4111f75c8b96c1ebd29f00f0c
- SSDEEP 48:YiqrukMFz3F/Puu+VD0RTK5/gIlKt/2mNMx/3ubvzmLShxg4LSwiGjVw/dfMP6jQ:McFB9++hqKtDN4W+ShGASUjulfLKd
- TLSH
  T1A69101042AE205378577E16A2BAFB1C5323115476344DA403F5D8BB10F82ADAA6367CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  popup.html
- Size 6KB
- SHA256 b6db7f784bb054e621daf71b5938c7dc3adb8d9ea95a6e20e58139240d6a5d40
- MD5 d4c4935cf7f55006f0c92b57bfaba60d
- SHA1 f68f08d48d0475a9ff2b62a5f606efcc238994fe
- SHA512 888484f3b13d487c6e0c2aac68d7a94ed580a0d2ec3ef4d9be9430f391e87fc194966951896a78e74d49327b45ac45992e4a19a3fc0d311518e02d21459f2381
- SSDEEP 192:uf9s0DwKcjTt6zoKODCzb2MMlBYAdhf+Z70IUqd9sgh:uP0ZD23uYVUB2
- TLSH
  T13CD1FEAB8EF301356493A4942FB99612AB70D107E14ACD8CBECC5398CFC6ED49953798
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  popup.js
- Size 3KB
- SHA256 206f2d44bcbee1a0711e7491f0fe39bef1e8f0414b091f51be487191f7462073
- MD5 9c5a885e5764ee186d471d509c0c679d
- SHA1 193592c12a5444fc29fa5a31270c857735b540a9
- SHA512 410b92ec0eb4ca10a5fdab66e8f238e2df76ca6c0a61b4a58b1c339ca2397ab7b186bc1af1b465228a8b8ffcdb4381cdf37a34b8909ebfe2778a9d745b79f5da
- TLSH
  T15E7130275AEF053449B7A9F96A3F524632394007309ECE683D9E45880FC65BD82E1FA5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  sentryjs-api-injected.js
- Size 2KB
- SHA256 236be1cc3ab975057d2bd843c8ecd0904e84e847c63ab35d8d444062b808efb1
- MD5 5dddc7597b7a66f9d5d26eba50d50f90
- SHA1 4a54c788a6d7e41ea397a87f7659144af2a3ece0
- SHA512 88e888ec901fb82551d209e3160882c0ded75a18c94e047d184b337f26b8bfe69f89e49b890f246b7fb6e38d5bdf73048495deae7bfa0d103d347e4447ba6a5a
- TLSH
  T1E9412E0C18F112A2266BA06D574F8177F264D19B221C99F4BD4CEB602F8F95DA0B2FD2
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  sentryjs-content-script.js
- Size 6KB
- SHA256 debba72c0aed04f8f510275bda9e5ad7e42a1bf416fde3ae91f733367e312085
- MD5 c35459b7bb5ade179e4d93ef69b23887
- SHA1 8099bf98fed41156bd7e28f67a93329643a51267
- SHA512 3c67c0ecddf27884a10dba6ad4e547d053faa022f79bcd71f298c6af274e056b2dce6dcee8dfffaa2b3c8df65c59d64a04948bdd92eac770b75076c8f6b0ca11
- SSDEEP 192:yJgI/QSqyFKb8iQzjTcoigQyyzeiedJQDe/AOmdx:yT/5eizdD/AOmdx
- TLSH
  T161D1630C28E2605127A7E65F176FA231A228C0075A0CED60B9DCC7E17F57A6D45B3FC6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  src/AeaNativeMessaging.js
- Size 15KB
- SHA256 f7f83002e11f6ec8cba85890d0ab0d1b2caaf65899bc823413f15ca85865e73c
- MD5 3c828acda8049d06f5a6dd3dfcc383dc
- SHA1 ad42cefb853069808e525e70059c278a8ad41d1a
- SHA512 b67c047d5d5d8029e2d9c0f143fae947c540107da813a42812da9d8d8bacc9d43f18195eeda3d21d8e42ae3a03194f9e02069042077fa858b9b54a01bb7ad84a
- SSDEEP 384:CXXacJVSbIM8WwDWjZHX45ckJMCfBrX7XaXXnFXrIEre:aacJobIM8WwSjZHX45ckJMC5X7XaXXnw
- TLSH
  T1A16251057BFF152606A771552EAB31D1B220C00B1248ED6C7A9D43E2CF5A7ACA6E17F3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  src/McsNativeMessaging.js
- Size 11KB
- SHA256 1d7b294d3098509af0eb672d5fafe66715f83aaba761f74736f50248b100e19a
- MD5 d9fac14b7db26157b3700b0ba647d824
- SHA1 db96c4863638ba5bfe90e41324d28bd66efa7e9e
- SHA512 d858afcf8a4d2985dd3ee4c294b0ae3ff3944392a858e1e9a387469030f034ae6a2a287e06226330c78d946b0442bd09854870d22bb50c57c547f9d68a55d993
- SSDEEP 192:ubczxOxOMczax1LypaCj2sjgtBDpC5upovO0xJtM1nMk2IlIJneOm5KhiIuZRLGr:uwxYOMc2x1yjeC5sIDknwISYtIERFu
- TLSH
  T10032220D17FF50224B6764911F6B3191B321A10B3B15DE3C7EAC53E08F19B9C56A1BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy