e943e41fe8f1a24004bc4b27107be0c43b1424421027f533ad9e4b0b88a6e62c

Sharing

Copy URL Twitter E-mail

General

Target
latest.zip
Size 76KB
Sample260802-ahk2razglb
SHA256 e943e41fe8f1a24004bc4b27107be0c43b1424421027f533ad9e4b0b88a6e62c
MD5 93f85f84401bceaf02a31117b20b7de7
SHA1 16e212bdcbdfa19245a1e037ce670416f85d213d
SHA512 0d9f75ddd4c2fbd676350ede10c4a1989ac2c6e370dcf00945975cca4e1e3bcfd112cd6b5d21f6b809c4a2d7ab70021f4fddc1a9e412b0472c7b681e86ac8051
SSDEEP 1536:jArHgEJ7WuVWfkrBu5YaDYoXplHOD4o8i0k3pTSloXwFKpJrf:jJc77/rBY7koXp04oOkQl0f
TLSH
T1CA73F1D41F07CAE1F386347E842396E2A6FCC3143C91628B4FA0C1917E93EA98E5E5D5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Targets

- Target
  index.html
- Size 3KB
- SHA256 a1ca6423ee852ef0ef44e6ade29ab597dc19e4c74caaa45d0caf0df1be256089
- MD5 d44bc293352a308b1d6a5d1e6037e858
- SHA1 d2b7699f860683dafcc95d3a58ace102c5e2b87a
- SHA512 16bdfe1f3b2b02b4394578d4046adca3b091a3abec580271e9fe91ecb328150f9d5e137b2d75b7cee8e007cb86214739b1986c0553c9f12cc110a0111d8a3011
- TLSH
  T1ED712058A9F598FD100F40E79E6263072B92E657E64E900837FE06B00FC6ED4D853AAC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  scripts/background.js
- Size 25KB
- SHA256 bb83ea5f8d6bb48b0f7e9d7242120f56e8d899389e9f62cbb0b39e3c238790f3
- MD5 9e13958be8c9a52f9306258b1d6c4988
- SHA1 0f02c541666f1a65dc403757faad309a121d2cdd
- SHA512 bbe0dcee09295758fda5dc6d4b5a38e8cbb7365fa04bc3fb7998eaa3282a8d55ea4c65d9b5deb278b9fead121c942dffcbc2d84f0766b47c4f23a7ab149a14bc
- SSDEEP 768:noamvMoEl1n/py/X6PE5NZBvn9yCCKAtTdqyq32myqJXQGLq9GS:nLE4n/eFYNjGS
- TLSH
  T17BC2221994F3112A06A7F2685E1E940AB652000B3C4CBD697F8C8F1C5F8C67D9AF7BD9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  scripts/content/content.js
- Size 43KB
- SHA256 623b6c2f5134911d33f625ff2f280db8d78b9062f400e29f145b57f90bc9969a
- MD5 a787a13b19e5784ba4f950ca817d0dee
- SHA1 235bbca7701b64b58e0fee2a678d3517d3521a74
- SHA512 04ea0c3afe6640ae3fefaa427a3479a94956f2e281f18c150a7064d69c4599529fbb7ad3bca415ce55519e86f8c8481059267965d663119fcb6ba0938fe0ad19
- SSDEEP 768:ZDwWZPMmQjE9Qqr41Gq6b2vTHtWc5u1WAqB4zQaLnvzcMn5:ZDDb/6w2a1WAqofLvzcMn5
- TLSH
  T14D13A4C9BAF224390567A17E656F5005B3319003340CFDA57ACC86987F9CA7896F2FDA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  scripts/content/page-ws.js
- Size 17KB
- SHA256 a923aa5aeaacea515175dfd400284f82beddb142a256a2a90e75e387b8541a97
- MD5 1cbc926669863dc873a4c0c041ccca4e
- SHA1 d069f2713dd2cd7e883ac77da99a04a3a406ac30
- SHA512 3cccae93d75105d9174ea74b2515bea16073bac68a5f09f4dfd4234b18a5cbc0817f4097ee5d4230a25655d93ce9bc8d94a817bc275b2a4639b27bc7cda29545
- SSDEEP 384:bNKP869Qfm2n8Z+B+MfojviXqM4Ir0k4uhy8:bNKP869vgXojiXqzIr0tuhy8
- TLSH
  T19082DB48BCB3205641A371B98A5FA0257265A4133B48D8DC7E5C7BA12F69C3ED3E2B4D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  scripts/panel/panel-templates.js
- Size 18KB
- SHA256 bff651c903d601e96728b61fa0858482d259a43460947d2b5093ea361af28d95
- MD5 01ec22e38251caa51cd3beafe6519d2a
- SHA1 bfa6e663d6f890cff56902fdce8106145ce91f11
- SHA512 82200af99c6c242f89a87bcc49ea497eeff25b0fb466e794c9744c14f1ea6b7da86419b2e475db9169c7f56108acb2ebbbc4acb1dbf77359f864ccd245d5f21b
- SSDEEP 384:4yCL/vQDd4FRvMsv81Ly+X0ojbrPuMP0mu:fCL/vyd4jMG81Ly+FjbrPW
- TLSH
  T13C829130A6EB193C6103D1DAA27B237E26AD6523F94B4E08787C07B42FC9D14E677974
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral10 behavioral9
- Target
  scripts/panel/panel.js
- Size 94KB
- SHA256 bd7be12a99a9d55626cfc92f7cf5cbcfb040dcc98caf5501936468573efda6cb
- MD5 87bdeb5606da2bfbb98f58ecd191c01d
- SHA1 53f367495dcc732ffbec139d8a27431ac92c3b64
- SHA512 c72035397afc69da147b9e06d6b9a21b6705fb1a2b04872a9e52a068f276c52130c30fe7544f8d6dc67e0b6cd6fab3e9aaace3b4f51b3243b7072f46e0711e07
- SSDEEP 1536:dJTN0IKQHE0x2vGcRy4qllg9gmUHYadYNnYmLsmleYCQS:dJTN0IKj0ERaCgmUHYcYNnYmLseJCQS
- TLSH
  T170934F1D7DF31635486BB17E6A6F100DB2A454033808EDC83E4C86956F98D2A96F7BEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  scripts/shared/fingerprint.js
- Size 5KB
- SHA256 ac2fd96930ecd0ea8123fa141c2334d9ae08ea57ba203448d652d3a989e829d0
- MD5 0458bf37a360508f3f043e378d94f9c1
- SHA1 a34e761f04b109a452006af7e9e93989ab5a9e8a
- SHA512 72823722f331a51dd07e2f699a3d25e69de3b9b1d7c749f3f8a270fe98f4cb86aa72a9a03581a9a431289029fdf076781fb02b9e777c662f0a6653b7565a9188
- SSDEEP 96:UkOd5zr0cgzzjDXkg5ENr3pcXqzJ+6Bs5N870YkEq8FwvlIJZLpzF8kHTsFgfpBZ:aUpzTV5ENr3pcXqzJ+6KyNTdFOlIJZph
- TLSH
  T1AAC103A47E7309390923206A2B67055522934E1773B4ECDC3B8D77065FCAD1B96F1B6C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  scripts/shared/flow.js
- Size 26KB
- SHA256 db6df4f710821940ddda2a16cc6253cb2f07818a6c9b82c26b34fcbc8d7f43cb
- MD5 bb31f66dc0a5563ac5107b05b9d84e06
- SHA1 1ae3c11ad9736eb19d6f9132c45c1c012f6bd81f
- SHA512 8fb724b31b0b4369be2001350034e9dfeb8b079e0c779f8bdae0750726a9ef46ead84097d245234ae690cec92c77e2d4d7b2965cefc2646548094c40a39e94e3
- SSDEEP 384:yofwi2lAckQIOIk3lAfAdTABo2/VC7gtehR/yrhUrekPCqH35cW2gwQ5tv/uvAT:7kXsg3lGiTwoNgwh0NUdpcpH8tv/uvW
- TLSH
  T15CC2E856A13250366617F265CADB528F7230D1077C8EAC14BB4CC1046FEE26DA6FBBD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  scripts/shared/translations.js
- Size 13KB
- SHA256 5280c0d3cf0a9a1d996e80fc9c2aa6192630c9bf4c966cdfcc8ac8f469f4c9af
- MD5 3d237123bf2bf7c112134c1d102d1ca9
- SHA1 580591f6576314aae34e82bbe8c873b380e63b2b
- SHA512 9c755c2badc256dd9c5b7ba90da359524970fe79a38d69c10bad6b0f0a2633077caa4cf83a64e68c7cce465b78dfb1859733db769c84413b296feb37c6952c6c
- SSDEEP 384:U5o9eMID4ZdCTfaOh75Wh9L6h4yW/aK1l0AjJqypJ:/bID4XoaOh75WhMh4yW/abAbz
- TLSH
  T12252842BFC930CB2055361573A7F168935E826433B54D888B72CA5AC0FACD69A0F95ED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral17 behavioral18

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18