latest.zip
- SHA256 e943e41fe8f1a24004bc4b27107be0c43b1424421027f533ad9e4b0b88a6e62c
Overview
overview
5Static
static
5index.html
windows10-2004-x64
3index.html
windows11-ltsc_2024-x64
3scripts/background.js
windows10-2004-x64
3scripts/background.js
windows11-ltsc_2024-x64
3scripts/co...nt.svg
windows10-2004-x64
3scripts/co...nt.svg
windows11-ltsc_2024-x64
4scripts/co...-ws.js
windows10-2004-x64
3scripts/co...-ws.js
windows11-ltsc_2024-x64
3scripts/pa...es.svg
windows10-2004-x64
3scripts/pa...es.svg
windows11-ltsc_2024-x64
4scripts/pa...nel.js
windows10-2004-x64
3scripts/pa...nel.js
windows11-ltsc_2024-x64
3scripts/sh...int.js
windows10-2004-x64
3scripts/sh...int.js
windows11-ltsc_2024-x64
3scripts/sh...low.js
windows10-2004-x64
3scripts/sh...low.js
windows11-ltsc_2024-x64
3scripts/sh...ns.svg
windows10-2004-x64
3scripts/sh...ns.svg
windows11-ltsc_2024-x64
4Behavioral task
behavioral1
Sample
index.html
Resource
win10v2004-20260513-en
windows10-2004-x64
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
index.html
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
10 signatures
150 seconds
Behavioral task
behavioral3
Sample
scripts/background.js
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
scripts/background.js
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral5
Sample
scripts/content/content.svg
Resource
win10v2004-20260513-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral6
Sample
scripts/content/content.svg
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
11 signatures
150 seconds
Behavioral task
behavioral7
Sample
scripts/content/page-ws.js
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral8
Sample
scripts/content/page-ws.js
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral9
Sample
scripts/panel/panel-templates.svg
Resource
win10v2004-20260513-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral10
Sample
scripts/panel/panel-templates.svg
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
11 signatures
150 seconds
Behavioral task
behavioral11
Sample
scripts/panel/panel.js
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral12
Sample
scripts/panel/panel.js
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral13
Sample
scripts/shared/fingerprint.js
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral14
Sample
scripts/shared/fingerprint.js
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral15
Sample
scripts/shared/flow.js
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral16
Sample
scripts/shared/flow.js
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral17
Sample
scripts/shared/translations.svg
Resource
win10v2004-20260513-en
windows10-2004-x64
5 signatures
150 seconds
General
- Target latest.zip
- Size 76KB
- Sample260802-ahk2razglb
- SHA256 e943e41fe8f1a24004bc4b27107be0c43b1424421027f533ad9e4b0b88a6e62c
- MD5 93f85f84401bceaf02a31117b20b7de7
- SHA1 16e212bdcbdfa19245a1e037ce670416f85d213d
- SHA512 0d9f75ddd4c2fbd676350ede10c4a1989ac2c6e370dcf00945975cca4e1e3bcfd112cd6b5d21f6b809c4a2d7ab70021f4fddc1a9e412b0472c7b681e86ac8051
- SSDEEP 1536:jArHgEJ7WuVWfkrBu5YaDYoXplHOD4o8i0k3pTSloXwFKpJrf:jJc77/rBY7koXp04oOkQl0f
- TLSH T1CA73F1D41F07CAE1F386347E842396E2A6FCC3143C91628B4FA0C1917E93EA98E5E5D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious SVG script tag 1 IoCs
resource analyses/260802/260802-ahk2razglb/static1/unpack001/scripts/content/content.js
File Explorer
-
latest.zip.zip 76KB
-
assets/icon128.png.png 3KB
-
assets/icon16.png.png 721B
-
assets/icon32.png.png 1KB
-
assets/icon48.png.png 1KB
-
assets/logo-square.png.png 3KB
-
index.html.html 3KB
-
manifest.json1KB
-
scripts/background.js.js 25KB
-
scripts/content/content.js.svg .js 43KB
-
scripts/content/page-ws.js.js 17KB
-
scripts/panel/panel-templates.js.svg .js 18KB
-
scripts/panel/panel.js.js 94KB
-
scripts/shared/fingerprint.js.js 5KB
-
scripts/shared/flow.js.js 26KB
-
scripts/shared/translations.js.svg .js 13KB
-
styles/style.css35KB
assets/icon128.png
- SHA256 89e78967f3fd6be13830b9dba9e025daa8603acb67a50f1fb68ab1ec671b0444
- MD5 11a4f93e149841e4b6b12e9848178a61
- SHA1 362ab28ed6f807370eef1748c8e51625373282e6
- SHA512 6a9d84a57032286c368cc1d37a3cc269dee589c12051903cb82f70ccb76c00e105537245defd5270ad91cd7fbde8d6b3c75714d9d84cab6a683b354ee0a26d2b
- TLSH T1D6716CE315039810E9AA053D932BB6BD20E76743BEB4CF159471F12ACE49810C09BD77
- MD5 SHA1 SHA512 TLSH
assets/icon16.png
- SHA256 5e451e58f40c548de324aa2272d1bbc066a6fb3bf01902eb7dc03f530be60c82
- MD5 5d72441e4421a0aeda45448d33da214a
- SHA1 a837981040c73d8d54779bbafd71a7a5f70f1935
- SHA512 9a3a010ff0873404f8bc5b54f158a91206f6f75bd729d7d7c1fd4635ca3e03550f79d40e1c1fa93fdf4ae5e412a2d1c1108b088ef7f0be578b4180be24498ea4
- TLSH T1950194A0EF8739AAC44FAE036246EBA0CA6033C035603D734043E20D843873C55B821C
- MD5 SHA1 SHA512 TLSH
assets/icon32.png
- SHA256 e2fdefe3bbc129c29b50ad53b618760f2f0b700c300de891b8d426788f792899
- MD5 5ccecc224eb93f4086884b3293492535
- SHA1 3adfb41aaec0385b30f6aa8dac11cf51ddf7e8a0
- SHA512 e238aa740af665dad7cc7f56b972f2d1584945459057bd557c4ca9ae28725df11327c28eb78a19dd04f4a5fe4c841fee6d9e1ef07738896592c85b4bf05183c9
- TLSH T18F31984ED7A70C4CCB62DD70A153141D006287BD20B5BE45DC264199F961B94EFE4569
- MD5 SHA1 SHA512 TLSH
assets/icon48.png
- SHA256 a555909424aca32369663c0a3d03a8356f0aed2e01e61c67cf412d2af04d219c
- MD5 21db2171e5e2d5921f1c5e07516c744b
- SHA1 d289aa11ec1edeadea9572e91e40eb3724116b18
- SHA512 df44e63855c0bbb723ebf7ebcf77d3e79be4d33a7290d2b08b972107c12e929b07450a2389cece1b38283a25424d9f9df350cc41468c7f9756ce87f80f3cdbdf
- TLSH T1C231B687309C5F2BC3A125F93EB9305FE808944DA94BEADA4B346B57262E282424C143
- MD5 SHA1 SHA512 TLSH
assets/logo-square.png
- SHA256 89e78967f3fd6be13830b9dba9e025daa8603acb67a50f1fb68ab1ec671b0444
- MD5 11a4f93e149841e4b6b12e9848178a61
- SHA1 362ab28ed6f807370eef1748c8e51625373282e6
- SHA512 6a9d84a57032286c368cc1d37a3cc269dee589c12051903cb82f70ccb76c00e105537245defd5270ad91cd7fbde8d6b3c75714d9d84cab6a683b354ee0a26d2b
- TLSH T1D6716CE315039810E9AA053D932BB6BD20E76743BEB4CF159471F12ACE49810C09BD77
- MD5 SHA1 SHA512 TLSH
index.html
- SHA256 a1ca6423ee852ef0ef44e6ade29ab597dc19e4c74caaa45d0caf0df1be256089
- MD5 d44bc293352a308b1d6a5d1e6037e858
- SHA1 d2b7699f860683dafcc95d3a58ace102c5e2b87a
- SHA512 16bdfe1f3b2b02b4394578d4046adca3b091a3abec580271e9fe91ecb328150f9d5e137b2d75b7cee8e007cb86214739b1986c0553c9f12cc110a0111d8a3011
- TLSH T1ED712058A9F598FD100F40E79E6263072B92E657E64E900837FE06B00FC6ED4D853AAC
- MD5 SHA1 SHA512 TLSH
manifest.json
- SHA256 3ef63de55a4dc074018209ae91b343e612687d18ebb5c915145522e6999a7d7e
- MD5 a56d8222c3bd878a7596755583807c2b
- SHA1 38bcaa75664c0aa78acd7942fbd7091e876b906b
- SHA512 9a7c0a4d3b58cba07c2c7380f8ec853b08ecab832f135b29e17cc8bda3c6c0797f2ce73aae2ce43c171db7ed2f34194b07d74bfe9f9fc24863aa13a1950dd24d
- TLSH T166414872C4206C6307C8EA6555762285A283434F5C84B928B3AC941D5F6CFBE91B9FBC
- MD5 SHA1 SHA512 TLSH
scripts/background.js
- SHA256 bb83ea5f8d6bb48b0f7e9d7242120f56e8d899389e9f62cbb0b39e3c238790f3
- MD5 9e13958be8c9a52f9306258b1d6c4988
- SHA1 0f02c541666f1a65dc403757faad309a121d2cdd
- SHA512 bbe0dcee09295758fda5dc6d4b5a38e8cbb7365fa04bc3fb7998eaa3282a8d55ea4c65d9b5deb278b9fead121c942dffcbc2d84f0766b47c4f23a7ab149a14bc
- SSDEEP 768:noamvMoEl1n/py/X6PE5NZBvn9yCCKAtTdqyq32myqJXQGLq9GS:nLE4n/eFYNjGS
- TLSH T17BC2221994F3112A06A7F2685E1E940AB652000B3C4CBD697F8C8F1C5F8C67D9AF7BD9
- MD5 SHA1 SHA512 SSDEEP TLSH
scripts/content/content.js
- SHA256 623b6c2f5134911d33f625ff2f280db8d78b9062f400e29f145b57f90bc9969a
- MD5 a787a13b19e5784ba4f950ca817d0dee
- SHA1 235bbca7701b64b58e0fee2a678d3517d3521a74
- SHA512 04ea0c3afe6640ae3fefaa427a3479a94956f2e281f18c150a7064d69c4599529fbb7ad3bca415ce55519e86f8c8481059267965d663119fcb6ba0938fe0ad19
- SSDEEP 768:ZDwWZPMmQjE9Qqr41Gq6b2vTHtWc5u1WAqB4zQaLnvzcMn5:ZDDb/6w2a1WAqofLvzcMn5
- TLSH T14D13A4C9BAF224390567A17E656F5005B3319003340CFDA57ACC86987F9CA7896F2FDA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Suspicious SVG script tag
scripts/content/page-ws.js
- SHA256 a923aa5aeaacea515175dfd400284f82beddb142a256a2a90e75e387b8541a97
- MD5 1cbc926669863dc873a4c0c041ccca4e
- SHA1 d069f2713dd2cd7e883ac77da99a04a3a406ac30
- SHA512 3cccae93d75105d9174ea74b2515bea16073bac68a5f09f4dfd4234b18a5cbc0817f4097ee5d4230a25655d93ce9bc8d94a817bc275b2a4639b27bc7cda29545
- SSDEEP 384:bNKP869Qfm2n8Z+B+MfojviXqM4Ir0k4uhy8:bNKP869vgXojiXqzIr0tuhy8
- TLSH T19082DB48BCB3205641A371B98A5FA0257265A4133B48D8DC7E5C7BA12F69C3ED3E2B4D
- MD5 SHA1 SHA512 SSDEEP TLSH
scripts/panel/panel-templates.js
- SHA256 bff651c903d601e96728b61fa0858482d259a43460947d2b5093ea361af28d95
- MD5 01ec22e38251caa51cd3beafe6519d2a
- SHA1 bfa6e663d6f890cff56902fdce8106145ce91f11
- SHA512 82200af99c6c242f89a87bcc49ea497eeff25b0fb466e794c9744c14f1ea6b7da86419b2e475db9169c7f56108acb2ebbbc4acb1dbf77359f864ccd245d5f21b
- SSDEEP 384:4yCL/vQDd4FRvMsv81Ly+X0ojbrPuMP0mu:fCL/vyd4jMG81Ly+FjbrPW
- TLSH T13C829130A6EB193C6103D1DAA27B237E26AD6523F94B4E08787C07B42FC9D14E677974
- MD5 SHA1 SHA512 SSDEEP TLSH
scripts/panel/panel.js
- SHA256 bd7be12a99a9d55626cfc92f7cf5cbcfb040dcc98caf5501936468573efda6cb
- MD5 87bdeb5606da2bfbb98f58ecd191c01d
- SHA1 53f367495dcc732ffbec139d8a27431ac92c3b64
- SHA512 c72035397afc69da147b9e06d6b9a21b6705fb1a2b04872a9e52a068f276c52130c30fe7544f8d6dc67e0b6cd6fab3e9aaace3b4f51b3243b7072f46e0711e07
- SSDEEP 1536:dJTN0IKQHE0x2vGcRy4qllg9gmUHYadYNnYmLsmleYCQS:dJTN0IKj0ERaCgmUHYcYNnYmLseJCQS
- TLSH T170934F1D7DF31635486BB17E6A6F100DB2A454033808EDC83E4C86956F98D2A96F7BEC
- MD5 SHA1 SHA512 SSDEEP TLSH
scripts/shared/fingerprint.js
- SHA256 ac2fd96930ecd0ea8123fa141c2334d9ae08ea57ba203448d652d3a989e829d0
- MD5 0458bf37a360508f3f043e378d94f9c1
- SHA1 a34e761f04b109a452006af7e9e93989ab5a9e8a
- SHA512 72823722f331a51dd07e2f699a3d25e69de3b9b1d7c749f3f8a270fe98f4cb86aa72a9a03581a9a431289029fdf076781fb02b9e777c662f0a6653b7565a9188
- SSDEEP 96:UkOd5zr0cgzzjDXkg5ENr3pcXqzJ+6Bs5N870YkEq8FwvlIJZLpzF8kHTsFgfpBZ:aUpzTV5ENr3pcXqzJ+6KyNTdFOlIJZph
- TLSH T1AAC103A47E7309390923206A2B67055522934E1773B4ECDC3B8D77065FCAD1B96F1B6C
- MD5 SHA1 SHA512 SSDEEP TLSH
scripts/shared/flow.js
- SHA256 db6df4f710821940ddda2a16cc6253cb2f07818a6c9b82c26b34fcbc8d7f43cb
- MD5 bb31f66dc0a5563ac5107b05b9d84e06
- SHA1 1ae3c11ad9736eb19d6f9132c45c1c012f6bd81f
- SHA512 8fb724b31b0b4369be2001350034e9dfeb8b079e0c779f8bdae0750726a9ef46ead84097d245234ae690cec92c77e2d4d7b2965cefc2646548094c40a39e94e3
- SSDEEP 384:yofwi2lAckQIOIk3lAfAdTABo2/VC7gtehR/yrhUrekPCqH35cW2gwQ5tv/uvAT:7kXsg3lGiTwoNgwh0NUdpcpH8tv/uvW
- TLSH T15CC2E856A13250366617F265CADB528F7230D1077C8EAC14BB4CC1046FEE26DA6FBBD8
- MD5 SHA1 SHA512 SSDEEP TLSH
scripts/shared/translations.js
- SHA256 5280c0d3cf0a9a1d996e80fc9c2aa6192630c9bf4c966cdfcc8ac8f469f4c9af
- MD5 3d237123bf2bf7c112134c1d102d1ca9
- SHA1 580591f6576314aae34e82bbe8c873b380e63b2b
- SHA512 9c755c2badc256dd9c5b7ba90da359524970fe79a38d69c10bad6b0f0a2633077caa4cf83a64e68c7cce465b78dfb1859733db769c84413b296feb37c6952c6c
- SSDEEP 384:U5o9eMID4ZdCTfaOh75Wh9L6h4yW/aK1l0AjJqypJ:/bID4XoaOh75WhMh4yW/abAbz
- TLSH T12252842BFC930CB2055361573A7F168935E826433B54D888B72CA5AC0FACD69A0F95ED
- MD5 SHA1 SHA512 SSDEEP TLSH
styles/style.css
- SHA256 5f3f6a81b742c2889990abf94c4f8fdcc1b527c30e9927552633cf4edcb16e19
- MD5 01076032aad7c2d3577642d06e00fd4e
- SHA1 0af4b572f00fa99e6a6aff8e2cb259feb5ba5331
- SHA512 1a6cb5aba7516a29433f42f77769b47012517c31f314dde6b295c6f5ee32b2cb42feb43dea42a3884e08770e7829df75d99013a84e517f4ea7f85753a22651c8
- SSDEEP 768:ByAoaUgndEFzFJfcdyapmPT9FoOIcnwUXu8YvFVCIsWF4aF+eN:BSPgdElHfavpQjLbXu8K+IsWhEeN
- TLSH T1D4F200916B65C075FC6BF774765A9F5AB398A002CD16DD38EAE4302C4CC43F851AAF88
- MD5 SHA1 SHA512 SSDEEP TLSH