d8566c16672b1150d7bf959eece53f05db1eafa1918b7b2c85242ed4cb6c6b55

Sharing

Copy URL Twitter E-mail

General

Target
RoCookie.zip
Size 20KB
Sample260803-zzdfnsfg77
SHA256 d8566c16672b1150d7bf959eece53f05db1eafa1918b7b2c85242ed4cb6c6b55
MD5 c3d1eb1c40b3fd8bad9a090d3ddc4c94
SHA1 716b19b2c304ffc3c66b3d91b2c43a9f473f7757
SHA512 fda087c46afc85b690ac1ac58ef7ed87d6c7457ee69c21b9d15541bbbe83a8537d8d8682f8515ae301ac91a0f9a7e3dd48f1dffc5240dacc6d0e331844d9043a
SSDEEP 384:dFA2LleCZKStXCYsd4oMyoKBzpZJNygogs52/iDhYZ/zy:j5ejStXCA/KrjRogG2/i1K/m
TLSH
T1E492E13793E0B20EEBF35536D119830A82183DE87971DDED6062C1A0EE8AE15E56A14F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution

Malware Config

Targets

- Target
  RoCookie.zip
- Size 20KB
- SHA256 d8566c16672b1150d7bf959eece53f05db1eafa1918b7b2c85242ed4cb6c6b55
- MD5 c3d1eb1c40b3fd8bad9a090d3ddc4c94
- SHA1 716b19b2c304ffc3c66b3d91b2c43a9f473f7757
- SHA512 fda087c46afc85b690ac1ac58ef7ed87d6c7457ee69c21b9d15541bbbe83a8537d8d8682f8515ae301ac91a0f9a7e3dd48f1dffc5240dacc6d0e331844d9043a
- SSDEEP 384:dFA2LleCZKStXCYsd4oMyoKBzpZJNygogs52/iDhYZ/zy:j5ejStXCA/KrjRogG2/i1K/m
- TLSH
  T1E492E13793E0B20EEBF35536D119830A82183DE87971DDED6062C1A0EE8AE15E56A14F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  RoCookie.crx
- Size 21KB
- SHA256 95233ae4346f10fe15dd739bc4b1e7872e6f721e51a4677f4e1e5eb1916b0a0a
- MD5 df7d9c8d9b2d62126f76dc82d8673796
- SHA1 5e341c00341a48117feb685d974b9a25275a9c33
- SHA512 a1c212d084c20698c188b7ceb47fd2e0f8deef6e1b49f746d104e45259d10c22b01d529f92303d68da86e384260c92a6b593a1e24b927757aeceb455a13a7c9e
- SSDEEP 384:VoLabR25qZ3VIDUkmmLalnQ+a+Dmq7KzQxK5YJWBWCmM0+Afb07TA1M0kes+R7:hbRRZlIDtmmLaJxmqUBWnMJAeTAW0Ds8
- TLSH
  T1B5A2D0C6D1B4296BDD3C03375041A271FBE4625D8DC186A318C7DA16EC9BB503EAA7C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  background.js
- Size 36KB
- SHA256 0cbe7a5d69426d24f173a434b8779e4634675d5a8bd84e48fdde539d558a3450
- MD5 49f0c1691f68e7a48c85468e0e5ee06a
- SHA1 961467185728cc7d2217e81a2e7bd7acb647eb48
- SHA512 11caed9e59b10f7fa359385df4e0c65936bc238e3b053ba02cf0199c35e1812952a460dba1b1c174ac0ad46796fbb9aaee82debbc73707caa35df6b0a4629eea
- SSDEEP 384:IrNBwkpgzQa2Pf+V3Lh0N7MlS5SuYgR2BKTkk5VCC2E1q/jkVSih:IrNsqOnBG8wkkLCC2E1qS
- TLSH
  T1EF03A7593D2501AD26B5D369AF134007F929E2272540D2193BED821D3F70B0DA6EEFBE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3
- Target
  content.js
- Size 7KB
- SHA256 16dbba86e861e26bb910e5287bfd9bfc1df7fa6790e9960e280c7da63917f2d4
- MD5 88b514495fd47adea84478d69adc16c0
- SHA1 3c073991c454dbc38c7be26b76d72c617b499b62
- SHA512 00e31393284070a4a66a7d3d7f1fe026252df1a5920ecff0d1a609de8e17a6df83a520817d6dd2b77aac2ff7e6b9fb2c453c677566d8f8b16de6d8ed19311997
- SSDEEP 96:JiG+Pitv84TcY7P4rrYFYUXC9CywWw3C5w/wqNHzzHrH1K:dwixTc5Rl
- TLSH
  T129E1445A6A3081211AF2633A4B63A605FA3BD263270181867E7CC7441F73B94D637FDE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral4
- Target
  images/icon128.png
- Size 502B
- SHA256 5d5960937c4f565751568d9e6feba6cbdc259ca4e00862420187ef9346080050
- MD5 dbb89cce4b9fb36c1e2fd0bcc9f1debb
- SHA1 aa0595af97ec5e6a1ebca3531ef39964bccd1c8e
- SHA512 57d2fd6cccf3cfbcc0c7d6d29345cc346a7c623a609a8f11254a5aa86db6bd9ca3632e797300893affd31010828c757e1de13eb69810001a566fd9ccf22ba4f1
- TLSH
  T106F012D0E10D65BF9D05273175D3B230DCE356078E7145087CE6DD08C9D8E473263609
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral5
- Target
  images/icon16.png
- Size 1KB
- SHA256 a89bee2426fdb1f988424f16b337a21089f5a9649734cf4144121791f2f71a27
- MD5 369d332968415d6fabe712d6907dae55
- SHA1 78716423fafca0574f441e86bb9e134396e61008
- SHA512 1d6b41a46ca4a31b3ce1e4516e369fe22085e6c8683fb337e0611f910c58ec648ba2302a556ad1e6af91ce46ad3d0777afbc23d1aef4082ae8910282dbba2859
- TLSH
  T1121165D1F72874A8C85F91314141A621FDBA605E47C204C97C4DE828FC8B686B9769C2
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral6
- Target
  images/icon48.png
- Size 2KB
- SHA256 da66819013e1ccabd0725cfe51e9ad30e5b195c73f81d154ae6fee40e54c76ce
- MD5 37324f7cd6c54901dca960b490bb8cbf
- SHA1 f1f1bfdef640ad8758bd0677f961b0e8cb1ed921
- SHA512 2f1d5ac6aed04d6225241780599050a9540b3927a48ec0d193f01f4f43f2b3f3141c9a07fe6651ac3b3636377d59424632d2ff56be2b9b08d8d07382994bba94
- TLSH
  T1175129E785640D3687AFC32B611B4078D9312A5ED6E105D191E0E025BE8E3EDF8E8AC8
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral7
- Target
  manifest.json
- Size 1KB
- SHA256 850211cbd2caace1a94c5085746fa464f358b5ef04e21ae60d900cd166fe6c7d
- MD5 923bea0fc6e291bb6c6a79d3316ae95d
- SHA1 8c1d24ec0a1f616c8be186bf14cf88731556625d
- SHA512 9fdc2c75eb76e60a0f86a5583320c09533923b19f2263a62f3bd98171ecc1522ff8824a9759adbaee5e62f00b4fe2932e213aec2ace58d848cbf8977afd09e1b
- TLSH
  T1BD21CC3BE9242C3B02B8576C38B64743F6220B1F1150AD1F78FE825C4FB165A15A3F1A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral8
- Target
  offscreen.html
- Size 172B
- SHA256 36875fd3ad3a59c72670a37400575565b1c95a49156ab7709dea94fcb7cddee6
- MD5 d60f2c834a7ffa9219e7a787630111e3
- SHA1 db2c8e40576cbf468dd4b7133ccf9a75200d82e6
- SHA512 20602f994e29c1398573022f400c8be6c394ac78e2dcd0a746530029d72c84172480ccace181fcd571a5861996ebe404aab0af5156fdc2039bf9c8495e989460
- TLSH
  T183C012BA29815C1400B07BB62CC0F15420A3E1886140AD11A4D5A0232E013198D87640
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral9
- Target
  offscreen.js
- Size 990B
- SHA256 da3817b446978900c65e7569e7f43fd82f8115284cfba2a50cb4303951feda79
- MD5 153df2af10e571d0a3b7207aae30b9ad
- SHA1 7dbf64bc59077dba464c541631a8c04d09e04763
- SHA512 434179d65a366b0f224a1e04de9777a3d0843b1c0a02816ea8fb59225300483f17259d7288f5c4e76c4b91887b8b8142e2cc5a3a17ef9726c6c122fe12aea4a2
- TLSH
  T16911C0470AB000456EB3F397BA687107FC33C5175A5172BB38AD41105F7A2242A57FF0
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10
- Target
  popup.html
- Size 2KB
- SHA256 9e7a1948d00d74fd5dcad3ca62993644b75b71e593c56672f940177f6892db1f
- MD5 9fa1ce8829d13372d90f2c4fa8bcbfab
- SHA1 b797b441c9efd2c8f00e5848e6d1af6596d876bc
- SHA512 38b009d3dce7fd5d556cab81f56de8a7a52856b5a51b2277284062ca49ddba6e4d1a07f60823edc4ed93302a221bf3edfd7637e717a60df41aead74595495cac
- TLSH
  T1A151FD19E988044E70776339BBB38246F7164563C2469F693FAC32B08FB454C5C66E8F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral11
- Target
  popup.js
- Size 11KB
- SHA256 22bc84106378325193e5d7c00ff27e2f3b81b748201f2d8fee69acc86a8ce586
- MD5 74a637207a4e8479e8cce865e79971f6
- SHA1 ecb3fed0cae221612b60198f9ade020a1dd5c955
- SHA512 b1686cfc19dea34a684d8066542fe1ce55c1a2ca1eddecabca48a30ddeee62cf6090f30ebf2c16a400eda693688933f919e13170368539466dc27a65eaafe481
- SSDEEP 192:GrUhdVy/xneNABjB5UXCqvhDjTVWDWYv4qeqIgA7oenUzua:m/Lt1wMnj
- TLSH
  T1F4421E6A707D143885B6737E3367A369F821602331429A0DBA5CA1705F70F83DC76EAB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral12

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12