Overview
overview
3Static
static
1RoCookie.zip
windows11-21h2-x64
1RoCookie.zip
windows11-21h2-x64
1background.js
windows11-21h2-x64
3content.js
windows11-21h2-x64
3images/icon128.png
windows11-21h2-x64
images/icon16.png
windows11-21h2-x64
images/icon48.png
windows11-21h2-x64
manifest.json
windows11-21h2-x64
3offscreen.html
windows11-21h2-x64
3offscreen.js
windows11-21h2-x64
3popup.html
windows11-21h2-x64
3popup.js
windows11-21h2-x64
3Analysis
- max time kernel
149s - max time network
119s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
03/08/2026, 21:08
Static task
static1
Behavioral task
behavioral1
Sample
RoCookie.zip
Resource
win11-20260513-en
Behavioral task
behavioral2
Sample
RoCookie.zip
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
background.js
Resource
win11-20260513-en
Behavioral task
behavioral4
Sample
content.js
Resource
win11-20260513-en
Behavioral task
behavioral5
Sample
images/icon128.png
Resource
win11-20260513-en
Behavioral task
behavioral6
Sample
images/icon16.png
Resource
win11-20260513-en
Behavioral task
behavioral7
Sample
images/icon48.png
Resource
win11-20260513-en
Behavioral task
behavioral8
Sample
manifest.json
Resource
win11-20260513-en
Behavioral task
behavioral9
Sample
offscreen.html
Resource
win11-20260513-en
Behavioral task
behavioral10
Sample
offscreen.js
Resource
win11-20260513-en
Behavioral task
behavioral11
Sample
popup.html
Resource
win11-20260513-en
Behavioral task
behavioral12
Sample
popup.js
Resource
win11-20260513-en
General
- Target offscreen.js
- Size 990B
- Sample260803-zzdfnsfg77
- SHA256 da3817b446978900c65e7569e7f43fd82f8115284cfba2a50cb4303951feda79
- MD5 153df2af10e571d0a3b7207aae30b9ad
- SHA1 7dbf64bc59077dba464c541631a8c04d09e04763
- SHA512 434179d65a366b0f224a1e04de9777a3d0843b1c0a02816ea8fb59225300483f17259d7288f5c4e76c4b91887b8b8142e2cc5a3a17ef9726c6c122fe12aea4a2
- TLSH T16911C0470AB000456EB3F397BA687107FC33C5175A5172BB38AD41105F7A2242A57FF0
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Command and Scripting Interpreter: JavaScript 1 TTPs