150dafc943eeee60c46282c26003ccc37a1a898f9e9180f725ebf18ea3f32870

Sharing

Copy URL Twitter E-mail

General

Target
{fcaf8e22-fd89-4a3f-99a0-c49fff1c4ac4}.xpi
Size 257KB
Sample260804-pm9cgazhlg
SHA256 150dafc943eeee60c46282c26003ccc37a1a898f9e9180f725ebf18ea3f32870
MD5 f1a3724b5ee854838a8cc9cdda7bdf96
SHA1 5966fff7b6c9138b02d77532ef52db4b2c3627de
SHA512 fa1a109dd387779164083f7702a74cdbbbd8f2b54a0f0621e2527716b56fed6de5a56a33b8a5a0f4dcfc99dcf1d7cd4d48b6f6e9b4137168cb54be6bb7f3ced2
SSDEEP 6144:ztZn7+IWtEQLWHH/I6gfPjt7Eh2LzgIn9VUBCNPmohLtD0N:z8E3ft67t7EULpHUYd1V0
TLSH
T1CE44E01DEE958CFACB3B92786807D5998D1746401E91E22BCD817ACAC920DC44BB7CDF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  ad-hoc.js
- Size 4KB
- SHA256 e3eef552dfef65ffa09d4f509f6146ace0b5cdf1e04f5bf26500fa8290d2ace1
- MD5 b3f3a061f3472c77df160fc4f2aa9dd1
- SHA1 6487933a57f8c1af634d8cb37c0fcae2ea7386e8
- SHA512 caddad2abae4ae3103e69bb2ba9f104f52d3de239bf0e89ff4501ae10c507c00bf8c00ad606be85f335b035081e018e46c20a15d3a38ea1205f5c78559371099
- SSDEEP 96:Uro83tC6xSnF8n3xCHOAI0gucDdvMwYk9NSSaO8EjYMgW+/17ZPFM:CWFYMuAIXntMwpacNgW+d7JFM
- TLSH
  T18A91CB35B73E227E4103314CD98DF3C8596CB5954A48E6A3F2876B2904C8B17A8C2E6E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  bb.js
- Size 3KB
- SHA256 8d117118c765e10c1133fc63e3500f4498948ddde3733406283c922468525067
- MD5 a7edcfee960962d1d228ead0c3b503b3
- SHA1 9fe1ac667d2968dc57e5c7711050d0ff61119b3f
- SHA512 8d07a3141ebdc0ce74ef1eb66385bfc3f10b8b014b541ed3c36a5758a1d747494af9430cc4a4a31a89bd65a58d1e6ce48a14650f8add4a7420b99f58f4ca8105
- TLSH
  T1A281223AF54EE4494AC59A792537DA85DC89ACC306B3CA07E7ED81D0A3D15C84063BFE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  captcha.js
- Size 658B
- SHA256 9a5012f5f317570907222c5fcce10cb4a8c7586eeb83d14a8f1ee65207655a6d
- MD5 50eacb8a95dae774150e8021e3f4d38b
- SHA1 220cdc7b45575b0880369180eb8a6b6883855aa1
- SHA512 ce38df1f33e95aef8fedacfbc0ee9a611c4e8f2489902635c02b502fc4093be91103c38d1f28ae4dfea491995324514fdd997c8de44893a71729338d7ee63e88
- TLSH
  T12F01DD11F17D315C5CC0B81480365048CD2FC420F11B22759606CA50A79A9C9A33BEEB
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  cef.js
- Size 6KB
- SHA256 4084646cf7a1962decf328d26f4bb4df6c1bbdbb4030a3f21381a2f758f7cb78
- MD5 daeea4aa588602c13261114971234ceb
- SHA1 050fa8b52bce4a74b302ca35852419a5c71227f1
- SHA512 765947ab1b0af44b519c6ab85291c7a9585b230a66c33a189d6c61d52f8b9c065d8466cba6020f643bf783689ed2908e7b0331dd728db5e4601fb91a7e3ed5a5
- SSDEEP 96:U2d8VzTd3qH/O1Q1DNdpMjwI/825EYedzbZGwmv82cQoI:PdgzR3s/bBq2Yev8T
- TLSH
  T121D13E39F11CE06546D15AA96879ED81DC8BC8E30AB3C12AB7ED41E087D66C841277FF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  chamado.js
- Size 890B
- SHA256 328ec7f664d4bf7d68be9ae1a4171579f9c3d4c739cb151565f699f8347f8ac7
- MD5 df2369da517083aebde716cf013ebb6f
- SHA1 ff6f535fac9fae6d5b25f8df1a05284d5bbf97ff
- SHA512 97d6cfd88183b8676afc2271e1989290b94f30294018884d8609797da9974d712a02baed2bde875a874394938bac048f8c5480077b16d105c9c2028b40389fb4
- TLSH
  T14611CC35B16DE05942D4126212386512ACCCC07243F3C738A9DA62412B54398D3BFE7A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  cndt.js
- Size 313B
- SHA256 415a0984a4d6ceb577073340e86c8841c5fcb49d0325fc8ec59933659b15fd5b
- MD5 31ac329b1dce8cf47179f063bd331100
- SHA1 4ad2049fbd6a237067f500f49abaa187b142e449
- SHA512 9e8b07277f80395f74963c3c7be186203d2cae6409bb75bfffc2d4da4f178ece58792749637fd0ca23b263cc3cf31cbe0d3bae64ec121dc53e53067569b5a93a
- TLSH
  T1CDE07DB4EB7EA90000E25D24903D40406A8A2DC0769B8C22210C06CD1511DFA579F21E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  correios.js
- Size 3KB
- SHA256 a3f9a6c9b50fbd71472f40e13fbb899c359f221f4f9ddae18aa7767fd8093dbc
- MD5 11397c601fed250f52688baad1c89933
- SHA1 be0c46b6c2dafd85e036b93f952dbce9953e5cf1
- SHA512 547bcb8f496733ed8dba6fb1b518d5147d6d7b91c2ddbf16489d0888f5b991405bc3dda5ffd8ea00dd0be22f30a1659558804bbf0a6a6d34c7716c83c5ad7462
- TLSH
  T12A61955CE39C96744881053C503A839451DF5F961A17CA2374CC69A81649FABC59FA3F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  ecarta.js
- Size 1KB
- SHA256 1cacefa39d92f6ace310e289c0cd4a3809aadf2ee3eeabf695fbc22d9773fd62
- MD5 de3150efee070fa0344dddd35eae7a4c
- SHA1 91cbda59d74800c561af038765d58ba5b93f92d5
- SHA512 cd5c6900405e7f3d1d2acaa333809df4057199ed30d706bb796422dba7a0ad71d6eaad4db5311880d9945a083d1f51d5d94c614fcb7f6bdf710cda7937f1c040
- TLSH
  T1373135A9FB0C61341ACC6265156E32D6E8CC54324FD34933E4B5E2B04B903E6D16E95A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  google-docs.js
- Size 1KB
- SHA256 b88469613bad9b50e177afd00609f2979fac20cd9c6c7909c152018187fab63a
- MD5 33ef7f02d8c1efc8fe7a8c52e7a00001
- SHA1 1f726ebdeef58dfb58e11c6c5a5f569f1da6df70
- SHA512 00d432c899dc87e03dbe030e92ecf6f7538359b9ec5c84f886c58bbd6469aaa4b8d5abefad8857ea6ff40fcbebc22cc422e79e6dadd47609470163c48fe4d98a
- TLSH
  T14421952BF36E485F2EDFAA04603A18467CD40DA797E39479F06F404206D3D4411C6ADF
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  google-mail.js
- Size 1KB
- SHA256 d6a1f2a72b8e4880d22c14c67e19278d8e083d118a59277be3d7fdca7cbcb251
- MD5 0c863dff95beaa3c5e4afc68df941fa0
- SHA1 221262b0d1f7c1ef96e05337d959d14beb19626b
- SHA512 01a6f4c02ac4ca23fb586826142021da345f2855140327eddd2245e5afe1b6b7552fa08017b603c87a4ac9d6af4f10e9ef2e542f5a263b0f0aa12dc1b237488e
- TLSH
  T1CB315325F7AC14A258D11321B831A28248CD81620FF5F02B71DD52D42161FBA3A9ABEF
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  imagens/icones/advogado.svg
- Size 708B
- SHA256 9ce54feb3ba61297328c682f78a06e6f356a546a34e9e97ea3b22f57dbceb03c
- MD5 a555a01dc0337395120e0aab40bbcf15
- SHA1 4e2b5c0c840f92681f784f78d37a87323aa5d043
- SHA512 5c70b22e7cb6e2c1d5f53cd03cac0f049940ef9782b444055e8222264ea1c57410917d9a745e26f4bcb383fb213b749467cd2fedfb0b16d496ec2db622e9c1a6
- TLSH
  T1750128F906E4CA84F657C228CFA5B4E0910613D8A49E128C83A35322D3C72D6BF0D5B8
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral21 behavioral22
- Target
  imagens/icones/agenda.svg
- Size 719B
- SHA256 3de5d168e74fb85d708a8ebf3435b16df62abb6b3b792d27441168fa790560ba
- MD5 6b2d83079093c4dd4b021c41a8315a73
- SHA1 c259d9bc74a0ceabbda3d70335ec161609d9c0ca
- SHA512 e0bdaf70d31165fa2328a17619b6fd155ad480b047d9dad63fd1c4b92a06fc494fccf8c1ce7f72c8584691fe148557e7ff0eeddf8a26136679876cd82279c751
- TLSH
  T1D401F17D939CCB68F2A7D5BDCA601920A00F60D4646F9E8C0AA78330DE905C9F108871
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral23 behavioral24
- Target
  imagens/icones/ajuda.svg
- Size 762B
- SHA256 8b059aaa4a5262bc7555ee47d86993edda3688f93ad64eaa48d11ad9bea70a75
- MD5 c53e0e0a0ce4c733d03ec2e98c796f8f
- SHA1 971adc8829e99360753e7ac8f8d3385ee87949a5
- SHA512 a9739217d897b50e1de609a914a29e3673e71922ea8dadf785a565509853d54954490eb73e804f0f0238101370873bb30d1686a7047585365a2b6c6944864ad5
- TLSH
  T1CF019CB643C4D7DB915BC1A8CE2110F0D20790E8F1AF6A9C82A357A4D4A76C8F7088F9
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral25 behavioral26
- Target
  imagens/icones/alfinete.svg
- Size 441B
- SHA256 c11c2f257ad42909277d8129f41511919546a26356c4cfddaf9e830085b22d50
- MD5 05990825b7f56521d5535c4230107ce0
- SHA1 a5c5e9c3542c6bbf101d4a710e395ac550160614
- SHA512 835861b30094daaf37b6a1e32ec996a7ae215eff9976738e93bbb250fc14609ccc86dc4acd611ce6f397715536a85218b518bc843729243fafb7158e8f942551
- TLSH
  T151F020A247D98A4FAA5B465BDE2028B4B10924E4F0AFD32853834325A4827D17B7C87B
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral27 behavioral28
- Target
  imagens/icones/apoio.svg
- Size 1KB
- SHA256 eb5f18fa61d7fbfcff79894e91062e27962ceb7a68a2430c45d162e9e065fbf1
- MD5 68289d027e878a03e80a179fe8ed8323
- SHA1 8620960c6aafb975f0f3a8f71cdcea9c6f474cb3
- SHA512 2eb0574e39d707afeec073974887b07899bb6df26d4c94793e9654c73f08409f9ebb1d7710c8d0af1d42682585dae36e8f3defbac879bea411829aaa24140e4f
- TLSH
  T18F21067663D4C79A679BC0AACE514AF0D0070688750FB98842F397A4D4F39CAF718879
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral29 behavioral30
- Target
  imagens/icones/arroba.svg
- Size 1KB
- SHA256 2a0260c04439201e2dca1cda0d3418429894e4c630152432f7336df60a253253
- MD5 87ad600df9ec9f9fc29f6ce4267f3bbc
- SHA1 989a520fcbdbacb3229d09ae72174b039e2b83d1
- SHA512 7c0ebcafd469fc743fabb2ffc3a4793a1caf738810e7c9abb420fcb7d458db7d28df5dc24f6e9ad1827a31c05d5bb8032e8b7945718839c95788a7ebf28ff7ac
- TLSH
  T14C113B75D6D8D5583B53C82DCEA595D0A00B62CCF96EA954916383B0C0F36E1F30D878
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32