325ec6374ca94978cd9b22dac9f7a4abd9cdfd0ec942a1a46305f76b4467be81

Sharing

Copy URL Twitter E-mail

General

Target
Tiktok-Booster-2.14.3.zip
Size 3.6MB
Sample260807-14y4lsdk9v
SHA256 325ec6374ca94978cd9b22dac9f7a4abd9cdfd0ec942a1a46305f76b4467be81
MD5 b9a60f3394e45be5af6bf8c149cac837
SHA1 ea190425c9464af7d8ce3ca97fd9d0d8ff0ce746
SHA512 c2eda09d4845c75913f7c395170e907e7a6ddafd98100ab7c59b632badd9b4b417314a0f91a73fb940a3fbd6476d0ac4b23935ebd64025419303fcd9080f7e02
SSDEEP 98304:EdjU01r146pOWLTrkzi9xt7UZwpdkFkFBrS6EOKh2:2jUOZ46pVTrk+V7rm36EOKh2
TLSH
T1BF0633021BB005FDD2D3C530F7147A2CD996DBCFAF21E802A530AAE0B6E58865BBC55D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  img/material-design.svg
- Size 513B
- SHA256 5527a6e5d815522d5ab2d2152a0db57e74e6f52a1dd54b439183b5dc89cab7f5
- MD5 ae7d9b8de371954ad68d8a88fbf2f1de
- SHA1 306628818beb0ce6d9fecd332245fa3a548c7aa5
- SHA512 466b2a844fcb5e549f2c3a7c89395739138e4caf9f34aae2a94481d02d643eed424e2dd3b91f267c26b33f3157b882ac54897f5643c6882bd608590ef0b0962b
- TLSH
  T16BF00E2B40684202866486B048F8B58BE87AD45BECC780FCF4CC0A809B8F180A41B358
- MD5 SHA1 SHA512 TLSH
Score

8^/10

discovery execution persistence privilege_escalation
- Downloads MZ/PE file
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2
- Target
  img/photon.svg
- Size 4KB
- SHA256 0b82e3ed86eab3889e08027e045ec9a9acff7fcac7be5e001ac6e436643bac0d
- MD5 77f24f279b9d6cbdc6ad1461746a5c12
- SHA1 f3018ab1d7e7d0255aa8eac20f7b324a93dedeb3
- SHA512 9dc4323417709fb9b795fe144482b4fe0b2c5bbed662a5ce5e101c31994f87351823518fb75388fcff01c8fb1d7fee37611a2939a603814bfd3cc5c5b0b5cbcf
- SSDEEP 96:sja5X+3hac8tRxrDJ+tS13r5e4QBCW74EhkmRi7Joo:sh3rk7/rA7piV5
- TLSH
  T1FA91BEAE4BAD46EC2FD74E64D3231596336E90727171FCE16F4EA814C527D88E227C20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  img/ublock-defs.svg
- Size 1KB
- SHA256 4ec29d3c40515cae50cb3fd5e38244e4f034d1406d0860066623cf4ab109ac5a
- MD5 54c0a6c3955bd046341b31e5352c3618
- SHA1 e57535ae602a9abd04a75d3acee2e8b5b3640c48
- SHA512 3db15fa77cb43bcdeb060d6f1d93c99db39aade9ba4f2d16633cd258f94e339a2346cbd8d841dc3a3d471f2f987fbd05060319424ce6be59b1a1341ce3793895
- TLSH
  T13F31870F4054C7BA89882BB17C9E12DAD522FA6721FD9865B9C5524C8F0DF3E2C57ACC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  img/ublock.svg
- Size 2KB
- SHA256 05c39ebd5881bf4de1ad2d5f04c1dbfdeeb9e132be63ad6d6e341252f18a4afd
- MD5 0339b5f78cab4a9a9388c7d1e29c58ed
- SHA1 166660841a9b7bc72ca5b8a4293d810c4e0edbd4
- SHA512 b6306fe647fab8e030f8271473f8245d11a1dadf8f3da68d916f34aa948390bac870be4f37e3f154e9cdd0bed18f796ba317ed0b5cfcc7bb9bf149b482d38def
- TLSH
  T10251C018E7850677805D814897F2FA000637A9632B512A6BF5AE8B73AF0A5D131B72CF
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  is-webrtc-supported.html
- Size 155B
- SHA256 fe9cfbed225d086637c534537ce0542946ef649e910524fc0de5fd53f36d8a15
- MD5 5c4d7595553f2d1a499e8356a07c291c
- SHA1 46d8c08b0b025c85a09b97b83021e08521a53f81
- SHA512 9bafb81f483a632950cbc7869e690aa418eb439301d3718edb54991a57eb245f42792bb9a8b980bed6a67474ef2495d01bc203fee794b6ad99733a04c4499ec5
- TLSH
  T11CC08C8E18016101D5306E8028D0B79808DBBB9420D2C8000AE2F0268862396CC039A9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  js/1p-filters.js
- Size 12KB
- SHA256 e4d8be951c9b6347008e2d2e61efba2ef11184e94c823762a04fbf98054962e4
- MD5 75d7aa1fecfd5a219082a8e81a76c078
- SHA1 dae17fcb7ac00e0d97401900b874ab38d086e7a7
- SHA512 70f84ba02751198c3a063f3abc79efd21a385c8916b93b05827f55b3c71ba006efe5fa569332631fefb8910ac15c7d8ce1a0348cff58392331da929a727223b8
- SSDEEP 192:g7wWN9IjSRbh7Xn+68KNCC4jKA/ad+1vNevMvd4f/4/Q3sUSCbAnixC8QfiW7A8y:g7wWN9ImT+ZIrSLjH4/zO0
- TLSH
  T17242629E21B31E1148A3709CAA8F61C4213550837A1AFC5D3B6DB7644F9F11C97BAFD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  js/3p-filters.js
- Size 33KB
- SHA256 cc05b46cec841f5f2ac7865db154d351f5abad13524858485c7f3fbfc13700f0
- MD5 fb4626f9ad8ea008532eb49d028e0a8f
- SHA1 631325045b7950ff602f8800b3c7e1f08c1e27d0
- SHA512 82a1a533fd8572fd011d3acccb4c4406565c247e4f4d2d893142cff5f886091ebe69e8356cf98c946dce3774681eafa4a79db302ae88123b7ad4592cc3fb1e38
- SSDEEP 384:g7NXS2O24bJ3K3BzOlEEpbol7Hu8jwOa6lAg:g7NX9Z49K3BzOKEpbgvwOb
- TLSH
  T1FAF21209D1B72E7A21FB70AB5A4FD4C06234C4137144D87C7A4CB394AF8D29DD2BA7A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  js/about.js
- Size 1KB
- SHA256 590a98905a34ac7428dfc193da7efc727efff6b9571f7d642a5136be97252625
- MD5 d873b8600da7f8e6e62ceb998e3b002f
- SHA1 66b96d1e49e9e89f78c53c1190f01944a22b93ee
- SHA512 7505d52d13d9158df18ea12531264c3d3433687c55690841574a66b945ec571f6f72fe4564c96a7b9bc92357ed7e03b7dc0ecdc51107828b2b8bbd3be4681450
- TLSH
  T18921200E04A4CF764C001698A98A60CAA216A76331CED444770EB35E8F4FE3531B6694
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  js/advanced-settings.js
- Size 5KB
- SHA256 0e10be57f04dba9e4752b937c478786961ef1098683617e0e48e86b5caf21b27
- MD5 cf24c1a2dc1d750e6cec52e8e6fe6aa5
- SHA1 5cb68f7925370f030a390b350cc005f5a2ec3a31
- SHA512 ea96ad2286790bb5b717d70db34310fd3fc67b1fa7d862460d6df2aa2622f75f2282c8ed97e98c3d4cc94cd25e2bb881202de29cb420baf7edf67cc9421664e4
- SSDEEP 96:2N26cTsg1+b1+cV/ClhFjVwJBUXQEM2GrQonDBTNBQCiHiehirtrj4:27rbQcV/ClfjIBUXQf2GrQonDBvQCiHT
- TLSH
  T182C1309858F74C68406330AC9A4B42C96519A553750CECECBB0DF7188F5E5A84BFAFDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  js/asset-viewer.js
- Size 3KB
- SHA256 8792775cd4c17affd2b10a920c56f45b75c16f65f64053dd410c17e863ab4cc6
- MD5 5949a556b6ac05af3ad0d45d4766881f
- SHA1 f0ed17b1642118126df7702dd27de3ede684330d
- SHA512 61c8f5c092c1e08d4fd678bed345e5c65a1f207395ba7432e336d3382772c8de82ade0ff8247a1061600c84546ec552cdc80bbb449b3dc2ab9227bad2594000b
- TLSH
  T1FB71729A45B98E6501A320684EDFD0CA6015A6033548F89C3BEDF3106FDF76D99B37C4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  js/assets.js
- Size 49KB
- SHA256 3718ec4b927922da468898f23d3c851e2be660acbd16135d20fb8c1f407c1b12
- MD5 2c2f7e7cc0dcef2ad5800c703c02de5a
- SHA1 b77811370b76ccb39f114d52b332088c8158e09c
- SHA512 ae64b0f6033ccc5d9c496f211498212516e48dc71d77bfb15d41650fbb17f031f962cebfc8bc43b64bf2c5f28c2f26d73e57ddb0dbde4bbaf36c8e3d754cdf2d
- SSDEEP 384:g7tvKx2D1OeZC/4kRY6061GeeWpQc8Ruwr0cUP168QgrNj9XVusA3PjZcgqSmr1E:g7tCx2v87Y6X1G1DsVQil4jWQ6ycskY
- TLSH
  T15E33325B54E30D2745A7707C0B4BA0C4A235A3136409C848BA2EB7547FDE664A9FBFBC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  js/background.js
- Size 12KB
- SHA256 90ae7a5f5551335ade1297f911298a3b6ee3bb04b9f6b69fd5289e5776df1f96
- MD5 0a09ead099524ab393eb19a7e452ee18
- SHA1 272357be065fd2527de3dc3568b4da2614d33ea7
- SHA512 277a0ed3627cb7aa0e64c55e5f659ce94f9b9f381391777eb9e93f5088824cbc7b8c4d3753b6aa34d9c4bbc44d1eee2e77f950058c995b6a87f3d6fe25127955
- SSDEEP 192:g7yJowimc2yB5CY9TrMM4EAYo+c1qJmXljlksmjdidBFYspx7/PEQW/zxmD:g7WxINXa+cIUXR8ix1a/z6
- TLSH
  T10842745A05BB4DA956022578FE5FA2C27211D1276D0AF8B87D0CB3C81F8E62C51B1EF9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  js/base64-custom.js
- Size 5KB
- SHA256 a7d74d24021a68aeef7cdd62fc8cdbba9e59479dac3bb1bd52fa1424266bcc2d
- MD5 9920e044a084f0622587c6bcd364a943
- SHA1 a052a341de62e96f1ce76fd5b0bc0d889257a89c
- SHA512 6f75ee999289106d11f4d1cfb9273cdbf8c352f2260d6f402292c78fa717ee6e0e99f1dd2b4bd3f1b14327aef79630ebcb635756e18b91e9d1e43d6bb50c13e0
- SSDEEP 96:gN26cTwB2+DVaZ57Xb2eyTielyYYCy9yNJpuaS:g71w+GxXVKtlyYM9yNJ5S
- TLSH
  T1D2B1ED880B730D58896330B46A8B70C9663A7423B549E89C7A1E77804F5F924CBF6EDD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  js/benchmarks.js
- Size 15KB
- SHA256 5244251b2e6bbc0b0c014bedf2b1343e4800608c47ba8659c4a00a9e289d454d
- MD5 ece8a0c888518831d865afd366a65fb6
- SHA1 69e386c36035bd90e433b6288a4bfd3c21ac8fbb
- SHA512 180814f4cd631e149700ef675d8273b0ea7d15a13c3f947e9928f7dbcf5b6196063a1ff4eca7bd1eb6fdf2aab06b543832dc9704d5af11d54426860d2c379334
- SSDEEP 192:g7Y5yb4a+XOvOJ5b/giqHRWlF5HJWz3SNf7UEqnx8BetkF4zDY9n1M2QZCDJCHsV:g7Ykbev+DYtuHeR
- TLSH
  T15362249699F22D2A806320A87F4F95E57221F2137654F978B94CB39C4F4D424C2B6FDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  js/biditrie.js
- Size 33KB
- SHA256 0d8bbaa89eeb9979d9a4927471e6858dc6b52c0976d4845818cf3ec7bbe90bb2
- MD5 6f2ee3e8a3c79c87719d7e8078d88fff
- SHA1 de1055bab0b6889de0308febd8d2883f43716f09
- SHA512 8658fee23642ace0c145b566ba9042536d8d5270e537deb588bf210c619d2d84b9f71b19f95e7515109408bf85f7aba353a57ae33f6367281997741b03a73880
- SSDEEP 384:R76P28QDXA1iruqCI4TQDS9vDHPjXD0CgHJ5IJy:R7UVOrufIAvDH/0Co5IJy
- TLSH
  T1F5F2BD886EE39A268A67F13E1F8B7081E625C52B2609D92D3C5D33C0DF5D06086FDF95
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  js/broadcast.js
- Size 2KB
- SHA256 83bcfb9679ff8be58e13891b1d172e4c75da9fbe9b643804397f2451f0a0f84f
- MD5 4e3565829a892f7df3d6ca3e4cfc689a
- SHA1 883805eafb98d7af7dce2fa3ef14ca50d6388bca
- SHA512 1f22ed42a1ec715495246ab5c95df0336cb7d8494038fec4cdb9a43c5752d9d9cd96ac7adfd69d7223c6504e5857078dda1f2197aaf171f36b705ddaff70077e
- TLSH
  T17651123894D18CBA085631B9B80770DE7214B287A65EE459324DB3088F8D638D6B5BC4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31 behavioral32