11e039fd0a5455f0a2f89ef7741f1ae16e5265216f6203babbdb62f16c5b24be

Sharing

Copy URL Twitter E-mail

General

Target
CurseForge Windows - Installer.exe
Size 2.9MB
Sample260808-amn9zaag38
SHA256 11e039fd0a5455f0a2f89ef7741f1ae16e5265216f6203babbdb62f16c5b24be
MD5 cb7c6fc9d3eb29ae71ad2d90ce0f5cc7
SHA1 e6d914c47fcd7e4abf8318d895f7949028127488
SHA512 3fc6b0a8bfb79b1e3f6ad96e6248579c60e2a75d727fcf823622a08a3139ba108deadc137e0b7467720d066c35e3310b0c3d5b21287d3ffcbbe788997ec8ac9f
SSDEEP 49152:GLNFeI8xE87vxpsrFpIvQ4kvoHch90ksssY1XbGIw3UhsooAFhR8MEYHzcYq3O:GxUBPN+TIvrWccYXQ9bGrkhsbc8MEYTP
TLSH
T18AD53322C27F816EDB12C57179B441AE9166CF16223B0FADF7C4E8A45466B83734C87E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  CurseForge Windows - Installer.exe
- Size 2.9MB
- SHA256 11e039fd0a5455f0a2f89ef7741f1ae16e5265216f6203babbdb62f16c5b24be
- MD5 cb7c6fc9d3eb29ae71ad2d90ce0f5cc7
- SHA1 e6d914c47fcd7e4abf8318d895f7949028127488
- SHA512 3fc6b0a8bfb79b1e3f6ad96e6248579c60e2a75d727fcf823622a08a3139ba108deadc137e0b7467720d066c35e3310b0c3d5b21287d3ffcbbe788997ec8ac9f
- SSDEEP 49152:GLNFeI8xE87vxpsrFpIvQ4kvoHch90ksssY1XbGIw3UhsooAFhR8MEYHzcYq3O:GxUBPN+TIvrWccYXQ9bGrkhsbc8MEYTP
- TLSH
  T18AD53322C27F816EDB12C57179B441AE9166CF16223B0FADF7C4E8A45466B83734C87E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery persistence privilege_escalation trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
- Drops file in System32 directory
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
behavioral1
- Target
  $PLUGINSDIR/app/cmp.html
- Size 5KB
- SHA256 5966979a422c2526dd77897fb643639d82b16bdb89d8fa6e8615d3b32169af3c
- MD5 17241946e51074e6877c43737b94ad71
- SHA1 16918c53471fe3f35fcae1e9902870d91c50d957
- SHA512 b4b6e030fd1abe19fa308b32f04571a7c1c1f78a7cb789f169b37b54f281ec66d16e4cf0bbbdad81642bf28e266a6b2af7c19cf5106c683fb7f443bfa3110e05
- SSDEEP 48:tZrc0/GdshWpo1rckthAoShbEHaLKNGiNQtvmolOGR36tgtr/GTvJP8AscaV4Li1:4V+8v4jHa2NGiivmmpWsBVuQFwlE5vSG
- TLSH
  T15DB1DB1A2D5914A80077E3385B6B6208F72AA1B72105CA067EACDE513FB152BD58FFCD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  $PLUGINSDIR/app/index.html
- Size 27KB
- SHA256 452154a082fd36b9ec8b5230bf4b6708c4715153e78fad120eb25828fa89381b
- MD5 14c405b7892f466f89d16bb5b3ec68ca
- SHA1 d7ba5ce2b5efd4bedc78c3c78eec5274df5b6898
- SHA512 6795fe8c7072adf44ef990a12f9a840421622b2c0836a3590a7905e135d42be922f9db1070e09c1fd2f82f1c5d2ee09b4526e27e2454b04923e84d52afa49b68
- SSDEEP 384:23JlhPshoRJ/seq06ItLglbyPasN1vnYogfZZ51Px+mppiq:2OhoX/seq06ItLglbyPa65nxq5xtoq
- TLSH
  T1D9C2D811DA36102CB237462AB5E2BA4E7024C117E6538A7FFA5C5635CBDB08B1E13BCC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  $PLUGINSDIR/app/js/app.js
- Size 24KB
- SHA256 d5e17f9d5ba63d4360c66ad9b5633a0ca3c0f3573f4ddb357aee380ab317bb18
- MD5 a348a3bf079fd6a36260ea0282a754f0
- SHA1 13c9808e39e31685731ece57639e587e705f89f3
- SHA512 c322d4df333f2d6f6d14d6d444fce579879a2c3ab54ba0286928d1ddeda3635fc1d9f89d02b34aa1098332a4099cf536e519ea7840b130a41475e5aa8700b723
- SSDEEP 768:0+ycDQYITdZ++eH3A4nzaYHhGifG1yRrH+K8T:0+yUQYc2beTK8T
- TLSH
  T121B2958E967912789573633EAF1F4618FB32122F11059A273AFD85814F7141282A7FFE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral4
- Target
  $PLUGINSDIR/app/js/block_inputs.js
- Size 789B
- SHA256 f8dbd6793b35f7a26806f4dabad157aaafdf6d66fad094b50c77d60f223fd544
- MD5 b5b52c92b90f4283a761cb8a40860c75
- SHA1 7212e7e566795017e179e7b9c9bf223b0cdb9ec2
- SHA512 16ad53ede5424ca1384e3caea25225589e9eec9e80e2d845948802db90fad222f709a7b651cd7601a34ba67a0627433f25764638fd542cbd4612871308e7b353
- TLSH
  T14301D2D864D3A87A597DA328536BE748F7391964905A1054F0DC8C64BAF003BC16EDFD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5
- Target
  $PLUGINSDIR/app/js/libs/cmp.bundle.js
- Size 391KB
- SHA256 039d5d4e442cc360b6f54923c53cba5432d80727b8d614a3ee99f7c70307bcae
- MD5 48ccfc31db67a9e9d6decd5b18df96f3
- SHA1 2086877b894bd0ddec2ae80dd853e47fcbdc638d
- SHA512 e369682bbba708ea66797024bc2885e85a4e2b4ac6a4005cc648a7a81d8a4b1c3691c5484408bbd847c40ee80d12e72c5d9722950da020b284843c10d05d0963
- SSDEEP 3072:iyUYM9z8F+GxPMqbOISP88WEAtvgnnhLCVJkNO7Z6BEFltnxKg8rq0gU:LrF+GxPQWEDLmkNO7Z6BAly
- TLSH
  T13D842B8D7991B0E617D722F1802F900BF33A6458784CC490B660D8F1ADF96AD927BF6D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral6
- Target
  $PLUGINSDIR/app/js/libs/jquery-1.10.2.min.js
- Size 90KB
- SHA256 bc44d3631ffef1df7960e359f02002d3ada45ee05205c2cf1edd85da2f518144
- MD5 44e3f0db3e4ab6fedc5758c05cf27591
- SHA1 2d408aa1d35661019c95adcc60b78c0727ed25b4
- SHA512 4d4844e53e686fc59a52e86588f328dca3ed6fdad7195c58942a98c51755a24981b903ee7c7b27785375eaad5a7d9501cf74b999674b79f214e66103bad9efdc
- SSDEEP 1536:O4mCgi8DyCuXXFiJ+L0kJQsJVPEKuQRZdC/RAfDknv+p0WzH/Io9Z7qABZnu0JFV:OGsKYAI2p0WP9bDrJ7fak
- TLSH
  T1D493F8DDB2D1B06257BB21BD006F540FF236195D280D8850F129E8EABC74A499277FAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7
- Target
  $PLUGINSDIR/app/js/models/notifications.js
- Size 5KB
- SHA256 c32495d55eed52f47dc7268eeccb90fb6bdc5686135ed089416c6bb8f703a578
- MD5 911451f65b2503d23bc27c6a6aa6af72
- SHA1 01d3654b23ef7f5adeb4097bd851e8c100a7b2ab
- SHA512 06edaebb0bb2980a7b6d6baa31a9c0894a9bb5f14a91468ffb8f182d98f04bb811df2a4c37f0b56d612603528aa21f390eaa7cf885874ae770a24dce2f9b249c
- SSDEEP 96:sOr8u1s9FHYYdfHsW/GZwzpJGf8mui+U8QrGjqTxoOxoYsdfHsW/GZwvpZGNjINU:sGu9GYl3rNQ8K+JQC+N5Rsl3rxeEYIo
- TLSH
  T1F5C1AB5F90BA00A7057293A819370342FA5753AF49408CAF737C5EB40F311A6B4E5EDE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral8
- Target
  $PLUGINSDIR/app/js/utils/analytics.js
- Size 5KB
- SHA256 0a3b80a0263691f71e85ec681be87229e6325a7d173ff430bbf4eb7fa355476c
- MD5 52b20797b4568fd9eaa065d676b7a344
- SHA1 a14cb0b575f2a7d274a78093d74906351b603dfa
- SHA512 f99786edcfc0220f1563617f40441f9b0ff02083be2c1847677b6533f7d1de16911227e349fe41e328800230bc2994b70db3ab79e4acef5fe07631e87aad0c5f
- SSDEEP 96:LlYkmHqqVHlnZrJGvt+QP2EZc8kukLQsO2LT+gObNSPgPgzauV:AHqSGV+kC9zNObNSPvzaA
- TLSH
  T1A9C199292469719068B373B68F5B1518EBB116233144E9223BBE87415FF6D02C693FCC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral9
- Target
  $PLUGINSDIR/app/js/utils/commands.js
- Size 15KB
- SHA256 160ca35f80aeae58f6723c37cdd3e52cbb4ef56e659fbe105a8edab1f0f35ace
- MD5 ccfc18e42871f7eb701c54bc1833dcfc
- SHA1 7da62247f4383148109c198aee1e26c21484104c
- SHA512 f6a08520790106482faf6345ab534210f14e8b5629880f875af8f4210a3d1b7efb24e05dbeed895e2044034a6d535a4b4cc2dae34f5b15e7c4960806c2d0340a
- SSDEEP 384:2Ur5Hs8cD+1uUPULQq06WCHp7GvvoWqEWOnvsUmd:2MwGUd
- TLSH
  T1C872EBAA68A721651933B73DDB9B0215FB33083B11465C147EED46917FF6402C2A6FDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10
- Target
  $PLUGINSDIR/app/js/utils/cookies.js
- Size 1KB
- SHA256 9d3cb3822e20d6f5157faa02dc69bdaef44576c3fb5523e00aa152107ce30287
- MD5 6c60e675f8c8c68c0174b644d3a63a2a
- SHA1 3635a3fe07ccc4a6f33a986ddb690522d0611abb
- SHA512 1dc9ec7b139bcf37107ecd673c01e4fcc606332ea1645a4a1b4e5d95f817d4c99d5964cd3d941a6a526689341d9623b17b4efc002cdf4c73404299d52b1be452
- TLSH
  T17721E0087580D81EC5725739AE286778FD30992611C6D54DB88CA4F02F30C169DBE9FF
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11
- Target
  $PLUGINSDIR/app/js/utils/modal-events-delegate.js
- Size 1KB
- SHA256 267661f932a2ea78d8c7a98cc03d1b18d7cb8132deb84636772ecd1fcfbe4857
- MD5 117e4fdbdb0ecf211c8bd909efd337d1
- SHA1 9f8684d856b7c95bdffb139217dfd89f41373187
- SHA512 f474ee20b59d3d0c11f9f6aee6b6e2b66f7025beaec9841f88455e60533dc96cb4e27910be0dae92b0028c5578932b7f459fdb91d594ad010f72a3b3af6addb1
- TLSH
  T13C31D54D36FD173AE5B7172B5B2F5F8CAB72120B09054A26B2E69A804F354241196CFF
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral12
- Target
  $PLUGINSDIR/app/js/utils/strings-loader.js
- Size 5KB
- SHA256 9b833f9e058ddb31ada44764449fe030f05e241dcefdef46886a74e30cd04ba5
- MD5 8ac781fa72423fc5c4c21a8c4138b709
- SHA1 50ad1d7f383d6801c57f916e46c1c17f79222725
- SHA512 f78558488968b1151b189545294a0bb97131c0a4d5dc0fa61ef168d999151e0f12af271389aae985d129adacfc6bf610b0191fb912ffdf8e97283829e2802604
- SSDEEP 96:FXS/WSBWlbBtDhWFTnTeWsNkEj1I/6Wfwk0lx416moPdXDKP8j8yZrME6:FXSuQwBBh0nTevNkEj1O6WGe0muXDK0W
- TLSH
  T132B1ED58289354118C32B764CD935264ED6A4917023996F3FDEEC2686FB149E82F8FEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13
- Target
  $PLUGINSDIR/app/js/utils/utils.js
- Size 118B
- SHA256 b4f0c48cbfeaf8141fd44b12031e3f0410cb0cdc313888ffdb14fdf1d2341246
- MD5 a0952ebeab701c05c75710c33d725e7e
- SHA1 1da8a2e889f1213d481ae3cd5571670c01e64adc
- SHA512 5e5ae616d3fded7d2bf47a326242c4477ca3119fb52897bfb41de0be230ccbd6c3da2c00268b3973e9bf7b4f2886aba64fd9719b448662e4130ee66d87913389
- TLSH
  T1ADB01274B7AC73A2D315377AACBF6C1DF0375C368414B099B19034E19572D04519DCD4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral14
- Target
  $PLUGINSDIR/app/js/windows/cri/cri-controller.js
- Size 5KB
- SHA256 8c8c3097f0b587d715e051f55894d73a0fb7b441024f47512fa340eb3f692152
- MD5 344b079e423000460dbcc623d3dea42f
- SHA1 6f7a6db5cdf0e4c511ae1ec8aa1f08dd9e79190c
- SHA512 15358d30f96ba6ec330417896ccd5c837e71b1712357185d7d84e60e8e6c21af52eadc1fcf61f6ce9a79165fab94813370a5ef0b632742043355ae3eb7eb6856
- SSDEEP 96:u6CeVFfOhETv5T6ToY/aq4bCWCtoQNxcGyUkeErscwn:u6jVtOyl2EY/aLmWCyQNxaUkrscwn
- TLSH
  T1BAC1DC9C7CF9866058B7277BCF160518E732420722426A2B7AFE83404FF5E404A16FAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15
- Target
  $PLUGINSDIR/app/js/windows/cri/template.js
- Size 1KB
- SHA256 016ef6ba4ccb64f2cbdf63357d180f0d3a5f74857633556b311eff57be8d023b
- MD5 2f82acef2d339db31fab5c73edf8af19
- SHA1 d9138de6fe1320cd232fd6e1971fbbfdb9225bd6
- SHA512 90311035970edf2c1d0175c9b718c731fad4f58ad5a0b43a2588e2e6132cc09deff1d49328174408c51fe3082d62612f7a2a6c25179ac474101468ab68c2abcd
- TLSH
  T188212E24441C90331B7B979BDA13276CE9519301D80B7D3871AE43A82BF3B828E62359
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral16
- Target
  $PLUGINSDIR/app/js/windows/cris/cris-controller.js
- Size 9KB
- SHA256 13f1bb9718444c1e15dc13cd99862c8ad4cd9f1a607680906309f1ed9a058231
- MD5 056d641203097bf638dc846e01712869
- SHA1 64f77761e9eab875f8dfa67f3dc5d488aeb9d4f3
- SHA512 88e1e2e7d26fee9a37ae9b0c9fea3e61066a9c71f15b8a6e328bec6880f6b9795ec8e85af6055350d2a10d5bb814cdb6cd5c0fc09f29553dfa4b2c6d8f64a3c8
- SSDEEP 192:nCoyl2vxrZn2C7s+vK/H0mIvo99hnap0kelwPcGMJ7i9W:9yl2JV2C8/HyqkelGh2Z
- TLSH
  T116120E1998BE26299A777375CF6A0508FB3042172944EA1A7CEDD3940FB950182B7FEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17
- Target
  $PLUGINSDIR/app/js/windows/cris/template.js
- Size 480B
- SHA256 c6c0799e027b5554e44e1c31262ef62b2879bdf1b862fae56615426f07f471d9
- MD5 408961db547931d2427d96035dc7245c
- SHA1 8a0330bf52f53cb1e82e36cd67723ebb29d7a6bf
- SHA512 08d79c8f54cc9898956df5b4de8360a38d482ad19ce155e84a33843221a0242240c59c49ce0ef980e150fddce716557bee7071a6525ef438fdcde9bdacee95aa
- TLSH
  T1B5F02E114135CE20373F17BE93631B28F631D0024A82E634D5DB5790333B4E78A96769
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral18
- Target
  $PLUGINSDIR/app/js/windows/finish-with-recommended-app/finish-with-recommended-app-controller.js
- Size 6KB
- SHA256 ec775a786d8f0170c33e7d28df1f724aa1de26ff0aafbbf41c26dab864fda48e
- MD5 8f0cff982886d07a530a1ceedba4bf2c
- SHA1 6348b32708fb6f70225a3fdecdd616475a4bf8a3
- SHA512 cc688485cfa0d3787496f8a65e222a38a5b46c0b3b41812b9e1246f0195bc6dfcdae1cd2c82a6f80620db91cd826a17fea5f31879c6ec7e3efb580ec71a4aca1
- SSDEEP 192:otBaiFc1rnGDtjUnuYu7t7jt/Pv0+bnZ7uc:otBaiLZ++tHt/5nZ7t
- TLSH
  T1BBE1004C9E9E5168E53B733ACFAB4188F73502271540A617BCDDA7986FF0245026AFEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19
- Target
  $PLUGINSDIR/app/js/windows/finish-with-recommended-app/template.js
- Size 1KB
- SHA256 f2f955faf5dc90e9ad50815566aa42a693128f97f07d02c5c3a1dbac27f570c4
- MD5 e3f895c48a2c99c3e8656c9093075286
- SHA1 4d1c13a0f03ba903787b23f5f27563966cc08a31
- SHA512 7c71787b7bc49e77923e178fbc38e2fe7e45283f257766020a21e25535ff095b7896406e612e254c46fef5af4a0fd2a4a9f5ecb0b33fab91261f01a3bad9a54a
- TLSH
  T1D1315859425F9A73173A468E9B670EAD3960DF02C8B00F11B5DF4784E3735888EA7318
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral20
- Target
  $PLUGINSDIR/app/js/windows/finish/finish-controller.js
- Size 2KB
- SHA256 c57d168e804e06f26709322e340076e576d405a72cee0b663176c6167785c3b3
- MD5 b4e14fe186c7843fe1365b630a4a17b3
- SHA1 86619b54889f3da9057a4937584df4acebf492fd
- SHA512 bd0e5a72f6a6145c6177248351bb2ab2bbe7ff66d36dc7d022ab81d614eb39f2a0a3f4c267c3018202d17e175cfac5755138b6a05bd7f3c7b358dddb20635640
- TLSH
  T1C841AB4879FA43B66B753B3EDE290655F732422B0A0A867A3DDC92808FB1014039DFE4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21
- Target
  $PLUGINSDIR/app/js/windows/finish/template.js
- Size 1KB
- SHA256 cedc900131ac48e92bd931926946dc342a99de1b16757969b7416f8ba037fad7
- MD5 6410e00eec2197f48a0d2ff66d0c07d2
- SHA1 480c640d3849cc90fc881306322ea96e31c1207b
- SHA512 302f2fa32afdc0d2e8729a91ce20d16427f2a6d56f97a84aa1785c3babaaeb080ff8d1ba400a0d1c3917646b1597e1800a36622f3ebdcf14979da6e3a76879f4
- TLSH
  T13221289D426B5B37073A469C52675E6D3C60DE00C9710E29B4D74780E37789D8EA630D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral22
- Target
  $PLUGINSDIR/app/js/windows/main/main-controller.js
- Size 16KB
- SHA256 2cc465c2bb45f3fcee61baf732b4c87cb50b4baa64864bf832475f45e2846113
- MD5 3d497dfdfa6f36a812b4988a79bfa641
- SHA1 d5c951daf21080e9ba18b05619252d5b3624d20e
- SHA512 f500817f58c407c0fac8290d77b0a7e9c6d8198bd6bb126eaead92a892f0a1efa9a09ea953349c21d62a3067cb1bff00257bcee67c6bab49b782e9688b1241a8
- SSDEEP 384:2Rp8ChTvzkzPZPb5yPQZ688wqUaftN23n:2RprTvzkzPJ5eQZ688wqJftK
- TLSH
  T171721C0879A8167895B7333FDF6B0649FB71102B45068A2A3DDDC2C40FB1811466AFFE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23
- Target
  $PLUGINSDIR/app/js/windows/main/template.js
- Size 3KB
- SHA256 d827fab7a8ec31dd68bcd7e6725c01b7d72d1224fc0c1a136dac513cc7884d0d
- MD5 694ea1756f2dace45053080494afbb70
- SHA1 f503248779de58075f5a3ea9ba97a4838b95d1a7
- SHA512 aae8397bbea463cbcff7a26efbc8be6e9697a65073fb566fbe0d32a68dd4e656f9ca70268a1faacd2b137cd7fdeee1a380f4b4126cb1ee2a6d2bcf07bf076029
- TLSH
  T1956131221065157267BA42DA56266E7AFE61E303C58B9F25B6EE13C007F3C42CDB760B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral24
- Target
  $PLUGINSDIR/app/js/windows/modal/modal-controller.js
- Size 2KB
- SHA256 e3556a5482b5a8c9f9581902d9c91b9293fb664f6da938c700bc78c21fd1506b
- MD5 aa727a41b4fbe5c3ceb80c32a5b9c7ef
- SHA1 de32c713099c441a9bf60a1fb06d76775b2078e6
- SHA512 dacc2df7748a5f859c7debb34503d031d0689fa445898f1f2cf26f909332c5ca1e7bdd5dfc28e110d2f09283ec975960be84cfc4b34630b0fbac1046de6864c6
- TLSH
  T19451268A241E116585B7677FCF87029AFF73509B4A41421A3FCD8B411FB0850A3DFEA9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25
- Target
  $PLUGINSDIR/app/js/windows/privacy/privacy-controller.js
- Size 2KB
- SHA256 278075fd14d50323d500bfaf090b61697bcb9a15c9256a6a1a6e2caaeb4f2e29
- MD5 31ee110451ec5b7b41204ec1fc03d6c4
- SHA1 16fa113017124f8404ec4efb1d7b468dbe809d94
- SHA512 1e6bb217f8389a6ce40d405c356a6c6438372e13b5374634d6e22c5cbdfa6d5a5a24cde6c07b5c9db151f4633279e60a683c0233d391933b23479c708f496be4
- TLSH
  T1395140AE60B842701937773ADF2BA788FAB2412B9445CD163EBC9B411FB28154249FD9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral26
- Target
  $PLUGINSDIR/app/js/windows/privacy/template.js
- Size 655B
- SHA256 95c459eae0edccdb94702aea603a097e461daa0e5f37dcd0e30de7df665433a8
- MD5 cf8d2c26520d7c84e560dfa79e31dcd3
- SHA1 716f2ec17480d5cc9c145bc147833fbfc39d36f0
- SHA512 d466dcf7e86a4295857020feea281fc89f519f6bf1e79c3b5e1046d0745c9c9010377b1941e06c9a9b2c78a4173ed9909332d5d6c39b05f460e8a863086c895b
- TLSH
  T105F0C83C85A881211976C708CF12D625BE90C35B4D3F7C7671CF078357E7C01C921645
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27
- Target
  $PLUGINSDIR/app/js/windows/progress/progress-1-controller.js
- Size 1KB
- SHA256 88059a936f49f1c4376bd047256b965540c4edd4e60331405c4f92986f6828de
- MD5 78f88c896dad595ef062a00a3dccf3a5
- SHA1 0a321088d119c7bf977a6ad2caca9f84cdbc4058
- SHA512 169fbd73dd73dc09428ebceefec5b079651fdc88306377a988ad3f2b96c0ff356532cb408ac26c627f77783c811f309794e2f93eb4a2e6cfb04fdf7cbddab732
- TLSH
  T1A941EA4E282942792DB3AB799A7E2909FB32411B500AC5203CFDA1404F7092A449BFED
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral28
- Target
  $PLUGINSDIR/app/js/windows/progress/template.js
- Size 242B
- SHA256 a7128a08bca53dd919cab3e5cb4dab31ded7ae2dafc957209b9fdd23f3b944ab
- MD5 92b145e6649ba0add3dee9a69d3fa91e
- SHA1 4db1a45392ec973cc8a7eecf3a30a9a7ecc7a64d
- SHA512 747a087dffdba5c92d9f4c8923615d388b9c4c79d3b71d3cb90487aa37c132290a4f5107eef3055c03eadcb9614e20d4655393dc9251fab7e0ee2438f0d95751
- TLSH
  T1DDD09742C2A082312B3A1F6EA3F32320BE2040040B2A7630E6FF1081232B003860DBC6
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29
- Target
  $PLUGINSDIR/app/js/windows/settings/settings-controller.js
- Size 9KB
- SHA256 846b7dfdfac4c748589b33df2ae9a392b49b8010637b49cb880b9e000f0253a6
- MD5 701c1f21f9969c50bcdd3211176a174f
- SHA1 b213e1179a2a83d911a14677f10a0629170c35dc
- SHA512 27d9dd9647fc1d692e8c935fc67f0ec1a6c34578c0b7848345bdb97b3e6458b96b7c72d894e3e3c7e753dfa8be48c7d2355225a0c2bee9b71f567a6e25ba621d
- SSDEEP 192:5RFBjugWX8x2zLjiaPX/iXv1ijiJRWzHSQ9whrMk4Vo0MEKAmNN:5RFB6gWX8AiQPiOiJvsmD
- TLSH
  T1D3121C4EA96440364977577FCB678789FB72049B2402C92A7DECC9882FF08940396EE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral30
- Target
  $PLUGINSDIR/app/js/windows/settings/template.js
- Size 4KB
- SHA256 8014a7c919da249ba2f2196d9c9b62639d20851be426f3ffaef161cbe477c45f
- MD5 28513de0830383a516028e4a6e7585a0
- SHA1 d31fc3a6f4a3ce6c4afb82ff2342a1ed718809e5
- SHA512 0f7321c2ae13145bb694368dae1b74e6fe20e6b09712da2178bc46e6aa65223ab84c38abbf0ed074c85b42dba1a238a5f3f8d1ae060a0af6df748c5befe11b61
- SSDEEP 48:Zx8LQmDdbaoFRpm4+0A2AEeQmDdbaoFCpm4+0A2AW:wpm4+5nHym4+5nW
- TLSH
  T18891086384219412477680DA5B369F1EFB65CF0241E65E34B2FF6BCC978BC8156ABB0C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31
- Target
  $PLUGINSDIR/app/js/windows/welcome/template.js
- Size 1KB
- SHA256 42c546e9da748ef76fdab56b96fd511eb607617a9ba37b3dc420148b769d8acb
- MD5 17f54fca6723b983875d940d931e0afb
- SHA1 01774cd5cea36bd74c80a708d6f77567e8091024
- SHA512 401df9a54cd14c19227d91bd08b4775a7b437644b4ca0d1d636d3e07b04591f9c5516e80040ae6a79ba400457d15e3d80aa148a63de870a64664fc5a02f7a038
- TLSH
  T12D31FF0AC55D81361533C3FAE28B5A5C7860AE40C9BDBC3439AF075967ABC00B933B70
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Privilege Escalation

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Network Share Discovery

T1135

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Network Share Discovery

Drops file in System32 directory

Event Triggered Execution: Component Object Model Hijacking

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32