29d1a4753b133f7e89157985c4157de4366dde637ef1d4bc06384af69d71d5c2

Sharing

Copy URL Twitter E-mail

General

Target
fadblock1.zip
Size 139KB
Sample260810-pm286agb37
SHA256 29d1a4753b133f7e89157985c4157de4366dde637ef1d4bc06384af69d71d5c2
MD5 17daeee9a9513f0a7b04a417a11bd686
SHA1 7d6572ed9643d03b30d7214fffddc23af6b0114e
SHA512 700a739da107a4cc43f450ed603d6dcaaf53c723ce26f52fab7bf41bd99536b434b86d91993684d4e53b17b013bd21c62223303a0c22bfb04dc823d176f77df9
SSDEEP 3072:CxS5nFhAlTGpXQoC2eAjt+QAjJJMp7Vf4EvI36ir1SmzBZHbf:C85F25GpAoC2eAJdAFJ2pn66tQP7
TLSH
T158D3023986224D55CB2B5CF6C73B91D8E116E482BB12E9EF3501022548FFEDD21A2FB1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  assets/popup/github-sponsor.svg
- Size 5KB
- SHA256 2ff57356b66df17d6799e6245312316d7ef3518ca1fa29c06932a4908d4bbf1f
- MD5 1489946451768b687d34c9926d784cf8
- SHA1 8c0e8cef60c2e9bc721068d857e50a43ae0b0898
- SHA512 7bc1dd140bf25c7bb2e365368011c8a88422a4a11653c6b665e1465f5367ef8e97624dab4a13d0cfc1c2db4ea939094cc972170bb3c89f41987658da716ce3c0
- SSDEEP 96:cCc9kLXAbgshW9OXU4QOa9gGxtfxKPUA69tGVFyj6hZci8jeSRYoKxe9IBAVh:cCcOLXoZEYkODGx3KPUVtAFQAmjbRYbm
- TLSH
  T1FAC1981C9C645479DAD903C04A7E4ED4873EE21F49623D72166D77920E0EF29ABEFB04
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral1 behavioral2
- Target
  assets/popup/home-feed-active.svg
- Size 588B
- SHA256 60939be85cf5ab22c8706ae01551b017b185c04094c3b9f52836e964aac9fbb6
- MD5 1fa5478f21e37065982883460f3e0d96
- SHA1 519433e1a62cf172881a7b5698ecd12ce9c3cfde
- SHA512 886c10b844b6de82466f95a4cb57165a548e9df98d29884529c128d3b73b4ee01b079708401913b77f6f4c790c175859012e766713faea7231489ced282c5d1e
- TLSH
  T197F07DF575DD6E445508772903B8FEEE007674C56D34414891B8651F740BAEF8B3068C
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral3 behavioral4
- Target
  assets/popup/home-feed.svg
- Size 544B
- SHA256 6d675f03f5a893e4c182a3769fb8b4b7ec42f70600da3158baa00a038c6180bc
- MD5 ca542f598e4129f645dca307ac13e441
- SHA1 8ee71f4c6b9c19066101c98be01339778ed738d3
- SHA512 24a6b488ec39ad1477174b0c66e32868375083ba5370237b37373052bd1dec04b0c46e9694ee7df7f38659c22eda7a35323805d58368d3e598ecfe16f90cf99c
- TLSH
  T184F0EBFA90B88D4C86184F6883D53CE5101379C65620405CE8F036CB31277DF6E1098D
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  assets/popup/paypal.svg
- Size 3KB
- SHA256 3132624c4d5ba0aa966a8027219298ceec51551579ca4a1278bc54d73294b2b4
- MD5 e0cba0b6f823446a8ec0657025322d43
- SHA1 bf8c99e50110dfdafdac6599eb2d036cb865c011
- SHA512 ba4611b225d59de64deb5090748aeac7c35d0af744d6ec9eb8b87b48b96662ac18a833ae93df366d5e025cc8060835d3758b18981b0cc1c3b47aacd7e5ee708b
- TLSH
  T1797161D6BB2410EC69864FECEF4938D4267FA8F93B69C194613CA6BC04C3B9DE417500
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral7 behavioral8
- Target
  assets/popup/popup-more.svg
- Size 1KB
- SHA256 d3ab6cfd22f2abcc23833a9586e0ed374b3474d258ac9d0f091abbf48c1508c7
- MD5 34495f3e5116940615cc0ef77f12e39f
- SHA1 200ce7121bd62d6df750a7d35c9cb40249fe83d3
- SHA512 d221204bd42ea024c1340ba07bb2ce8a02ef81d49345f243f09dcfe0b5b94408b5988a75cdfc908e20cbcaf1d2025ea950b0b0b746d06fbf4ddb39e2a84383ae
- TLSH
  T1A411E7DAF1040F6CA2938B34E7053775501F62FEBA2655E4C125A83B142607E1E3B9E8
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral10 behavioral9
- Target
  assets/popup/suggested-feed-active.svg
- Size 1KB
- SHA256 bf13a5a6a01e3f2605ca468e1f272fcf8629a64a16facf2b8d2f573f510983df
- MD5 425f5a7b0e0faa47b24728af8286d623
- SHA1 bb70eb9ef1ae6ff49e6ead1a9ea1d369f8829a1a
- SHA512 1c0c5fc0b2c9e3135d949caa898fdda7e69d9ea3d4561598022c80c0e1db6aaedc9a0ce406b63858e05bd6325164af75983cce21d20d941b092bc299d68444ba
- TLSH
  T1B62172ACF3ADC89DB146E330CB6574F262957742842BC3410C3A31BBC22114E247EBE4
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  assets/popup/suggested-feed.svg
- Size 1KB
- SHA256 608158afd17f2b7e5128a35d754456e5a0bf2fac395fdf680b589c375de60ba4
- MD5 8aba82fc4c4b7b38f1663a362f5c0951
- SHA1 0a44887338f952ab37e3aa7b7cdb4d56b70171e7
- SHA512 daa1106ec7f71b7554d41661738a574e0fe2d8048b7263f15083f0c9079b70d197b3dcce188fc5c2bd3ac2fd23ba3b9908f6665035a2b04c7f240964884baeee
- TLSH
  T125210EADB3FDCC9CB602E3B0DB6534F162557656846BC3454C3631BBC62110E247EA98
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral13 behavioral14
- Target
  assets/popup/video-feed-active.svg
- Size 676B
- SHA256 b5a8ae62debd38e1c2abfb76f63d2e6bac059bda74b7d863ef44079b7042a107
- MD5 85bec39b54786908b31a1a81b5b7eddf
- SHA1 d703132c5a030825b8896f9c4189fca3607288dc
- SHA512 a0c7151a84fb803f3fbba954cb79f6970ae1621fcb8122ace68ed266bfe93c58d43e1ae9027ea878051d17a26b0489886744b5090d04c4613813d9210623071b
- TLSH
  T1BB019E9C643C88A54710CE9E533F6BF3AB2B91D9514A4138B6E02906F0973ED786327C
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  assets/popup/video-feed.svg
- Size 637B
- SHA256 fe08dbf9dd36020af955edcf93326479fcb6bc82819a88593d30d42a9042158e
- MD5 ac2042556dcad5b486aac34ab63b709d
- SHA1 b6a1bb4cdcd48f1ddee8a450f000f553ff155512
- SHA512 357be4355a980b7f990664be30fec0d23a04630ec16787a330e1d2aca316fa948f3562dcde812a8f4040ba4b07e9752905f2bbde276a0d3a37f45b897a15ffa7
- TLSH
  T15AF049AD122DDD0CDE01CE68572F35BA300B52EDA547426066913842F5123DE7D39D88
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral17 behavioral18
- Target
  html/popup.html
- Size 1KB
- SHA256 fea6b6bebcbc6a50d7d8725b79e9f66730efc8a72b4bf793ebe8a6beb9b903ed
- MD5 339773bd3762c77a16f6863581380790
- SHA1 14e0be875c406ec5e37a95dc29bce7597a4e7786
- SHA512 76e5d19b9209947b752e2f0ee03350068f02d7f6bf1e8fe5df3481dd47052cd86235ff4ffe5b0778b13d5434fe6bd20c453c3f6adb53b532eff8e5cae8bc26c3
- TLSH
  T13B310011C6881887B033913C6BB39280E7A5D05783C63FD4399CA16A8FFE198C563AC8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  js/ServiceWorker.js
- Size 19KB
- SHA256 e7895b4fb972cdc3143482e2a745dbbe62d6e9ca946e17191beb820811a4d448
- MD5 91c2377fd50c7e89f9b43ca3d95d0c5b
- SHA1 ec7260018a2060ec8df036f6d05bd178b46c1bf6
- SHA512 ab85e9ad93fbf916bf7d91750e9ac75a95f749a968a721a169683e9ca8386941c964acc6fd4182a817f65a04e388c080e232f3f64a039e0d824ce41e5b65b99b
- SSDEEP 192:NcQBXFsxBB7W4BU2cQ34msLgm7UFJrWgZ+rKoRenaG99cQ34msLgm7US:WOsXHSksMX5+rjksMi
- TLSH
  T1439231979B9128395233C37ECD62CA28F61B57571359C7133FBD881C5F3126162B0EAA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  js/background.js
- Size 2KB
- SHA256 7ea80859e539054cbb7f6798839160be06ce6f9109b06f86af2ab1544b903a3b
- MD5 c8197852b321470fdb7e32ed349f994b
- SHA1 e5c7ad1e94b76f5de89ef5529df491355ee7f154
- SHA512 40c659918e671eea76adccec126bc3210807083830e57db9dd63f1fc557daa04601c097266e83e008654f804bf536259f439b89d0396a1082e734ded3cfa509c
- TLSH
  T16F5174596C70C57A85B223ED3F3B818AFB5000277600D28B3E6FD5581F719964689EDB
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  js/content.js
- Size 2KB
- SHA256 89803926c37b291ff4d54010b26873958d2cb7f2fc540f2c15a0528b84a16eef
- MD5 b99359e4e95005b4b4dab7c630ee9725
- SHA1 98c4bc7bb95edc3d9396497e08bfd5401c832964
- SHA512 3dca7131fe5154e41b7397a9b2f9ae31e394317e62cb686f6154e29eeb174df2220d1a795cd1dff7eda01d5ade6356d3e4ef2bdcce64ea213fd5eb5b47b78a0b
- TLSH
  T110510106D0A1D83C413666AA69254686FB3102DBF108438B7B7D92FE1FB6D714749FE8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  js/html2canvas.js
- Size 306KB
- SHA256 d2f912d6740e48d9f9aa4c7db05c2626c5b496fdb9da34e8c77d3f77b5f5b6f7
- MD5 1bdbb74537f11582769ad1d1cb40d7cc
- SHA1 46c9ad9a3389102201c88ed7230e8ce0de9a3507
- SHA512 0e9476a99ad9da13e4f38629782b6932258b2a1c6a97eff464b47fd8aa17911999a47b31b499c371313ea85f608134b9cc75adfbc67f3c73bfa500b1e6cff56e
- SSDEEP 6144:70soWqRXo6o9RxGFlS7VAVyCKCJlVhVrCpCwOAOyfKfheu/:AsfqRY6oZGFlS7VAVyCKCJlVhVrCpCwk
- TLSH
  T17F6421B55FA52CEE0A3AB2AE4A165D41EC580B2B016E8267F97D58651F30701CFF0EF4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  js/popup.js
- Size 152B
- SHA256 58dd2fe061df2db57f56d408d857823eb3a69a6497adc9335d29cec6f7ea9c0f
- MD5 858a06db41b35b33e76b18ab0d1d4ed9
- SHA1 fd7f12d08b5162b23304d02e51bb64620e5471d1
- SHA512 4ccf91334ce5ebec064cb18d1da167f9563ef3f2de50429770c3d2a3e329bc434b3b24060328ef04901acd5f62ed4d3831bcd7d2ab38a20bc39efd4688738ea5
- TLSH
  T1B3C08C5B3120097254B42B71155A62A87C64402C14829891782DC226481ED8411AACE2
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  text.html
- Size 116KB
- SHA256 dccd8b5c8c0d99629815ead3314c0bc75f081cfaa8dbd7eb033de47ef89a4414
- MD5 b88eed9ebb653bb700c5838744f42aaa
- SHA1 872037e424c0228854d4cf37a378453af363a8fc
- SHA512 956ca045d076b4ae401a0587bd30ac9b961d01130db0d09c093598eb07c5b482837ee4718702302786bcc9cd6931d5f14f6bfea1ddf15846ad6476854c6a96fe
- SSDEEP 1536:e95fMXM9F0Mvhk1aHZIaIV4g6W2oyqc4SQ:eDf19F0MhTT4SQ
- TLSH
  T1A8C323D26054952F113B6EC0A6642F0CFF73A347FA9D7EE2715D16A24FB7CA0A90B244
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32