a4a410f228ad109da4ad4be17aa989da92b502d7f13effbd079df0ed4a34c61d

Sharing

Copy URL Twitter E-mail

General

Target
CurseForge Windows - Installer.exe
Size 2.1MB
Sample260822-ks31esef52
SHA256 a4a410f228ad109da4ad4be17aa989da92b502d7f13effbd079df0ed4a34c61d
MD5 efa19a1d1586e36bac80130804919fc3
SHA1 a5cb0c283916b37254b7b87a4e0e609d58a56a68
SHA512 c11b66b3756f3003cfd7e9567b206b5e0d21bb5d9010d03fd4675dc4228eed997dc8cf8df4b7530c08c07f829bf655aaa103f0c75318310dc12dd412ed80d1a7
SSDEEP 49152:g0ohfoxE87vxpsrFpIvQfNbUkjsTYzVcg3c:gpfKPN+TIv2Nws3zVr
TLSH
T177A53312A2FB52BFCB12DA3176D053959625EF0120374FAAF3546C652C09F83E35DA2E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  CurseForge Windows - Installer.exe
- Size 2.1MB
- SHA256 a4a410f228ad109da4ad4be17aa989da92b502d7f13effbd079df0ed4a34c61d
- MD5 efa19a1d1586e36bac80130804919fc3
- SHA1 a5cb0c283916b37254b7b87a4e0e609d58a56a68
- SHA512 c11b66b3756f3003cfd7e9567b206b5e0d21bb5d9010d03fd4675dc4228eed997dc8cf8df4b7530c08c07f829bf655aaa103f0c75318310dc12dd412ed80d1a7
- SSDEEP 49152:g0ohfoxE87vxpsrFpIvQfNbUkjsTYzVcg3c:gpfKPN+TIv2Nws3zVr
- TLSH
  T177A53312A2FB52BFCB12DA3176D053959625EF0120374FAAF3546C652C09F83E35DA2E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery persistence privilege_escalation
- Drops file in System32 directory
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
behavioral1
- Target
  $PLUGINSDIR/app/cmp.html
- Size 5KB
- SHA256 6c21e8c07ce28327dca05f873d73fe85d5473f9b22a751a4d3d28931f5d0c74f
- MD5 d7b8b31b190e552677589cfd4cbb5d8e
- SHA1 09ffb3c63991d5c932c819393de489268bd3ab88
- SHA512 32794507a4b9a12e52ceb583222cb93300e38c634a72ea3f51a0189127aba60cf476fb7918942355a4f826185d7071e876cb40348ba34cf5d1ca7e9546ccb310
- SSDEEP 48:t9rc0/GLAoShbEHaLKNGiNQtvmolOGR36tgtr/GTvJP8AscaV4LiMt7ByBZXGz+p:4VLjHa2NGiivmmpWsBVutFwAk5vSG
- TLSH
  T114B1EA1A2D9924690173F3380B6BA204F72AA1A72105CE053EACDE513FB152BD58FFCC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  $PLUGINSDIR/app/index.html
- Size 20KB
- SHA256 ddde8130eec5613b8c251b3b6da92095a4c8dc704039733a7993f2973299ba61
- MD5 145d9dfa0ec24fefa064cbbcfaa98210
- SHA1 5142d79a42ae7a7257c9dd7113db9c72de779557
- SHA512 0df5550815ae15ca1ade2f212915cbebf609846be48d0aea7550549234ce7ec91427405e7d2f2dc521e72efa8d949aab83a2f59b1f09c536858843650c522afc
- SSDEEP 192:8sdqpDNDPkFHmY74+/qmtRCtmK8W9I2gHHMlxh8B39LJ/Hab48JgJnc5w/93mJ8B:+WNaM8UnbjPW89+mppHL
- TLSH
  T1CE92B7159B21203D7173865EB5E1F74D7030C117E2939E7FFA9C5526C7A618A1A23ECC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  $PLUGINSDIR/app/js/app.js
- Size 22KB
- SHA256 b9e54bf8f23154d7b79f1b7b44b1c48830c82898e4cfe4d2d550336213cc2bcc
- MD5 5a925a6da286f7215ce77af3f5353b7c
- SHA1 2ef704634b1f5522c767ceedeff229c32a2e84ce
- SHA512 49b21e827911483269168d90621e60dacfd6118b5ce3e40e630ecf3602dc02b14d0bd26c2227128ee58e93fc438552394cd3744921e61c8640c5f84cb80d3a0d
- SSDEEP 384:4X+ycDQrczkyKdLGb9pB902wjI3A4nzwF52xxYRifG6wBEoR3FGHWdeLj8T:0+ycDQYITdybjH3A4nzIAnGifG11R3Ym
- TLSH
  T1A3B2748E96791268E572633DAF1F4A18FB32122F15058A273AFD85C14F714128297FFE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral4
- Target
  $PLUGINSDIR/app/js/block_inputs.js
- Size 789B
- SHA256 f8dbd6793b35f7a26806f4dabad157aaafdf6d66fad094b50c77d60f223fd544
- MD5 b5b52c92b90f4283a761cb8a40860c75
- SHA1 7212e7e566795017e179e7b9c9bf223b0cdb9ec2
- SHA512 16ad53ede5424ca1384e3caea25225589e9eec9e80e2d845948802db90fad222f709a7b651cd7601a34ba67a0627433f25764638fd542cbd4612871308e7b353
- TLSH
  T14301D2D864D3A87A597DA328536BE748F7391964905A1054F0DC8C64BAF003BC16EDFD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5
- Target
  $PLUGINSDIR/app/js/libs/cmp.bundle.js
- Size 352KB
- SHA256 12c83dc825577e5ef92b195ce37e0daddb9c53d4cc25ec3146a42dc529e32a1a
- MD5 91b5b77cceeea2af990926a5807ecd01
- SHA1 7159fd75bee825786178c5aa57938730942e77fe
- SHA512 38964c87518fe0efac345386a62f2525f5b18b640299b57f8be27e20f5d29d13ee0aa56ccc8e5e1de921089562e52be1629b6a5ffcb6a4d4df0df2b40101a465
- SSDEEP 3072:O+2nWzrKHAO9HruhSHoDyDkN7qSOpSP88oCmQ4xytHO0VA0Ch:SiKHAO9YDikNDoCmmQ1
- TLSH
  T100742A8D7991F0E617D322F5802FA00BF37A6468B84D8490B660D8F0ADF959D523BF6D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral6
- Target
  $PLUGINSDIR/app/js/libs/jquery-1.10.2.min.js
- Size 90KB
- SHA256 bc44d3631ffef1df7960e359f02002d3ada45ee05205c2cf1edd85da2f518144
- MD5 44e3f0db3e4ab6fedc5758c05cf27591
- SHA1 2d408aa1d35661019c95adcc60b78c0727ed25b4
- SHA512 4d4844e53e686fc59a52e86588f328dca3ed6fdad7195c58942a98c51755a24981b903ee7c7b27785375eaad5a7d9501cf74b999674b79f214e66103bad9efdc
- SSDEEP 1536:O4mCgi8DyCuXXFiJ+L0kJQsJVPEKuQRZdC/RAfDknv+p0WzH/Io9Z7qABZnu0JFV:OGsKYAI2p0WP9bDrJ7fak
- TLSH
  T1D493F8DDB2D1B06257BB21BD006F540FF236195D280D8850F129E8EABC74A499277FAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7
- Target
  $PLUGINSDIR/app/js/models/notifications.js
- Size 5KB
- SHA256 c32495d55eed52f47dc7268eeccb90fb6bdc5686135ed089416c6bb8f703a578
- MD5 911451f65b2503d23bc27c6a6aa6af72
- SHA1 01d3654b23ef7f5adeb4097bd851e8c100a7b2ab
- SHA512 06edaebb0bb2980a7b6d6baa31a9c0894a9bb5f14a91468ffb8f182d98f04bb811df2a4c37f0b56d612603528aa21f390eaa7cf885874ae770a24dce2f9b249c
- SSDEEP 96:sOr8u1s9FHYYdfHsW/GZwzpJGf8mui+U8QrGjqTxoOxoYsdfHsW/GZwvpZGNjINU:sGu9GYl3rNQ8K+JQC+N5Rsl3rxeEYIo
- TLSH
  T1F5C1AB5F90BA00A7057293A819370342FA5753AF49408CAF737C5EB40F311A6B4E5EDE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral8
- Target
  $PLUGINSDIR/app/js/utils/analytics.js
- Size 4KB
- SHA256 6f129a24bd1a63cb0746990639c6ebdd25c63dbf797a4dfef91716a83e64b3d0
- MD5 cbdc18a897ebf0b3e390cc9660980527
- SHA1 7ac3bf12719c2b4d41f516800ba8730175f1a88a
- SHA512 4db945cae7bcff325cd7d9b7e97dc78b11b034c077c957ef3f7f65935dd0a40779afbbcaa5dae004864ec8e0d67f931735b1f142cd25e5a1d61c922bf7098aa1
- SSDEEP 96:LlYkmHqqVHlnZ4JGvt+QP2EvVkuko3sO2LCgObNS1Tgzalh:AHq1GV+koRObNSGza3
- TLSH
  T1BCA136697465619068B373769B5B1515EBB213233284E9223BBE87412FF6D42C2E3FCC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral9
- Target
  $PLUGINSDIR/app/js/utils/commands.js
- Size 13KB
- SHA256 e7fcb4282f56d98834a5dcf227a0b5dfa7c1a4d940b1f70f28929befc316891a
- MD5 f0fc6c36d50e09be487b70786faf85e3
- SHA1 3159d933a99504ffaaa03ee832f2f0a95372ccc2
- SHA512 a76cc9479a05a4310b2115611b1503c99896ba8be619dde11b05087e17b0662a2447cf86cf70353ab6cee1172a13ade839fef717a9a90b58b611b09c9f72958c
- SSDEEP 384:PUr5HB8c31uUvJQ006W8tusv5qEWOIvAUd:PVhsk
- TLSH
  T1C552EBAA68A720A91932B73DDB9B4215FB33083B11465C107EED46517FF6403C2A6FDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10
- Target
  $PLUGINSDIR/app/js/utils/cookies.js
- Size 1KB
- SHA256 9d3cb3822e20d6f5157faa02dc69bdaef44576c3fb5523e00aa152107ce30287
- MD5 6c60e675f8c8c68c0174b644d3a63a2a
- SHA1 3635a3fe07ccc4a6f33a986ddb690522d0611abb
- SHA512 1dc9ec7b139bcf37107ecd673c01e4fcc606332ea1645a4a1b4e5d95f817d4c99d5964cd3d941a6a526689341d9623b17b4efc002cdf4c73404299d52b1be452
- TLSH
  T17721E0087580D81EC5725739AE286778FD30992611C6D54DB88CA4F02F30C169DBE9FF
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11
- Target
  $PLUGINSDIR/app/js/utils/modal-events-delegate.js
- Size 1KB
- SHA256 267661f932a2ea78d8c7a98cc03d1b18d7cb8132deb84636772ecd1fcfbe4857
- MD5 117e4fdbdb0ecf211c8bd909efd337d1
- SHA1 9f8684d856b7c95bdffb139217dfd89f41373187
- SHA512 f474ee20b59d3d0c11f9f6aee6b6e2b66f7025beaec9841f88455e60533dc96cb4e27910be0dae92b0028c5578932b7f459fdb91d594ad010f72a3b3af6addb1
- TLSH
  T13C31D54D36FD173AE5B7172B5B2F5F8CAB72120B09054A26B2E69A804F354241196CFF
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral12
- Target
  $PLUGINSDIR/app/js/utils/strings-loader.js
- Size 5KB
- SHA256 96445709fde2613af50f4b8908296d4bfccdccb2d9db9febc34a9bf4dcc70ecf
- MD5 9c94eb933d8a43dd3825e67a7e30c980
- SHA1 7ec7b16af6f399219209ba5967d377040486a11b
- SHA512 a662a299e31633f71a9b9675970359430fdac06dcc284fd7ce92919f244c7f921639f97a42356e993a95865e6c9f198dcba82c126f82065bf2009a31ec9b02f5
- SSDEEP 96:FXS/WSBWlbBtDhWFTnTeWsNkEj1I/6WfwkUlx416moPdXDKP8j8yZrME6:FXSuQwBBh0nTevNkEj1O6Wme0muXDK0W
- TLSH
  T163B1FD58289314118C32B764CD935264ED6A4917023996F3FDEEC2686FB149E82F8FEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13
- Target
  $PLUGINSDIR/app/js/utils/utils.js
- Size 118B
- SHA256 b4f0c48cbfeaf8141fd44b12031e3f0410cb0cdc313888ffdb14fdf1d2341246
- MD5 a0952ebeab701c05c75710c33d725e7e
- SHA1 1da8a2e889f1213d481ae3cd5571670c01e64adc
- SHA512 5e5ae616d3fded7d2bf47a326242c4477ca3119fb52897bfb41de0be230ccbd6c3da2c00268b3973e9bf7b4f2886aba64fd9719b448662e4130ee66d87913389
- TLSH
  T1ADB01274B7AC73A2D315377AACBF6C1DF0375C368414B099B19034E19572D04519DCD4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral14
- Target
  $PLUGINSDIR/app/js/windows/cri/cri-controller.js
- Size 4KB
- SHA256 78b045eb1a5e95bd0ece3a83bc4f07d061b6f0efc8578eae38455486ee1cef88
- MD5 fcd8566fed179ebd61c589c9c9132400
- SHA1 d264b539e0e8e8fb394265d28b1ede88e938e3b8
- SHA512 3247150198522acaf3bffb1d5c0917cdff1753815baa40b843147f25d977df156b5509d9f89efd45b9015903e8dd4cf419bac04f460ee4786a74b69c684b988e
- SSDEEP 96:u62erIRTr5TeTGTv8/aqKbjWCtKZN/obrVkG:u63rQBaiL8/arnWCIZN/0rVkG
- TLSH
  T19AA1FD5C3DF9866049B72776CF261118F73342072246AA2A7AFE53800FF5F004A1AFAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15
- Target
  $PLUGINSDIR/app/js/windows/cri/template.js
- Size 1KB
- SHA256 016ef6ba4ccb64f2cbdf63357d180f0d3a5f74857633556b311eff57be8d023b
- MD5 2f82acef2d339db31fab5c73edf8af19
- SHA1 d9138de6fe1320cd232fd6e1971fbbfdb9225bd6
- SHA512 90311035970edf2c1d0175c9b718c731fad4f58ad5a0b43a2588e2e6132cc09deff1d49328174408c51fe3082d62612f7a2a6c25179ac474101468ab68c2abcd
- TLSH
  T188212E24441C90331B7B979BDA13276CE9519301D80B7D3871AE43A82BF3B828E62359
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral16
- Target
  $PLUGINSDIR/app/js/windows/finish-with-recommended-app/finish-with-recommended-app-controller.js
- Size 1KB
- SHA256 5ca97132a258ed1f36e401d70ccb95be2c9e18395e6010c40f61172914477de5
- MD5 eb6d6bd7e05d4477e2704dd87b57ca35
- SHA1 f42672ec1e23a3f4bcc2952746d87ba8deff44be
- SHA512 1402d611f910cf5078e804175fa4693b591348d3e7cf6d0a6bbe026c259eb9e0bc285233c80cb2f4690674c3e927bc72fbdcbe758826b98fd02ecb3ed82e339a
- TLSH
  T15D3189086EAB47B662B12B3DDE294695FB23022F05064B6A7EDC57C09FB1104025CFE8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17
- Target
  $PLUGINSDIR/app/js/windows/finish-with-recommended-app/template.js
- Size 681B
- SHA256 b61dfc304b46e8cd95d7b15bb93c6160b30523a1a093397a84fc8b8bed00ac42
- MD5 d1cb34b57cef7e28b9286454b197b712
- SHA1 f3a964b319bab82d4eda07e126bbfd6dec35c349
- SHA512 3a07de9c58134edbb7998f85e6d037a0cd066e32c4daa07594a949a7574f5693153bbcdb59739e1a92e847ab1128e2369fb30ba76a7b9cdfa9a37a409db691c1
- TLSH
  T18D012B48426F9573073B168D9A635EAC3D50EF01C9B40B26B0CB5784A3B36D58BDA318
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral18
- Target
  $PLUGINSDIR/app/js/windows/finish/finish-controller.js
- Size 1KB
- SHA256 1916c51ba66c6adf6a421cfdb7c9b7d5e448458241b9b73b365e45a4da43cb3d
- MD5 738b3c3f56fd2c8329a5a69093e14d96
- SHA1 be58070baaf09f0aa583877b10ac9c8e533e531b
- SHA512 d364c4dbb8403e4e86b9a0019ee6c5a81ea2ed4de758b09bab69dcba63c71d486fb8c7f900c39e8c87f8609f5bb3089ffd2c5861201fc7215715933f3d01cd59
- TLSH
  T1CF416B487ABA43B567757F3EDE250655F732426B0A464A6A3DDC53C08FB1014029DFE4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19
- Target
  $PLUGINSDIR/app/js/windows/finish/template.js
- Size 1KB
- SHA256 b05f111369e12ecb4cdc6526dd554061eb31097aa0de4bd126ddc185b69d922f
- MD5 f092de7ea66d8e920b345f38537fa35d
- SHA1 82d107a409f18878307ae0cefe24074db64937c4
- SHA512 14942c0122f216c07595cbaae498f9c4d37a2d0fd95f262c332502befdf4566c7a042c4d85702c1d82a111123dde677096195e9efeb1d74eb1dfd4df84d01a23
- TLSH
  T1B3212599426B4B37073A469C52675E6D3C60DE00CA710E2AB0DB8780E37789E8EA6309
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral20
- Target
  $PLUGINSDIR/app/js/windows/main/main-controller.js
- Size 11KB
- SHA256 d8456327cfb9291f01df792818e8d0bb97a0867ae9c31a1d064432eb23485b96
- MD5 4f5aa464d8e37f2525685ea9153b06d0
- SHA1 95bcfe2c80b7dd230ff92d26d42bdab786c4c2b4
- SHA512 9c827b0dd7ab191397b1797b9378372fd0f3074a285e4da4d1f6bf072e89cc38f55310a691eb3821925cfa05f5adb73ac10fc2cd0bc1c58c805639fe0240764a
- SSDEEP 192:28RRXC9xThFzkzLZ1ksEIA6li5djpACgvU2FHVgMKV59GsZ2FdwOVTzdfj5UEdwV:2sCHTTzkzLZhJiOy3Z0dwKf6
- TLSH
  T16332DD08B9A917A8E5B7632EEF2B4604FF71442B410ACB1939DD81C04F76814426BFFE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21
- Target
  $PLUGINSDIR/app/js/windows/main/template.js
- Size 3KB
- SHA256 63a43bb08403972d0f4b0e381bd264af14e826e0035242bc1baa9a815956b8fc
- MD5 a118c7724c208f12083240cafccfd10b
- SHA1 f89c676a215b869626737862a08c9eb07d440211
- SHA512 9fede79044ae5de7baf5bfba0d5a515ce462a25420026ff45bcf1751e57510023cb40df42d08e880114f62b38ddb218355d5357b725df32a41ae4e6a18414cb3
- TLSH
  T1C46141221055153267BA42DA56226E7AFE61E303C58B9F25B6EE13C007F3C42CDB760B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral22
- Target
  $PLUGINSDIR/app/js/windows/modal/modal-controller.js
- Size 2KB
- SHA256 4565ee81ffe222b31982088b1c18850076e3acf59198ebce08118e12cbd87ea1
- MD5 b04bdfd1c7d09bdbdb94a2455fdd677b
- SHA1 f000ba4866ff16d75bfd6cf446763498e19b12b1
- SHA512 3cb6ef0a16309046e7f407e7321eb12212b0eec09ec1a04b1d813f6c7a04546714865c3b398a93985041f598156ed905ebd23a64260801281b29ada9bc19ec5c
- TLSH
  T17351228E281B218195B7777F8F8740A9FF77446B0602475A3FCE87610FB0410929FEA8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23
- Target
  $PLUGINSDIR/app/js/windows/privacy/privacy-controller.js
- Size 2KB
- SHA256 14d9c60cd97f18e74fee2dd80b6a190eaccc526085991f356feb6b4d330a0fc3
- MD5 15bbec339f5046f525e3aa96d36c30ec
- SHA1 f73d40bf06584737fe327f1eec6f4b0446545226
- SHA512 2b0edfd2d5efb3f739e56eb6f3bcfae4789af3e1639f5f8e5f7530f5af10eb1a61464d665c9d9b2f4eb3796f2445108599d8bea75f1709aa562feebee519da4e
- TLSH
  T1154100ADB4B802B415727639DF27A244FAB3812F5509CD277AEC57811FF240A424DFD8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral24
- Target
  $PLUGINSDIR/app/js/windows/privacy/template.js
- Size 655B
- SHA256 95c459eae0edccdb94702aea603a097e461daa0e5f37dcd0e30de7df665433a8
- MD5 cf8d2c26520d7c84e560dfa79e31dcd3
- SHA1 716f2ec17480d5cc9c145bc147833fbfc39d36f0
- SHA512 d466dcf7e86a4295857020feea281fc89f519f6bf1e79c3b5e1046d0745c9c9010377b1941e06c9a9b2c78a4173ed9909332d5d6c39b05f460e8a863086c895b
- TLSH
  T105F0C83C85A881211976C708CF12D625BE90C35B4D3F7C7671CF078357E7C01C921645
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25
- Target
  $PLUGINSDIR/app/js/windows/progress/progress-1-controller.js
- Size 1KB
- SHA256 1a325433b4066727876b91185e110bee5811f48985c9a814f8ca7997688a0b2b
- MD5 e50b56dab56eeb731c5be72a57e0827d
- SHA1 c705625f675804a96ae3826cd619adb16b6425ab
- SHA512 7b537b08e18b6eb81337759d34de9d9f51c5f26df648e1f16b67cb8d89604ed467de8a172d26bbc1b04f16ecbb907917a7319afd3eb21b84f66faaed8d2eeda5
- TLSH
  T10B31024E786542796DB3AB39DB3E6509FB33421B500AC9207CFDB5804F3051A449AEFD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral26
- Target
  $PLUGINSDIR/app/js/windows/progress/template.js
- Size 242B
- SHA256 a7128a08bca53dd919cab3e5cb4dab31ded7ae2dafc957209b9fdd23f3b944ab
- MD5 92b145e6649ba0add3dee9a69d3fa91e
- SHA1 4db1a45392ec973cc8a7eecf3a30a9a7ecc7a64d
- SHA512 747a087dffdba5c92d9f4c8923615d388b9c4c79d3b71d3cb90487aa37c132290a4f5107eef3055c03eadcb9614e20d4655393dc9251fab7e0ee2438f0d95751
- TLSH
  T1DDD09742C2A082312B3A1F6EA3F32320BE2040040B2A7630E6FF1081232B003860DBC6
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27
- Target
  $PLUGINSDIR/app/js/windows/settings/settings-controller.js
- Size 6KB
- SHA256 b5c5dc5e0684fd97eb4c45896dc1c2de8a6a6fdc63b6aa83a99103c15787ef35
- MD5 378c18dd7d5cee6ca7c4ddd0396b535b
- SHA1 d5f81d4fab29201fd1629dc4d8e6f918c0c30479
- SHA512 c29416b3f0245f4826d857dc8c52c969071d2410c945bda96f38f59a9bc7137ee534d84865e5ac55a1e3cea6bb705c5d592725af709cd97e7f38ff05dbaafe5b
- SSDEEP 96:5RFTr5TvuTlpwWXs/t2V9OqIJ6OFGR+4V6RjTmoSrOlidbtmfPNVC8V/pGHmI4Rj:5RFBjugWX8YV9UAf+4CeoSrGWmNh
- TLSH
  T148E1208EF9B4157184B7537D8E368A19FF76899B0142CE35BCEE59881FB4080424BE9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral28
- Target
  $PLUGINSDIR/app/js/windows/settings/template.js
- Size 4KB
- SHA256 8014a7c919da249ba2f2196d9c9b62639d20851be426f3ffaef161cbe477c45f
- MD5 28513de0830383a516028e4a6e7585a0
- SHA1 d31fc3a6f4a3ce6c4afb82ff2342a1ed718809e5
- SHA512 0f7321c2ae13145bb694368dae1b74e6fe20e6b09712da2178bc46e6aa65223ab84c38abbf0ed074c85b42dba1a238a5f3f8d1ae060a0af6df748c5befe11b61
- SSDEEP 48:Zx8LQmDdbaoFRpm4+0A2AEeQmDdbaoFCpm4+0A2AW:wpm4+5nHym4+5nW
- TLSH
  T18891086384219412477680DA5B369F1EFB65CF0241E65E34B2FF6BCC978BC8156ABB0C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29
- Target
  $PLUGINSDIR/app/js/windows/welcome/template.js
- Size 1KB
- SHA256 42c546e9da748ef76fdab56b96fd511eb607617a9ba37b3dc420148b769d8acb
- MD5 17f54fca6723b983875d940d931e0afb
- SHA1 01774cd5cea36bd74c80a708d6f77567e8091024
- SHA512 401df9a54cd14c19227d91bd08b4775a7b437644b4ca0d1d636d3e07b04591f9c5516e80040ae6a79ba400457d15e3d80aa148a63de870a64664fc5a02f7a038
- TLSH
  T12D31FF0AC55D81361533C3FAE28B5A5C7860AE40C9BDBC3439AF075967ABC00B933B70
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral30
- Target
  $PLUGINSDIR/app/js/windows/welcome/welcome-controller.js
- Size 2KB
- SHA256 6155691dbdd66290109afb91617f9cf68af6bd912991d5d27b922f5faa7f530b
- MD5 50f676754862a2ab47a582dd4d79ecf3
- SHA1 1cb2f4b11f9f8cfc8dc57ff29d0256dec4811158
- SHA512 ccfc89e08fd36f0a694fcda17efb84ca285b6c62afe2e3a794fdad19b6882a4b618645f4d9171673ba56fb4c55fce336d6b8d26dec3a5cc11293ae2b211f499f
- TLSH
  T17141AB99E9F583742A757B3E9F2A0648FB32932B0A198B6C79CC52800F71118465AFF4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31
- Target
  $PLUGINSDIR/app/progress.html
- Size 20KB
- SHA256 d4e8ea6435a84357dedf3cfb923983638beecccec3d90b47cd7f6ebe5355e02f
- MD5 fd8ccf88a753afde0fdfe70176472da3
- SHA1 cc821651ae83a16e6dfbde3225d4e0fb6a7c7de0
- SHA512 664882e84bf2c99294bc79cb525d79ac9fb47aeb49f2e8ea37a16bc5bfe071f2e460ed923a2dbc93895f4aa0d346b7e448ad6dc361d50da0dfa2315c6c325398
- SSDEEP 192:dXdqpDNDPkFHmY74+/qmtRCtmK8W9I2gHHMlxh8B39LJ/Hab48JgJnc5w/93mJ8L:d8WNaM8UnbjPkeu1JE36+
- TLSH
  T1FCA2A521A627213E7523875F74F2725C2125C813E2679A3AFE69A237C3975462F237CC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Privilege Escalation

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Drops file in System32 directory

Event Triggered Execution: Component Object Model Hijacking

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32