Overview

overview

10

Static

static

10

extensions...on.svg

windows10-2004-x64

3

extensions...on.svg

windows11-ltsc_2024-x64

4

extensions...ion.js

windows10-2004-x64

3

extensions...ion.js

windows11-ltsc_2024-x64

3

extensions...ion.js

windows10-2004-x64

3

extensions...ion.js

windows11-ltsc_2024-x64

3

extensions...ion.js

windows10-2004-x64

3

extensions...ion.js

windows11-ltsc_2024-x64

3

extensions...ion.js

windows10-2004-x64

3

extensions...ion.js

windows11-ltsc_2024-x64

3

extensions...ion.js

windows10-2004-x64

3

extensions...ion.js

windows11-ltsc_2024-x64

3

extensions...ker.js

windows10-2004-x64

3

extensions...ker.js

windows11-ltsc_2024-x64

3

extensions...ier.js

ubuntu-18.04-amd64

4

extensions...ier.js

debian-9-armhf

4

extensions...ier.js

debian-9-mips

3

extensions...ier.js

debian-9-mipsel

3

extensions...cli.js

windows10-2004-x64

3

extensions...cli.js

windows11-ltsc_2024-x64

3

extensions...doc.js

windows10-2004-x64

3

extensions...doc.js

windows11-ltsc_2024-x64

3

extensions...dex.js

windows10-2004-x64

3

extensions...dex.js

windows11-ltsc_2024-x64

3

extensions...lar.js

windows10-2004-x64

3

extensions...lar.js

windows11-ltsc_2024-x64

3

extensions...bel.js

windows10-2004-x64

3

extensions...bel.js

windows11-ltsc_2024-x64

3

extensions...ree.js

windows10-2004-x64

3

extensions...ree.js

windows11-ltsc_2024-x64

3

extensions...low.js

windows10-2004-x64

3

extensions...low.js

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    extension.rar
  • Size 23.7MB
  • Sample260822-pez4tsgn91
  • SHA256 f1895838648d580366c5c2664d867042d294864d48514eab60848ebbbaf08f98
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
adwareantivmdiscoveryexecutionlinuxspyware

Malware Config

Extracted

Language

  • ps1

Source
URLs
  • exe.dropper

    https://dl.google.com/tag/s/dl/chrome/install/beta/googlechromebetastandaloneenterprise.msi
  • exe.dropper

    https://dl.google.com/tag/s/dl/chrome/install/beta/googlechromebetastandaloneenterprise64.msi

Extracted

Language

  • ps1

Source
URLs
  • exe.dropper

    https://dl.google.com/tag/s/dl/chrome/install/googlechromestandaloneenterprise.msi
  • exe.dropper

    https://dl.google.com/tag/s/dl/chrome/install/googlechromestandaloneenterprise64.msi

Targets

    • Target
      extensions/akamud.vscode-theme-onedark-2.3.0/icon.svg
    • Size 3KB
    • SHA256 e7fe52f865ab1b88f92b82310d15e30b02b88f1995e344b9d27fb46ca6c38f37
    • MD5 SHA1 SHA512 TLSH
    Score
    4/10
    adwarediscoveryspyware
    behavioral1behavioral2
    • Target
      extensions/burkeholland.simple-react-snippets-1.2.8/out/src/extension.js
    • Size 2KB
    • SHA256 434fef93c24afa2eabec613b0d65b8d18bc2df0144d8b5db08988b5fa4e215b6
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral3behavioral4
    • Target
      extensions/burkeholland.simple-react-snippets-1.2.8/src/extension.ts
    • Size 1KB
    • SHA256 07d08f043d96265d4b0d2f492df20f9adbce6751b922adf80ae7ef91e3c948c9
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral5behavioral6
    • Target
      extensions/ecmel.vscode-html-css-2.0.13/dist/extension.js
    • Size 5KB
    • SHA256 c76e7dfb0cb05478a619d45a87b32e9ba708f5a1576a732833faea5eae56f40b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral7behavioral8
    • Target
      extensions/esbenp.prettier-vscode-11.0.0/dist/extension.js
    • Size 75KB
    • SHA256 cd713427722de2adce2690264f81e390d970a24bc8bd4d8ba8863db543672f40
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral10behavioral9
    • Target
      extensions/esbenp.prettier-vscode-11.0.0/dist/web-extension.js
    • Size 2.8MB
    • SHA256 1507d0c3b235372dcbff68783442ce3d499d6de000dceb54f47d4d3d5741eec2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral11behavioral12
    • Target
      extensions/esbenp.prettier-vscode-11.0.0/dist/worker/prettier-instance-worker.js
    • Size 1KB
    • SHA256 065213f30ab68d5f6ec630dcb2d0a5b569b889aa102644fafe79f988d9515f1f
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral13behavioral14
    • Target
      extensions/esbenp.prettier-vscode-11.0.0/node_modules/prettier/bin-prettier.js
    • Size 1KB
    • SHA256 0fdc366a12644592bd9bc739b4a5a3d5acefd6ab3b35bd4e6b7901dfc22e00eb
    • MD5 SHA1 SHA512 TLSH
    Score
    4/10
    antivmdiscoveryexecution
    behavioral15behavioral16behavioral17behavioral18
    • Target
      extensions/esbenp.prettier-vscode-11.0.0/node_modules/prettier/cli.js
    • Size 497KB
    • SHA256 dbd8bcb36f076aae76c323797adfd9cadfc3a4a097e637324465e800e786af9c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral19behavioral20
    • Target
      extensions/esbenp.prettier-vscode-11.0.0/node_modules/prettier/doc.js
    • Size 68KB
    • SHA256 8510acf26b1d38d470633e99f5977d670c7aee8ff7143c2298b56643b3f9cb54
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral21behavioral22
    • Target
      extensions/esbenp.prettier-vscode-11.0.0/node_modules/prettier/index.js
    • Size 1.4MB
    • SHA256 e64e063bfc2ecd44d431fda461fc1e67d1515b4163a1a1b08ba64ecde25cbf10
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral23behavioral24
    • Target
      extensions/esbenp.prettier-vscode-11.0.0/node_modules/prettier/parser-angular.js
    • Size 57KB
    • SHA256 4de5b891e3b0e592bdda4e65c419ecc8f3f91f1cf64ec805c7440c9e04b88d65
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral25behavioral26
    • Target
      extensions/esbenp.prettier-vscode-11.0.0/node_modules/prettier/parser-babel.js
    • Size 317KB
    • SHA256 6b92e06626b4e7f99633e7b784f8c3d6e64fe0ae19911d61bc03996efd505ab1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral27behavioral28
    • Target
      extensions/esbenp.prettier-vscode-11.0.0/node_modules/prettier/parser-espree.js
    • Size 151KB
    • SHA256 7c9f4840d50744c5767584cf14d3ca89fcf64e5f292e4be1ffe775d4b28f72ae
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral29behavioral30
    • Target
      extensions/esbenp.prettier-vscode-11.0.0/node_modules/prettier/parser-flow.js
    • Size 1.0MB
    • SHA256 476afecce773009a2321ffadabd6f8412dde8fbcea831197ccd9c92fc054f7b5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral31behavioral32

MITRE ATT&CK Enterprise v16

Tasks

static1

Score
10/10

behavioral1

adwarediscoveryspyware
Score
3/10

behavioral2

adwarediscoveryspyware
Score
4/10

behavioral3

execution
Score
3/10

behavioral4

execution
Score
3/10

behavioral5

execution
Score
3/10

behavioral6

execution
Score
3/10

behavioral7

execution
Score
3/10

behavioral8

execution
Score
3/10

behavioral9

execution
Score
3/10

behavioral10

execution
Score
3/10

behavioral11

execution
Score
3/10

behavioral12

execution
Score
3/10

behavioral13

execution
Score
3/10

behavioral14

execution
Score
3/10

behavioral15

antivmdiscoveryexecution
Score
4/10

behavioral16

antivmdiscoveryexecution
Score
4/10

behavioral17

execution
Score
3/10

behavioral18

execution
Score
3/10

behavioral19

execution
Score
3/10

behavioral20

execution
Score
3/10

behavioral21

execution
Score
3/10

behavioral22

execution
Score
3/10

behavioral23

execution
Score
3/10

behavioral24

execution
Score
3/10

behavioral25

execution
Score
3/10

behavioral26

execution
Score
3/10

behavioral27

execution
Score
3/10

behavioral28

execution
Score
3/10

behavioral29

execution
Score
3/10

behavioral30

execution
Score
3/10

behavioral31

execution
Score
3/10

behavioral32

execution
Score
3/10