7dea1a52f325243cbafdef1e15b4a54e6dea2d0e6d3bc3ccc63a1a85f0f4f96f

Sharing

Copy URL Twitter E-mail

General

Target
chromium-release.zip
Size 1.8MB
Sample260826-g54wpstdjf
SHA256 7dea1a52f325243cbafdef1e15b4a54e6dea2d0e6d3bc3ccc63a1a85f0f4f96f
MD5 85a4e556fb1d8bf1a2911722ef4d41b4
SHA1 856a31b8088a41ef0f8505f425d6193d6287c091
SHA512 3d31becb37666f47778508cbe3352e37a8d5220433cb0ffe6be8dd5830607a5ac88039fd02217ecbc01b0a3473b9b766b70cb9cffa52241bdc2ee47218c0de27
SSDEEP 49152:pI9ayWX5e7YTRYha4x0ZozB2nCKmGI39OktmkwGP:pIgh5TRT2B2CX1OAP
TLSH
T15E95237E8E4A1913FDC7B5F4A586E200A90C329C62E79579DA82010C1D6EADD6733FDC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  _locales/cs/messages.json
- Size 38KB
- SHA256 ea8d93ff7a1f00ee7ac233db9a00f00ee3d97a0a957fa43982070f3e7a1338f8
- MD5 1834ee07e2a1cbbcb01ca5c6ae35dfcd
- SHA1 f85960b3e1eebe013ccf7e7d76af255c9915103c
- SHA512 4a752fa7dfeff1f7ade43fbe86f6a2d56cc1338dc562d3f5b9cdc871130705727f13d521113de75ac836bbd0150ddee2fc2053f0c17926b124631e06aa76a031
- SSDEEP 768:wNxvG9N/FZVhz4o2VSv3xlPTluuQQoHDCQ29:4dI/nbku3xlPTlHgCJ9
- TLSH
  T1DF0350ABD5083E0A0BDFE1CBB1D9721051BA83D29195257714CED68D07B3E0EB497B3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  _locales/en/messages.json
- Size 37KB
- SHA256 7dc7458f61495791cd0e1c281304e99cffe3eedd75b185cfc6accd1c1b3447a2
- MD5 1733b209ce2c8f011269ff6e31e9adf6
- SHA1 3f635817eb4de88e6720f246a96e67d5bf072ec2
- SHA512 76b318e8fc4189a60e9510cb636705a37fb2b99cbb3304c57be27798062f1597fc16aace682fb8c32be1bc2c17171805060ea87e062a79a819f2d006a58505df
- SSDEEP 768:nNBtjfJ25/QEw8DY/t1Q956wxyLRSsvoYDcH6x:nNzewkY/PqyLRnBs6x
- TLSH
  T141030CA7D5082F4A0BDFE4CBF0C8325062B5C3DAA295256714DDD29C03A7D1DF097ABA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  _locales/fa/messages.json
- Size 49KB
- SHA256 cb38c4a5a4e4ad0a964cbc5cedd91ede0f8959c09bd88d98120ec83dd7239bf1
- MD5 f2a8bdfc6f18e2e6cf9c48dc5708f379
- SHA1 fc0facfdc35f79826f0e0661fe6b4b8677602547
- SHA512 7d8af449c3a429c58a5b6a7d78a36451b8f17eb642b4d15aa9be1443d2c96e514d2540d9361f2c87d6786adca78631505d71da0ae2bce0e459c3e4fb150e7887
- SSDEEP 384:xB3A7KYzkjfeHw6PgUYxWD2T9k8icGVvuUvjXmkLO/qpEHRTz7O+k8c2ULlklr9y:0YWQ6Panl4vuDf2LS2CGUYi4rJWPu
- TLSH
  T1D33310915A682F72178BD05B70D23424C7B3AF82D245FA4254E08B5D0AB691FF64FB3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  _locales/zh/messages.json
- Size 37KB
- SHA256 d0e3af4849bf426a72fb62759a4951f50cc8c820c530c644fb3bf104933d5617
- MD5 fb654c6c14d9a5ea5df4b780c4270569
- SHA1 e73c7dd95216c96d70d614735fa222ce6e9209f9
- SHA512 7de94641143343f7f956d58f09040efc1d78504438b4edd5b124a35bcba4a7fd92ab2763dda14b3f1c5547296ab0e5aaf6d4455f08f03f1577de36cbc6777ad9
- SSDEEP 384:u9AxReTF5lqbKgU78CsmGcL4tzuSHe7UnkXVdcGjr2qjjybQ/Nqd90SQ/MTna1ou:EenCsiLrzsGdRrjyrduL+nayr3kYNUJ
- TLSH
  T17C031DE6981C7EC9078BD0DFB999781164A593C7D0D1683708EDEAAC06A3D1DB443B3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  _locales/zh_CN/messages.json
- Size 37KB
- SHA256 d0e3af4849bf426a72fb62759a4951f50cc8c820c530c644fb3bf104933d5617
- MD5 fb654c6c14d9a5ea5df4b780c4270569
- SHA1 e73c7dd95216c96d70d614735fa222ce6e9209f9
- SHA512 7de94641143343f7f956d58f09040efc1d78504438b4edd5b124a35bcba4a7fd92ab2763dda14b3f1c5547296ab0e5aaf6d4455f08f03f1577de36cbc6777ad9
- SSDEEP 384:u9AxReTF5lqbKgU78CsmGcL4tzuSHe7UnkXVdcGjr2qjjybQ/Nqd90SQ/MTna1ou:EenCsiLrzsGdRrjyrduL+nayr3kYNUJ
- TLSH
  T17C031DE6981C7EC9078BD0DFB999781164A593C7D0D1683708EDEAAC06A3D1DB443B3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  _locales/zh_TW/messages.json
- Size 37KB
- SHA256 b101ad389c039b0a4e840820573bd76cdedce7dcabf24bbcea3524eb2531995e
- MD5 b9af2c1f9ed35df3b5ec7aa0fbde0edd
- SHA1 ad54c0e4fcbdc6091efac1e104a24ca98b45d3d9
- SHA512 cdb449cd057034d2459c894467d25645f49aad1445984df07eafd57c4956c62057bad9199e2f8e1fbe18abaef4b5f69b5cdefddee735aa310f09c2c10c72d90f
- SSDEEP 768:OIBt/huuIhNV+8mTaIHftHxjAONORbwtKKNn+tpC:SueNV/JIHftHxFORbwtKIIpC
- TLSH
  T1A0030BF398296F8D07CBD08FB595341214A593C295E1693758ECFA8D1BA3E0DB08773A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  img/icons/draw_omega.js
- Size 539B
- SHA256 e37747d01a84f9b359bf0a71764d11cab7e8b318a98b6636cda513eeba750ad4
- MD5 0b10453dfadf24e47c325909c726a407
- SHA1 950590c3ad461a51db946e9d8f978e3658804352
- SHA512 6182c4fe45a59fd56634b73aab9a779502ab5515d5809be77f51d410d031831eedea3a41e019a2b08abc9234e8f8b8bc03fde5df556c5f67bd85eca00a168836
- TLSH
  T131F0E97641F00B3100BB723C624B2478A265F42B671DFC19129EC6526FED17D252BE97
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  img/icons/omega-128.svg
- Size 756B
- SHA256 6fda862fdd3ceceb77b9b7fb8c7bbdb18aecb6825bc0a67bfff73ccc5fd7b838
- MD5 4e976e4fc088b143e3d1188cd6e7e7de
- SHA1 2ecbe75da37258fac54b626407e3e1bf464e31d4
- SHA512 4958f06b3452d043fe22765f05989a093d442e668b58eb389fa1544b63ff4e0927893eeebad8c11259b0897462763209228aaae0be115dfcc4362c2ee41f74be
- TLSH
  T13601654DC36195A4F27EDBC04A7C0D89F02F71C796C7225CD4236E21D6A44E79E40ADD
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  img/icons/omega-action.svg
- Size 754B
- SHA256 a95a24f4ba60d07ebcb04e232c53071fb5e4a6815fed37ab0bca56bb39ddbd69
- MD5 c5aa0c5055157017e6e8ccc8d00d8674
- SHA1 7632e971d238a21e3cd8aee0bd611ccf6165dafc
- SHA512 799b26f66b9c6aae1b8dd92d7a7da0a038b6f648bf1060997ee34a22a6904d9d48d0a0ec482556a3a579252ed8885b8bd791241cc9d4323190a82a3e2c3533fe
- TLSH
  T14F01B54CC32094A5F22EDBC00A7C0D89B02F31C3AAC3225CD4235E31D1A14E38E40ADC
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral17 behavioral18
- Target
  indexedDB.js
- Size 2KB
- SHA256 06ea18e754e55d35cd87a1993822ee05563aa0d66b26b6c160ee21122be60f6d
- MD5 a6e40318e00f803d9d5d0bd5f56c3952
- SHA1 6b776fb9489542572a955158539a785cd3484fc0
- SHA512 5d363c598a03f588c08a8bbe33621449a8de4197ab2717815749db15c57ee0245a2bc97ebb650559393cf4df60ee4603abc94179c9b5f261d250828f27603ff4
- TLSH
  T1FC416C10FAB58AD18877DCDC462DB922F57B8887A92CED6073CD4574AB8849E90CC271
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  js/background.js
- Size 20KB
- SHA256 32fe091a4f8c657f5fb771c68fa0073f4a57f57b300fdac525befc18c527a822
- MD5 3fc4e87bf5aefc9c01fae0c4233d40df
- SHA1 d8e048ee25a3a7e4809d756e6b1fc809914d9e39
- SHA512 52b6afd729fff39326c16e068cda95e20c773fc9098bbb045be878d2eb1662c123503df947c3f7a34b7abe00733904781b2197497ea3cacb0a1d647090e9e727
- SSDEEP 384:sGq7U5eQBYsSOMItnZssDjdmtQa5188ckqHhZp35PgaNYoYwszCcSMe:sGq7UTYsS4sym62188ckqH1354aKFuv
- TLSH
  T17092305E5DF721179663B13C6B8FA1487237A113300CCD10BC8D53A46F96168E6FABAE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  js/background_preload.js
- Size 2KB
- SHA256 88f23f84763a3398397adb8f7626dca05b003e8fea387f6ce8b1c0412406781e
- MD5 e0b79aa9023fc6eabe34bf33d1be4b7a
- SHA1 a1716eaad9bb2ccd4749fa1c0038c289350cde0d
- SHA512 a4f2d0b0fa1199331e913f9642ded7df207fe521b4e1347e7c86d4c4f9ebfb304998dda8edf77e9a3098e6dfa5e51f1bcea63e99efed11d16871c818fc89f7f5
- TLSH
  T1F941AF6918F320257637386D5F5F70013B28A417690CD831BD9C99AD9FC42A981FB7D9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  js/log_error.js
- Size 453B
- SHA256 97325777460dd4d63508be3314df4db6e32ec3018ef851806e4b0ef8665ab44d
- MD5 7c33d6422d8e1640a78bd6a2175a7255
- SHA1 e436a0fcd474e23f0b1805e747b7ade7e0adbdfe
- SHA512 33fc3e1cd8805d92ce5a3e0e1841deb521f6111fcff461ce7e567b6664d52d6ac8a2f9baef538bbff02e49bc8d06735c749f66874bc2ca433bb1f8f9cc00b152
- TLSH
  T1A6F05C084ADB1662580B706F961F600573748013553CC920FE4E13917FE402E41B96FC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  js/omega.js
- Size 69KB
- SHA256 e7f21df96b85c0a32958a64427f912c546d5bfa8da15af0265084dc768d34a99
- MD5 b02576bebbb80b11350962d37c17b105
- SHA1 f7dbbfc2c97d418b09685766978e3d2f85204076
- SHA512 959163255f42284ff4699007b4acdf87e5cb459b5a352bef06d31f07f1a5ac02916938139bfe5ddb0d8a7fbd7aa23c4535d393aed6ed718e34785c02ed60fa8f
- SSDEEP 768:xq+4ZrJH29J/x+yMJyx7E/ekHqB1rRtlel9BFF5oGsUx/4KOZ7bRy8y2tnUjlVIP:2/4qFF5Vsusb42wVm5H
- TLSH
  T1AD63F26FB9FB22125177BC2DAB9F5024763664073408D911BF9C03A42F16528D4EEFBA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  js/omega_debug.js
- Size 2KB
- SHA256 1bc976748aa065926d597f378218a709f4807fa8457c2cb5e22424b27515a53b
- MD5 fe9b4b67668805692856789125981c99
- SHA1 ba66f4acabcccf90f18d70b06e4458f3820a4a46
- SHA512 7a8fe7d42ffe6272d82a788a55c1574d9ce19a4852545a61e1f5f12d2a0f037ba8b8a76557a601a4fcca49abb99022afb318574fdf5e3aa83094dde5aa0bff72
- TLSH
  T1CD519D9D6DE760629773F63CCB2FA048B37A590B2418DD64BD8C16E02F5022991E67FC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  js/omega_decoration.js
- Size 5KB
- SHA256 2a4787f0ac050ec239937136a12edc14cd86d91c295f615fe05f7a89488fb1bb
- MD5 8a79c490d59cd4edc4aee03e5845473a
- SHA1 d2ec7a0ffed7afab917709c42c6285324d09aded
- SHA512 cce78ea08560de409fe4a4f98b0f8568efceaa18bd70d3e6f1db15d125083e985cef37dc48ee0ec756090c044078720bf90b9f2ceb63bf960f4c7e212ee9be77
- SSDEEP 96:yatbWtIk2OI8u/z9zLypSn/ZpNQGgpSx/wb+qHOCYOk5QVIkpSa/786GhpjQzeqx:/bWtIFOIL/z9Hypw/ZGpg/4ZuAkKVBpN
- TLSH
  T173C1869FE8EF114311637C6E77DA9518B13A9003285D9E00BE9C434D2F5B52894FEABB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32