6ec8c2f2a9e7cd4bc4fb0f78b8027f62ba663711b1d7570264e093150152a0cb

Sharing

Copy URL Twitter E-mail

General

Target
HTTP_Downloader_Chrome_Extension.crx
Size 24KB
Sample260828-tdf2sabq41
SHA256 6ec8c2f2a9e7cd4bc4fb0f78b8027f62ba663711b1d7570264e093150152a0cb
MD5 f522875a5f3d40f88cda5ab941c72ebc
SHA1 f25dc6fa8bea0aa90cf23e887c42dc49e1b747e9
SHA512 14f88d46f471d298f9da6c834bee81edc555f0e1dfb509f22397efcceaa35c9674bba8723c53ff61739979fa04ae6d5d385abffae8cc7c73553b82b27cdb00c4
SSDEEP 384:zzIKO8aRA2lWAPFREJR+9z+HP08Qw5wzO557U+IG72wHREZE0/NZQ9iV:zcKOxRAPsMY9kocwKM+I82AREZE0fQMV
TLSH
T189B2BF1E19D30E7DCB2F34F5FA955167F70189604FA5DB0325258AC0EDB6B18A3D31A8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Targets

- Target
  HTTP_Downloader_Chrome_Extension.crx
- Size 24KB
- SHA256 6ec8c2f2a9e7cd4bc4fb0f78b8027f62ba663711b1d7570264e093150152a0cb
- MD5 f522875a5f3d40f88cda5ab941c72ebc
- SHA1 f25dc6fa8bea0aa90cf23e887c42dc49e1b747e9
- SHA512 14f88d46f471d298f9da6c834bee81edc555f0e1dfb509f22397efcceaa35c9674bba8723c53ff61739979fa04ae6d5d385abffae8cc7c73553b82b27cdb00c4
- SSDEEP 384:zzIKO8aRA2lWAPFREJR+9z+HP08Qw5wzO557U+IG72wHREZE0/NZQ9iV:zcKOxRAPsMY9kocwKM+I82AREZE0fQMV
- TLSH
  T189B2BF1E19D30E7DCB2F34F5FA955167F70189604FA5DB0325258AC0EDB6B18A3D31A8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  _locales/de/messages.json
- Size 2KB
- SHA256 f4ccff91ec1137f4859e9ece6901016117315a938f41a3c824f73ede15f64142
- MD5 f58b8b8aa3cbd106c6041df2f2f5ee99
- SHA1 1a453ca60da45130d9be9ed2f5f07590dd8ab467
- SHA512 0ee749a19078fb23419133664868de62f06ed8515aba1a10e62d58ed49fc2e2e1394efc5b0ea769e41103417191219fb2fc509943844a889e8a4b6862fd52d2d
- TLSH
  T13351DD07BBD77CDF43CF6346B2382A9249A211B2824C2C2E3D185C1DD2DDD26561376A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral2
- Target
  _locales/en/messages.json
- Size 4KB
- SHA256 f18356a191d64bf9d2d0856d8216dd2233458d5eae7a86cf652184f5380a6a5f
- MD5 38e32c7794354ee888c08e0b827cff08
- SHA1 9dc98051609b99a7af6f4023b05edcfa6ba7a834
- SHA512 8b58d3071ac3a28328966a73b5d2108c43cc410397196bfff1492a45652166db5c3010b667f69a708a464fd50fba9d7a431049dbfe6e4eaf4e185e5a777c7aa2
- SSDEEP 48:7HSwigaAyff46PMXY1moHZge9WBLCxONen9gbtEuH9JGHGF1FZcy7K3BfRV8:7ywiFff46PMXKHZgeOCENen9CllJm4
- TLSH
  T14A81D41BAAC7B8DF43CF6346B23927D519E200B2854D6C2E3D686C0DD2EDD2251537AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3
- Target
  _locales/it/messages.json
- Size 4KB
- SHA256 00670cc98110c91d9a4fd16e6e74ae65b5521f4c23df602873757439fc59e398
- MD5 32fc5a6d8152898c6e489137c784fbd4
- SHA1 408329423aa18415a60a28297721e503d2651dab
- SHA512 9dc79b681a873b675de2cc42edeaa7f18a657cd55af246e940b09f05e2d11256e3b39b966988005130b2a8dd34f7ef4f043a59cc7901db4087a468b2653eef26
- SSDEEP 96:rwA2wBO+hV+NrT1Bsm1qawF1P5wueF9UCoLKCO3:rV2rCEBhmDaoJ5FA9UXK5
- TLSH
  T1B691071BAED3A88F03CF6246B23933D149F100B6854D682E7D68680CD3EDE2250137BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral4
- Target
  _locales/ru/messages.json
- Size 5KB
- SHA256 eb84040c3dc69afed6f527e6824d805d6e09cc8e3b6162832f8ac84a1c25fb4d
- MD5 0d84654e6c99789a2fb763b55a0b8109
- SHA1 51d3f5db2bcfd7ca8f2efca0b458bc9eebee6ba2
- SHA512 80f63b0652d9596a1e45953bd1c45561ec7023702002121cd879b8720f26061a3b5b2f59360199a7e54b3bc25178ad6d71b68c71d64c1739d6ccc5720a80d6bd
- SSDEEP 48:QtFOQvCc5eeZuhZ5umlZO1DsBEiWN3CPMrCUxH0JAeqwveJCaNXEkvkcMUeBfo:QTOQD9uPNicIxH0JMw6pT
- TLSH
  T14EB14E57ABDB74EF02CBA217F93436495CF100FA5A5E656E3C283C1DA2ECD114227369
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5
- Target
  _locales/zh_CN/messages.json
- Size 3KB
- SHA256 9f26630dc62f8cbbb549de21e94c636c5eb4956d4d917987d58ea8d6f7b1f22a
- MD5 d39e9791c52d091783f7074ee77cf61f
- SHA1 0549a105822311e3a6d954fa7eacd73ab7e6a3ea
- SHA512 cae2392e78ed172fe6db2e8352d203c3e485e6e044061586b00cd4fafd4ddbcf813e7897ac9637250afb5d678b9177865c900391b13573f96a7da73d58284104
- TLSH
  T15081AB07EEDBACCF03CA63967279239558E510B1952D682E7C9C1C0DE2DCD6A40933AA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral6
- Target
  background.js
- Size 22KB
- SHA256 69840c79175534c46792e54a83576ef46f8acf0c6bd2c491b1e9eaa4c2c8fc10
- MD5 77b83180c8cfb3b235b09b57000a8ca2
- SHA1 bec2e8453c9933daacd307d7b67681ec5f90b404
- SHA512 565e925f93263fd7cad7471ba05055712292cfab5c1b86c78b2f5a36ce79265da4912efc6d2f0f908687f9ee3f17c6f3d0a1f3e7063fcc7dfa9bc0de4da0f609
- SSDEEP 384:cazqzTthPcpp36lCGONnw4aYSoz+lFHICAqjazj7AoYce:caegpp366ZFSoKOq6jUQe
- TLSH
  T109A2658F761E900F52A522D0F53F26587B2DD1325225D0B57D64A9BEF0B041AC2FCAEB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7
- Target
  download.html
- Size 13KB
- SHA256 c9276c56ddca19e63277000c9d39a786e9f8e222ade840ca69f87b170f069ed0
- MD5 7c5bc5534ced2fd06d9ce85c922386a5
- SHA1 fd7d3a2bf6f3f226db7f341c6862a7e1df89da68
- SHA512 64ad747523852d610a35fea8fbce824499393570d02f2a9d8e894059d5955700459a5b462d38ea1538ded8ba2233b21698be11347c137292cabb428b982b3193
- SSDEEP 384:mxlg+HLKS2s/8f+bwOU4ln41Wgst+sCRF1oROfRBTolRJ28Juj4WNK1QFj41WNwC:mxlGnsYb
- TLSH
  T1C252DC10B15C98A8C213169B80F4A706A52FCF3583968896F3F55737B697920AF231FF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral8
- Target
  download.js
- Size 13KB
- SHA256 f7da40cb835a020686f7d776b397c8c25503f12f66c26ab9a90be09488de4249
- MD5 04bcc204e37ea5ec57b56bd72eecdc26
- SHA1 f1743a723e8f08b403e0876ed2134c6b5e8779f0
- SHA512 7d4ab85f04cdb318f8f504a355e6cda65a370b5b7cf0c6679c87cff6a2a8237a6862baa1700fd322f4234371ae699baf5b13f29851abf182de73ca2bf5365f88
- SSDEEP 192:MhJuCKeVnGbgSh+yBhIqOK0gitiPinii9yi5KgwipSz/:MhJZC0RqsgitiPiniisi5KgwipG
- TLSH
  T1D1523FB3B28F287986FF2716AA3653947C7CD051190320A4BD5C4C3DE870D86569BEFA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral9
- Target
  get_urls.js
- Size 1KB
- SHA256 14840281203a3e0cb587e4aa40650f227f72770b22bc60653148d3782023711f
- MD5 d70425fc63f6774ec49a2b7b74d1de00
- SHA1 df02d92b6ea0db701aad7afb8e3c18073c5a5bec
- SHA512 c7ff3cd5a3902008f872c0f2d34cfa6566336f75f65b63975347d0a5a01c4605a6ee725da35000e894d552264ff8aed4b564e1fbe1876076c044274605621338
- TLSH
  T1A4414792B30BB27F4F53D24C6AB83538B65DCA804174969CB9D6D802E4B0969F31DDCC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10
- Target
  icons/icon-d-64.png
- Size 427B
- SHA256 d3944ad16aa4b78e6ad69a33a2f14bf416bdc57fbc6fe932569cc93ef802b563
- MD5 c76b557a5cd6387b2781fbf4397b9b83
- SHA1 da024fee66d7a944683286987afe43216ba8158c
- SHA512 1b36f76aebc28ab8114bd28c2f22f0e9ba86ca8a6d90dcc72c52e272c8e76c81869a1a977aa20f19cfe6a7eac9039af3fa4f74d2443c30c83359aeaabdcdafce
- TLSH
  T18AE023C3FB92FFBCDD2B04F1E0CB347D4420299988394108027190C0354DC123685507
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral11
- Target
  icons/icon-e-64.png
- Size 419B
- SHA256 c5a06a9c65b16b0ee66926cb2907e00e24337f56ba3783ece115365f68956340
- MD5 10159fa857f5332b8d55363e8bc351fd
- SHA1 0b275c8416ccf1f66f29d869dc16b58527d4863e
- SHA512 ef87e95786cc2d8eb75a45a7cda82952ee5ab2310afa028d7475f4fdd24e8dd3d407405816fa5ab47d0cb273dc80e5cd297a335b5364c800e66bdc63365da405
- TLSH
  T1F9E0ABC751E5EE1083FE52BA7973501158A0B828516FF4CF80091A50563AD183DCC372
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral12
- Target
  icons/images.svg
- Size 429B
- SHA256 4643b5320ec3519f85fc339e2b0699a9aa8eae626a284e014bd114fd8d7c9726
- MD5 f9626da44c1e513d8c78d4a6af67534b
- SHA1 69cbdb3449bdda5a15172b1b8740bd635258f562
- SHA512 2c11c424d1e0add839045cef5f8923f84fdc8d86a0cdb9c3249d2c8b145eb1626785910d1ddea49028417c35d067913e50e1f6db3ecc92817912038649330c7b
- TLSH
  T1A0E0E59DE0895738A6CA87B211E99CA4E24D12CB05DC03BCAEE45E78B62471D4FCC1A8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral13
- Target
  icons/links.svg
- Size 380B
- SHA256 aa9e54e4c38170c8faf2a8f1f6f8b8abbcfbc270158200a3d109971191c8e96f
- MD5 8823d6d032946fc4059002642054baa7
- SHA1 a8bf11a3be08ab3c7bee329a3dba1fef345d28ff
- SHA512 74871d41bae540fb6be820bc12c6c291284fe709ee06935ff9d8dac107f3e2eee894f679f27e0baadc6593b524389bf5f4797a7360d751c4d636ccbd17c4232c
- TLSH
  T16EE0681B64BD4F345AAB02E0C9B28CD4B54AD0C04BCCABFCC9DA1E1820096AB39CD44C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral14
- Target
  icons/media.svg
- Size 343B
- SHA256 43bbf6c4765d343e643ef323bfdf063d8d5180a209300fb9190ec8952cbf8261
- MD5 f7cfb5df60fc0caf295b63c6aad4a345
- SHA1 4a300ca36e944a6277e876f1e2cb0af667fed830
- SHA512 4157ad77c7a77721b63e3eb74878eb5a9316b6ed1d78b0781d7aadddfd23e0393e2245d7966fdb1de36a0a89c9f93f6ced34a30b8f64ba69ab40d167642e33bb
- TLSH
  T146E0206DC0951F14578E877A09D595B5D02952CB077C627DDD70CE183144596FFD40A4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral15
- Target
  icons/page.svg
- Size 316B
- SHA256 a6eee3ef99a60ebeb183b4c54e2a44afad0146edb877d287e3d53cc9e88e901c
- MD5 5168976f65232a3ff2ed1738fee6684c
- SHA1 4711e70cac6ca3d8eb723d24b1f7f99bd80feec4
- SHA512 72cf445d18ff8c105e7252518bdbb51188d926bd83160187bddf84b4ef2b8ac4d0eedbe8c3e597df0b6985ec2a048a5f4a5448783b28b1638bc8d495e9567dc2
- TLSH
  T1FFE07D1CC04A27344D490B7B015799B2F68A12C30B4C52ADCD604C0C2208239EF040E4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral16
- Target
  manifest.json
- Size 1KB
- SHA256 d587b1f9bb660545764d1160b3922deebd77cb183f955d9619f984461e9108e2
- MD5 8ae9835dbed139fde8ca226f17bd0f6f
- SHA1 718dfff0206e7a4eaf16ee93552e3476e063f90a
- SHA512 6d16875bee17b7004698ba87c47933a75820017c934448314d6cd99e130d0d9b80122e7f60e7e4aa5cbbbdf684db5d30a5da838f84911c5365359763d7c3d778
- TLSH
  T1D921EE2FBBCBF05F02CD476DA832C8965539820E96D5BCED3C94A818C0D52B2565B34F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17
- Target
  options.html
- Size 3KB
- SHA256 8a8d1abbb95bf58243807eb0c5a2c770c7c78ba3a75ac1c9f33b994db45884c9
- MD5 57d93deca3eac8b2c637535f4c2cabe3
- SHA1 2e82da969063472f3ffd55fb7876ad1fe1158203
- SHA512 cf886a29fd657dc4fcc36ae0fcd37d72c3691ac6019969eb9fd65db0b77cb906b696af97c523f93e6f13a0ac888fd33e61fcf582294ca53ff194b7194ac9957c
- TLSH
  T160610D98B09DD948C30312ABC5756747A05FDF1593A89882B3B8277BF6F78208D024EF
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral18
- Target
  options.js
- Size 3KB
- SHA256 ab99727f67756845672b88d5062e114d9f8b7a9384325793b835d8597e38ffef
- MD5 d1594f4bcc7780f84f86dc375c9aaff3
- SHA1 e5a71b29d3b6dd0a15ca9977bfa7ef04a3ef8a20
- SHA512 a7f0006a3530c05cea5d51816080310f857994bfa78073c2b7488dd95a6c1fc08839afad3ef9f3e08719ccac9b22a9e1c5b6ecf0d1608bc6e7bb1c10e6f22e9c
- TLSH
  T1F8717D673451493804EB36A6FB39A74A3975E2A11E562405BD1C4CFE9820ECA90EBFC5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19