General

  • Target
    NJCICKGEBHNPGMOODJDGOHKCLFPLEJLI_2_6_7_3.crx
  • Size 3.0MB
  • Sample260905-qq1eeaeb55
  • SHA256 06841a408be9a7ae46209384b68e5c83db341d8e4bc121143a5134e139360db7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Targets

    • Target
      NJCICKGEBHNPGMOODJDGOHKCLFPLEJLI_2_6_7_3.crx
    • Size 3.0MB
    • SHA256 06841a408be9a7ae46209384b68e5c83db341d8e4bc121143a5134e139360db7
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      _metadata/verified_contents.json
    • Size 7KB
    • SHA256 724659d2b25cf3b566373da4d93c6c7a38d50ac9122b5b5a1e8eae1e711ea516
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      assets/RigR15.rbxm
    • Size 28KB
    • SHA256 1ced4dc9e7a927a3b23a455376d2c4254529fd4221bcf03b3447342597aab65b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    • Executes a VBScript file via the Windows Script Host.

    • Target
      assets/RigR6.rbxm
    • Size 10KB
    • SHA256 45d0d686acac265fd9480ff98773d7fb447a3bd64588332477f3a78ec0c4b958
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      background.js
    • Size 181KB
    • SHA256 7ac8eff99493953eea24ab614acf491d38cadf5182f6bb8e24304d814c3d29c0
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      content.js
    • Size 7.3MB
    • SHA256 06f1a02ded7c12d8843c840e752517e28fb31993eec11a803f26c6b5a1c732b8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      css/avatar-layout.css
    • Size 1KB
    • SHA256 300d84833b3215c8d85077fd5287645b39aa0da85f0688fbdb8706550e21a709
    • MD5 SHA1 SHA512 TLSH
    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Target
      css/bannedusers.css
    • Size 2KB
    • SHA256 3bd5927edf3a1ecfff1d614ba05c2a8ada7b126cf8c596519a40532d7c466565
    • MD5 SHA1 SHA512 TLSH
    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Target
      css/game-shop.css
    • Size 5KB
    • SHA256 6bd5bea1c8925d876a8027720d4b6ec5af8c5c3f7c853c21f2ff096a1341f06a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Target
      css/itemPage.css
    • Size 23KB
    • SHA256 4dec069fc6bec5be0f4a94fd5cb28c5b014e598958e057e4aa1779d6fd79be0b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Target
      css/modernIcons.css
    • Size 398B
    • SHA256 2d5eda2b1412e859d785d6698626acc0b1dbdce9c30fae22dcad80c112b2ffe3
    • MD5 SHA1 SHA512 TLSH
    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Target
      css/privategames.css
    • Size 22KB
    • SHA256 3df265f74cf8efcac328ff2ec57a36c09264f1a803aa9a9f7619b5a4860dc432
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Target
      css/profileRender.css
    • Size 1KB
    • SHA256 5105afe70e98ad0db020b1dec08f9681b9164928997b4858c8d3a2984f8ea96e
    • MD5 SHA1 SHA512 TLSH
    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Target
      css/rovalra.css
    • Size 138KB
    • SHA256 eca7979fcf72221ab2a11ecb327170736ab30aa2fdc733d9b622720710949d31
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Target
      css/settings_layout.css
    • Size 241B
    • SHA256 8ad249b8d111144d6b19755a2b201ea31272f907aa6f6450346287498f684562
    • MD5 SHA1 SHA512 TLSH
    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Target
      css/sitewide.css
    • Size 3KB
    • SHA256 52c45ebf2632b9648c85d4f81f0b23e269339cb42d673dba1fcf0d549f245a46
    • MD5 SHA1 SHA512 TLSH
    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v16

Tasks

static1

Score
1/10

behavioral1

Score
1/10

behavioral2

Score
1/10

behavioral3

execution
Score
3/10

behavioral4

execution
Score
3/10

behavioral5

execution
Score
5/10

behavioral6

execution
Score
5/10

behavioral7

execution
Score
3/10

behavioral8

execution
Score
3/10

behavioral9

execution
Score
3/10

behavioral10

execution
Score
3/10

behavioral11

execution
Score
3/10

behavioral12

execution
Score
3/10

behavioral13

execution
Score
7/10

behavioral14

execution
Score
3/10

behavioral15

executionransomware
Score
7/10

behavioral16

executionransomware
Score
3/10

behavioral17

execution
Score
7/10

behavioral18

execution
Score
3/10

behavioral19

executionransomware
Score
7/10

behavioral20

executionransomware
Score
3/10

behavioral21

executionransomware
Score
7/10

behavioral22

executionransomware
Score
3/10

behavioral23

executionransomware
Score
7/10

behavioral24

executionransomware
Score
3/10

behavioral25

executionransomware
Score
7/10

behavioral26

executionransomware
Score
3/10

behavioral27

executionransomware
Score
7/10

behavioral28

executionransomware
Score
3/10

behavioral29

executionransomware
Score
7/10

behavioral30

executionransomware
Score
3/10

behavioral31

executionransomware
Score
7/10

behavioral32

executionransomware
Score
3/10