Overview
overview
7Static
static
7Buff Achie...er.exe
windows11-ltsc_2024-x64
6$PLUGINSDI...p.html
windows11-ltsc_2024-x64
3$PLUGINSDI...x.html
windows11-ltsc_2024-x64
3$PLUGINSDI...app.js
windows11-ltsc_2024-x64
3$PLUGINSDI...uts.js
windows11-ltsc_2024-x64
3$PLUGINSDI...dle.js
windows11-ltsc_2024-x64
3$PLUGINSDI...min.js
windows11-ltsc_2024-x64
3$PLUGINSDI...ons.js
windows11-ltsc_2024-x64
3$PLUGINSDI...ics.js
windows11-ltsc_2024-x64
3$PLUGINSDI...nds.js
windows11-ltsc_2024-x64
3$PLUGINSDI...ies.js
windows11-ltsc_2024-x64
3$PLUGINSDI...ate.js
windows11-ltsc_2024-x64
3$PLUGINSDI...der.js
windows11-ltsc_2024-x64
3$PLUGINSDI...ils.js
windows11-ltsc_2024-x64
3$PLUGINSDI...ler.js
windows11-ltsc_2024-x64
3$PLUGINSDI...ate.js
windows11-ltsc_2024-x64
3$PLUGINSDI...ler.js
windows11-ltsc_2024-x64
3$PLUGINSDI...ate.js
windows11-ltsc_2024-x64
3$PLUGINSDI...ler.js
windows11-ltsc_2024-x64
3$PLUGINSDI...ate.js
windows11-ltsc_2024-x64
3$PLUGINSDI...ler.js
windows11-ltsc_2024-x64
3$PLUGINSDI...ate.js
windows11-ltsc_2024-x64
3$PLUGINSDI...ler.js
windows11-ltsc_2024-x64
3$PLUGINSDI...ate.js
windows11-ltsc_2024-x64
3$PLUGINSDI...ler.js
windows11-ltsc_2024-x64
3$PLUGINSDI...ler.js
windows11-ltsc_2024-x64
3$PLUGINSDI...ate.js
windows11-ltsc_2024-x64
3$PLUGINSDI...ler.js
windows11-ltsc_2024-x64
3$PLUGINSDI...ate.js
windows11-ltsc_2024-x64
3$PLUGINSDI...ler.js
windows11-ltsc_2024-x64
3$PLUGINSDI...ate.js
windows11-ltsc_2024-x64
3$PLUGINSDI...ate.js
windows11-ltsc_2024-x64
3General
- Target Buff Achievement Tracker - Installer.exe
- Size 2.9MB
- Sample260907-tp48rayvht
- SHA256 7ca7cce436ffb6d06b4abc26014f03a56f77c29d28c3b28dde7a97bd6847bc2e
- MD5 2034304df96b2a84252120a634351ee2
- SHA1 94c9ecd435c4d9bfbb88c2e49c3634288cb5a9c2
- SHA512 cd2b8086fc74988447d46c9832378aed3894db8840f4c67730d9a4964f2191cfd73403388863ce7511dbaec8eb9505ecfafbd692d01054192cfd27794825d4a4
- SSDEEP 49152:R3tmlOCxE87vxpsrFpIvQV0aiF4hkssJYxXuGIw3UhsooAFhR8MbYHzcYxk0:RdmlOkPN+TIv6a4hTzxuGrkhsbc8MbYp
- TLSH T135D53371837CA177EB1295B1B9B486ABE157CC07932B4E6AFB84AC503405AD3734F839
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Buff Achievement Tracker - Installer.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral2
Sample
$PLUGINSDIR/app/cmp.html
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/app/index.html
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/app/js/app.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/app/js/block_inputs.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/app/js/libs/cmp.bundle.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/app/js/libs/jquery-1.10.2.min.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/app/js/models/notifications.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/app/js/utils/analytics.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/app/js/utils/commands.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/app/js/utils/cookies.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/app/js/utils/modal-events-delegate.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/app/js/utils/strings-loader.js
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/app/js/utils/utils.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/app/js/windows/cri/cri-controller.js
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/app/js/windows/cri/template.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/app/js/windows/cris/cris-controller.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/app/js/windows/cris/template.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
$PLUGINSDIR/app/js/windows/finish-with-recommended-app/finish-with-recommended-app-controller.js
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral20
Sample
$PLUGINSDIR/app/js/windows/finish-with-recommended-app/template.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
$PLUGINSDIR/app/js/windows/finish/finish-controller.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral22
Sample
$PLUGINSDIR/app/js/windows/finish/template.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
$PLUGINSDIR/app/js/windows/main/main-controller.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral24
Sample
$PLUGINSDIR/app/js/windows/main/template.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
$PLUGINSDIR/app/js/windows/modal/modal-controller.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral26
Sample
$PLUGINSDIR/app/js/windows/privacy/privacy-controller.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
$PLUGINSDIR/app/js/windows/privacy/template.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral28
Sample
$PLUGINSDIR/app/js/windows/progress/progress-1-controller.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
$PLUGINSDIR/app/js/windows/progress/template.js
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral30
Sample
$PLUGINSDIR/app/js/windows/settings/settings-controller.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
$PLUGINSDIR/app/js/windows/settings/template.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral32
Sample
$PLUGINSDIR/app/js/windows/welcome/template.js
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target Buff Achievement Tracker - Installer.exe
- Size 2.9MB
- SHA256 7ca7cce436ffb6d06b4abc26014f03a56f77c29d28c3b28dde7a97bd6847bc2e
- MD5 2034304df96b2a84252120a634351ee2
- SHA1 94c9ecd435c4d9bfbb88c2e49c3634288cb5a9c2
- SHA512 cd2b8086fc74988447d46c9832378aed3894db8840f4c67730d9a4964f2191cfd73403388863ce7511dbaec8eb9505ecfafbd692d01054192cfd27794825d4a4
- SSDEEP 49152:R3tmlOCxE87vxpsrFpIvQV0aiF4hkssJYxXuGIw3UhsooAFhR8MbYHzcYxk0:RdmlOkPN+TIv6a4hTzxuGrkhsbc8MbYp
- TLSH T135D53371837CA177EB1295B1B9B486ABE157CC07932B4E6AFB84AC503405AD3734F839
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Adds Run key to start application
-
Downloads MZ/PE file
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Drops file in System32 directory
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
- Target $PLUGINSDIR/app/cmp.html
- Size 5KB
- SHA256 5966979a422c2526dd77897fb643639d82b16bdb89d8fa6e8615d3b32169af3c
- MD5 17241946e51074e6877c43737b94ad71
- SHA1 16918c53471fe3f35fcae1e9902870d91c50d957
- SHA512 b4b6e030fd1abe19fa308b32f04571a7c1c1f78a7cb789f169b37b54f281ec66d16e4cf0bbbdad81642bf28e266a6b2af7c19cf5106c683fb7f443bfa3110e05
- SSDEEP 48:tZrc0/GdshWpo1rckthAoShbEHaLKNGiNQtvmolOGR36tgtr/GTvJP8AscaV4Li1:4V+8v4jHa2NGiivmmpWsBVuQFwlE5vSG
- TLSH T15DB1DB1A2D5914A80077E3385B6B6208F72AA1B72105CA067EACDE513FB152BD58FFCD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/app/index.html
- Size 27KB
- SHA256 452154a082fd36b9ec8b5230bf4b6708c4715153e78fad120eb25828fa89381b
- MD5 14c405b7892f466f89d16bb5b3ec68ca
- SHA1 d7ba5ce2b5efd4bedc78c3c78eec5274df5b6898
- SHA512 6795fe8c7072adf44ef990a12f9a840421622b2c0836a3590a7905e135d42be922f9db1070e09c1fd2f82f1c5d2ee09b4526e27e2454b04923e84d52afa49b68
- SSDEEP 384:23JlhPshoRJ/seq06ItLglbyPasN1vnYogfZZ51Px+mppiq:2OhoX/seq06ItLglbyPa65nxq5xtoq
- TLSH T1D9C2D811DA36102CB237462AB5E2BA4E7024C117E6538A7FFA5C5635CBDB08B1E13BCC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/app/js/app.js
- Size 24KB
- SHA256 3261bdfdb5a5cb527491b2e5c23c04d4c1f4618abdb125d9c8cb197e6e4f0525
- MD5 c55710210d80a89867b7c2e8f6b0051b
- SHA1 53929d1bd6e81127b5fe7eb9f7f7db1d26e10b33
- SHA512 a6b3b1da48bc845daa567d9fcb08c0ea5799b476aec9113153ae0da8e93cc60f0fd291279c890715f35f055c10b0dcf1bb21c537bff0d8ee4b69ebfc01cf6599
- SSDEEP 768:0+ycDQYITdIb+eH3A4nzaYHhGifG3yRrH+K8T:0+yUQYcqbe1K8T
- TLSH T1A4B2858E967912789573633EAF1F4618FB32122F110596273AFD85814F7141282A7FFE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/app/js/block_inputs.js
- Size 789B
- SHA256 f8dbd6793b35f7a26806f4dabad157aaafdf6d66fad094b50c77d60f223fd544
- MD5 b5b52c92b90f4283a761cb8a40860c75
- SHA1 7212e7e566795017e179e7b9c9bf223b0cdb9ec2
- SHA512 16ad53ede5424ca1384e3caea25225589e9eec9e80e2d845948802db90fad222f709a7b651cd7601a34ba67a0627433f25764638fd542cbd4612871308e7b353
- TLSH T14301D2D864D3A87A597DA328536BE748F7391964905A1054F0DC8C64BAF003BC16EDFD
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target $PLUGINSDIR/app/js/libs/cmp.bundle.js
- Size 391KB
- SHA256 039d5d4e442cc360b6f54923c53cba5432d80727b8d614a3ee99f7c70307bcae
- MD5 48ccfc31db67a9e9d6decd5b18df96f3
- SHA1 2086877b894bd0ddec2ae80dd853e47fcbdc638d
- SHA512 e369682bbba708ea66797024bc2885e85a4e2b4ac6a4005cc648a7a81d8a4b1c3691c5484408bbd847c40ee80d12e72c5d9722950da020b284843c10d05d0963
- SSDEEP 3072:iyUYM9z8F+GxPMqbOISP88WEAtvgnnhLCVJkNO7Z6BEFltnxKg8rq0gU:LrF+GxPQWEDLmkNO7Z6BAly
- TLSH T13D842B8D7991B0E617D722F1802F900BF33A6458784CC490B660D8F1ADF96AD927BF6D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/app/js/libs/jquery-1.10.2.min.js
- Size 90KB
- SHA256 bc44d3631ffef1df7960e359f02002d3ada45ee05205c2cf1edd85da2f518144
- MD5 44e3f0db3e4ab6fedc5758c05cf27591
- SHA1 2d408aa1d35661019c95adcc60b78c0727ed25b4
- SHA512 4d4844e53e686fc59a52e86588f328dca3ed6fdad7195c58942a98c51755a24981b903ee7c7b27785375eaad5a7d9501cf74b999674b79f214e66103bad9efdc
- SSDEEP 1536:O4mCgi8DyCuXXFiJ+L0kJQsJVPEKuQRZdC/RAfDknv+p0WzH/Io9Z7qABZnu0JFV:OGsKYAI2p0WP9bDrJ7fak
- TLSH T1D493F8DDB2D1B06257BB21BD006F540FF236195D280D8850F129E8EABC74A499277FAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/app/js/models/notifications.js
- Size 5KB
- SHA256 c32495d55eed52f47dc7268eeccb90fb6bdc5686135ed089416c6bb8f703a578
- MD5 911451f65b2503d23bc27c6a6aa6af72
- SHA1 01d3654b23ef7f5adeb4097bd851e8c100a7b2ab
- SHA512 06edaebb0bb2980a7b6d6baa31a9c0894a9bb5f14a91468ffb8f182d98f04bb811df2a4c37f0b56d612603528aa21f390eaa7cf885874ae770a24dce2f9b249c
- SSDEEP 96:sOr8u1s9FHYYdfHsW/GZwzpJGf8mui+U8QrGjqTxoOxoYsdfHsW/GZwvpZGNjINU:sGu9GYl3rNQ8K+JQC+N5Rsl3rxeEYIo
- TLSH T1F5C1AB5F90BA00A7057293A819370342FA5753AF49408CAF737C5EB40F311A6B4E5EDE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/app/js/utils/analytics.js
- Size 5KB
- SHA256 0a3b80a0263691f71e85ec681be87229e6325a7d173ff430bbf4eb7fa355476c
- MD5 52b20797b4568fd9eaa065d676b7a344
- SHA1 a14cb0b575f2a7d274a78093d74906351b603dfa
- SHA512 f99786edcfc0220f1563617f40441f9b0ff02083be2c1847677b6533f7d1de16911227e349fe41e328800230bc2994b70db3ab79e4acef5fe07631e87aad0c5f
- SSDEEP 96:LlYkmHqqVHlnZrJGvt+QP2EZc8kukLQsO2LT+gObNSPgPgzauV:AHqSGV+kC9zNObNSPvzaA
- TLSH T1A9C199292469719068B373B68F5B1518EBB116233144E9223BBE87415FF6D02C693FCC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/app/js/utils/commands.js
- Size 15KB
- SHA256 160ca35f80aeae58f6723c37cdd3e52cbb4ef56e659fbe105a8edab1f0f35ace
- MD5 ccfc18e42871f7eb701c54bc1833dcfc
- SHA1 7da62247f4383148109c198aee1e26c21484104c
- SHA512 f6a08520790106482faf6345ab534210f14e8b5629880f875af8f4210a3d1b7efb24e05dbeed895e2044034a6d535a4b4cc2dae34f5b15e7c4960806c2d0340a
- SSDEEP 384:2Ur5Hs8cD+1uUPULQq06WCHp7GvvoWqEWOnvsUmd:2MwGUd
- TLSH T1C872EBAA68A721651933B73DDB9B0215FB33083B11465C147EED46917FF6402C2A6FDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/app/js/utils/cookies.js
- Size 1KB
- SHA256 9d3cb3822e20d6f5157faa02dc69bdaef44576c3fb5523e00aa152107ce30287
- MD5 6c60e675f8c8c68c0174b644d3a63a2a
- SHA1 3635a3fe07ccc4a6f33a986ddb690522d0611abb
- SHA512 1dc9ec7b139bcf37107ecd673c01e4fcc606332ea1645a4a1b4e5d95f817d4c99d5964cd3d941a6a526689341d9623b17b4efc002cdf4c73404299d52b1be452
- TLSH T17721E0087580D81EC5725739AE286778FD30992611C6D54DB88CA4F02F30C169DBE9FF
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target $PLUGINSDIR/app/js/utils/modal-events-delegate.js
- Size 1KB
- SHA256 267661f932a2ea78d8c7a98cc03d1b18d7cb8132deb84636772ecd1fcfbe4857
- MD5 117e4fdbdb0ecf211c8bd909efd337d1
- SHA1 9f8684d856b7c95bdffb139217dfd89f41373187
- SHA512 f474ee20b59d3d0c11f9f6aee6b6e2b66f7025beaec9841f88455e60533dc96cb4e27910be0dae92b0028c5578932b7f459fdb91d594ad010f72a3b3af6addb1
- TLSH T13C31D54D36FD173AE5B7172B5B2F5F8CAB72120B09054A26B2E69A804F354241196CFF
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target $PLUGINSDIR/app/js/utils/strings-loader.js
- Size 5KB
- SHA256 9b833f9e058ddb31ada44764449fe030f05e241dcefdef46886a74e30cd04ba5
- MD5 8ac781fa72423fc5c4c21a8c4138b709
- SHA1 50ad1d7f383d6801c57f916e46c1c17f79222725
- SHA512 f78558488968b1151b189545294a0bb97131c0a4d5dc0fa61ef168d999151e0f12af271389aae985d129adacfc6bf610b0191fb912ffdf8e97283829e2802604
- SSDEEP 96:FXS/WSBWlbBtDhWFTnTeWsNkEj1I/6Wfwk0lx416moPdXDKP8j8yZrME6:FXSuQwBBh0nTevNkEj1O6WGe0muXDK0W
- TLSH T132B1ED58289354118C32B764CD935264ED6A4917023996F3FDEEC2686FB149E82F8FEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/app/js/utils/utils.js
- Size 118B
- SHA256 b4f0c48cbfeaf8141fd44b12031e3f0410cb0cdc313888ffdb14fdf1d2341246
- MD5 a0952ebeab701c05c75710c33d725e7e
- SHA1 1da8a2e889f1213d481ae3cd5571670c01e64adc
- SHA512 5e5ae616d3fded7d2bf47a326242c4477ca3119fb52897bfb41de0be230ccbd6c3da2c00268b3973e9bf7b4f2886aba64fd9719b448662e4130ee66d87913389
- TLSH T1ADB01274B7AC73A2D315377AACBF6C1DF0375C368414B099B19034E19572D04519DCD4
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target $PLUGINSDIR/app/js/windows/cri/cri-controller.js
- Size 5KB
- SHA256 8c8c3097f0b587d715e051f55894d73a0fb7b441024f47512fa340eb3f692152
- MD5 344b079e423000460dbcc623d3dea42f
- SHA1 6f7a6db5cdf0e4c511ae1ec8aa1f08dd9e79190c
- SHA512 15358d30f96ba6ec330417896ccd5c837e71b1712357185d7d84e60e8e6c21af52eadc1fcf61f6ce9a79165fab94813370a5ef0b632742043355ae3eb7eb6856
- SSDEEP 96:u6CeVFfOhETv5T6ToY/aq4bCWCtoQNxcGyUkeErscwn:u6jVtOyl2EY/aLmWCyQNxaUkrscwn
- TLSH T1BAC1DC9C7CF9866058B7277BCF160518E732420722426A2B7AFE83404FF5E404A16FAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/app/js/windows/cri/template.js
- Size 1KB
- SHA256 016ef6ba4ccb64f2cbdf63357d180f0d3a5f74857633556b311eff57be8d023b
- MD5 2f82acef2d339db31fab5c73edf8af19
- SHA1 d9138de6fe1320cd232fd6e1971fbbfdb9225bd6
- SHA512 90311035970edf2c1d0175c9b718c731fad4f58ad5a0b43a2588e2e6132cc09deff1d49328174408c51fe3082d62612f7a2a6c25179ac474101468ab68c2abcd
- TLSH T188212E24441C90331B7B979BDA13276CE9519301D80B7D3871AE43A82BF3B828E62359
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target $PLUGINSDIR/app/js/windows/cris/cris-controller.js
- Size 9KB
- SHA256 89924de5dece339a344ab2cda8e0dd4448719d3b9233d728921c553166765c7d
- MD5 23602b0707b37ed7c1b5e3a14e17e0a3
- SHA1 cd1859cabca965afb34cf44f9b69a5e76f782197
- SHA512 0df7ba4063389dfd592495618600e99d5184179e4a9a79e678d0727a186ba3d921f314df861ae77038d5d8531cf5ac32f9bfcff87363d0b242f77157f3f8cd3f
- SSDEEP 192:nCoyl2vxrZn2C7s+vK/H0mIvo99iXKapiaTkelwPMM0R9W:9yl2JV2C8/HOjgOkelGMRO
- TLSH T10422201998AD2A299A7773B5CF6A0508FB3142272944DB1A7CEDD3940FB940181B7FEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/app/js/windows/cris/template.js
- Size 480B
- SHA256 c6c0799e027b5554e44e1c31262ef62b2879bdf1b862fae56615426f07f471d9
- MD5 408961db547931d2427d96035dc7245c
- SHA1 8a0330bf52f53cb1e82e36cd67723ebb29d7a6bf
- SHA512 08d79c8f54cc9898956df5b4de8360a38d482ad19ce155e84a33843221a0242240c59c49ce0ef980e150fddce716557bee7071a6525ef438fdcde9bdacee95aa
- TLSH T1B5F02E114135CE20373F17BE93631B28F631D0024A82E634D5DB5790333B4E78A96769
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target $PLUGINSDIR/app/js/windows/finish-with-recommended-app/finish-with-recommended-app-controller.js
- Size 6KB
- SHA256 ec775a786d8f0170c33e7d28df1f724aa1de26ff0aafbbf41c26dab864fda48e
- MD5 8f0cff982886d07a530a1ceedba4bf2c
- SHA1 6348b32708fb6f70225a3fdecdd616475a4bf8a3
- SHA512 cc688485cfa0d3787496f8a65e222a38a5b46c0b3b41812b9e1246f0195bc6dfcdae1cd2c82a6f80620db91cd826a17fea5f31879c6ec7e3efb580ec71a4aca1
- SSDEEP 192:otBaiFc1rnGDtjUnuYu7t7jt/Pv0+bnZ7uc:otBaiLZ++tHt/5nZ7t
- TLSH T1BBE1004C9E9E5168E53B733ACFAB4188F73502271540A617BCDDA7986FF0245026AFEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/app/js/windows/finish-with-recommended-app/template.js
- Size 1KB
- SHA256 f2f955faf5dc90e9ad50815566aa42a693128f97f07d02c5c3a1dbac27f570c4
- MD5 e3f895c48a2c99c3e8656c9093075286
- SHA1 4d1c13a0f03ba903787b23f5f27563966cc08a31
- SHA512 7c71787b7bc49e77923e178fbc38e2fe7e45283f257766020a21e25535ff095b7896406e612e254c46fef5af4a0fd2a4a9f5ecb0b33fab91261f01a3bad9a54a
- TLSH T1D1315859425F9A73173A468E9B670EAD3960DF02C8B00F11B5DF4784E3735888EA7318
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target $PLUGINSDIR/app/js/windows/finish/finish-controller.js
- Size 2KB
- SHA256 c57d168e804e06f26709322e340076e576d405a72cee0b663176c6167785c3b3
- MD5 b4e14fe186c7843fe1365b630a4a17b3
- SHA1 86619b54889f3da9057a4937584df4acebf492fd
- SHA512 bd0e5a72f6a6145c6177248351bb2ab2bbe7ff66d36dc7d022ab81d614eb39f2a0a3f4c267c3018202d17e175cfac5755138b6a05bd7f3c7b358dddb20635640
- TLSH T1C841AB4879FA43B66B753B3EDE290655F732422B0A0A867A3DDC92808FB1014039DFE4
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target $PLUGINSDIR/app/js/windows/finish/template.js
- Size 1KB
- SHA256 cedc900131ac48e92bd931926946dc342a99de1b16757969b7416f8ba037fad7
- MD5 6410e00eec2197f48a0d2ff66d0c07d2
- SHA1 480c640d3849cc90fc881306322ea96e31c1207b
- SHA512 302f2fa32afdc0d2e8729a91ce20d16427f2a6d56f97a84aa1785c3babaaeb080ff8d1ba400a0d1c3917646b1597e1800a36622f3ebdcf14979da6e3a76879f4
- TLSH T13221289D426B5B37073A469C52675E6D3C60DE00C9710E29B4D74780E37789D8EA630D
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target $PLUGINSDIR/app/js/windows/main/main-controller.js
- Size 16KB
- SHA256 2cc465c2bb45f3fcee61baf732b4c87cb50b4baa64864bf832475f45e2846113
- MD5 3d497dfdfa6f36a812b4988a79bfa641
- SHA1 d5c951daf21080e9ba18b05619252d5b3624d20e
- SHA512 f500817f58c407c0fac8290d77b0a7e9c6d8198bd6bb126eaead92a892f0a1efa9a09ea953349c21d62a3067cb1bff00257bcee67c6bab49b782e9688b1241a8
- SSDEEP 384:2Rp8ChTvzkzPZPb5yPQZ688wqUaftN23n:2RprTvzkzPJ5eQZ688wqJftK
- TLSH T171721C0879A8167895B7333FDF6B0649FB71102B45068A2A3DDDC2C40FB1811466AFFE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/app/js/windows/main/template.js
- Size 3KB
- SHA256 d827fab7a8ec31dd68bcd7e6725c01b7d72d1224fc0c1a136dac513cc7884d0d
- MD5 694ea1756f2dace45053080494afbb70
- SHA1 f503248779de58075f5a3ea9ba97a4838b95d1a7
- SHA512 aae8397bbea463cbcff7a26efbc8be6e9697a65073fb566fbe0d32a68dd4e656f9ca70268a1faacd2b137cd7fdeee1a380f4b4126cb1ee2a6d2bcf07bf076029
- TLSH T1956131221065157267BA42DA56266E7AFE61E303C58B9F25B6EE13C007F3C42CDB760B
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target $PLUGINSDIR/app/js/windows/modal/modal-controller.js
- Size 2KB
- SHA256 babc84f3a2bffe48bd239ead431bffaca0b572df7695a82fb1d0c4fa9040b722
- MD5 4d83a2e0841cf28eb4ba69a11ec7bdab
- SHA1 13536ee9fc29b3c53941b3157df53bb0ddac557e
- SHA512 ecdf6f0a02415a9ebb7318cf486a2220e170871cc20c230fc12a8ae103f3740c90144d57bda00202a300a872d74a0b8700bb38ac1c423097992f30a3b3f72295
- TLSH T1FF51278A181A116595B7637FCF87019AFB73509B4A45421A3FCE8B011FB085093DFEE9
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target $PLUGINSDIR/app/js/windows/privacy/privacy-controller.js
- Size 2KB
- SHA256 06b2a07911bf80d3ef9979980a67010a2b20023ac9a38cae22fe70b739abde11
- MD5 71f27207dcfd9aee4fbce9919e4bc924
- SHA1 9e301b1670e82cbccd85df073d287f52d6d569d0
- SHA512 1348c66bb4d2b2066d659305df0909f63862ee9b00e3eafc94d6df1893c55aa530a912b0e8a27b17a581b274dda1a78aa5f20dfb8c2e2d8106dc0776676b4ea3
- TLSH T14C5130AE607842701937773ADF2BA788FAB2412B9445CD163EBC9B411FB28154249FD9
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target $PLUGINSDIR/app/js/windows/privacy/template.js
- Size 655B
- SHA256 95c459eae0edccdb94702aea603a097e461daa0e5f37dcd0e30de7df665433a8
- MD5 cf8d2c26520d7c84e560dfa79e31dcd3
- SHA1 716f2ec17480d5cc9c145bc147833fbfc39d36f0
- SHA512 d466dcf7e86a4295857020feea281fc89f519f6bf1e79c3b5e1046d0745c9c9010377b1941e06c9a9b2c78a4173ed9909332d5d6c39b05f460e8a863086c895b
- TLSH T105F0C83C85A881211976C708CF12D625BE90C35B4D3F7C7671CF078357E7C01C921645
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target $PLUGINSDIR/app/js/windows/progress/progress-1-controller.js
- Size 1KB
- SHA256 88059a936f49f1c4376bd047256b965540c4edd4e60331405c4f92986f6828de
- MD5 78f88c896dad595ef062a00a3dccf3a5
- SHA1 0a321088d119c7bf977a6ad2caca9f84cdbc4058
- SHA512 169fbd73dd73dc09428ebceefec5b079651fdc88306377a988ad3f2b96c0ff356532cb408ac26c627f77783c811f309794e2f93eb4a2e6cfb04fdf7cbddab732
- TLSH T1A941EA4E282942792DB3AB799A7E2909FB32411B500AC5203CFDA1404F7092A449BFED
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target $PLUGINSDIR/app/js/windows/progress/template.js
- Size 242B
- SHA256 a7128a08bca53dd919cab3e5cb4dab31ded7ae2dafc957209b9fdd23f3b944ab
- MD5 92b145e6649ba0add3dee9a69d3fa91e
- SHA1 4db1a45392ec973cc8a7eecf3a30a9a7ecc7a64d
- SHA512 747a087dffdba5c92d9f4c8923615d388b9c4c79d3b71d3cb90487aa37c132290a4f5107eef3055c03eadcb9614e20d4655393dc9251fab7e0ee2438f0d95751
- TLSH T1DDD09742C2A082312B3A1F6EA3F32320BE2040040B2A7630E6FF1081232B003860DBC6
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target $PLUGINSDIR/app/js/windows/settings/settings-controller.js
- Size 9KB
- SHA256 846b7dfdfac4c748589b33df2ae9a392b49b8010637b49cb880b9e000f0253a6
- MD5 701c1f21f9969c50bcdd3211176a174f
- SHA1 b213e1179a2a83d911a14677f10a0629170c35dc
- SHA512 27d9dd9647fc1d692e8c935fc67f0ec1a6c34578c0b7848345bdb97b3e6458b96b7c72d894e3e3c7e753dfa8be48c7d2355225a0c2bee9b71f567a6e25ba621d
- SSDEEP 192:5RFBjugWX8x2zLjiaPX/iXv1ijiJRWzHSQ9whrMk4Vo0MEKAmNN:5RFB6gWX8AiQPiOiJvsmD
- TLSH T1D3121C4EA96440364977577FCB678789FB72049B2402C92A7DECC9882FF08940396EE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/app/js/windows/settings/template.js
- Size 4KB
- SHA256 8014a7c919da249ba2f2196d9c9b62639d20851be426f3ffaef161cbe477c45f
- MD5 28513de0830383a516028e4a6e7585a0
- SHA1 d31fc3a6f4a3ce6c4afb82ff2342a1ed718809e5
- SHA512 0f7321c2ae13145bb694368dae1b74e6fe20e6b09712da2178bc46e6aa65223ab84c38abbf0ed074c85b42dba1a238a5f3f8d1ae060a0af6df748c5befe11b61
- SSDEEP 48:Zx8LQmDdbaoFRpm4+0A2AEeQmDdbaoFCpm4+0A2AW:wpm4+5nHym4+5nW
- TLSH T18891086384219412477680DA5B369F1EFB65CF0241E65E34B2FF6BCC978BC8156ABB0C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/app/js/windows/welcome/template.js
- Size 1KB
- SHA256 42c546e9da748ef76fdab56b96fd511eb607617a9ba37b3dc420148b769d8acb
- MD5 17f54fca6723b983875d940d931e0afb
- SHA1 01774cd5cea36bd74c80a708d6f77567e8091024
- SHA512 401df9a54cd14c19227d91bd08b4775a7b437644b4ca0d1d636d3e07b04591f9c5516e80040ae6a79ba400457d15e3d80aa148a63de870a64664fc5a02f7a038
- TLSH T12D31FF0AC55D81361533C3FAE28B5A5C7860AE40C9BDBC3439AF075967ABC00B933B70
- MD5 SHA1 SHA512 TLSH
Score3/10
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Component Object Model Hijacking
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Component Object Model Hijacking
1Discovery
Browser Information Discovery
1Network Share Discovery
1Peripheral Device Discovery
2Query Registry
5System Information Discovery
5System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
1Internet Connection Discovery
1System Time Discovery
1