General
- Target eklenti.zip
- Size 5KB
- Sample260910-pc1ycabq6x
- SHA256 a25976179caed7708475c53325388bb4779728666be3d94e6e101e3324fe857d
- MD5 318e907ff0aca3e8b9e75b98a6ef41da
- SHA1 ca002ed86890dea11c293aa1dccb4fdea6a39788
- SHA512 1d6c3f85178bf481c668db2085af574652da5a26d771e8bc4a7232b9bc9efef7635eeb3036036b352faa89c1cfe6c3b77939688a6220f44d6b8f7b8f11ea715b
- SSDEEP 96:BcIrs9NGlqE18E56ZeUBrEUmlPEwVDCanRJ2nitkb:WMqFMyrdmPyERJ21
- TLSH T1C2C15C19E1571AC7F93B923A90E2178971AD8812851A572F0CA660E20D47E914B33FDF
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
background.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
background.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
content.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
content.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
popup.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
popup.html
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
popup.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
popup.js
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target background.js
- Size 3KB
- SHA256 874132ec952bd3c81a206a9e47d3ef243f6c265661db8c9a724ebf964d31b9a1
- MD5 477c3776789514715af9c84afd259bf1
- SHA1 f455a65d1274da6b6260a9b6ec499f404563585a
- SHA512 4d416dde6720a333975309ed48d32c482b8fa2b9e5d745b7dc6aae8f83e43bc3ce23bca2880bdb03eb3ff2f470ceb6438d1382bcfbe8ae208c7e131beab9f133
- TLSH T17B71519E686A242963B173795A47C206FE17662746C9E659BF0CC1281F3801AC099FEF
- MD5 SHA1 SHA512 TLSH
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
- Target content.js
- Size 946B
- SHA256 706a5f5e5ab502dda15b28663cfdb115064b80f21d251fd05de933723a920ef5
- MD5 2c2e1bc9ed563103706466ba47814445
- SHA1 635cf181a94f882a8988851386d07f47b6f01531
- SHA512 ffd0ce1022b79af2acfd2720568f3fab8e6dcde2fc25228535c889b8e4171f32ba90b4a0b802919e907e1950cece02858f35691668cec4cd957a1a43fc48670b
- TLSH T145118849204E353455F31FB6AAE3E031FA3A5623720886143E1DC9C43F7948946A3F8E
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target popup.html
- Size 3KB
- SHA256 969488e116dbaff9e49be825ce69dedfe3812a9f7aa0d72ed72d16e0f178a50c
- MD5 4a8c5202f8b2eee20cb76dec03e114ff
- SHA1 e1a01f008599d834ad4550a3bd1aecaa38995b54
- SHA512 f0120c743b6d56b592cb537b9eebdffe55d9a493214a2edf18073b9818ab037e0ae594f7f1a1babb6f3e2e236351c513160dc773483e38b7d0a6512f5494a6b9
- TLSH T1FE81B02AD644114678B792749B6347B7F9D44603C243822836FC72A24F76D18EA67F48
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target popup.js
- Size 1KB
- SHA256 2700181ebedc5a67552dec594a5002b6c2123498776fc20e8f4595a90fab9350
- MD5 a5b0bc4584a4d150f9531db77399fd56
- SHA1 b1d5e456fa1180e7e7d31192147a9ee2b564c861
- SHA512 8f48b59098cb35848373f13fd3a21346f280a370fc5eb6b39ce629f13da83a40752ee91e1231a1fe4f22573ec411caebb5960a2f4aad017fb993833f58274e1d
- TLSH T1B1213769342904684FB766F7EA647979FC1A4C239643991178DE38880FB29C3C459E74
- MD5 SHA1 SHA512 TLSH
Score3/10