0b0d72ef4a79b944d91dcd6b64b1990cb0eea9d0b5ea11129dafeb65f713d0ae

Sharing

Copy URL Twitter E-mail

General

Target
0b0d72ef4a79b944d91dcd6b64b1990cb0eea9d0b5ea11129dafeb65f713d0ae
Size 12.3MB
Sample260928-lnjxesab27
SHA256 0b0d72ef4a79b944d91dcd6b64b1990cb0eea9d0b5ea11129dafeb65f713d0ae
MD5 001b0512c91447fb7275af2ab10bbf40
SHA1 45e8526d9ea38611cb4d52e0c05976d1d6862522
SHA512 dcba4eb662b1a938e1eaea9f4a52010d3ae49a3c4ad0777901d2e3ee833017e68572e1938ac12d2cf74a69227f7f97c0f1b2a5de8b7eadc1a61a01522b23b569
SSDEEP 393216:Pn5EczCcCxJ1Zm6qfIL+TQTCj91LMXjhCtqbg/pP:P5EczS3iIS1MXFwhpP
TLSH
T185D633B592B850F3E1FBE97862E62A44EF394146C1231D6B2CC070F458CE5976BAB347
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  afu_toolbar/Resources/to_level/to_index.pdf
- Size 2KB
- SHA256 1fa2bc79be98fd03bcda5081cc200691446236073c30961d7d8b586f58e8379e
- MD5 4198825d509c650cf2a0c666cbc293cb
- SHA1 8c264a3c067939e75a2a557e603f4695b1f69de2
- SHA512 f11be7ec3e81ec25aae3da44ab72c000be42a0e1f8da9e62e6da153c27d9ea47516f839deb20f3f1547d6f255a716b8a260819384ac6f68412760c558d30fe0a
- TLSH
  T1F651E977DA740C4DF821C666A42F7AAE96AD700B47D87F81523C07089141F98F9B71F2
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral1 behavioral2
- Target
  afu_toolbar/Resources/to_level/to_index.svg
- Size 2KB
- SHA256 7340264b71b61c097798bb27c3a09255bc5aa93618234d9f76f317bd2aca3e5c
- MD5 aecdcb141cf656e7a8aa6e7dd92caa78
- SHA1 23f1a15b53f45f142f37a729dd249aed3eb0e5f5
- SHA512 ce893901f8b9e3f5c533e1b415d7fec09d0db72c0a9d5404db75d4c101dc7e5639506038a6cace8175e75f137c7523b4f94443ac17117b71d1186ccd92c5384e
- TLSH
  T18751CE15D3E404BB91AE4250EEB5FD06433338A736502D59B91C43B19F8EA8793793D5
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral3 behavioral4
- Target
  afu_toolbar/authorize_dialog.html
- Size 4KB
- SHA256 2ba3dee40a4281b44202526aa349c499cdc436fae6d60d1a0c6e52978ee30d1e
- MD5 83fa8c1420bb797b017604c9cfc4a094
- SHA1 eeed729aa63ba79069b4e5ee2316739e9eac8808
- SHA512 a93137a954fa8ff9e07cfe60cad5132b3e3665ba8eee8e5b8d7f7156e1aeaedd769c1e4649482752c58ea172414d76eb5f80d21bd53e1824afb9a692ebaf00d4
- SSDEEP 96:WyiyYybkkSUWta1Rb/9kmk9J4oN6P46Zj5:Wyvk9Ulh9kmk9JTNzi
- TLSH
  T1B4A1E02859902405E037B1BA9F67970BF572420793058D29BEEC22824FB3C9E95F3E9C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  afu_toolbar/bjmk.html
- Size 6KB
- SHA256 ac3869c88745c5aa19bce88561896e874f67d86b4d6673141d2c4f034a509979
- MD5 a7487269b7d74f02e355f4cffba44974
- SHA1 e58487f12fa4a48bbfafff2a69f7d55f9bec0dc6
- SHA512 807febc8b621eb11f86fe601c9b76f47ba2c8e4f038464427797e9c403d8658e49f530a58021cff30a15ef9d83f29e882940f62e8fa555ac6f88079994132ad6
- SSDEEP 192:Yo8B6sUkdz6T0I7ncx4izcZlgSR2BWPNVU6GsMSqF:77cx4izCgGNVU6vMSqF
- TLSH
  T139D16354E9403A461633B37483E35341FA76D0938505AB643F8DA3D24FF28A95E6BF8B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  afu_toolbar/cut_corner/cut_corner.html
- Size 10KB
- SHA256 b48015e924003be4dddd41f20d70a83e6efce3a6d55a429c4e24b4106072af1c
- MD5 a855dca869dac0a8150b769cf05af83b
- SHA1 d00e793291ab6e082714ff53d73690f8bfea7380
- SHA512 46a89cc264781abee4154651494bd7703b5a47397c285fa5c2d8d83a964ab62423e030ddf1d696105ee88da6d4e8dcf122748e041bc73cf923d61fbb05c2aab8
- SSDEEP 192:VRmKKGW1EM76veJaSu1S7OeBsmcxUYyuqPS5OpfzxYdcs7mbm7YMOshyVYm/kNm8:WSd86m2YMOsvrGJESy
- TLSH
  T1B222835065F66850962220BA5FBB8CC1333250077406DC64BEACA9A8DFBD96D4D73FBC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  afu_toolbar/cut_corner/vue.global.prod.js
- Size 122KB
- SHA256 a37281f2fb4ea26ffbb995902b0fb79392a059af1080504484bb7422a4a9fddf
- MD5 fc9ece2ce0fbaaab824277d90a23d39b
- SHA1 0cd686a480f37a3348855e8d10316f22b80bb0ed
- SHA512 a392e7bb75a1fbb968f5a0bb52ed5a28ded5b583b9c8dfa4bb64246ad35557fa79f706a4a14bbdf2ab467e2208e9cf77982ccb6efe2d3187c9fa693a53c69dc5
- SSDEEP 3072:AAKC0bWs4kBWXXJUlR2bLqAR6mf+fTUxkg8ipFJ:AAEis4kBWX5UlRuLLxf+fukg8wFJ
- TLSH
  T1B0C319A93681B47263EA19E610BB0405F37918157C0DD4E4F12CBDDB3D3294A52EBFAE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  afu_toolbar/dist/index.html
- Size 627B
- SHA256 b94b01ffad95656ec262727bf2920a8a213900ea0efe14282219506c8fd984cf
- MD5 12533e75adebef6b12231229f50d1352
- SHA1 9fd09934c64160af48f1d6dbaf65ba5805c4d8f2
- SHA512 d011c3b54f58f39ab7bdb0b8ef58d3bedb278830382ec2119693a3a5c6f425300f491c561a6f74abf279bfe553982003e515051ef50b465a23c30f700b7933c4
- TLSH
  T1F7F002AFEC82E47D56201AC119B0F01DD1EAEA617321CC40DCC849DC38D47CC5E7A606
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  afu_toolbar/dist/static/img/glyphicons-halflings-regular.8988968.svg
- Size 106KB
- SHA256 42f60659d265c1a3c30f9fa42abcbb56bd4a53af4d83d316d6dd7a36903c43e5
- MD5 89889688147bd7575d6327160d64e760
- SHA1 de51a8494180a6db074af2dee2383f0a363c5b08
- SHA512 c2e77eab327af1469097c31bc0daf820c066b0222059d8ff0ecebca974b62b7535e96f1f356643b2b62763a924d040e4ac9b2097e1de2c22226411fde8723743
- SSDEEP 3072:jY+spjSP0yD4zOPqGGUG0kSnouoxvKDHkPooe4Pqo0CjmFIudsqi/CWEI:kRjSP3D4wlG0kSnouoxvKQPooe4Pqo08
- TLSH
  T130B30F1CE9940B709BDDC3A25B75AE54231C418D72303CD04AB9E5E0B99BF694F8E9CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  afu_toolbar/dist/static/js/app.4de54c6552ad85419d7f.js
- Size 42KB
- SHA256 9bd06d6e295b2fd4637899ef7de43e43703e65a2c7a9d13e5aff6deaffc87359
- MD5 06e40af547af7b0f6d225a16628ea617
- SHA1 6f40c1fd52643fb2e293c0f72663797a8d588dd4
- SHA512 967c6286fa9850aeb53adaa56ce13e82993965c6bed787a8556cc204b161735d8e70ff3e4185892f4c5312d31ed362ee1e387d8d27e76a35bbeb62aa4da19e42
- SSDEEP 768:ezsCAaYxsU0Y6aaRwW9bwSM6WQ9H0uAowGGjQFTGXt1wc6yUW8vV+O6wmkmvvRhf:egCAaYxsO6dRwdSM6WQ9H0uAowGGjQFs
- TLSH
  T1C0138649B0D3F9764D5B6021822F6228A0721FED212AD0D2E334D9D59EB0E2D535FF6D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  afu_toolbar/dist/static/js/manifest.14a76fad9b304f57d579.js
- Size 857B
- SHA256 5e87de476fdc7a965a2746ddb907800c743f18b5034b8d103baa36796276b303
- MD5 4c9965a89dd3a5f3a8bc0d0413b348bc
- SHA1 684622a62ec46e9f4fb05c0b6c6c6edc1f84cf3d
- SHA512 451498e68de46ce82ae7f0d1612d9758ff6c160a560db3bf0d35d350913bf6763928bc6bd7e857425cb476c227823861a7ab1b37b5a928f1941ad76dbc84f70a
- TLSH
  T19A11E3C67BB1B8C643D768390A3F1089E13D5EA1976E7885C34190D62D30D5980A9AE6
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  afu_toolbar/dist/static/js/vendor.dff4ea54aa3b98e4922e.js
- Size 1.3MB
- SHA256 79719b6b0fc1300838665dd9f908e34237650e45c281b0bd36b7edfcdce8b692
- MD5 0bcbb4e4a7d650a42bcbad1839d4092c
- SHA1 e4d53a54c45bfafd16a1be0ada3c3f55cd4c014f
- SHA512 e285c2c731a1cbeb30e486e8f7338aabed6c02ab6dad6f56ce4bd452d5ad66d3d4a2e11df560e5f9cbce899b070398ad348999d294c05066fa4d8344296088b0
- SSDEEP 12288:B7BkuYPi2ZOxS6peNhJIC8edKbO/oQl2Jv1SJXl+wy8a010SlHC90hp:Bh72GS6peNhJr3gx1SJ4wZHQ0hp
- TLSH
  T11C553ACD72C1B47243E360B1406F110BB33B295DA80990A8F679D8E66EB994D523BF7D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  afu_toolbar/diy_layer_tool/diy_layer_tool.html
- Size 9KB
- SHA256 ce53c262313958ad1b56257471c7fd3a129be0c14c58a664a6ac893c6f61c833
- MD5 f5279d57e01620ade0023a411023d767
- SHA1 254a1dfc29282abf433a02012afa343d90e5536b
- SHA512 99fadab5f7bcc4750d1fd76ccd1ba5170c8424efe586b91649890df28b4e69e68d19bf54976ac7d8ac6fb64a8d6caceb056e6add3188e01f37a144633bb3c687
- SSDEEP 192:PkMQl8BVWiSLirCeTTRH2HYSHhHyFiHVHJ6aHNHpP3hTWiRDMapm8AD2NIKzdXuk:kiVFX3qAKvzNL
- TLSH
  T1F312756D09F218361A1392641F3A95493323E003C80AD5587BEEA3BC0FCEDADDDA7918
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  afu_toolbar/diy_layer_tool/vue.global.prod.js
- Size 122KB
- SHA256 a37281f2fb4ea26ffbb995902b0fb79392a059af1080504484bb7422a4a9fddf
- MD5 fc9ece2ce0fbaaab824277d90a23d39b
- SHA1 0cd686a480f37a3348855e8d10316f22b80bb0ed
- SHA512 a392e7bb75a1fbb968f5a0bb52ed5a28ded5b583b9c8dfa4bb64246ad35557fa79f706a4a14bbdf2ab467e2208e9cf77982ccb6efe2d3187c9fa693a53c69dc5
- SSDEEP 3072:AAKC0bWs4kBWXXJUlR2bLqAR6mf+fTUxkg8ipFJ:AAEis4kBWX5UlRuLLxf+fukg8wFJ
- TLSH
  T1B0C319A93681B47263EA19E610BB0405F37918157C0DD4E4F12CBDDB3D3294A52EBFAE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  afu_toolbar/gtmk.html
- Size 7KB
- SHA256 90d9b879955d4f8a8b6c7b76d003862bb1de5a167aae31f04f953d93b7cca0c3
- MD5 89f27706cad963eacfa14d37956d5bff
- SHA1 be40759192c1ce93ebd986c6aa4281ff62da0b3c
- SHA512 78b5d731e9ef5b3bf01ba152b17a558c21dee2f165206f6586799aa677ff42555c60fb27ecf1b3584f1b3b7b1b1adf4061c3c5b4e9d46986df6d7114b72b2635
- SSDEEP 192:c/o8B6sUk5H6T0KXpjHR09WcXF8CugnDhe7KEKVU6GpMSKL:csXpjHR09WcXFignQKVU6MMSKL
- TLSH
  T1A3E140A498413E974233B37543D35601F6729093C505BA683F8CA3D21FF6CA94A6BF8B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  afu_toolbar/hfmc/dialog.html
- Size 54KB
- SHA256 d18b47711ca900002ff806f0581b5e6a64f0cca5fe82cd27b537cc22c81265cc
- MD5 dd01b87e8aa3789218a1a06468eb47d6
- SHA1 eabada1fc827f73bbc5072116c07fe0faa9434b4
- SHA512 f7fecc0dc363585e0162ff2eb29f4367dd4c670baf5c103bf09c362c35320a25d272c9af250af4a8e7e15ee801d21dcb18a4a01f07d67f8ed41ed3ff6ed7bf28
- SSDEEP 768:pp9QSlFALaAqdu9rCjEQxATo+KMiXkViZwhtUX6d:ppmSlF7Aqdu9rCjEQyTo+KKA6d
- TLSH
  T1D143626AE95C186766B75377ABB74601FE6E22274200F3147EACA2520FB8D00495FFDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral29 behavioral30
- Target
  afu_toolbar/icon/cursor_move.svg
- Size 4KB
- SHA256 cb8e16435a9d6fc8b380bf18a8180cf8151ff9f25cecd62c9b5a0eb4c9db2920
- MD5 3d3838c2b21242042a712815953e8fa8
- SHA1 8e4968a7f76b0089bafd60fde5e19f88b142bc2c
- SHA512 12dc747be1bd5c92908ddd5807651b2f7170aba851b4ed95f77953511700ccedfb90d23dc79344e6d0018b7757f6645e5f03683bd9895fa15f9d51a7f768d4eb
- SSDEEP 48:cQ+hM2ZiBEd8JG+KdZUcKLb1UcbGboeXGfGgX/G7Ru29yUuSRBcEb9Ez6B0Ni2ii:A+Y21nW4ex7RBvbB0NiyRaqlOT+
- TLSH
  T1619145C05364476EE7280B96E3F8B46CA13A70C76AE534B5719D196F9F3047E06BBAC0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32