7e8faa244852e76c08734ae6251759b735a94216d5eb141f2b1269e7f4d68b68

Sharing

Copy URL Twitter E-mail

General

Target
Focus Lock_0.1.0_x64-setup.exe
Size 3.3MB
Sample260928-tlcdkaxhmf
SHA256 7e8faa244852e76c08734ae6251759b735a94216d5eb141f2b1269e7f4d68b68
MD5 41663ecb6f6dd1c3ec1a5f11c62e674c
SHA1 79bd5d33e75e779ccba109de134124085675104e
SHA512 68b932241a07f0dcaed16f1b01f34f50fc4f4836ae11b67d88269d68e70651adbdcc19e868b06b152156eb791e5fef97856450daa9ee93e983be74152c3585d2
SSDEEP 98304:tQYacLPX9taT1MWs2RW3M9RYHMLm2E5LqE7At36:tQYacX9aC2OM9RYHGm2EoCAt36
TLSH
T193F53369849D9CFBFC6040F448AB6BF4BCDB980BC278CE424B5C8B6DED6A421C5511F9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Focus Lock_0.1.0_x64-setup.exe
- Size 3.3MB
- SHA256 7e8faa244852e76c08734ae6251759b735a94216d5eb141f2b1269e7f4d68b68
- MD5 41663ecb6f6dd1c3ec1a5f11c62e674c
- SHA1 79bd5d33e75e779ccba109de134124085675104e
- SHA512 68b932241a07f0dcaed16f1b01f34f50fc4f4836ae11b67d88269d68e70651adbdcc19e868b06b152156eb791e5fef97856450daa9ee93e983be74152c3585d2
- SSDEEP 98304:tQYacLPX9taT1MWs2RW3M9RYHMLm2E5LqE7At36:tQYacX9aC2OM9RYHGm2EoCAt36
- TLSH
  T193F53369849D9CFBFC6040F448AB6BF4BCDB980BC278CE424B5C8B6DED6A421C5511F9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/NSISdl.dll
- Size 15KB
- SHA256 ddf40229dd9d6b268902d8dea88c8a04aacf1af218dd29f6dcd35babc54ac08d
- MD5 8eabbe36e8b52e69322780d0f541fd19
- SHA1 e5fa3eca8d2035e4fa006b7123c348348e4e6de4
- SHA512 4189fabff409be4bc7a8e81be58fb18e32398e4ef4c01a70cf823d79e76f47c4681734808fd61db8728c73d2bcad890b09aa09d5a0f0b0c3ad581be1beaf9ce7
- SSDEEP 384:jrSQMCOUILnCaSPy/yhJzmGSMRWyOUKie:jrSQMCOp0yamMRWysie
- TLSH
  T17B623C16B62084F5DBB2167034D73B3E6BB28F6A1A2848C34BF35C4E9E52307B675D85
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/StartMenu.dll
- Size 7KB
- SHA256 fe330320459637d8dd2b5d84d07925c38ec264152ffd3b1760a4d44d76536caa
- MD5 b9b71990b37e04a56cadbcbfa694f30f
- SHA1 3b7627deb793446d6b12b7b94266cc592982a5c2
- SHA512 b4aa947aba471ce0ba37ab859391f6a157887c882c920a3081d482f63a83317ae75b428ebae226f835798517abb676114ee42bf13bd4c4291cebbb5e9658f2e5
- SSDEEP 96:VIt3J2Gl0eVe0+Cfo0UkXt6+o69UiGdPh5/utta/x3lkCTcaqHCI:ShE+A0+sF6piUFkA1lncviI
- TLSH
  T1FFF1C776F3D20673F9AB427428632F231B2AF521576581A7890316CE7A61DE3FD34B11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
- MD5 9b38a1b07a0ebc5c7e59e63346ecc2db
- SHA1 97332a2ffcf12a3e3f27e7c05213b5d7faa13735
- SHA512 26e77f8e10f6d8693c92bd036b53a3f6e0c523090ef8dfe479815f556ecd2b57fc90ce9f7cceebe70460d464decb27ad1fe240819fd56997764e96506b6a439c
- SSDEEP 192:kjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ40QPi:U/Qlt7wiij/lMRv/9V4b4r
- TLSH
  T1E8427C1297B089F2F151093419667F2A6FBEAC5D17F405A3CFE304C63D212CB9839243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 b1350f487692057c8ffde75dcc55287a52a3272240d4d4912f24464b27551fc0
- MD5 8f0e7415f33843431df308bb8e06af81
- SHA1 1314272e6ad3be1985d4a1607b890a34b0bde8b5
- SHA512 5450b2070c40b257c28ba9a472d762f91b78928d1e8d4d88e0576992065a61fb9a6513006e6b5947c415c9e02ae80a90a85b58da7e016a424331c8cd596ed684
- SSDEEP 96:obEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YHNqkzfFc:obEvCu5e81785qHFcU0PuAw0uytIFc
- TLSH
  T19D12F892E2A454B3C5D6523B36AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  $PLUGINSDIR/nsis_tauri_utils.dll
- Size 33KB
- SHA256 5ba143b5db4a87d32d6e7802e033330aae56cbceabe0d1e3ba41948385ad4709
- MD5 948eaa3cb78c2dcdd9eb1ab120ae0f65
- SHA1 75197fee3c6a814fe035788d1c34ead39349b860
- SHA512 f7c511e8c73ef6ee9b72c88cd73b2d454a6ffc12144118df2276ea3f5c34175df0d9d15a435035575ca2b171789fe348d7a9028b702b47dda749ee17e03ae7c1
- SSDEEP 768:K/wOD4gzTVpAVk2h5Rsekk55aCukBFKpnp0jdhK7W+qVG:8wODZzTrAV5Oevq4DtXHVG
- TLSH
  T188F24A48FDC57EBAE2CF05710809467E4A6FC8081700C96BE3722EA3D5A67329ED525F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  focuslock-desktop.exe
- Size 8.5MB
- SHA256 1d64c33c8b50c6349f9e426bec612685934acb1477a69d1d19a0bb5b7b1f5aab
- MD5 20f6516e49705aadbedf5f8de3369da5
- SHA1 a72336641f491b69de95649d00c25412c2dc9efd
- SHA512 0ab2336a3d2e146173c62728035f39fbba8c50ad604675a09064e3d1634e03b591e3e55f22549192f27b22f123e363fce74efdeec74977f5122f5f45b2ea76d5
- SSDEEP 49152:zgkKDiBEwJdBH95FV+Ap/RLKZ758lt3CVzNAa1bBPMjuunoE2pi5ETmuozISS4J0:SQ+SOIc6uhYjDFqZDKp/oy
- TLSH
  T12396E6256B5F99ACD04BC474824B4A72493030DB1B35B9FF449996383F6EBF42F28369
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery spyware stealer trojan
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral13 behavioral14
- Target
  resources/extension/background.js
- Size 4KB
- SHA256 be375476b86c317c15b34c1a9247a29cc90511011efd1535f7ad508c1029d978
- MD5 dbcb7fe646f86f194ac709ec0eadc1e7
- SHA1 27019f39d1531531eba4460ea8701e5a1e245585
- SHA512 765d1de907857d3180b4a42ca0681a6f389a81b1ed5ad8110b7a7b77a5bfe6384ecf43955531ce55c8b43edb7d2e32397de9232cf987204343897086de410205
- SSDEEP 96:9fMSf8kj+hRyP6CJgry2VVMyfwxB+x6T8dxTWEyyhs688dpbblV4k6J5pM:9USUkj+hAP6ege8VrhTWK98U4LS
- TLSH
  T12491549E1EFB593E1CFB2098BB3F905A3F1AC10A355DC801BDAD56040F4D0968528BD6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  resources/extension/blocked.html
- Size 776B
- SHA256 b620b82692ec8936447ebbd8d2233aef84a7e94b860b18fd517570f365ae2c87
- MD5 7b35494ef00ec451ba1a324decc813ba
- SHA1 21449c5d553bcc5b609f1efc4bce319c7d1aa8ee
- SHA512 5e19c13dd4e81687d53f11230cd59d4a694514421395d10ed80c38f5c18df6631125c9f1eada6a15f43039447f270e4a50af38d3fe47569d067c6d6ec02839e4
- TLSH
  T1E8019754B8F6C86762B2A4C219D16384ADC0F00FD9524644B6AC826C8F8AF5BE86B129
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  resources/extension/blocked.js
- Size 1KB
- SHA256 c8378d9b2ca48e0d2a22e61d10a19246605ec2195b64f99e9cf833bf5314c7e5
- MD5 5bc5bbeea6be86d8f75e8a4b89f01bc7
- SHA1 891dee75f0dfe621a44f352ee30dc2b4d166b2e3
- SHA512 64bc3e57304923d97975045509b1bdfb99427034089f0cbcf6aa0e7dac74249aad66f1f74e8e9eb307d31a73512c75562482aa54c1ef08c6c46e57059699bedb
- TLSH
  T1341102F862BDC27412FB43E7BB9C13D0E27599A570C1B059244D874C85EDE072280E58
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  resources/extension/content.js
- Size 2KB
- SHA256 51315f5a0eb78c7f09149ae136040b882c37a1f1bb50b0281427a91b5fbe1cfc
- MD5 41353ff25821319bf633e7922aae399e
- SHA1 41006c9ceb906671696d23dc4597aa40d968b10c
- SHA512 be24887d9972e1bfcfbbc3984d17eb0118c57dfbc07e92a77dc17038ada91e58bf3edde7c8da84e1348eeab5a75b5be8a40668686307bae88558f8192465a82c
- TLSH
  T1F641C865F1BA0D2938EB5084372B97863B63422BD485D1507FEC94F90FCDE2094B5FA8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  resources/extension/dashboard.html
- Size 7KB
- SHA256 1e71e2287dc03cf812c3713c917dbc2079e73acbf6a8249dfbf7584a00d2934c
- MD5 3de70c2dc3b444ebb4b55e7e930c1154
- SHA1 e5be0d110653623824c9313ddcba871291ac6e35
- SHA512 215f8ffbca14bb1d0b27182ca1becf349bbc7bc602e6a74b2a1771c4e5670fb4ae1e1c5bcf1108521bf56f072acce644f204a077f25eb3668e0fcab1fe2f6a3b
- SSDEEP 192:+wlH9Zi1VL4M+ZF6BjPxuE0DUnYEtvguRjTmqSn:TVzi7LfOF6BjoEcUnYivgwXg
- TLSH
  T1C5F1ADB574F42AB3064340DBA54A570A7DE4F653E0962444BAED4EF20FE7C92D60B43B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  resources/extension/dashboard.js
- Size 90KB
- SHA256 8d678a7fb5d24b8c754115191eb033cf147abf75e3741d9aca34cecdf7de1e22
- MD5 c25c4cf7824b2ec088ddc30d77af745b
- SHA1 2f697f31fdab7f1d877b9cf16e74b8f9d42f17bc
- SHA512 e33a8247032f5532f7d26b69c39eb8d2de4a8e9477c94263b307134c752bc1d8f18d1f11879498a9284f7de618d6b107917314a29c1724d34c28912df1f9d2a7
- SSDEEP 1536:ahU1g3htgQXyeMW49OJK5NLFIVMsflQ3e35L:axt0A49OJULTaQO9
- TLSH
  T14493C9D931F735360D6390A9E92B61423F3AD4073106C481F7DD84841FEE5A5E2BBAEA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  resources/extension/lib/focus-auth-config.js
- Size 404B
- SHA256 9a8f64ded8d560c31aa0059c702ab0945d1fc30a1e83ba395906f892e1dca9b4
- MD5 d418b78f8ad9cee01a91f87bf4eec511
- SHA1 63bd6f9497b2e51040ce95cc0c5abc0fe2c861e5
- SHA512 ca64ff1165bea977179ae37d85b74c5895ead10619b4df9072b7e06e753fffe9e5535c4a31ed5365848d4362a2696e574970e6cc8ff85b5f450898d672fd4ebf
- TLSH
  T117E0F1A6231809730924D274D94BD004E7A704334CAEB830B7CC8CE42E6E7AF117B8CC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  resources/extension/lib/focus-auth.js
- Size 24KB
- SHA256 c6c888bf40e8690c25aa66c66542393df4dee40a02c2d3990a491a22d7e1bf7c
- MD5 a03e34a3b9a1583f531aa643a306dac2
- SHA1 4df93436001fa543141408eec5e55fa7e3f6300b
- SHA512 eb1ab5a9400ed4aa6fc3e28bfa4c0db38ebcbebb6f170b550995a024291c0686995af8da553a49019dd7c9db305180c81c5464b26b95edad493b625303b5282e
- SSDEEP 384:QI8FH1l5Kqep6eydeIj41ue/5WeP1UANtsOaEGDyakA36hze4oE5l1eB1E4WeVvs:H8FHJ0mUWe6flmdVe4r6CeVnP8f
- TLSH
  T1B4B2924A32B3253281B371ACDBAF5005B638910B388CDC557AADC6542F1D46D9AF7BEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  resources/extension/lib/focus-core.js
- Size 17KB
- SHA256 18125e33fcf3ce37f382726deb25d8363451f1adfbfc56c200f457d80c470d8b
- MD5 8d904122c376677a9eef44ef21290938
- SHA1 cca9be82ff2db25d41a49113a127494f087d833f
- SHA512 f390d547f1fd98126fe7669777b60aec750e0cbfdf18ad79d8b72b69e05eecd36476e3e2ebeddee092c0886a6ab3177606af4d4e1762fbf64cede1f4663ba659
- SSDEEP 384:QDmlSncJ1Y70POlibu55ubCY12We8r03QWPt9Gm47P2dER:QDmMq1Y70POlou55utkQsK
- TLSH
  T10082724D25F389635A227138196B09467138C5036E4CBC99BB9CC2682F5F02FA377BED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Browser Information Discovery

T1217

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Checks installed software on the system

Reads user/profile data of web browsers

Checks whether UAC is enabled

Network Share Discovery

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32