91546af706a00087c6622f0b1683a5436bc1b0e542b3a06cb11309ca18010864

Sharing

Copy URL Twitter E-mail

General

Target
GGLCALNJBIGHDAKLAGFDKCLCHFILDLAL_7_0_0_0.crx
Size 3.0MB
Sample261022-wyhr8aba39
SHA256 91546af706a00087c6622f0b1683a5436bc1b0e542b3a06cb11309ca18010864
MD5 0267637a1a9379876f5b8a8a6bccc032
SHA1 8a586c482ed15ab03cc3379340f273f561fa484a
SHA512 bf82d83d7bdf75322b6072d324b4a09516ed09bad32172357f03eb0e11d0900c1b719ec0d7234a76cf7cf47a2fc768fd19728436ddfeb3d64df3db58a8e26d8b
SSDEEP 98304:MOecqe1nBVKpdGdCcYuhwjQtNzac6pkBI0LXPcK8:dqe1n3KpmasVtW4fcK8
TLSH
T1D2E533B6BDCEFDD4C097487ABA8AF483B847C19E19D1B84F6B94452DB4B09C807328D5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  eventPage.js
- Size 49KB
- SHA256 c83435176c76771280ec45e1ee7585078bdc5db090f89f2828f7d162e97fd581
- MD5 c42abb97b48a735421c2e61c798498ec
- SHA1 f9ff1e4d7a1acef738c5372e710825ffa3d4c16e
- SHA512 b71e4118d2ec551ecd174f97a865ab493017fc78705916a261334bbd64afaea1f16e3e2e1b19ce91268944b6a4a3500129cbf8ee083a24fcdb82b253e589b6ef
- SSDEEP 384:bxnR6gZDCf8ZmBM3gcDbiMVQTgchMHs8sM4VWOc2FooCa3VqkSWdPpsRJUXTAL:bxR6gYf8UBtschMHs8svpSWHsRJl
- TLSH
  T12433B608782D153E56B231E8ED3F7209F938C83521A4E5567CAEC0A4BF7815B8399BDD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  i18n.js
- Size 86KB
- SHA256 eb5ab86e8cd039dab3d506643521a6ab673a9edb4d39e2d55d16ed11195de6f4
- MD5 aa090e224e0a8cbf61700d9ce4ebb7ea
- SHA1 ed6e7a62dbfe5030600053b6c6f606cbc199dd06
- SHA512 6766e965798957db882eb3c36255dbe812d999b264fd3322c56b3d8148a70ad9c8537b5cdba341c56aa5c12d2113035c106ab7ad1ac8d975848f0ec2951f6071
- SSDEEP 1536:pp6AUkRwldidFzSzdKlR6vf8pq0mOpQLK7w7aSPoHa4ZOnO3ufzv:4KlRAfSpQ17v
- TLSH
  T107936227CB840E5B49B2C346A6528ED3F950476F7305C81BF9BE640E1FB971442EABE1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  img/topbar/icon_theme_1.svg
- Size 310B
- SHA256 088a88c089b61784aa8e735aa48762303caaaa5ee4a2c8f8538e44728b891d13
- MD5 99a43861c847ed92f660b66f7c786abd
- SHA1 51a50e999ceb751be707963a27f0129530ec9411
- SHA512 19933e606f89fe4de2484d1c644282eac1b4fa1ad92155e2907f58f9bfe8809800caa9727cbd78956e31ccdba434eb1ba65ae29a1f3eadf603c667164c107b10
- TLSH
  T1CEE07DE4C3340C59897845504F3CF4A18CB577F1608C427CB14830223F118EA7D537A9
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  img/topbar/icon_theme_2.svg
- Size 1KB
- SHA256 f76bcb37c0385d78de1a669f2a18ccb10fe9c9f091b079d2ec574199ea374a24
- MD5 f130a7be3493711eebe0f50314c9e640
- SHA1 cd39f4eb62f4aaf8bbcb2f4ffc67be341c0e7898
- SHA512 d1f5bc67723fd2be045eda1a88e351d421707cf84668c6f0bb40282b891105e32c1a03433be86a5995b7356df2f9d953b9d3949a704cdd40328388a66483c622
- TLSH
  T1F9318D2C821CD77D532AD232C627E236C88EA608E91FC1A4146A873CD1B7967F95F138
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral7 behavioral8
- Target
  img/topbar/icon_theme_3.svg
- Size 1KB
- SHA256 bd15d9f780a4277c4ee617a359aa528c54140518c42ad30624da85edbfb4585c
- MD5 e25b365b34856be97f8d0847b3e6fe84
- SHA1 049d22a43be467355b24d3ca68eebca184d72ba6
- SHA512 275bd9015c445fa8bd3f66ebe96eaf4b512986cd9e0e1dc3f5f10b506ed1f7c66a1dc72f27a53eece7f41e83a05985e1bbf9d041c8ec1758b82925b30bf3583f
- TLSH
  T17E31DC69C39DC779161AD232D736E236C98FE618E81B81A0106ACB2CD0B3D6BF55F135
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral10 behavioral9
- Target
  img/topbar/icon_theme_4.svg
- Size 389B
- SHA256 fcd2998d662b59e5126bc61b7c68c0d038e091b84a4b6d1559e413f441688362
- MD5 92ac940aa5b9ade269ecc7333d53e293
- SHA1 c5a763bd3e50ab5d94b6240355b41b445424058b
- SHA512 bfde96aa6ff8ed0036783de522a91a44dc21bc277237d2397eaa011942e9fa89e9b973d218640eb4b5a6f686ceac8be49c2d2472f6b477bd9769d8a439da3ab7
- TLSH
  T17CE068F2C56808048A64036099BD7623FD67B5FA3B59122BE14B6200A5A9CB924795A8
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral11 behavioral12
- Target
  img/topbar/icon_theme_5.svg
- Size 451B
- SHA256 414925d4b99d16a486ccc221b8ebbe1f213195f3df9f58ffe969b3e9fe86a0da
- MD5 e0f9be6d870726a0cfcdec7827b04933
- SHA1 bcf13eead54da2147b7df4b8ec526ac84e60e06a
- SHA512 b84c703426b38ca28d9e026c6cb2446622dfc2f2e048e992ed29dfd80ec738de7bc2fb49fb5b397ee6dd79c0744ee36b7068c4cee6e1688aad9d477743d3ed47
- TLSH
  T111F0DC3CC3202E59CE3884280C3EA5B300EA32D3015C8307714C1632BE824BE3C23508
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral13 behavioral14
- Target
  img/topbar/icon_theme_6.svg
- Size 294B
- SHA256 9b9024851eccc646526c7377d3843d62d6adf8f626018dc57f3d2522bd65b374
- MD5 3313307af3b60e65a8a9a356fac36bb4
- SHA1 8a877f32d1c2c903e6d00f5ee434a32b9b777252
- SHA512 9340c1066521a40cb2bb7638a8e2d4a7ecc6ef557af1fcdfb7113230d55f1de40c44492cdfb82eef471677ae2bc8d8d44b3f27186f93a9172b5da2a1758c3cfa
- TLSH
  T19AE0EBB460081EA887114430973CF123696E706036CE42A9FA582321A008895EC1BE5C
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  img/topbar/icon_theme_7.svg
- Size 388B
- SHA256 81e4d95fdaa7073075264057d1d9cf5b31e0d2695d7a5bedb7bbbe268be813d8
- MD5 68a0cb92a53a6a7338394364d54d4a8c
- SHA1 0230936f9b3840df9632539f9bf0d70736411ccf
- SHA512 3db75fc88e826093f376ac4514ed134dcd15a3b42728bdbc57e2450cd76eb3ea27e2835743531f433f8ce5364706b984a06d8fbbb31fc02ff1a65285c5914422
- TLSH
  T132E061334A188D446150C394AD3E6250342FF0C9E3DFC189F09213333E0A493D83318C
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral17 behavioral18
- Target
  img/topbar/icon_theme_8.svg
- Size 292B
- SHA256 0527bf2165ae1643b6f8c9e6e5f94bb3309204dbc63effb772645a7d52121ead
- MD5 78e1dbba76a849034f44a936e996fab9
- SHA1 9a9de42c600033f5d4c7f991e095e52dc66a7f90
- SHA512 f0e681f09ddeaa779ac8436bb6f46abd9903c759450e8aa746c6acabbc6d97b9836189f212780875d5c39b7284ea09df6d570f68db34f271bf12afee8597de91
- TLSH
  T144E02BB9C35C3E988928C2201E3CF6A344A97AF561DC434EF60971326A958D9BC32598
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral19 behavioral20
- Target
  img/topbar/icon_theme_close.svg
- Size 268B
- SHA256 9badcf3d1def6b58f888b94a61f55e8d350accd687ccdec3f06140a242f5f449
- MD5 66c8ce50bd8c0e7b5f8a9da420fa83b3
- SHA1 9a2c00406ae454e1aac2030333f4a77fc3edf87c
- SHA512 b4cd82e5792adc91b0992174ac9baaa240b3100dc3d19fe5a7810b7a142ceeaf50f926fd936a2dcd77818bb04577c4c86ffa8e3a8e59020314de27f75c53f8a7
- TLSH
  T11BD02EB3D8C80F10C6248B30993CF222A46FF0B912D8404AE9082372F60C4BAA99FD48
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral21 behavioral22
- Target
  img/topbar/icon_theme_dark.svg
- Size 336B
- SHA256 2a1f1329d98343a5d69c5e2a56ce0eefc6e395db222eb6a019e80460b2314a34
- MD5 60c90a4947227e136341050f66e89482
- SHA1 1cac998b908b749759233efa015f63a45d9e73f1
- SHA512 fe328d45d2ef1065e7a1d466c2cc4645b03a74746f7068d2f8c868f95d510f50322fad6c036db3dd3223302af51af276a0b95d1fd79110b222b214b7ca62b129
- TLSH
  T191E026ED912ACA04991A8B28CC3C341399A630C3A5CC03E5F28CA30329090EDFC12A08
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral23 behavioral24
- Target
  img/topbar/icon_windowaccount_1.svg
- Size 263B
- SHA256 ebd79717176cf7ccdf0c1efad79535a989f5686e5810c9ace1edc0229da63e2b
- MD5 604ceb75931456c314001f9ee5df6275
- SHA1 42ab5a7a450257c6929e0b19c0617ef065de3d2c
- SHA512 9d6f4e827de324e3b38c8e66081d9aa9ef46d5371cbd3e1c8f513973794809fdf2240d2b97b16fb090ada98549d4e188de2ad3151eed8c37fec668cf85114c8d
- TLSH
  T1F6D02B28C3085E09C924C1201D2CF8E6885575A562DC035EF4441021BE098E97C66659
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral25 behavioral26
- Target
  img/topbar/icon_windowaccount_2.svg
- Size 505B
- SHA256 ff2c0bbe2066b4f9968d86dcf8af7823e9a493b7dfe2da4db4c0fbebef01aed6
- MD5 e1317099794b9dcb45c9697b219f3062
- SHA1 b7a22f3cb5c3350ad678a0c182f64220a769372d
- SHA512 1c1368f3f8020fc17292bb3a4ad37eb604d9350de9de2c57bae2cc794d075f6459dbd6685da71689229a5471e02ff5238f410a08fe78d79a7e600678c119a8a6
- TLSH
  T156F0D4E14145F9C1BD0CB8645D7DB469AC3E78F1B7D84279E69241307C5ACC89416B52
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral27 behavioral28
- Target
  js/i18n/i18n.js
- Size 748B
- SHA256 c4ed4460eff52bb880251adda6ee52b9d0335f8d0bf76b09864513d124eaf45b
- MD5 45ce0480edbf6ed50eebeba1c3ee484f
- SHA1 4db524f1cf7e2cc3f86a20b72c013fc6fc680bd5
- SHA512 26b193ac01a1ed5eb89776f02410521c524bdd32422877e42a62be5eac55756778d7f115b63406e78c0accbfa88b04018243727365246fc893f4e3d76ce18bb9
- TLSH
  T1680128993E5A610466BAB3FCAD9A5505F6250057026630CA7F9C50902F3182993B9FF9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  js/introjs/intro.min.js
- Size 63KB
- SHA256 e9c39b3339c81552f55149c6e97d28079795b4fce4bce03e3f31a7a3ac2e2888
- MD5 2ed3214c1a5372123c0ea4b903cf3ad7
- SHA1 fc89d84d08f5568ceb40d270ba7f41c2f6b28531
- SHA512 6718cc48599afabb07b032f2598560891356023fe398f6a5b5df06292ccece02173de4747c23d4ba1664879fd2fa532e46fdccbf550b418e8e6806f7586be400
- SSDEEP 768:b4CvMCx5rt+oBxj8CveTItTTiIIcNh6KEw1iev5Spd1/uqFFeC4MO8ojWtg:bl5t9xtf2cN4KV1ieCFt4MO8ojW2
- TLSH
  T10853C88DB787B0354797B13A402F210BF2362A5455C78850E63AD9D2BD7DD4AA233FB8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32