21ebc900f027619bec8abadbe7b6524f75511a1a8ba258e24041bc5d6716b3d4

General

Target
desktop-gifs-chromium.crx
Size 22KB
Sample261023-1arsfadf76
SHA256 21ebc900f027619bec8abadbe7b6524f75511a1a8ba258e24041bc5d6716b3d4
MD5 81e9e09b1741a2e28ea6fff6da325c52
SHA1 26307ece849fd7ca0e052e862ff3ea11f813bc48
SHA512 f8caeaea15ac7a96b8a95c941245b4ffb254b56c0bd18f5af09cc7136c26b9714cffa14c02576a4edcc2d76d7cdc99efc812c330eab0b95eda2af3a2e83e6025
SSDEEP 384:cHavCBVa6ZsO3riBo1ZG8ruw4jYpB93WANsME7NwXr:cYusO3ri98rBWYB3Wz74r
TLSH
T19AA2D0E385DCC1AFF36BD6314AD12157930173BC89C2E3B6061A611A8DBD7286F82D35
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  icons/app-icon.svg
- Size 867B
- SHA256 5c69bd838a2b6afff58135b1814b27826de282f3ce4303a00b5979f704d6f870
- MD5 f2e8645e91bdc85f2c901e4a8eddfd60
- SHA1 e0eb22c17252c42033c52953185caf2ba7706d41
- SHA512 e15e4aa1cec60a6832344a1b93d543a914d3b432433f53977473042c9ae2fed0f9668bc6c345c2915cf1dc38e8e7bf89b941e38d1832c5a6050c96e54c8e15c2
- TLSH
  T13511AFE5062843DDB2158F51FBB7A044F11F64E5C68A93E86319213AC6420DE59DEEFC
- MD5 SHA1 SHA512 TLSH
Score

8^/10

defense_evasion discovery persistence
- Downloads MZ/PE file
- Drops file in Drivers directory
- Executes dropped EXE
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops file in System32 directory
behavioral1
- Target
  icons/icon.svg
- Size 416B
- SHA256 30a2da931923d8a05fb617fd0f08b3407f431f3a872446a5f19e8f0d9fb66541
- MD5 3a7a322854c0496a4c759630891bd244
- SHA1 325882ecd8b0d1efa6a997dd28a96289cf4498eb
- SHA512 325d1c09905b617f1b3a250bc2c7cb5ac5bf12516bbf781fd1afa6b1a0efcf50bc454d81538ac8be86393b32573c80b0f9b759b6f2d1c9acd191014b7c0f9478
- TLSH
  T15AE0E5A446486A3CA2268E29FA68B6E4121F21414B4E1258D5252335E6994DE987FCEC
- MD5 SHA1 SHA512 TLSH
Score

6^/10

discovery persistence
- Drops Chrome extension
behavioral2
- Target
  src/content.js
- Size 20KB
- SHA256 856cdd03b6ccd6a86060e6943706b7757f813e28720ac44f6882abbbc33a4b33
- MD5 c2f8f1c869f622bafe4c3381ebf94812
- SHA1 d8fe0c316f297d9d287871881db91df201783490
- SHA512 0d8e5d1bbcad7d72f6b07340ab45c3da5eb84ab66d97efd435071cb727bb39c9c77d7a5394b0070c586451037bd488009452219a341396558b921510152f53e2
- SSDEEP 384:NNBCktnBFT95qYZ73jicdMWwkd5Usu4PWAQKnDKs8Q3bC:NNPnr9IYZG4VOAQKnDKbQG
- TLSH
  T1CB92E83A2DB321374573E0BE6B9BE669F52250177101CA207E9C84403F86A7DE6FDAD4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3
- Target
  src/main.js
- Size 6KB
- SHA256 deac6a79d1616632c367d86ee4f403409941c6f29efdd0e0f64d510575e571ec
- MD5 855eaf859e8a78a6c35b7af242817053
- SHA1 c464cb142d07cef560fe73aced305005488df475
- SHA512 90055a6168c74e8ea8f243bca7b65e2c5c5b4fce6acea81c892eac509d16aabb220b57ec42e91145453afaa15aa209d7ed8c8c81f83081bfdfdfc61e3bb62b50
- SSDEEP 192:Ac9ngYJJAUqjbvclwBOLbHZa47v2ck/GNjQt:AcvCUyjceB+Za0g//
- TLSH
  T120E1C7D74DA72231C6D110F92B5BBBAB373294633285C9F435AD82483FC06798B627D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral4
- Target
  src/sw.js
- Size 8KB
- SHA256 fed0df6064d8c361f1a6c8c2d9032f0be0de8a53dec7cde456a2918f5a37330b
- MD5 79bc540b882f6262c2854dddf3930f71
- SHA1 2a32e03de4132f6bad1e37eba7d41369ec39025b
- SHA512 a5995264c27e7ae4c1bdef16cfe6f532f9bffc7e95f4954c2d9918565b53ba15aca55d9445a0957ad061c73478c55ea8046f17a5ceeab7ab857676203a88c0bb
- SSDEEP 192:z7aV/qkM7KTyFRHQEqahg9oB1ByBIBMwA/kfCZYCQhAt:yBqKTyFuIh5L2Ij/2KhM
- TLSH
  T11102A6E725FF3235027360E2664BE06BF72AD01A329DDAD0B68D42053F867658776EC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5