83b2add461939766c455f28ed7d8c1a7588ed9914761861ee820fb3e6ecdbcc3

Sharing

Copy URL Twitter E-mail

General

Target
OverlayPluginAddon-0.3.0.zip
Size 15.8MB
Sample261102-lvk33aef99
SHA256 83b2add461939766c455f28ed7d8c1a7588ed9914761861ee820fb3e6ecdbcc3
MD5 fed563c025919e0687b0e8bd39f2cabc
SHA1 b50e13f3eb61ee4e50ebac029bd1767bffe9b0a5
SHA512 3a25db8c36baf196d6f936011508a333f266800e81324d01ff059eb16f311b4a995d9ee6b7d5871a51838fb7cea7801cdbbe5cd9095f33fbb4dda06bb00f789e
SSDEEP 393216:RUA/Z0oXENrqDAmgbY90aOITz+TkLadOiXY9dx/kSEe:LZ0oXKrqDhgUTOeok2dx0H
TLSH
T16AF6336FF5D95EA015EF4F22DA029B491A8D1FAA62CDFD7C83383CA78F05C529217805
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Targets

- Target
  OverlayPluginAddon/ClearScript.Core.dll
- Size 473KB
- SHA256 3a1dd34818e3f106ec600242e6e30a9aa45c960ffd9abf7ca3f747dac6bc5c68
- MD5 03ad5c7a1237539f9845147a2a4b61a3
- SHA1 1be4f67e05d010f10157df7c35e59d9e6432aaf0
- SHA512 62086e206615c164b7c6220bf2400ce74672fa2f4a7b499e7fea3ab5e6e64202cb37131ba6735f0bce597db35f33efff61555e998b8dfb83bd79bdb1bc92279e
- SSDEEP 6144:hNo2NHpjBOINV2DHlSxp7MVoSU67ojMAYWEKrFEnp0ttpqJTy9y/CIM4F7:hHCS2M7M7nNSFtgJ+9k
- TLSH
  T1E3A46B48378CAA27CBDEC6777922290153BAD4132066EB6B54DCEBE96CD37C40D42763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  OverlayPluginAddon/ClearScript.V8.ICUData.dll
- Size 10.3MB
- SHA256 4c4c0d32c1186a3b8955ae5c32a034b2a801bbb6bdde9947492fc8584df22a07
- MD5 1b988d44acc9acc11d934dbee8df7cb8
- SHA1 4f08693cf34770cb0426eb9a094505624bc1e738
- SHA512 b0cdf14e1edff70eb961c8a7130c3726f436c1341819986ba4271355bdb0fceb7762b265677f6ac32eb91710092b722a072fdac141a8c48dcd949695131dbd24
- SSDEEP 196608:X6akBhOR8LE/dUHiXUxa/iJ53IWhls2E91Z0l:XqwKLBHiXUxa/iJ53IWhls2E6l
- TLSH
  T183B63903A2EB4EC6F9FB5F7498F562779527BD49AE32804A51043F3B1C333908664B66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  OverlayPluginAddon/ClearScript.V8.dll
- Size 454KB
- SHA256 fa27c7edd5de278725431cff247d02c4a038b5494e96fcf0d32f96458c7d58a4
- MD5 c2581db4555c55d5b19648804368674c
- SHA1 d622fea96e192bb087e7a417f9ab912269d7bb74
- SHA512 76793e957fb70e88aa65c56d079ad9835cff26153fce21f612cbee49505507997491f453805f142be2935838bba18c59a52e70ec9cdf9d3b7d710cfc74351911
- SSDEEP 12288:qgm5DCtXOlaxJith3Zh+Ul67T3T5nhqGKGxdnmy+Ruu3:qBQt+laxJith33+q67T3T5nhqGKGxdnU
- TLSH
  T164A42A9A2BEC8159D5AE0337F8220F018277D116D8BF979A569DF6F99FB334049043A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  OverlayPluginAddon/ClearScriptV8.win-x64.dll
- Size 28.5MB
- SHA256 23f7b297c59cd77e103e5c3e39eb784e7d43d50670d2dd9ae51bdcefe51a883a
- MD5 5c7ddf7a2b424d3f652a0171ae134920
- SHA1 118fe724ee638a5c49edf7d5599a1b33ccc5c3a1
- SHA512 109ba78a6a4dc1f8505977ebf5098bc30089c7044619ebad22845517d629f796aa821180fc749c4e5c87c7d93acda93faf63ada5c5e699a203ad3f96d985eaf8
- SSDEEP 393216:qKtNGSqYgTCxx5S0kmYQ8tl6G0HGPMzHngSAnS4Qm:GmYNH0gcHngWo
- TLSH
  T16B677D53F29640ECC06EE1755747A633B975B8094B346AEF078497222E66FF02B3EB50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  OverlayPluginAddon/Microsoft.Bcl.AsyncInterfaces.dll
- Size 25KB
- SHA256 1c95b1a776931ca1c4f2911b2ae1cc99eb78f547cd5feeaf5cdbdf10cedad0db
- MD5 3dfd72446d541e04ace5716fd2052dc0
- SHA1 8b634cf88a10b5f6c1b9d1a34705d63fdf454a38
- SHA512 eb28d59ef60f588ee0be755ecec5ae845267653a85b4be3fa50fa28eace4862150ada4232e5fd70c56ffe64850bf1332e65dfa7657bb3ed22132f266f80c1986
- SSDEEP 384:vBOJWqnwGBbNAJTH0VES2j0cX6dAl+NW9DVzrdc1Wez/WAYA6VFHRN7wFEpcR9z0:JulwGBhMQVv2wK5TdcB3FClwFEpw9z/s
- TLSH
  T191C27C1A932C5327CFBE2EB5E57496862E35D78A2C12EB3F1188E2991D47385A730734
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  OverlayPluginAddon/Newtonsoft.Json.dll
- Size 695KB
- SHA256 e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d
- MD5 195ffb7167db3219b217c4fd439eedd6
- SHA1 1e76e6099570ede620b76ed47cf8d03a936d49f8
- SHA512 56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac
- SSDEEP 12288:GBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUO:GBjk38WuBcAbwoA/BkjSHXP36RMG/
- TLSH
  T166E4394123F98F2BE1AF6B75B4704E1543F9F917A6B5E78F9A04D9A91C43B408E403A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  OverlayPluginAddon/OverlayPluginAddon.dll
- Size 97KB
- SHA256 6d4212ab4d45a0ad9a6654c551770372fcef3be3c29e37a098ab98b0dca20841
- MD5 8a2b5f4c53e2f925d14acb32945b4768
- SHA1 fe62205d97fe3b8e02de2ca44be4a851967b8a2a
- SHA512 30f6171986d7a02291ddf26697880264a9f68e922ec5a695c42065b1edabf4ec1dea7c20ea8d5ffb8451f9b6b126518a502461d0e74617e289d40481f1ec1015
- SSDEEP 1536:K25kg83yXJk4a5QtKbMn5bOA+wQ0XHERsso2b3cQYpzkYA:7kH3y5Y5eKw5FNZHERsso2b3cQYpzbA
- TLSH
  T19DA3D44563FC420AFAFE2B39687512650B77FD5AAD35E38C498860CD0B63F818922773
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  OverlayPluginAddon/System.Buffers.dll
- Size 20KB
- SHA256 accccfbe45d9f08ffeed9916e37b33e98c65be012cfff6e7fa7b67210ce1fefb
- MD5 ecdfe8ede869d2ccc6bf99981ea96400
- SHA1 2f410a0396bc148ed533ad49b6415fb58dd4d641
- SHA512 5fc7fee5c25cb2eee19737068968e00a00961c257271b420f594e5a0da0559502d04ee6ba2d8d2aad77f3769622f6743a5ee8dae23f8f993f33fb09ed8db2741
- SSDEEP 384:/rMdp9yXOfPfAxR5zwWvYW8a2cyHRN7vCvlbLg:/rMcXP6N6e
- TLSH
  T156926D12DBAC4213DE3B2E7012A4C9C62E3AD3C66A11DB5E1848F5591ED37CACF11B6D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  OverlayPluginAddon/System.Memory.dll
- Size 138KB
- SHA256 bf3fb84664f4097f1a8a9bc71a51dcf8cf1a905d4080a4d290da1730866e856f
- MD5 f09441a1ee47fb3e6571a3a448e05baf
- SHA1 3c5c5df5f8f8db3f0a35c5ed8d357313a54e3cde
- SHA512 0199ae0633bccfeaefbb5aed20832a4379c7ad73461d41a9da3d6dc044093cc319670e67c4efbf830308cbd9a48fb40d4a6c7e472dcc42eb745c6ba813e8e7c6
- SSDEEP 3072:nUGrszKKLB8a9DvrJeeesIf3amN32AW/rcyw/s:OB8l3/aK32qU
- TLSH
  T1BAD37D6857C6DE56DB5FEC70E02052016631C52F5742BBEE5DC8B8F026923EA28193FE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  OverlayPluginAddon/System.Numerics.Vectors.dll
- Size 113KB
- SHA256 1d3ef8698281e7cf7371d1554afef5872b39f96c26da772210a33da041ba1183
- MD5 aaa2cbf14e06e9d3586d8a4ed455db33
- SHA1 3d216458740ad5cb05bc5f7c3491cde44a1e5df0
- SHA512 0b14a039ca67982794a2bb69974ef04a7fbee3686d7364f8f4db70ea6259d29640cbb83d5b544d92fa1d3676c7619cd580ff45671a2bb4753ed8b383597c6da8
- SSDEEP 1536:nPOw0SUUKw+GbgjMV+fCY1UiiGZ6qetMXIAMZ2zstK/hV+sUwS:nWw0SUUKBM8aOUiiGw7qa9tK/bJS
- TLSH
  T174B387E37F1EA476C7CE857F24F74E1D62B52A57C523D6B640CA5AA2016339B28040FB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  OverlayPluginAddon/System.Runtime.CompilerServices.Unsafe.dll
- Size 16KB
- SHA256 66409f670315afe8610f17a4d3a1ee52d72b6a46c544cec97544e8385f90ad74
- MD5 da04a75ddc22118ed24e0b53e474805a
- SHA1 2d68c648a6a6371b6046e6c3af09128230e0ad32
- SHA512 26af01ca25e921465f477a0e1499edc9e0ac26c23908e5e9b97d3afd60f3308bfbf2c8ca89ea21878454cd88a1cddd2f2f0172a6e1e87ef33c56cd7a8d16e9c8
- SSDEEP 192:LGLxTyHvc4ROgcxAdWXYWJeaPtWsI9A9GaHnhWgN7aJeWw0fnCsqnajt:LgGLROZAdWXYW8aPcyHRN7WEqn1lx
- TLSH
  T1CD72294A4BA80313ED736B309AA4D443FE38A7D75812D72F1985F1B91CDB7D4AF21628
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  OverlayPluginAddon/System.Threading.Tasks.Extensions.dll
- Size 25KB
- SHA256 4f81ffd0dc7204db75afc35ea4291769b07c440592f28894260eea76626a23c6
- MD5 e1e9d7d46e5cd9525c5927dc98d9ecc7
- SHA1 2242627282f9e07e37b274ea36fac2d3cd9c9110
- SHA512 da7ab8c0100e7d074f0e680b28d241940733860dfbdc5b8c78428b76e807f27e44d1c5ec95ee80c0b5098e8c5d5da4d48bce86800164f9734a05035220c3ff11
- SSDEEP 384:1R973o62/KqcAnb05J3w0I5eUGef8s72XBWdvVW2JW8aJcyHRN7WEimpplex:1RZ4nNxnYTb6Blha
- TLSH
  T1C0C27D0987AC5567DFBB4F74A6A6D9069F30E7476E02F3291D8CF2E40C533892A6113A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  OverlayPluginAddon/System.ValueTuple.dll
- Size 24KB
- SHA256 e905d102585b22c6df04f219af5cbdbfa7bc165979e9788b62df6dcc165e10f4
- MD5 23ee4302e85013a1eb4324c414d561d5
- SHA1 d1664731719e85aad7a2273685d77feb0204ec98
- SHA512 6b223ce7f580a40a8864a762e3d5cccf1d34a554847787551e8a5d4d05d7f7a5f116f2de8a1c793f327a64d23570228c6e3648a541dd52f93d58f8f243591e32
- SSDEEP 384:VyPa16oAL4D+wW9IWmDIW4IWYDMFm0GftpBjMIraQHRN7VlmTpF0:VWs6oqDjADKeDYViG+LN
- TLSH
  T1DBB23955DBFC5143EEA35E7066B4D6873C3EF7C35D21862E106AE14A1CA37C1AB20B29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  OverlayPluginAddon/data/parser-ff.js
- Size 1.1MB
- SHA256 f2b894d360d7ef1f65f6b767d1ac219cc9c1a58f7ca7c53d2efcf54af274924b
- MD5 ed88dddc145a9f54bea76237ff9c4721
- SHA1 8b8b01b723645ac8b714d9eec1ba38d61f79a9cf
- SHA512 0eb54eea4cf3bf09ad2b8d3600827ed25b43435e9cb0cd1125ef98ea718e9d22a4050d969e3aeb51a3befb4086fa68083eabfe328ca270171a984c1569ae5940
- SSDEEP 12288:Vj5sPof+fgeLv5X+mtOxVbAnb0pQ6LJPghg4nWf1oVOD:Vj5sPof+f5T6f
- TLSH
  T1E045F9115EB7690E0636576DAA37D4E1EE66071B00940E8FBCFCE8C9AFB6500C6839F5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28