Hostile 100% chrome 21 installs Download

API Request Simulator 1.0.0

Undisclosed adware, IP-based C2

“A Chrome extension for simulating API requests from cURL commands — similar to Postman This extension allows you to instantly convert cURL…”

Direct HTTP C2 infrastructureDirect-IP HTTP communication channel
SHA-256f677eed00e17767691c1bae84ce09cc98b89eba2d720442629fb0fc6dc1082df
URLhttps://clients2.google.com/service/update2/crx?response=redirect&prodversion=131.0&acceptformat=crx3&x=id%3Dhakoepelfgppheoegjldmlifipmdgaoj%26installsource%3Dondemand%26uc
MaleculeO₂(C₂S)H₆(Br₂Cm₂₄Db₆Os₂TiU₈)Md₂(Pm₂)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.