Suspicious 80% firefox 1 installs Download

Sida to DaftarKelasi 1.0.3

Exfiltrates PII to third-party server

“استخراج اطلاعات دانش‌آموزان و معلمان از سامانه سیدا و ارسال به سامانه دفتر کلاسی”

Archive contains Mozilla COSE digest manifestArchive contains Mozilla COSE signature file
SHA-256ff1be83eb13fe2b0585089c0edada34b3480caeda9df30418907eb0c64b6898c
URLhttps://addons.mozilla.org/firefox/downloads/file/5044564/sida_to_daftarkelasi-1.0.3.xpi
MaleculeO₂(AsCo₂)H₅(Br₆Cm₁₈Db₁₂OsU₅)Md₄(Pm₆PtSi)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.