General
-
Target
69530754df63ef2de7b6032b1bda1a2918887eaabac3ee31c3433a1ed959823f
-
Size
1.2MB
-
Sample
220317-h3wb8acab6
-
MD5
3fb198632220bf0a2f82a62d605c3ec3
-
SHA1
21134452dfc8b71ca63ce618f205b570d4bf422b
-
SHA256
69530754df63ef2de7b6032b1bda1a2918887eaabac3ee31c3433a1ed959823f
-
SHA512
d4bf396e397e7b285b024a8783f5f93a89f7b46112d69408062e6f8239aebd70d9accfbf34e6a88300910723962b66f3f79306d5d8917ac3144df62037e89f2d
Static task
static1
Behavioral task
behavioral1
Sample
RFQ.js
Resource
win7-20220310-en
Behavioral task
behavioral2
Sample
RFQ.js
Resource
win10v2004-20220310-en
Malware Config
Targets
-
-
Target
RFQ.JS
-
Size
3KB
-
MD5
f68bfaf10007b75b933c2a2acab4d54c
-
SHA1
7cabe5b37ea9d22450e80d41378c5e8eefa7eea5
-
SHA256
a89127ec0c19df41166916cfa4c199d97eade3ec4f0cf4d2281408cfe2790c2a
-
SHA512
7ea74f93293e6171338e896243e2ecb696c6b4fbd7cfeffba6e0312a4b8c3789a949e9a0e4e8a566f946d36ebaad59d8477fcaf7681e91b9cc399ff865219a8d
Score10/10-
Blocklisted process makes network request
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Adds Run key to start application
-