General
-
Target
4d2b52b6e0271f33a6a113f26887a525
-
Size
38KB
-
Sample
220616-lhgj4scgel
-
MD5
4d2b52b6e0271f33a6a113f26887a525
-
SHA1
2541fa75359d86ddd0cf25b47cb52bfc0ccd2560
-
SHA256
f24d3f2a03e7a20b3874d3e4eb56d87d98cb93df791080a21f925efc7afc779b
-
SHA512
47ffcb456230c4c159ea540c0e10f996449a0f04e942276972df36f42920e78f61aa23f5427e17fb979f8c0805f8bde94ac9d44baba3a330644787f769e47773
Static task
static1
Behavioral task
behavioral1
Sample
Documents for your perusal.js
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
Documents for your perusal.js
Resource
win10v2004-20220414-en
Malware Config
Targets
-
-
Target
Documents for your perusal.js
-
Size
90KB
-
MD5
e3a8ced8143a9c234569bf6537acb455
-
SHA1
dc687bbfcccb3740806c848a2b948f6f59f721ff
-
SHA256
d8267f242a04debd7ce7975644e938a4d54a6cbcfd5fd606b861d9faac7b8b4c
-
SHA512
db64c212f6b8237b9f4270828e9013456382941f0fdf80051164ef5e1fd2c9963042ae3ef9089cecbd2e0bf972e75db2d529ce20cc96364418c9e20598f6d8d5
Score10/10-
Blocklisted process makes network request
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Adds Run key to start application
-