General
-
Target
PO 062022.js
-
Size
106KB
-
Sample
220620-rcre1sfhf3
-
MD5
6b40bc20c20e427d9f3eff75a199e5c2
-
SHA1
eeeba7f94c0c71545dc1a412181bbf59ab3816a3
-
SHA256
5382fee9aa7bef18d245bd37a9f93feb2671e6dd4b76fdaf90623c2438d22d71
-
SHA512
c1642890fefb1f65481b4144bce53cf9b51b2cf7834bce3dc9bfbfbe496d56111861014375e6a59cd4d3741e64039f30085abce33a3ccc0d2d1253e203eeb9d2
Static task
static1
Behavioral task
behavioral1
Sample
PO 062022.js
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
PO 062022.js
Resource
win10v2004-20220414-en
Malware Config
Targets
-
-
Target
PO 062022.js
-
Size
106KB
-
MD5
6b40bc20c20e427d9f3eff75a199e5c2
-
SHA1
eeeba7f94c0c71545dc1a412181bbf59ab3816a3
-
SHA256
5382fee9aa7bef18d245bd37a9f93feb2671e6dd4b76fdaf90623c2438d22d71
-
SHA512
c1642890fefb1f65481b4144bce53cf9b51b2cf7834bce3dc9bfbfbe496d56111861014375e6a59cd4d3741e64039f30085abce33a3ccc0d2d1253e203eeb9d2
Score10/10-
Blocklisted process makes network request
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Adds Run key to start application
-