General
- Target eclattttt.js
- Size 1KB
- Sample230104-phra4aaf9t
- SHA256 f4e154d49759c288c006786c167eb62243f284d2d99a85316aec564fc67f9fbb
- MD5 eeb2b04b467b28664223d2261a2ec77c
- SHA1 1bb799e9c2a5302cb90d12d31ad7885c3a1b2478
- SHA512 52573d9b4ad9e0febd22b8d039c0f6d667eef7154373f793ef01de7e1ac703811a9ed5952e644bbff05ccf4a79dfed4ba1dfd097357326d335acec4fa1bab789
- MD5 SHA1 SHA512
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
eclattttt.js
Resource
win7-20220812-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
eclattttt.js
Resource
win10v2004-20220901-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target eclattttt.js
- Size 1KB
- SHA256 f4e154d49759c288c006786c167eb62243f284d2d99a85316aec564fc67f9fbb
- MD5 eeb2b04b467b28664223d2261a2ec77c
- SHA1 1bb799e9c2a5302cb90d12d31ad7885c3a1b2478
- SHA512 52573d9b4ad9e0febd22b8d039c0f6d667eef7154373f793ef01de7e1ac703811a9ed5952e644bbff05ccf4a79dfed4ba1dfd097357326d335acec4fa1bab789
- MD5 SHA1 SHA512
Score8/10-
Blocklisted process makes network request
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL