General
-
Target
Proforma Invoice 3001855006.js
-
Size
48KB
-
Sample
230124-h3mp3sba3z
-
MD5
c64b396e9cb42b2234a3bbce8728de92
-
SHA1
71c018361c833fb31b8160059f95516fdaed5e2d
-
SHA256
c956e252ffa7148f6c075e639297ab2df080920edc53e28021f3156827249ae6
-
SHA512
b64c3b866497325c49dcb6c11987cf7bb0e55439d792fa8c520b97b8ebcb4d8f6d24d3715acfaeb4b51f8275c835959e81741bf928baa97804f351ad98f7501e
-
SSDEEP
1536:Ub5m/DuD+CWJbBG7MPI7MMdHl8aFzMKhKyM+anvJKa5YYUfMFfqUagMlGeMqmN34:Ub1uBAMPI7MMdHl8aFzMKhKyM+anvJKz
Static task
static1
Behavioral task
behavioral1
Sample
Proforma Invoice 3001855006.js
Resource
win7-20221111-en
Malware Config
Targets
-
-
Target
Proforma Invoice 3001855006.js
-
Size
48KB
-
MD5
c64b396e9cb42b2234a3bbce8728de92
-
SHA1
71c018361c833fb31b8160059f95516fdaed5e2d
-
SHA256
c956e252ffa7148f6c075e639297ab2df080920edc53e28021f3156827249ae6
-
SHA512
b64c3b866497325c49dcb6c11987cf7bb0e55439d792fa8c520b97b8ebcb4d8f6d24d3715acfaeb4b51f8275c835959e81741bf928baa97804f351ad98f7501e
-
SSDEEP
1536:Ub5m/DuD+CWJbBG7MPI7MMdHl8aFzMKhKyM+anvJKa5YYUfMFfqUagMlGeMqmN34:Ub1uBAMPI7MMdHl8aFzMKhKyM+anvJKz
-
Blocklisted process makes network request
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-