General
-
Target
PORT INFO FOR DISCHARGING ABT 45,000MT IRON ORE INBULK.js
-
Size
8.4MB
-
Sample
230314-knd6haed82
-
MD5
6dc7b4219d66e1ffbdbdef1a35a325bf
-
SHA1
49954e82e276298da7ca0f371413a8b5c99df1fb
-
SHA256
296c37314a504b52701dbeca7c2a5a6772ad4e4f2dce895ff581be7cdcaf582a
-
SHA512
c04888bda9d8ef5c7324f8741dbb6df9cf5150c1480042cb7d0a0fb7ee8812d349458cc413fad0fb816fa72dcc883cdddeb5d42981b4eded522ec532d5edc278
-
SSDEEP
24576:p/Bv/BJj2Vg9cNoo+cp9Kru3+kHvgRRyDIhlfH99bWgLpRQJaIP/M8gFTxnw9ljG:pUDGeMh4YBwt55zG
Static task
static1
Behavioral task
behavioral1
Sample
PORT INFO FOR DISCHARGING ABT 45,000MT IRON ORE INBULK.js
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
PORT INFO FOR DISCHARGING ABT 45,000MT IRON ORE INBULK.js
Resource
win10v2004-20230220-en
Malware Config
Targets
-
-
Target
PORT INFO FOR DISCHARGING ABT 45,000MT IRON ORE INBULK.js
-
Size
8.4MB
-
MD5
6dc7b4219d66e1ffbdbdef1a35a325bf
-
SHA1
49954e82e276298da7ca0f371413a8b5c99df1fb
-
SHA256
296c37314a504b52701dbeca7c2a5a6772ad4e4f2dce895ff581be7cdcaf582a
-
SHA512
c04888bda9d8ef5c7324f8741dbb6df9cf5150c1480042cb7d0a0fb7ee8812d349458cc413fad0fb816fa72dcc883cdddeb5d42981b4eded522ec532d5edc278
-
SSDEEP
24576:p/Bv/BJj2Vg9cNoo+cp9Kru3+kHvgRRyDIhlfH99bWgLpRQJaIP/M8gFTxnw9ljG:pUDGeMh4YBwt55zG
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-