General
- Target kni.zip
- Size 83KB
- Sample231017-sy76bsch91
- SHA256 ce0765fa670982dce7667ca3db07b5daaa092ff4a145ed7956bc384ad2492a06
- MD5 0dd5150067e4eb01f6397d7c97570528
- SHA1 2ac83d11a878974f85d846b88181acb487ed1b2f
- SHA512 f5ab8223ae9eb468899d7c131e266206515317c59949c94bd2c6a9828842a9e376968c189a22ceffab1f489ee3d03b8e064a7dfdabb841ff47052e21a8bb2f2b
- SSDEEP 1536:LPS+f6X6aJU/m/WV9a9s69RzOx4I4SOsP9xjMAsUWncwnvfcy9FV6pjJl3E1CPZ:LNencm/Wa9s69RziH4Gi1vf3FVKJlvZ
- MD5 SHA1 SHA512 SSDEEP
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
X117.js
Resource
win7-20230831-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
X117.js
Resource
win10v2004-20230915-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target X117.js
- Size 412KB
- SHA256 35a030b9c4e4bc4f4fbaeb8415fdf4bccd04958216d363a7f0e9caef1df38100
- MD5 22994aee89c4f08e9ac088ddc5bba516
- SHA1 433945f4f3864dcd427d26321be8ef101b7338f6
- SHA512 eea71ba0abe39f75bb17795841ba59499959cf6996bee388a2e9d1cd1444dbe0f73a9dc02c2e22d8caddd58c64488518085db6de92a77bb9e3251547cd977a40
- SSDEEP 6144:Hj38P9IwPaHP79bvi5u9r9pMrScVLKxBcULQsApqiYdxED93BO7O:bOmxBWnYdxEpBOy
- MD5 SHA1 SHA512 SSDEEP
Score8/10-
Blocklisted process makes network request
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.