General
- Target allegato_358.js
- Size 4KB
- Sample231127-ldppxsff64
- SHA256 a6eb5df0aa74bbf113e867adf46fc4e227fb72137d4bc5f9359cef4e34cf25ef
- MD5 486966649f3c23ac0af991866f623014
- SHA1 4fa37658241b43deea9b083233574ecfdaa60708
- SHA512 55f420a44d992926072b132fc0359573f3ca7290b7f4a3189178bbba004cbf6bb4a33801b789a49654f5ed8066ce5a10a8ce70fcbcddd769c7853fa302c1a367
- SSDEEP 96:2Qpt7DKtY32vKtkNojvidRsJ43mAmhyjCg8DSW5Rs5Su/byeY2jHP:7itlvw5ORsJ4NSICNDSW5LsH9jHP
- MD5 SHA1 SHA512 SSDEEP
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
allegato_358.js
Resource
win7-20231023-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
allegato_358.js
Resource
win10v2004-20231025-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target allegato_358.js
- Size 4KB
- SHA256 a6eb5df0aa74bbf113e867adf46fc4e227fb72137d4bc5f9359cef4e34cf25ef
- MD5 486966649f3c23ac0af991866f623014
- SHA1 4fa37658241b43deea9b083233574ecfdaa60708
- SHA512 55f420a44d992926072b132fc0359573f3ca7290b7f4a3189178bbba004cbf6bb4a33801b789a49654f5ed8066ce5a10a8ce70fcbcddd769c7853fa302c1a367
- SSDEEP 96:2Qpt7DKtY32vKtkNojvidRsJ43mAmhyjCg8DSW5Rs5Su/byeY2jHP:7itlvw5ORsJ4NSICNDSW5LsH9jHP
- MD5 SHA1 SHA512 SSDEEP
Score8/10-
Blocklisted process makes network request
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE