General
-
Target
IQXO.zip
-
Size
27KB
-
Sample
231212-r1bpgaefar
-
MD5
d8126a31a1fdfc29eb2c0031db1c5bfc
-
SHA1
1e001142dc4e44ff2cf2eb0db40e0797f3ef6d8f
-
SHA256
4a6d8020b61623b5a13a4fc27c5de1d1ae71c56b456b9646e1c5711f94caab82
-
SHA512
63043948393e9214f44245ca416bdab9bb2c3a634ea4687b179e51f3f3773aa6a87d1747150b05e7e734260c437f354486dbf745abc6dbc92f7a42eb000bf7fb
-
SSDEEP
768:GUMbqaMksN/2NyOE+Mpyit0moh9CX6O30yap:ibqaMkG/wyObi2Fhy6O3gp
Static task
static1
Behavioral task
behavioral1
Sample
Noteeb.js
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
Noteeb.js
Resource
win10v2004-20231127-en
Malware Config
Targets
-
-
Target
Noteeb.js
-
Size
79KB
-
MD5
8ff33e1d1f20a1be265bd996c00d1463
-
SHA1
d01ff951755e8f2c8f9a3e3697cd3cc1e0ffae4d
-
SHA256
2dde87c739be776f15f4f269d527e3ab96429a2947c8e9cd8a51e39050ffe73a
-
SHA512
3663e9e29f73f380d6bfd2e6bd851620a100a1a8997a05df57b599f336f601e95f201cf18417fa4f5088c8a787b41af6ea5eb9a313697239e99f0f8f63245051
-
SSDEEP
1536:SepX4w2rWvddsQs2/HlAB7gKLQGwWAcViP0vW7c3Go:SoIYAUgxW7c3Go
Score8/10-
Blocklisted process makes network request
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-