General
-
Target
ca7c9e748dcf1c2b205732a15cb1a2af
-
Size
513KB
-
Sample
240315-e3mtasgb9x
-
MD5
ca7c9e748dcf1c2b205732a15cb1a2af
-
SHA1
40ac9ef24e637a813287f32387928619a4c79cd1
-
SHA256
45c7d9ea06e9ad0fe9ca96d928bc7e64103a58b6766b3116977a4ff60703bee4
-
SHA512
56690524318d72ebf2af8cf02535d9feb151a000bbf0697a564773fac5aed8bcda6594321dfd1322e6de9a7f0c0e1bcb17cc229b5f6ae3b302880aecff467b00
-
SSDEEP
12288:2kpu3BdD+cHjQnKBam64VWA6yoD/rnCFzPW6y7c4BWLYEYEb9iHW41:tA6yoDu0J7c4MLIKw91
Static task
static1
Behavioral task
behavioral1
Sample
ca7c9e748dcf1c2b205732a15cb1a2af.js
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ca7c9e748dcf1c2b205732a15cb1a2af.js
Resource
win10v2004-20240226-en
Malware Config
Extracted
http://grupotopbem.com.br/ashkere.php
Targets
-
-
Target
ca7c9e748dcf1c2b205732a15cb1a2af
-
Size
513KB
-
MD5
ca7c9e748dcf1c2b205732a15cb1a2af
-
SHA1
40ac9ef24e637a813287f32387928619a4c79cd1
-
SHA256
45c7d9ea06e9ad0fe9ca96d928bc7e64103a58b6766b3116977a4ff60703bee4
-
SHA512
56690524318d72ebf2af8cf02535d9feb151a000bbf0697a564773fac5aed8bcda6594321dfd1322e6de9a7f0c0e1bcb17cc229b5f6ae3b302880aecff467b00
-
SSDEEP
12288:2kpu3BdD+cHjQnKBam64VWA6yoD/rnCFzPW6y7c4BWLYEYEb9iHW41:tA6yoDu0J7c4MLIKw91
Score10/10-
Blocklisted process makes network request
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-