General

  • Target

    7858290454868466.js

  • Size

    657KB

  • Sample

    241121-mty4zawkek

  • MD5

    be15ae9aeaea57daad4f5add8f34e761

  • SHA1

    2bb89396ca958fd150739deda653efa0a649dd87

  • SHA256

    e4a50bc6e27700e1db6abebd5ed70c30d50494afa15fffad3c7501d59c9f652d

  • SHA512

    e6de08b3b30e9a9d87bc210e87aa4ed37954770332f134d9fa35a496202596642acf3d4c5667605b6eaf941306f800c5622c9475c4aa60d4af22b1fad421dc29

  • SSDEEP

    6144:gTJeZYu1ddZ+Yih114+NAn1XlIcsnQw/KvZJ6+j/mQEyJ6+j/mb03pX5:PKPNArAfi1

Malware Config

Targets

    • Target

      7858290454868466.js

    • Size

      657KB

    • MD5

      be15ae9aeaea57daad4f5add8f34e761

    • SHA1

      2bb89396ca958fd150739deda653efa0a649dd87

    • SHA256

      e4a50bc6e27700e1db6abebd5ed70c30d50494afa15fffad3c7501d59c9f652d

    • SHA512

      e6de08b3b30e9a9d87bc210e87aa4ed37954770332f134d9fa35a496202596642acf3d4c5667605b6eaf941306f800c5622c9475c4aa60d4af22b1fad421dc29

    • SSDEEP

      6144:gTJeZYu1ddZ+Yih114+NAn1XlIcsnQw/KvZJ6+j/mQEyJ6+j/mb03pX5:PKPNArAfi1

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Obfuscated Files or Information: Command Obfuscation

      Adversaries may obfuscate content during command execution to impede detection.

MITRE ATT&CK Enterprise v15

Tasks