General
- Target PRE-ALERT 876-415130768.js
- Size 382KB
- Sample260409-hs3csabw2l
- SHA256 dc91e962be7b41d32d831d6da40740fcae7684d990110f4bfe47cc581209c558
Score
8/10
Malware Config
Targets
-
- Target PRE-ALERT 876-415130768.js
- Size 382KB
- SHA256 dc91e962be7b41d32d831d6da40740fcae7684d990110f4bfe47cc581209c558
Score8/10Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Registers new Windows logon scripts automatically executed at logon.
Accesses Microsoft Outlook profiles
Command and Scripting Interpreter: PowerShell
Using powershell.exe command.