General
- Target invoice-1645080830.pdf (33).js
- Size 23.3MB
- Sample260430-jp9hcsby9w
- SHA256 b4af6cd3e1840edc3cf93abfa2e11e59b8f6a6b7ac24b4ec7953fba8886741eb
- MD5 556c616bc775b47b96792424e99e9372
- SHA1 e90248a281392aafe877ac13b90e91e2f4e1f361
- SHA512 20cd5d94cf792ddfcb3bd8abe0e64f731298c6cc74f2ec503c7bf33dc9a09ea08934d78a911f7381c16810a488dc0e81afaeb965f44f03706548ba3be888d6ca
- SSDEEP 49152:LdGYdGEdG1dGQdGgdGydGKdGYdGzdGkdGedGrCUR4dG5dGOdGkdG4dGZCURzdGBw:z
- TLSH T11A37237189FEAB530FF83E0D405F250C2BE9081504D67BA3B9DBBD8C270BA25676D598
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
invoice-1645080830.pdf (33).js
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
invoice-1645080830.pdf (33).js
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target invoice-1645080830.pdf (33).js
- Size 23.3MB
- SHA256 b4af6cd3e1840edc3cf93abfa2e11e59b8f6a6b7ac24b4ec7953fba8886741eb
- MD5 556c616bc775b47b96792424e99e9372
- SHA1 e90248a281392aafe877ac13b90e91e2f4e1f361
- SHA512 20cd5d94cf792ddfcb3bd8abe0e64f731298c6cc74f2ec503c7bf33dc9a09ea08934d78a911f7381c16810a488dc0e81afaeb965f44f03706548ba3be888d6ca
- SSDEEP 49152:LdGYdGEdG1dGQdGgdGydGKdGYdGzdGkdGedGrCUR4dG5dGOdGkdG4dGZCURzdGBw:z
- TLSH T11A37237189FEAB530FF83E0D405F250C2BE9081504D67BA3B9DBBD8C270BA25676D598
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.