General
- Target Spare parts New order.js
- Size 313KB
- Sample260430-n9fg8sd16x
- SHA256 a5b189eff1131e068b5e2640604dc43e1da4fcc55001dac774bf3286fa4dde8e
- MD5 29b8f9602c64ea63c9d2f1438547d80a
- SHA1 94c71b0499948555acf176df81fa8b3a1d87c5d3
- SHA512 971b895f8cea6de4292e8247d6ed3f8d30e7ebbedbbb1fb78d5808b0113cc197377253f16b50e0106a11ebfed13ad3e815adee4588c331639bb0db8df9bf123f
- SSDEEP 6144:OrYYTwhw5Kvj0Q08LQh67fjdWM/Vq0FiG2P3RCXDsb2B5rFkhD:6whw5Kvj0Jh8fZWM/VRFL2P3RCXDOE5w
- TLSH T1C5646B242EEA602DB1B3AF549FE475E7DA6FFB733A07945D1090034A4A23E40DDD163A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
Spare parts New order.js
Resource
win10v2004-20260130-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
Spare parts New order.js
Resource
win11-20260130-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target Spare parts New order.js
- Size 313KB
- SHA256 a5b189eff1131e068b5e2640604dc43e1da4fcc55001dac774bf3286fa4dde8e
- MD5 29b8f9602c64ea63c9d2f1438547d80a
- SHA1 94c71b0499948555acf176df81fa8b3a1d87c5d3
- SHA512 971b895f8cea6de4292e8247d6ed3f8d30e7ebbedbbb1fb78d5808b0113cc197377253f16b50e0106a11ebfed13ad3e815adee4588c331639bb0db8df9bf123f
- SSDEEP 6144:OrYYTwhw5Kvj0Q08LQh67fjdWM/Vq0FiG2P3RCXDsb2B5rFkhD:6whw5Kvj0Jh8fZWM/VRFL2P3RCXDOE5w
- TLSH T1C5646B242EEA602DB1B3AF549FE475E7DA6FFB733A07945D1090034A4A23E40DDD163A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Registers new Windows logon scripts automatically executed at logon.
-
Accesses Microsoft Outlook profiles