General
- Target tmpg_eii8w5
- Size 13.9MB
- Sample260523-c1bbdady61
- SHA256 b89f920e02afe7b4ba3f0fb0bca895a34d97463c97dafe4ec662894b2063d26c
- MD5 db98e4e773cd78dc389e511602b4d4d8
- SHA1 05c2b2cc072624e395827c15f79bffee73d6ac2f
- SHA512 e62e257da4a64ce5d94b43bd5a0461db1bc1b65b9dad25d1410ece9da6cd126275e6736282d0b289f589871f7e7058c6536e9070a87b5250ed089dfe87beff18
- SSDEEP 49152:jLK08dPXWR4ba/JOtdF5pHE2lsfiaahM3o43ORV59VDKtDYLK08dPXWR4ba/JOtU:Bc43mnc43mnc43ml
- TLSH T128E6A2E9FFD52062B622726E5F5FB14AB33880175A49DC907C0CD4647B54B2883F9BE8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
tmpg_eii8w5.js
Resource
win10ltsc2021-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmpg_eii8w5.js
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmpg_eii8w5.js
Resource
win11-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target tmpg_eii8w5
- Size 13.9MB
- SHA256 b89f920e02afe7b4ba3f0fb0bca895a34d97463c97dafe4ec662894b2063d26c
- MD5 db98e4e773cd78dc389e511602b4d4d8
- SHA1 05c2b2cc072624e395827c15f79bffee73d6ac2f
- SHA512 e62e257da4a64ce5d94b43bd5a0461db1bc1b65b9dad25d1410ece9da6cd126275e6736282d0b289f589871f7e7058c6536e9070a87b5250ed089dfe87beff18
- SSDEEP 49152:jLK08dPXWR4ba/JOtdF5pHE2lsfiaahM3o43ORV59VDKtDYLK08dPXWR4ba/JOtU:Bc43mnc43mnc43ml
- TLSH T128E6A2E9FFD52062B622726E5F5FB14AB33880175A49DC907C0CD4647B54B2883F9BE8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.