General
- Target tmp8w11hz9r
- Size 9.9MB
- Sample260523-dfs65aet2t
- SHA256 e00275042b4f4807a1d4098113e011e0d4c0656ecb88af420c728a180eef60be
- MD5 0db1d9b6db4e0e83eea894674c21b44d
- SHA1 0f1643fa489b6c6f740237131129e7edbf90ec82
- SHA512 80c5f41e2773d9f2f83b7292fc2b2672d75396e5017c471270d5963af1f38cfd49fb38a9dbc268dca0694572a9dfd10d0c3dc274c072243c6b293494796a1b84
- SSDEEP 49152:4ytwpCQK+UCytwpCQK+UCytwpCQK+UCytwpCQK+UCytwpCQK+UCytwpCQK+UCytJ:h
- TLSH T1AAA62A5D7FF21122065771B64ABFA00AF2B98413941CD954F96CC3D02FE092986FBEE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
tmp8w11hz9r.js
Resource
win10ltsc2021-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmp8w11hz9r.js
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmp8w11hz9r.js
Resource
win11-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target tmp8w11hz9r
- Size 9.9MB
- SHA256 e00275042b4f4807a1d4098113e011e0d4c0656ecb88af420c728a180eef60be
- MD5 0db1d9b6db4e0e83eea894674c21b44d
- SHA1 0f1643fa489b6c6f740237131129e7edbf90ec82
- SHA512 80c5f41e2773d9f2f83b7292fc2b2672d75396e5017c471270d5963af1f38cfd49fb38a9dbc268dca0694572a9dfd10d0c3dc274c072243c6b293494796a1b84
- SSDEEP 49152:4ytwpCQK+UCytwpCQK+UCytwpCQK+UCytwpCQK+UCytwpCQK+UCytwpCQK+UCytJ:h
- TLSH T1AAA62A5D7FF21122065771B64ABFA00AF2B98413941CD954F96CC3D02FE092986FBEE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
Checks computer location settings
Looks up country code configured in the registry, likely geofence.