General
- Target tmpwl2far7t.txt
- Size 7.7MB
- Sample260523-dnp5faev3s
- SHA256 b5a957a066a2d434bcafadbc85f5d027bd0ddfa6236755b48cfb1d7b52157201
- MD5 b563e45f0d74ff3178b47b4e897976e7
- SHA1 cdfc855a3c5595e40c753c537554819c402f9b3d
- SHA512 fcf7264c21ef97e1b969eb3bb0e5e482e313ecbe3ef49f83d4f5c926415818cff3b509070b1500abe36cb37ab3b830e768360e2f3d397bc79f49832dc95d3a3c
- SSDEEP 49152:JytwpCQK+RPytwpCQK+RPytwpCQK+RPytwpCQK+RPytwpCQK+RPytwpCQK+RPytg:l
- TLSH T177862A5D7FF21122065771B64ABFA00AF2B98413941CD954F96CC3D02FE092986FBEE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
tmpwl2far7t.js
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmpwl2far7t.js
Resource
win11-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target tmpwl2far7t.txt
- Size 7.7MB
- SHA256 b5a957a066a2d434bcafadbc85f5d027bd0ddfa6236755b48cfb1d7b52157201
- MD5 b563e45f0d74ff3178b47b4e897976e7
- SHA1 cdfc855a3c5595e40c753c537554819c402f9b3d
- SHA512 fcf7264c21ef97e1b969eb3bb0e5e482e313ecbe3ef49f83d4f5c926415818cff3b509070b1500abe36cb37ab3b830e768360e2f3d397bc79f49832dc95d3a3c
- SSDEEP 49152:JytwpCQK+RPytwpCQK+RPytwpCQK+RPytwpCQK+RPytwpCQK+RPytwpCQK+RPytg:l
- TLSH T177862A5D7FF21122065771B64ABFA00AF2B98413941CD954F96CC3D02FE092986FBEE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.