General
- Target tmp39dvusbj
- Size 28.9MB
- Sample260523-dvackab14j
- SHA256 6ee44874d62e4f12f824fdd3a57f274ed5dcdf789d1157a737d09b4cc4751a13
- MD5 cd3f7322b252cdf412f4b71a9a8af0d9
- SHA1 15298d8dac88215a02953a4973b0b61c758f55d7
- SHA512 06e98ac5e4546c24fa6f7fd69abb3cf102fad13dcc158540037d02eb7d5502aa3f2cc768be23f838459602da471e23ff0bbe17dd7aece79bab7a061745309948
- SSDEEP 49152:E7gCzjCxb9qHfp4nhKN06khFCVGzcYzYB2vz+8Kcf33X/lOmG9a63qdg9kgpcEiu:8
- TLSH T10F67B20DAEF71091A923317C8FAF640AB6748017190ADD143D8DA3945FA953867FEFE8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
tmp39dvusbj.js
Resource
win10ltsc2021-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmp39dvusbj.js
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmp39dvusbj.js
Resource
win11-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target tmp39dvusbj
- Size 28.9MB
- SHA256 6ee44874d62e4f12f824fdd3a57f274ed5dcdf789d1157a737d09b4cc4751a13
- MD5 cd3f7322b252cdf412f4b71a9a8af0d9
- SHA1 15298d8dac88215a02953a4973b0b61c758f55d7
- SHA512 06e98ac5e4546c24fa6f7fd69abb3cf102fad13dcc158540037d02eb7d5502aa3f2cc768be23f838459602da471e23ff0bbe17dd7aece79bab7a061745309948
- SSDEEP 49152:E7gCzjCxb9qHfp4nhKN06khFCVGzcYzYB2vz+8Kcf33X/lOmG9a63qdg9kgpcEiu:8
- TLSH T10F67B20DAEF71091A923317C8FAF640AB6748017190ADD143D8DA3945FA953867FEFE8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.