General
- Target tmpsmnefogb
- Size 6.6MB
- Sample260602-ryfweafx9t
- SHA256 b223f34232b8dba6e44378284e76b88ef2e400feb66dce1e2c559fbe604c7116
- MD5 9d0cecef7376caec025b6de663264179
- SHA1 eaef939e94b241f814520bec5d82ec01a5a4e368
- SHA512 53eae1612b93fc10bceaee51192dc1220cde0eafaf1618b7c55177135449da87bc19ee27664bf3c9521ca3574900637a4fb2d6e2ca5b8162ae591bee0c5e0a19
- SSDEEP 49152:Hh/PnNuIw+rja6v/s+LfHQGh/PnNuIw+rja6v/s+LfHQGh/PnNuIw+rja6v/s+L/:Hhhhhx
- TLSH T10366181A79E62331055770B9AB9F50D4F735C02B211AD894B8DC93A81F80E7983BBFD9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
tmpsmnefogb.js
Resource
win10ltsc2021-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmpsmnefogb.js
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmpsmnefogb.js
Resource
win11-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target tmpsmnefogb
- Size 6.6MB
- SHA256 b223f34232b8dba6e44378284e76b88ef2e400feb66dce1e2c559fbe604c7116
- MD5 9d0cecef7376caec025b6de663264179
- SHA1 eaef939e94b241f814520bec5d82ec01a5a4e368
- SHA512 53eae1612b93fc10bceaee51192dc1220cde0eafaf1618b7c55177135449da87bc19ee27664bf3c9521ca3574900637a4fb2d6e2ca5b8162ae591bee0c5e0a19
- SSDEEP 49152:Hh/PnNuIw+rja6v/s+LfHQGh/PnNuIw+rja6v/s+LfHQGh/PnNuIw+rja6v/s+L/:Hhhhhx
- TLSH T10366181A79E62331055770B9AB9F50D4F735C02B211AD894B8DC93A81F80E7983BBFD9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.