General
- Target tmpfwt7reqe
- Size 3.6MB
- Sample260602-twprmsbw4q
- SHA256 c8f47dbfc46c2878f96ece788de84672b1d2b230721c3cd577c5b39071cb1070
- MD5 6314e5e6e94aa922e252e8adc30f551b
- SHA1 a81fc5389d61fc35daa35c15d9ec3c72a9d11917
- SHA512 2aeaefa9ea6b2a95f6dbb9d4a05e028c1ad031a07349088e05617f18b14ac7254c89ae41aa6edea4f27b279f451506ae49cc10170c75744442613df3654b0790
- SSDEEP 49152:Nx3ii6gobYQS3QpOVtFBgiAEn0i2pdl8rgx0pPqaeqNn0i2pdliWtAXiAwyfMtAX:NQpwtFBgY
- TLSH T14106D49C3CE7226142177039879F5484E939881F5118AC84B48DEAF85F99F3C47FEAE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
tmpfwt7reqe.js
Resource
win10ltsc2021-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmpfwt7reqe.js
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmpfwt7reqe.js
Resource
win11-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target tmpfwt7reqe
- Size 3.6MB
- SHA256 c8f47dbfc46c2878f96ece788de84672b1d2b230721c3cd577c5b39071cb1070
- MD5 6314e5e6e94aa922e252e8adc30f551b
- SHA1 a81fc5389d61fc35daa35c15d9ec3c72a9d11917
- SHA512 2aeaefa9ea6b2a95f6dbb9d4a05e028c1ad031a07349088e05617f18b14ac7254c89ae41aa6edea4f27b279f451506ae49cc10170c75744442613df3654b0790
- SSDEEP 49152:Nx3ii6gobYQS3QpOVtFBgiAEn0i2pdl8rgx0pPqaeqNn0i2pdliWtAXiAwyfMtAX:NQpwtFBgY
- TLSH T14106D49C3CE7226142177039879F5484E939881F5118AC84B48DEAF85F99F3C47FEAE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.