General
- Target PRE ALERT 510739420.js
- Size 858KB
- Sample260604-g4aapsby7k
- SHA256 03b9d024bbfa55f9e7dd65afab96792effe79f17b1b642b4b88ddeb07a824339
- MD5 a7d9c23bd247f8dbffb7b66a1b74a729
- SHA1 938c4a47a185e89dbffc0d1caf4b323f92101fb1
- SHA512 c856fdd5540038008b1277758a95b5919dffe4e40732069e72e9aba0842a91478e377f484986b1422b894f5df0b843161e301ba8a6748e77cea682340ff07ce9
- SSDEEP 3072:WV/m1osVVwbwi4UiIsDoGL/ZQvUzQ5PlDHtNQRvrTxoZvkOi9L61YcruORLd/UGJ:+m1S
- TLSH T1B615D53DCD14412FF872DA18C495859FF481659B222CEA47D0CA2F5F6EB2886B7C329D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
PRE ALERT 510739420.js
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
PRE ALERT 510739420.js
Resource
win11-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target PRE ALERT 510739420.js
- Size 858KB
- SHA256 03b9d024bbfa55f9e7dd65afab96792effe79f17b1b642b4b88ddeb07a824339
- MD5 a7d9c23bd247f8dbffb7b66a1b74a729
- SHA1 938c4a47a185e89dbffc0d1caf4b323f92101fb1
- SHA512 c856fdd5540038008b1277758a95b5919dffe4e40732069e72e9aba0842a91478e377f484986b1422b894f5df0b843161e301ba8a6748e77cea682340ff07ce9
- SSDEEP 3072:WV/m1osVVwbwi4UiIsDoGL/ZQvUzQ5PlDHtNQRvrTxoZvkOi9L61YcruORLd/UGJ:+m1S
- TLSH T1B615D53DCD14412FF872DA18C495859FF481659B222CEA47D0CA2F5F6EB2886B7C329D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Registers new Windows logon scripts automatically executed at logon.
-
Accesses Microsoft Outlook profiles