General
- Target Azotny Zavod LLP_Order_179540930060426.js
- Size 846KB
- Sample260604-rymzqagw5v
- SHA256 5f17940616e9bdd1dd9d5e2103c9e39b1e8d297a885513bcde96e36e3d1defb7
- MD5 5c74cde61321c6e9e4e8eece2a9bfc6d
- SHA1 0256d8ae7f3b72ea423bdf9df5750d1eb6512138
- SHA512 8839cf4710c7b31f5dde3dd2a9a8bc6758dc138289b1df8008a1a9a921a8a714c36d28cb2d00e22fb3854190428898aa31888ea5c56daea9c7337bc7b769cc4d
- SSDEEP 1536:Tm2AiwEWeFRG4LNM/DQcBaGEdl6JSIYIjSaISOOCYSVLfRL5L5N5SyXWJAePjaL8:a2AKWeFR9q
- TLSH T14B05385303851BBDF69D0EC9C94B245B20F2D467BD251298EBB36EE7BC3B9849430636
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
Azotny Zavod LLP_Order_179540930060426.js
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
Azotny Zavod LLP_Order_179540930060426.js
Resource
win11-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target Azotny Zavod LLP_Order_179540930060426.js
- Size 846KB
- SHA256 5f17940616e9bdd1dd9d5e2103c9e39b1e8d297a885513bcde96e36e3d1defb7
- MD5 5c74cde61321c6e9e4e8eece2a9bfc6d
- SHA1 0256d8ae7f3b72ea423bdf9df5750d1eb6512138
- SHA512 8839cf4710c7b31f5dde3dd2a9a8bc6758dc138289b1df8008a1a9a921a8a714c36d28cb2d00e22fb3854190428898aa31888ea5c56daea9c7337bc7b769cc4d
- SSDEEP 1536:Tm2AiwEWeFRG4LNM/DQcBaGEdl6JSIYIjSaISOOCYSVLfRL5L5N5SyXWJAePjaL8:a2AKWeFR9q
- TLSH T14B05385303851BBDF69D0EC9C94B245B20F2D467BD251298EBB36EE7BC3B9849430636
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Suspicious use of SetThreadContext