General
- Target PO.js
- Size 1.5MB
- Sample260622-swclmsd15s
- SHA256 c8e983ca3ac66cde482a2eadcd5db559156992212d5d73f9585df50c0a8871ed
- MD5 bcfe6f0c0ebc908f9ccfaeeac7d7e202
- SHA1 ba49d63c8cd0c20f1f58e973adcdc662c4781de3
- SHA512 2f4359cb8ee4481f12ca73d0b2d17d6a06900fd246993eb16380ae31078da9d24ef0210b57b9963037d81c466c94fee434cac8fd3ced64c97e9075c3717f7c4b
- SSDEEP 6144:NUC/70PT/Ak48QDKZYQz5xqyy61Q9au2FIZmlz6v9N2JLQbC+TTRrKy:n0oHTyR1Bu26lf2JLQbC+TTRrKy
- TLSH T1BF750F24F719706CE6F3B7568F8DB291E70EE2B9065FC9CA5061A39D13A3B05AC411BC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
PO.js
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
PO.js
Resource
win11ltsc2024-20260618-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target PO.js
- Size 1.5MB
- SHA256 c8e983ca3ac66cde482a2eadcd5db559156992212d5d73f9585df50c0a8871ed
- MD5 bcfe6f0c0ebc908f9ccfaeeac7d7e202
- SHA1 ba49d63c8cd0c20f1f58e973adcdc662c4781de3
- SHA512 2f4359cb8ee4481f12ca73d0b2d17d6a06900fd246993eb16380ae31078da9d24ef0210b57b9963037d81c466c94fee434cac8fd3ced64c97e9075c3717f7c4b
- SSDEEP 6144:NUC/70PT/Ak48QDKZYQz5xqyy61Q9au2FIZmlz6v9N2JLQbC+TTRrKy:n0oHTyR1Bu26lf2JLQbC+TTRrKy
- TLSH T1BF750F24F719706CE6F3B7568F8DB291E70EE2B9065FC9CA5061A39D13A3B05AC411BC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.