Overview

overview

8

Static

static

1

Payment Co...237.js

windows10-2004-x64

8

Payment Co...237.js

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    23062026_1703_23062026_Payment Confirmation- Enerzolve PI-TP1026230 CBB237.rar
  • Size 242KB
  • Sample260623-vk2gqset7r
  • SHA256 e10104bcc7523f81a21aba28d2f34f2fc8aaac02b0d6f6326e4582975e9c7430
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
execution

Malware Config

Targets

    • Target
      Payment Confirmation- Enerzolve PI-TP1026230 CBB237.js
    • Size 1.7MB
    • SHA256 00fd6cad76afd3712c347c6d255dee21c2694d638ae06fc8d1f745e26ef71edf
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    execution

    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

      execution
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks