General
- Target online-deobf-clean.JS
- Size 3KB
- Sample260625-12cslaf15l
- SHA256 d48fa30bd498b131db908cc072b390ad4f2df62fe1a642c0e0cce4246a85c3ae
- MD5 05074d5fe3f68b701f822129bfe9c2fa
- SHA1 27514afacc600c215c03f13887a1c63ed3a926e8
- SHA512 5dd0ea1efffda3e649cbccb4461705a0164938fcdff382283a00123260966488aafc5f08ee6e73fcfde6e032c6872e9ac8cfab09d4a2d9b42698349f838dc5e4
- TLSH T11681EF48EC93C26412B7239B973F990CA9D145277707CA38786ED68CEF244548E6C5F7
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
online-deobf-clean.js
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
online-deobf-clean.js
Resource
win11ltsc2024-20260618-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target online-deobf-clean.JS
- Size 3KB
- SHA256 d48fa30bd498b131db908cc072b390ad4f2df62fe1a642c0e0cce4246a85c3ae
- MD5 05074d5fe3f68b701f822129bfe9c2fa
- SHA1 27514afacc600c215c03f13887a1c63ed3a926e8
- SHA512 5dd0ea1efffda3e649cbccb4461705a0164938fcdff382283a00123260966488aafc5f08ee6e73fcfde6e032c6872e9ac8cfab09d4a2d9b42698349f838dc5e4
- TLSH T11681EF48EC93C26412B7239B973F990CA9D145277707CA38786ED68CEF244548E6C5F7
- MD5 SHA1 SHA512 TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.