General
- Target 25062026_0910_24062026_shipping docs 34328910949.rar
- Size 244KB
- Sample260625-k5dlasav51
- SHA256 d182fc3076489c02dfa8fbc9ce31bfe633ff88c181a65cf567a86d552c700f9a
Score
8/10
Malware Config
Targets
-
- Target shipping docs 34328910949.js
- Size 1.8MB
- SHA256 cbb9f478aedca2f6443f83f24badcd88d7f72fb1cd29b9d69b196789165a94ef
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Registers new Windows logon scripts automatically executed at logon.
-
Accesses Microsoft Outlook profiles