General
- Target afujo.js
- Size 41KB
- Sample260629-csveaabs2w
- SHA256 039fa0f67bc01117564798b70ef5aa35446d3ae9176a17a4a5bb2a47d911c2e6
- MD5 81af306b503fa7e11c557f45e14210d3
- SHA1 d0d705cc012359b832b8e295b2c9907ac93cbed3
- SHA512 8d18dd19237b5ff4c6953775b7d3bb3dd296854e2a62a92b2944d24e0aaf2616f7ea9506e56f7c6d35ebbf696f95432cdb463cc5b148ae1e945da9c622e92e2b
- SSDEEP 768:uIscgbDnV2BNHqosiAGZTW/bHN0PsNLvInvTYp6Oeq4evQIWEdgEz4f0r7Mz2d2t:3W7V2BNHq6AGZyL/LAje4No8sr7m2PBg
- TLSH T13F139E5DB2459AFC4F564D13B02A53C68A4CF96FCDD86569A78A20080CC9E34E3BC6FD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
afujo.js
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
afujo.js
Resource
win11ltsc2024-20260617-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target afujo.js
- Size 41KB
- SHA256 039fa0f67bc01117564798b70ef5aa35446d3ae9176a17a4a5bb2a47d911c2e6
- MD5 81af306b503fa7e11c557f45e14210d3
- SHA1 d0d705cc012359b832b8e295b2c9907ac93cbed3
- SHA512 8d18dd19237b5ff4c6953775b7d3bb3dd296854e2a62a92b2944d24e0aaf2616f7ea9506e56f7c6d35ebbf696f95432cdb463cc5b148ae1e945da9c622e92e2b
- SSDEEP 768:uIscgbDnV2BNHqosiAGZTW/bHN0PsNLvInvTYp6Oeq4evQIWEdgEz4f0r7Mz2d2t:3W7V2BNHq6AGZyL/LAje4No8sr7m2PBg
- TLSH T13F139E5DB2459AFC4F564D13B02A53C68A4CF96FCDD86569A78A20080CC9E34E3BC6FD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.