General
- Target d954bcc241034ce46b639a7944d373178e5d4b5396e5eb587a01d51581202171
- Size 289KB
- Sample260702-mshetsgs4t
- SHA256 d954bcc241034ce46b639a7944d373178e5d4b5396e5eb587a01d51581202171
- MD5 3e81aade68d22fc1556a474f2211bd2c
- SHA1 3e9f39bf2c4ce9097b542dae5903ce5406bfbe5f
- SHA512 b70d91ababfda349a6f8c5e57c26b4522aa33f79e7b8f5205aeb90c889495b0f3fa1e32863427c3b68f54adbf03181803e496bbb3ba9d6f71c786817c091d954
- SSDEEP 6144:SS1Dx1Vgk5TJ5NrQEMVUGSSC2AxaiCbX8FkZdKg4tHgiNH9i1G:t11AkpJN12oRpFkHwT9L
- TLSH T1B454221290EE8BD5015D75A54BC1E9F848B64B93EB30985A35338458BAB37814BFCCEF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
HSBC Payment Advice.js
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
HSBC Payment Advice.js
Resource
win11ltsc2024-20260629-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target HSBC Payment Advice.js
- Size 1.9MB
- SHA256 f5e64e3823a50a930a7c92fe58d2703eb14b49551c13226b8c872a48918dac4a
- MD5 b32b7361d908c611ee93edfa39d76ff1
- SHA1 b24a9b71d85b29685a50413e3c820029a4772525
- SHA512 c90aa697bb444f2eacc370cb36f28334a4929e30b3a1b7b589c6df4f956925dea67d019e64dee5a60a3e6aebe79aac1eca1fd63836f142546c2fc9abab57f0fe
- SSDEEP 12288:k+wzsTEYtVJmC+Bx36A0HcMoOPx9yLMK6JTHzx5AQf:k+wzWR
- TLSH T13495C63DCE13412578B39965BCC43C0FFE127352727E8DC892964B8D8A53A582EC9B6D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.