General
- Target Direct_Remit_Copy_jpg.7z
- Size 100KB
- Sample260702-pgcfjshz6w
- SHA256 8dfb0770ad7bd7778ad09c90cfc8a27cb29a988ebadc4bb18b011780ff6a72fa
- MD5 c8d239929c8427b5ab1e3dc744b9e84c
- SHA1 53e6e4cdaa9c61b49c30fea4140d6259b021231b
- SHA512 a77450b21cdfad41b697ee55911851ca486e929cbdf117d15d60b69fefaa8971f349d2fae9221a8ade55125873099595588f7af4ce337e1ec053705b4c9aa9f2
- SSDEEP 3072:VODji0dllUnLlrRkGsR07zFZtm08tw2KCJELevw:VODO0Tl0llkk7zFbm0Kw2Dlvw
- TLSH T1D3A302F339A43252FF6B5D937C521E25BC2F62A7FD4A5134816B04E72B39279AE102C1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
Direct_Remit_Copy_jpg.js
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Direct_Remit_Copy_jpg.js
Resource
win11ltsc2024-20260629-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target Direct_Remit_Copy_jpg.js
- Size 769KB
- SHA256 3cf9623e55d1e1758d476eb5e52a390c0a1ec8fc752bd00d12980a597a00d31b
- MD5 78ac2668c8b1956c8169c22aa3b27304
- SHA1 7343c01d39925dac9e076d9e9372bac9dc02bf62
- SHA512 0553f6503387e9ab83ee4c0ff73eed795fbba6b2bd84a013048c0db427aff4d6155c3a5829ea79a8e3868b79cf368ed06dfc28382aacfce9fa6014b86c22c8bb
- SSDEEP 3072:334Rt/cYlZ06WWu7lsln80JBQF1wRa8lJgFfl2QwUndt48Bv4Hc0YC24/g7yXX7S:3opKyMzdFBwHqsN4HDn
- TLSH T165F4C9C44B8ED4035ACC2D43BF9DBBE7512992A3969872839A5DFB8805B74D781ECCC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.