General
- Target output_0yditfsf.js
- Size 1.8MB
- Sample260703-cfxc4sh14z
- SHA256 a2b929416dba251191a074ec1a186e696d279eaff6f4dba271a4b9a0ee228c82
- MD5 e8ba7a8dc1449224d5812364c0bdf2a2
- SHA1 b102b60800bf3e94ae62f28203962eb5f4013992
- SHA512 1816c2caf771e98ea7730ca221e8fb053583a205f66e8c689340b3ee28786e8f6cd4a55c0978a0d6ec685aafeafc0c31b3814900077e3bccb57caa2d71cee50d
- SSDEEP 12288:q3yVGrOuQUn4uEVTJjpV9iJRqPP/V/EXYVMeasKSpwS5BenSpdQKip:q3y8iq4FoJUGXVsJXip
- TLSH T10A85B1ACFA7931D45871CA535C65C101DB7BAA73192DAC0D22DA0B8C0E17E4BB96873F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
output_0yditfsf.js
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
output_0yditfsf.js
Resource
win11ltsc2024-20260629-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target output_0yditfsf.js
- Size 1.8MB
- SHA256 a2b929416dba251191a074ec1a186e696d279eaff6f4dba271a4b9a0ee228c82
- MD5 e8ba7a8dc1449224d5812364c0bdf2a2
- SHA1 b102b60800bf3e94ae62f28203962eb5f4013992
- SHA512 1816c2caf771e98ea7730ca221e8fb053583a205f66e8c689340b3ee28786e8f6cd4a55c0978a0d6ec685aafeafc0c31b3814900077e3bccb57caa2d71cee50d
- SSDEEP 12288:q3yVGrOuQUn4uEVTJjpV9iJRqPP/V/EXYVMeasKSpwS5BenSpdQKip:q3y8iq4FoJUGXVsJXip
- TLSH T10A85B1ACFA7931D45871CA535C65C101DB7BAA73192DAC0D22DA0B8C0E17E4BB96873F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.