Overview

overview

7

Static

static

1

encrypted (2).js

windows10-2004-x64

7

encrypted (2).js

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    invoice.zip
  • Size 3.2MB
  • Sample260706-wweb1sfs4p
  • SHA256 38e37442fcef2ca2e23b54954f82ba4a919c950b66a2888dc015910215c7615a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
execution

Malware Config

Targets

    • Target
      encrypted (2).js
    • Size 9.2MB
    • SHA256 9eb4effa6b02b43d66a23bc84f3d19f140111b2e5815cd5973934c9517971693
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    execution

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Executes dropped EXE

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks