General
- Target 062G002289.JS.js
- Size 3.8MB
- Sample260714-mbb7gsds4w
- SHA256 131e5a9bdeea0a91fb744d30aef33159f1cb7882d113500a26d61a79027d49df
- MD5 e8b0a12fc2241c24227571a5265d40cd
- SHA1 b650ea99883b358124fd28725e52598f04243916
- SHA512 b6be9edec271aa2e30a76577079e5790e789cd281783dfe1d7f15641ee3874e36179beb9ebe8b9296a2fab1b6e431a762a6def2ae88c918a38014c8938876122
- SSDEEP 98304:6dYYxa7FpnfQhYSnSuNLn674a9tN6XQBxp5evKiJc2A5AjOM4zT:DLPfQ+SnSuN+f6XmXf51
- TLSH T185064B1287286471B62ED32CE136AF68458E2007219DDF5D34BE0764FB56F47A78CAE3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
062G002289.JS.js
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
062G002289.JS.js
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 062G002289.JS.js
- Size 3.8MB
- SHA256 131e5a9bdeea0a91fb744d30aef33159f1cb7882d113500a26d61a79027d49df
- MD5 e8b0a12fc2241c24227571a5265d40cd
- SHA1 b650ea99883b358124fd28725e52598f04243916
- SHA512 b6be9edec271aa2e30a76577079e5790e789cd281783dfe1d7f15641ee3874e36179beb9ebe8b9296a2fab1b6e431a762a6def2ae88c918a38014c8938876122
- SSDEEP 98304:6dYYxa7FpnfQhYSnSuNLn674a9tN6XQBxp5evKiJc2A5AjOM4zT:DLPfQ+SnSuN+f6XmXf51
- TLSH T185064B1287286471B62ED32CE136AF68458E2007219DDF5D34BE0764FB56F47A78CAE3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Accesses Microsoft Outlook profiles
-
Suspicious use of NtSetInformationThreadHideFromDebugger