General
- Target 0ec8269ff81cec0a156dd64968874ffbb7baa79de98a1c5b81466b57b48a8fdf
- Size 1.7MB
- Sample260714-smp6dafv4n
- SHA256 0ec8269ff81cec0a156dd64968874ffbb7baa79de98a1c5b81466b57b48a8fdf
- MD5 942bb175f0ba746b807d1ddcb2b075c2
- SHA1 95b2a1bfac018973dbf835e371bcab2ebd1694ab
- SHA512 d83858713d324be3d0f6782945de6fab182b599b30ce72e390446397a8c7448d356e15e130a34d176a744f620c8e645eb89423abbc9cf249f8b95177d95a9145
- SSDEEP 49152:XKd0CaAJyZDCKxAUCM1rHc59KuKiJtHDEuxr+2FR7t8lMCqADQ7tj6fHkR:uhYI0AUCM1rHc5EAtjDpfFR7a2jAysfE
- TLSH T1DB8533D8C90E1A35C1E19EF683C2D59C8E3E17D0322889D56FF2B4C2D67632D9A694E1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
062G002289.js
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
062G002289.js
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 062G002289.JS
- Size 3.8MB
- SHA256 131e5a9bdeea0a91fb744d30aef33159f1cb7882d113500a26d61a79027d49df
- MD5 e8b0a12fc2241c24227571a5265d40cd
- SHA1 b650ea99883b358124fd28725e52598f04243916
- SHA512 b6be9edec271aa2e30a76577079e5790e789cd281783dfe1d7f15641ee3874e36179beb9ebe8b9296a2fab1b6e431a762a6def2ae88c918a38014c8938876122
- SSDEEP 98304:6dYYxa7FpnfQhYSnSuNLn674a9tN6XQBxp5evKiJc2A5AjOM4zT:DLPfQ+SnSuN+f6XmXf51
- TLSH T185064B1287286471B62ED32CE136AF68458E2007219DDF5D34BE0764FB56F47A78CAE3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Accesses Microsoft Outlook profiles
-
Suspicious use of NtSetInformationThreadHideFromDebugger