General
- Target 152a792ac17c28fe282d132de2fd51aaa31cf440150633370604afc091723a51
- Size 1.6MB
- Sample260717-a5wf1agy6j
- SHA256 152a792ac17c28fe282d132de2fd51aaa31cf440150633370604afc091723a51
- MD5 798b1c5ee0c12fc5c43cb6aa0f62669b
- SHA1 5de5a943e4e4315ebc3af57254fc4e4d9af103d2
- SHA512 49a31c6c72dbe55a659255cabbe39ab0365a81ca762864e10027283e6a34b0724d6c546c9218ddc6dbf86e03282d0f6de59b4954212df9d13b200c3cdb2b89e4
- SSDEEP 49152:exzYV0w2Hcp5Xks4yruyNBhV0a5vn2R6x0EB:e0V0wkSOnyz0kvB0Q
- TLSH T14F8533C9E94C982FAC33B3E7B71CA5062883C9F13F5C59CE785F440864525F2C64A9BA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
20333972248-01-F005-11992.js
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
20333972248-01-F005-11992.js
Resource
win11ltsc2024-20260710-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 20333972248-01-F005-11992.JS
- Size 3.8MB
- SHA256 d2b4d9a470030775fccdf5269b13c7b9f276264e348ee4aa501d295e244e5a86
- MD5 c0dd6731f2114c6450da76f7dd2f4ccb
- SHA1 73bd0b60ecf70c85cc6623d6a8ae01a5f4b63624
- SHA512 646e889f25b264357635ff82892e8883d371a899d924891f2dc58b20a093d6039f3beeb32680ad8f63f785430bf85b12b4008c147c6d25d813afe126851adfce
- SSDEEP 98304:Z2HbC80noBIoDqzOmghk4TK52O4V1BzTv//JxLAFpaSlNDO8mMIyi3WVQNseXWKE:Ui5oFhT2A/XzTTAjayDnIy3P7uQ
- TLSH T14D065900C72C68B0A9BEDB2DD576AE6C064E2043219DDF2D34FD5324B656E57A38C9E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Accesses Microsoft Outlook profiles
-
Suspicious use of NtSetInformationThreadHideFromDebugger