Overview

overview

10

Static

static

1

comparativ...025.js

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    muestra.zip.malz.zip
  • Size 908KB
  • Sample260717-va3xtabw7w
  • SHA256 ecdebfc2a30eb9f8f299c3d5f9d36e7ff92765ba8d3d488228ba39a13b3e7ee6
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
discoveryexecutionpersistence

Malware Config

Targets

    • Target
      comparativo_informacion_fiscal_2025.js
    • Size 1.6MB
    • SHA256 aa9f18f9b010b4fe85fb7cb83431555a4037eb296cd277a9c7bd1d289268763c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    discoveryexecutionpersistence

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks