General
- Target POTWIERDZENIE_PŁATNOŚCI_TRANSAKCJA_ZAKOŃCZONA_281000042.lzh
- Size 469KB
- Sample260721-pl98dabm8y
- SHA256 058a88c21a4d34aa57e6cfbc1dadba22bbae0c4ec6141075965ed66f707e6aa4
- MD5 006b4194c6da5c67e3ebfd46f141d4cb
- SHA1 e3403bdf84edd64022b068a4c6b93553088c1234
- SHA512 dd067f816b05cbc1309a220e76c31bb18664ed80007a3240782e2f9768ab92b23db98297d7d169c878f921ceb9c0438f1ad5d7d6e937f252baa6b6c9a95fb9e2
- SSDEEP 6144:7czmNfYqw1tkKDTirc13a750yty79r0axGh3nG6l/3ZCsZcLlIawuHiT7rWqmUKZ:Iq6LXkUa40H3H53ZNcLlIapCTRjk
- TLSH T134A423A39EBE4364A69340D5AF630CA479B1B397F3498916D324CADED07C3105A63FB4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
POTWIERDZENIE_PLATNOSCI_TRANSAKCJA_ZAKONCZONA_281000042.js
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
POTWIERDZENIE_PLATNOSCI_TRANSAKCJA_ZAKONCZONA_281000042.js
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target POTWIERDZENIE_PLATNOSCI_TRANSAKCJA_ZAKONCZONA_281000042.js
- Size 1.5MB
- SHA256 1ae08131cd9f6cea99f046b4a016e2630a2e9b8c2562e498cf2a414838b51653
- MD5 d4b28da1db42c3e3f6cb509cae324f59
- SHA1 e1c9687f1ecf219c7a5ffbb8b5cffaeea7788031
- SHA512 efcbc0028f86ff1365987168b090f33e7f2b261f33e769b5c4acf27eadbe4e8ee0aab75d766552be3caabf208756face206742b33febf2a9feb406516ffa79ee
- SSDEEP 24576:x7bj6U8zEAaiD9mwVRQ6j5UpnydmQlF+b4k3eQHDwR:x7bj6U8zEAaiD9mwVRQ6j5UpnydmQl44
- TLSH T1FE758F8169442656182B0F085D71710F4B2F336C9839B1FC1F2A16AD4FFBC6F89AA76D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.