General
- Target POTWIERDZENIE_PŁATNOŚCI_TRANSAKCJA_ZAKOŃCZONA_382000015.lzh
- Size 469KB
- Sample260722-pncpwsvcqa
- SHA256 e080c7360e11b1e661d677e2b3d57576b54dc2553bc1bd1f4b3000b7272eab7b
- MD5 ee875499db196d10593b18ca7fd00f48
- SHA1 2f47cf4da5616039d712a0d37c965c3243d0960a
- SHA512 56f2b21210d710ebf496c8fa8f3eb0fb0023674272bb784aa6e72273b43b8bb514198f0ae03017b341e85b45b6dc9a7756d8fc914f2a45f776591478b51ec04a
- SSDEEP 6144:DczmNfYqw1tkKDTirc13a750yty79r0axGh3nG6l/3ZCsZcLlIawuHiT7rWqmUKZ:Aq6LXkUa40H3H53ZNcLlIapCTRjk
- TLSH T10BA423A39EBE4364A69340D5AF630CA479B1B397F3498916D324CADED07C3105A63FB0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
POTWIERDZENIE_PLATNOSCI_TRANSAKCJA_ZAKONCZONA_382000015.js
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
POTWIERDZENIE_PLATNOSCI_TRANSAKCJA_ZAKONCZONA_382000015.js
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target POTWIERDZENIE_PLATNOSCI_TRANSAKCJA_ZAKONCZONA_382000015.js
- Size 1.5MB
- SHA256 1ae08131cd9f6cea99f046b4a016e2630a2e9b8c2562e498cf2a414838b51653
- MD5 d4b28da1db42c3e3f6cb509cae324f59
- SHA1 e1c9687f1ecf219c7a5ffbb8b5cffaeea7788031
- SHA512 efcbc0028f86ff1365987168b090f33e7f2b261f33e769b5c4acf27eadbe4e8ee0aab75d766552be3caabf208756face206742b33febf2a9feb406516ffa79ee
- SSDEEP 24576:x7bj6U8zEAaiD9mwVRQ6j5UpnydmQlF+b4k3eQHDwR:x7bj6U8zEAaiD9mwVRQ6j5UpnydmQl44
- TLSH T1FE758F8169442656182B0F085D71710F4B2F336C9839B1FC1F2A16AD4FFBC6F89AA76D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.