General
- Target 2f6891e62bc0d04a2cb8694ce420e170dabb758f0ae24b74f917e18124d4d5e0
- Size 257KB
- Sample260729-bn3dnatsdx
- SHA256 2f6891e62bc0d04a2cb8694ce420e170dabb758f0ae24b74f917e18124d4d5e0
- MD5 2ae24065dc64c2ea8420ba7435248e17
- SHA1 2c78c016d85cf63feb3dd17d206c7c4d455c770a
- SHA512 2916859db6a7b2d31c3ffc99568cd9508da66b0e9dd98856bce3543cf2e54a77ba34f743728cb3951aa0a19bc120e71248593363ab38d1ebec3f8b288c4d07cf
- SSDEEP 6144:jDs51Eigm4kA4RwTmLZllEQlWk2nJzz8J:3ugm3CQEkizzC
- TLSH T1F2442300D9375EB9A1063964165B80213AE54F32A7F24F9D3CE798027E72D9D11FEEC6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
Purchase Order ME83E0340372.js
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
Purchase Order ME83E0340372.js
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target Purchase Order ME83E0340372.js
- Size 1.5MB
- SHA256 15f74f7119eb7181477e76b4c1e1fefda6dff77fff50f48a2cb3467886d2f184
- MD5 8ff51f10954ae1452c2f6cb39e01d51d
- SHA1 92031968595d52d80e029be4c5a004c83dce7b4d
- SHA512 59702f29f26892885f58379b5fa3eee9b081d3b5b89f2438b1a928f9f1739f6db2afc4492515ab52d073ea80e1d89c11f5b490fc41e38b912b05bf1369126df1
- SSDEEP 3072:TSs/nXTM6ta4mth0H4JEH+hdW5S0Rsvr9+bMaGhfLzFjBBkSdWDRg/o8jEKsrolH:K
- TLSH T165759E3CCD2C037ED276D12CD48E8F06F9A2594B761CDE4690D3A3E6A267583789319E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.