General
- Target Notice%20from%20Tax%20Departmen.dmg.dll.exe
- Size 257KB
- Sample260729-jsjfcaydmg
- SHA256 b9ddd7f8aaeb1247eaa881caf75f8749d4b7c4442408c37d9bb57ad9927ee19a
- MD5 4d69a7b084a2c4486a703e4c079079aa
- SHA1 0ea4745516c343e3e2f85b1c6d354046c7c25a79
- SHA512 3ade1ed260dc8f3225d90b42b4252f3624f129487d71e2a7c8d6b9c820141ccf7a15221a3d5e8ba480310a796b47d10f83a0d75ef59c682538a0ade9ebfa853a
- SSDEEP 3072:UY7JNH56UcFkfenaB0DBmAV6t81zetG3Inv7Tl48LWr9Ms8Yfk2ErRjV:59VzfenaB0Dkk6OhnfV8YGVh
- TLSH T10A446B5577A40CB9E9B7823CC9938606E7F2BC160760E7DF03A0466A9F2B7D0953E721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Notice%20from%20Tax%20Departmen.dmg.dll
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
Notice%20from%20Tax%20Departmen.dmg.dll
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target Notice%20from%20Tax%20Departmen.dmg.dll.exe
- Size 257KB
- SHA256 b9ddd7f8aaeb1247eaa881caf75f8749d4b7c4442408c37d9bb57ad9927ee19a
- MD5 4d69a7b084a2c4486a703e4c079079aa
- SHA1 0ea4745516c343e3e2f85b1c6d354046c7c25a79
- SHA512 3ade1ed260dc8f3225d90b42b4252f3624f129487d71e2a7c8d6b9c820141ccf7a15221a3d5e8ba480310a796b47d10f83a0d75ef59c682538a0ade9ebfa853a
- SSDEEP 3072:UY7JNH56UcFkfenaB0DBmAV6t81zetG3Inv7Tl48LWr9Ms8Yfk2ErRjV:59VzfenaB0Dkk6OhnfV8YGVh
- TLSH T10A446B5577A40CB9E9B7823CC9938606E7F2BC160760E7DF03A0466A9F2B7D0953E721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE