General
- Target 3f9d1424039f3bafa7578e8b5659f68e0e86b5c635c6678d902cf58c0eb9f366
- Size 256KB
- Sample260730-j8m4gatgnf
- SHA256 3f9d1424039f3bafa7578e8b5659f68e0e86b5c635c6678d902cf58c0eb9f366
- MD5 f29c24be5cb02c2173d520010d28041b
- SHA1 7f2054fdf163949b037c68bcdd06878b2cb46a96
- SHA512 0bde5adcbb80f85b84da24b19a95b8c2f781c266100c556daaec0fa4f46fb64062a73ccdcce3fe5978902e19b0a4dc71684e9f4779d1b20f164424d07b1a5b62
- SSDEEP 6144:f7b9E36zRCegKGkO+PYO1Fe1vkhZg9zqSX8sMc6iIyjKtEiz3:f75W6zYe9OkI1vkh5sbnIAKyC3
- TLSH T1E74423C1C3A6D417DCE917FC8C227B6759A8F91108132858EEB7B5BA2BCDF61C2E5211
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
PO#12765315/PO#12765315.js
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
PO#12765315/PO#12765315.js
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target PO#12765315/PO#12765315.js
- Size 1.3MB
- SHA256 79ff78294d12ddede8fc5e64c4dea1d792f5db89867bb73704d5a32baf663c1c
- MD5 a1d33e7cad3e438ca6f37df1df9ca6d3
- SHA1 484b3c0a3d766ebd306f3f6c0c53c98153678876
- SHA512 ed37461f0e1775af48c6e95104260d495fd0e30159ec847bb25c7b578bb74224db40eaa9f370c8b5fee404113b618fba4d07a5ad5b844091f00ef8e1c5537339
- SSDEEP 3072:ZfZ0Wvaxun+R4Opr5Xc41jq9pL9rB0Zuq7TW++T/G/BlwgxohFOxPxrVFc/8584d:C
- TLSH T19E55E67CCC18927EC2B3D629CFC78A07F8565817360DF94AA0D3735B9522293B8E256D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.