General
- Target 36351f8dda2648ecabb63820a9eeb4b00ebeb6177ee6a3f8b7671a7e62003af3
- Size 269KB
- Sample260802-cl2vsa1xev
- SHA256 36351f8dda2648ecabb63820a9eeb4b00ebeb6177ee6a3f8b7671a7e62003af3
- MD5 6f36d48f1db87213303b3270684b0fdb
- SHA1 b612111026a235aac14a536edb20e50b2420e184
- SHA512 78f65897c45c763c858f56c63e8da09698df28ece5e175f5b8e62841d4677102f37276f15a72032e62fed11464e29e96c8f3d71d374c06e82b5d8eff4bf69c0b
- SSDEEP 6144:3czNFDNLkellJ8fDXELSOjvUCVGXhliVhLyskKkGVh:3cpxNd3J8rEljc2ahliEHGVh
- TLSH T1514423E5423A2DEF8504E9CB90C243EB985D0861E02E1DE19D709C3D5CE5EFBA9753E4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
Payment_Advice/Payment_Advice.js
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
Payment_Advice/Payment_Advice.js
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target Payment_Advice/Payment_Advice.js
- Size 1.5MB
- SHA256 cefe2c907380c4eced23b62e3444eac37cb024b131c567445335390776d879a0
- MD5 d6ead6c27d86f0995fb32b782a3e1dc7
- SHA1 4e46bb7642d5431bbcf7f0ffc9efb6e618d8d96c
- SHA512 adf8bb44c0882b520acad1a6ee89b65ddb7cd58105c37ae31bba0a9e4a5160ac2df84c5731d88edbf07daf8f1fa26fd879e848a452aa5443dac9f085f8649627
- SSDEEP 3072:wI8WWeac8esa9YIg9iZmNgSnXi1c3QaLg/8Zh2UYSDzhsL54dIs+3kH5FmYWHISB:f
- TLSH T16E75977DCC2C133EC6B6D12CD58E8E06F9E2495B771CDE4690D3A3A6A257583B8C205E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.