General
- Target RFQ.js
- Size 165KB
- Sample260804-p6ra1abc49
- SHA256 c0adb0e65a915ee89e148ac52f23c8d04a377c2e2c1209a8ddc88479b8bdfe49
- MD5 caaefa7d1cfcfc3aa1713c1cc10e1130
- SHA1 cc4d21054143987ea7ca39e951ae95f105073d6f
- SHA512 506de612a19bc03c532b6b02ac9b8a84b6e592bd9ac9fe027af9a853e3e0197c7784509f6332b7ca97e3f80f7bd4758a6a8116e18c561e41b7a7bda9238c721c
- SSDEEP 3072:XRwtMFRiP0sS4s70uxgK5n5PHI+Ibtn+E/MFHwk0CA5sy6QtUmc:hwtMriMf7Rx7Po+IB+ZFHwk9A5w03c
- TLSH T1C5F3B09196802B78FAA44FDE101D11A6D2F2F1663D2A2346FDB26F47F736D14B834A34
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
RFQ.js
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
RFQ.js
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target RFQ.js
- Size 165KB
- SHA256 c0adb0e65a915ee89e148ac52f23c8d04a377c2e2c1209a8ddc88479b8bdfe49
- MD5 caaefa7d1cfcfc3aa1713c1cc10e1130
- SHA1 cc4d21054143987ea7ca39e951ae95f105073d6f
- SHA512 506de612a19bc03c532b6b02ac9b8a84b6e592bd9ac9fe027af9a853e3e0197c7784509f6332b7ca97e3f80f7bd4758a6a8116e18c561e41b7a7bda9238c721c
- SSDEEP 3072:XRwtMFRiP0sS4s70uxgK5n5PHI+Ibtn+E/MFHwk0CA5sy6QtUmc:hwtMriMf7Rx7Po+IB+ZFHwk9A5w03c
- TLSH T1C5F3B09196802B78FAA44FDE101D11A6D2F2F1663D2A2346FDB26F47F736D14B834A34
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.