General
- Target a4fee95648b1d3fb103118ac4552f8f0eb2b4c428e387655b690a107311cd27f
- Size 1.9MB
- Sample260813-ss3zesbp5t
- SHA256 a4fee95648b1d3fb103118ac4552f8f0eb2b4c428e387655b690a107311cd27f
- MD5 c9f8669c41fb34bced068d2fcc2bd057
- SHA1 b806056c2980fda05c2d192ea23c2c1edee6d9e5
- SHA512 f0b761925878eaeccc7b1dce72c2b626ad12798f94d2141a456df89b863274da620a7181e96689f3d02a97e34f656b5bf4576b53eec509822315f1226276d79b
- SSDEEP 49152:78DPW/Oi+JcFOAROMGEDSWk3Av+gW3dwiCGNRZTHG3O1KZ9MYAFY2G:4TW/Oi+JcFOA4MGEM3AvWCiCGNzFsZmI
- TLSH T11C9533D0A1A68FAE54B9131D95EAD9948273B849CBCAB1316F05EF73BC0044FE911DF8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
ENQUIRY - E602.js
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
ENQUIRY - E602.js
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target ENQUIRY - E602.JS
- Size 4.0MB
- SHA256 e19b0832f7f3b77fb7b3ddacd1da8cfaf1e64970e8f8505e35026ac48e62f730
- MD5 996ed4cf17253c182c7ad6b01f7c3970
- SHA1 7fe3799b9ec493f069cb7fb19a7140f9bfd63230
- SHA512 80b8ffda2bd2e8750a74d1563a9876bb3e2fd2b872ef98fa4ef83f20732069056dbe1abe130e02e73b45d1441701b9838d2b9a6b471aa7952592788a8f0e7226
- SSDEEP 98304:IlaiEcKsTs4p8Y141EoHlJMPPMJ9RtpmZgEnAYQoOK43YRcUjvNtivjJwqLKS8:6aDMbpj14aoHz8+tpmCEnASU3YR6JkS8
- TLSH T17816F751938498327B25A77E85B6DB30A61A628760F6CF44346CD308BBACD275B4CFD3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Suspicious use of NtSetInformationThreadHideFromDebugger