General
- Target Quotation FT-QFL-2026-048R.zip
- Size 170KB
- Sample260814-kfky3syeqa
- SHA256 bc5e95bfb8f0b50a0b9e9d3025ef99e5a3e7e1f04b53ca09fa127bb587a8e7af
Score
8/10
Malware Config
Targets
-
- Target Quotation FT-QFL-2026-048R.js
- Size 538KB
- SHA256 07fe757185dc7d8863d55091d3f3f214fedacf63f4a4a4dd38f174b498f05cf4
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Indirect Command Execution
Adversaries may abuse utilities that allow for command execution to bypass security restrictions that limit the use of command-line interpreters.
-
Registers new Windows logon scripts automatically executed at logon.