General
- Target JSload.hta
- Size 14KB
- Sample260815-ap29lsck6w
- SHA256 8f1a14fb20df465ce4946cf546dfd4ced1eba5b160c6f36e6bd7177901bc82a9
- MD5 a0c51c8fb649e848ede220292d05b89f
- SHA1 9f2b9e0dc6a6f130389e9b0560884225175db8d8
- SHA512 3354b16551e259164f3cae62cf3df442cc680eca03784345213b0189cade1c9cdccf31f14835e9c48d7938fd8dd52cbc2bd1d88e6c2ee100b8f7f263d242eb28
- SSDEEP 48:3/o52Jio5xEJYYPa95uuuugBJ+kQO4tKPpuuuuuuHto5Ro5fSIbJ/o5UG:PoQJiofEJRy96BR4ao7oFSMJ/op
- TLSH T1D36251BAAB38F5E0C2C7D4FC140E7CC6140CCA0BD124AE7E785D4537931862D8A2A06F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
JSload.hta
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target JSload.hta
- Size 14KB
- SHA256 8f1a14fb20df465ce4946cf546dfd4ced1eba5b160c6f36e6bd7177901bc82a9
- MD5 a0c51c8fb649e848ede220292d05b89f
- SHA1 9f2b9e0dc6a6f130389e9b0560884225175db8d8
- SHA512 3354b16551e259164f3cae62cf3df442cc680eca03784345213b0189cade1c9cdccf31f14835e9c48d7938fd8dd52cbc2bd1d88e6c2ee100b8f7f263d242eb28
- SSDEEP 48:3/o52Jio5xEJYYPa95uuuugBJ+kQO4tKPpuuuuuuHto5Ro5fSIbJ/o5UG:PoQJiofEJRy96BR4ao7oFSMJ/op
- TLSH T1D36251BAAB38F5E0C2C7D4FC140E7CC6140CCA0BD124AE7E785D4537931862D8A2A06F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.