Extracted

Extracted

• • Target
    GIE_ENQ-1080-2026 RFQ.js
  • Size 2.5MB
  • SHA256 399390fc1381845ca3d505b545fc1677f48fdf9c119fbdbeb5ffff2ea3d09f39
  • MD5 731e1ed9f6b124979879fd0b3adb1d39
  • SHA1 9649046544fea1165d0969a56b6398e2e40b1efb
  • SHA512 578537d8a9ba064701ae6e875d5d78eddd8638c255adf51c29ae04be6f1fcb41dbde768291b323834c09440269d92f8d47ce8f6f034722c8af03076540181fb2
  • SSDEEP 24576:6zlNeWZKU5RKYkGMeFzrUHynaCKGuOlUWWVi0zuMppGJz9N6l/e1BAw7Ej+l0nHE:gVbKymKlO6MMh404IVEynTDiVO3
  • TLSH
    T10AC5419D39CCA1396016EE42CE6D7922582FBF2F5F4F0F86236D868C0F9125871579CA
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  collectiondiscoveryexecutionmassloggerpersistencespywarestealer

  • Family: MassLogger

    Masslogger is a .NET stealer targeting passwords from browsers, email and cryptocurrency clients.

    stealerspywaremasslogger

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Command and Scripting Interpreter: PowerShell

    Run Powershell and hide display window.

    execution

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

    discovery

  • Executes a VBScript file via the Windows Script Host.

    execution
  behavioral1behavioral2