General
- Target 17082026_1539_15082026_obfhote - Copy.js.zip
- Size 15KB
- Sample260817-s3slfatzdx
- SHA256 efb7cbf94324fd80918848a22cf0c3d799ca5d6e0c30c5cce8ee660f0372d79b
- MD5 2cdb5e672febf81ef571f2d4198578cf
- SHA1 9cc5c9b0bc88ab5ed75ff2b625f54dbd4f8ce1ad
- SHA512 ccc62ad61264204c39be8133d792f3dacb3ce0475fadc6b9c27d940161166ea6647c9b6c5879665e3dd8bbc0c7821fec2c5572a7c8febf09f7445f2d962b95f2
- SSDEEP 384:GnzMgI9jQVARTfJIx8LUWvjhbwZAsriJ1F:x9j9TfJIa36WJ1F
- TLSH T1D662C030471B0BBEDD5444BF13C2FB7399289BD96A96CBC65B8BA6E42E05D64036C3D0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
obfhote - Copy.js
Resource
win10v2004-20260513-en
8 signatures
300 seconds
Behavioral task
behavioral2
Sample
obfhote - Copy.js
Resource
win11ltsc2024-20260709-en
7 signatures
300 seconds
Malware Config
Targets
-
- Target obfhote - Copy.js
- Size 27KB
- SHA256 b1094de3f81d683499d5b97c6793338ae30c181baf6c2978c1a9dbde5f3a82b5
- MD5 9394f9acb8a0880596ac936be0b92976
- SHA1 9a5ff22fd44eee601d08b676fa653e2a264937da
- SHA512 6f69bb31d29992681013fc6a4cf54b657c66e2f8f7ef414a4838bd35816e5871864d70fbbfde4366ad126d824d61ef3dbdfe381883f11c8007253768fa37418c
- SSDEEP 768:TQcF4ZYQFWIUfUKNUtRHhQNq8nTcX7pEPSeDqskww2NHg7mC:T9KNKwqNPngXOWskKHQ9
- TLSH T197C28C6B2E23FCF806A3BD51DCDC22B6FC28062589E211995D0FF7304629B257C924CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.