General
- Target k4aCLAB2FKfpPxJ2_J12bHbnSCtapeJZh0PtUw6lr5Q.js
- Size 1.5MB
- Sample260818-y4v1vabc24
- SHA256 9386822c007614a7e93f1276f89d766c76e7482b5aa5e2598743ed530ea5af94
- MD5 332bd820e9073f66c238ef7a1a704537
- SHA1 5a9247d72cc0140782851c5fa5c0b2d0c7cd5f68
- SHA512 6c1d04b798cd8696a04aeedcda6097e8e0e0bc844c755700bdb0b1146ce323dbcf89c0738d80b2ee29f5632f53d19db8a9675ef3461365fb21cd43c55a8d435a
- SSDEEP 24576:EAHi0XKqOQDpOeP/MduYeI3LukTAQQuZ8nebYxAGBr9N4FF:EAdXK4OWMdu63S4AlLQYxAa9N4b
- TLSH T1A7658A58B992183E9724530DF341CC35112A9BC226E2DFAC25B019E2673ED6B8D67F37
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
k4aCLAB2FKfpPxJ2_J12bHbnSCtapeJZh0PtUw6lr5Q.js
Resource
win10v2004-20260513-en
20 signatures
150 seconds
Behavioral task
behavioral2
Sample
k4aCLAB2FKfpPxJ2_J12bHbnSCtapeJZh0PtUw6lr5Q.js
Resource
win11ltsc2024-20260709-en
20 signatures
150 seconds
Malware Config
Targets
-
- Target k4aCLAB2FKfpPxJ2_J12bHbnSCtapeJZh0PtUw6lr5Q.js
- Size 1.5MB
- SHA256 9386822c007614a7e93f1276f89d766c76e7482b5aa5e2598743ed530ea5af94
- MD5 332bd820e9073f66c238ef7a1a704537
- SHA1 5a9247d72cc0140782851c5fa5c0b2d0c7cd5f68
- SHA512 6c1d04b798cd8696a04aeedcda6097e8e0e0bc844c755700bdb0b1146ce323dbcf89c0738d80b2ee29f5632f53d19db8a9675ef3461365fb21cd43c55a8d435a
- SSDEEP 24576:EAHi0XKqOQDpOeP/MduYeI3LukTAQQuZ8nebYxAGBr9N4FF:EAdXK4OWMdu63S4AlLQYxAa9N4b
- TLSH T1A7658A58B992183E9724530DF341CC35112A9BC226E2DFAC25B019E2673ED6B8D67F37
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
3JavaScript
1PowerShell
1Windows Command Shell
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1