Extracted

Extracted

• • Target
    Scan00922718082026_OutputACK-ref18082026Completed.JS
  • Size 4.2MB
  • SHA256 8674490a5351246f451618e4a156a3c9285a808b99529d3c3344d1a7b41f02e6
  • MD5 a790a92358185037f59da27ca43c05ee
  • SHA1 cfde5ba83913492377dce126469eec8853e0355a
  • SHA512 e86ae5550731f3fd50da3f1381ff36b76baeb0f01dee93c4b8da6aec9b6e6c3566cbb83ef8ecfc2d5f99e33ee4c0a927f8ceadf26329c989d1935db05c3b34f6
  • SSDEEP 98304:fohZMI1GiMW+o1ACeu4nopKkxdSTsIDPqaeI/VzHNQ+2b8GQdH4LKQMtWV5yqZYK:fohZMI1rMXo1M1KKkxdSTsIL3dtztQ+g
  • TLSH
    T10B16B6496784E3327B606B4D6B368930B94953A30CC9CB10316CE219777FD9F67AC6E2
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  collectionexecutiondonutloaderphantom_stealerloaderspywarestealer

  • Detects DonutLoader

    loader

  • Family: DonutLoader

    DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.

    loaderdonutloader

  • Family: PhantomStealer

    Phantom Stealer is a stealer written in C#, forked from the Stealerium family.

    stealerphantom_stealer

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection
  behavioral1behavioral2