General
- Target 28082026_0316_26082026_RFQ 6060098403.rar
- Size 26KB
- Sample260828-dsty7asgrf
- SHA256 0178a6ee45e3a7bad10ca48fd60f96b303658bd2f80b5e6ad8f2362a20e716d9
- MD5 75a9d02d6cbae2bf50f9d6b39810221d
- SHA1 f177ffe5e3142da0f493441a0edc9316682480d3
- SHA512 2326926944718e3352b116a1afb432e86806437e5b56a07656907d0face29a6aec1d218ecb71907419ac6b5b920d80faa6b95817659fa7f1f22ae4c54ee29973
- SSDEEP 384:jTbj0HXmzIJuDHimViQulsP4TUXiTG+jXrheaDtqI19J5NYsHs18:jPS20wuHQui44XOhfq2Lvc8
- TLSH T1A0C2D1A0519CB7009B35743AEF1D966925DFE678C890BAF9A2F036F50C04A2DB584DEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
RFQ 6060098403.js
Resource
win10v2004-20260513-en
4 signatures
300 seconds
Behavioral task
behavioral2
Sample
RFQ 6060098403.js
Resource
win11ltsc2024-20260709-en
3 signatures
300 seconds
Malware Config
Targets
-
- Target RFQ 6060098403.js
- Size 782KB
- SHA256 7b7023dc4ed1a1b151a8fcdac6c8857e3b9dd52bf8c821af55d130bbb71122d7
- MD5 c2695f037ce865ddcfd74ce9433d3254
- SHA1 061c65e0630c498ebd235164daa8d51db70dc876
- SHA512 ae8f37501e0a49be0e0ceefede1fae9a4ce8a7f2c6c91d53c5f2c8bf5498655dc7298a078dfe3f59f8dd765da32210ebb566ed3024e990d7cd6083d2c682f051
- SSDEEP 192:ebywme8ahSt76ZrHX47oeQ0YD0JBjYt+M/ir8zYcD9BCMOUA2RtcxACE707H01/3:6
- TLSH T124051F77C2BD2F2EC4275A58CD7A3C0C68B054A2074EF879EE3764C9D57CBD966A01A0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.