General
- Target Document-20260828140852985.js
- Size 3.2MB
- Sample260828-rf1svsyfkh
- SHA256 a6ff4733abed3f8a703a2edb75a9c2d1990a26665e2391d65522939b332cee3c
- MD5 4bc27987234cd211a2b94ff5a9e1c126
- SHA1 84c1ccd86cc789368fac0581a2f9ab81b2fa428a
- SHA512 72b848e19ef3065f43af2cbfed35e06f8cb80e7d370386449ecc5659df6d018100776e15857b09e720bbbbdf1a4395f5d8ab54ee9b49ca801f931767f6336134
- SSDEEP 49152:kvNs3KUScYnvTK9MgMupue88mwrVhmiyG275m+z1IqusYQ:4
- TLSH T17EF50221C49B6C3A87F893A552328BC8F3DC76F5401BF99A7979F68D203BEC10557868
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Document-20260828140852985.js
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target Document-20260828140852985.js
- Size 3.2MB
- SHA256 a6ff4733abed3f8a703a2edb75a9c2d1990a26665e2391d65522939b332cee3c
- MD5 4bc27987234cd211a2b94ff5a9e1c126
- SHA1 84c1ccd86cc789368fac0581a2f9ab81b2fa428a
- SHA512 72b848e19ef3065f43af2cbfed35e06f8cb80e7d370386449ecc5659df6d018100776e15857b09e720bbbbdf1a4395f5d8ab54ee9b49ca801f931767f6336134
- SSDEEP 49152:kvNs3KUScYnvTK9MgMupue88mwrVhmiyG275m+z1IqusYQ:4
- TLSH T17EF50221C49B6C3A87F893A552328BC8F3DC76F5401BF99A7979F68D203BEC10557868
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.