General
- Target 1e1c360bfa431769ef9d5c94fd0e2da46a4a3a347f0a6df7d922989e5db5d76e.js
- Size 17.9MB
- Sample260831-nfcjgss1ev
- SHA256 1e1c360bfa431769ef9d5c94fd0e2da46a4a3a347f0a6df7d922989e5db5d76e
- MD5 15e160cbaa4d5fdfe64db71dd55c4436
- SHA1 c2aee580f4106960d0b84fde4ca9638d84ff69b5
- SHA512 73e73500a88dd303654d66f70c6264f260e6843be903c0ec89c8c7d15ef16b71dcb587adcdca01300f53e74a76b9ed76c83204b93b5549ba1d233ce87e0b17e0
- SSDEEP 393216:LgIPnUwvYyWQFEKZiDicHzBez2l+AUZahjF+nTaj+nTa2gIPnUwvYyWQFEKZiDiI:LEDyUKYDiMAg+zUhjsLFEDyUKYDiMAgz
- TLSH T197178D49D285B392C0EC1A98CE0D7EC69B7D696BCF60D40B7338D6AC9BD8FE57204251
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
1e1c360bfa431769ef9d5c94fd0e2da46a4a3a347f0a6df7d922989e5db5d76e.js
Resource
win10v2004-20260513-en
7 signatures
40 seconds
Malware Config
Targets
-
- Target 1e1c360bfa431769ef9d5c94fd0e2da46a4a3a347f0a6df7d922989e5db5d76e.js
- Size 17.9MB
- SHA256 1e1c360bfa431769ef9d5c94fd0e2da46a4a3a347f0a6df7d922989e5db5d76e
- MD5 15e160cbaa4d5fdfe64db71dd55c4436
- SHA1 c2aee580f4106960d0b84fde4ca9638d84ff69b5
- SHA512 73e73500a88dd303654d66f70c6264f260e6843be903c0ec89c8c7d15ef16b71dcb587adcdca01300f53e74a76b9ed76c83204b93b5549ba1d233ce87e0b17e0
- SSDEEP 393216:LgIPnUwvYyWQFEKZiDicHzBez2l+AUZahjF+nTaj+nTa2gIPnUwvYyWQFEKZiDiI:LEDyUKYDiMAg+zUhjsLFEDyUKYDiMAgz
- TLSH T197178D49D285B392C0EC1A98CE0D7EC69B7D696BCF60D40B7338D6AC9BD8FE57204251
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Suspicious use of NtSetInformationThreadHideFromDebugger