General
- Target 14bb4622cdf8882c899f3e5381a972ddaed0508c81a7589d640d6c38929ceb1d
- Size 2.4MB
- Sample260831-r89apsw1ew
- SHA256 14bb4622cdf8882c899f3e5381a972ddaed0508c81a7589d640d6c38929ceb1d
- MD5 3b6bc0e8ce347d8eda195ffd31f5b16b
- SHA1 e911cf74d85db6c6533777f0527e0ec85fdb0766
- SHA512 8a6b3cd516aaee8e6f25a176e296bf2e83619d45a9cb12bcf1eb70869a50202745d0e895f3240b35e0dbd060f2011807729808a6adb2a32c8e70e7830ffbaf30
- SSDEEP 49152:51CuhxoqXPxwVSZFVNfnEvbFmHst53Hv4pd8yOok/TnjtECT0xFVzdzXG9:51Cuhy8PxwS9nERX5/U8Z9xT0xRr8
- TLSH T1D0C53397A6579FB43BD04B16C444ED8B6C8363BC327B8DA40F08124F4D2BD5AB8A1E57
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
Quotation sample and specifications.js
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
Quotation sample and specifications.js
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target Quotation sample and specifications.JS
- Size 5.1MB
- SHA256 e37eddeeddd2679c0706179a6aea852ae5ff8a6db704676a72a7c4b34b5bcb25
- MD5 549c39b13ee69116fbbfb30cdcaa7b3c
- SHA1 a427e28c9e79cbf8526e94a4316c8b6d1d46ba5c
- SHA512 71658afd13246d5941554d9ffdd43760e63d95ae1f71ce3832a5f5cd06f0f1cf626d1284393e2e95d00e94a2338acb20e6ab2cb9b687c4a13b5cf46b8cc057fc
- SSDEEP 98304:jCt+3JakO3b7/B2y07IqSTQ6ldklvpHAsKmO7POv+FmL3bXmOrlUduz8ySkJjWZb:jCt+3JakOr7/B2y07IqSTQ6ldklvpHAJ
- TLSH T13F466F4117854A3BB3E9DBED423A8AA19729511306C5CF11306CF625FA7CEC69329FE3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE