General
- Target 08092026_0035_02092026_2603786_ESZCY26060888_CFM-FCL-IMP-1309-2026_EXW-GDA_1x40HC_INNPRO-ELEGOO_869DR1YQZ_TSL_SO2332714752.rar
- Size 111KB
- Sample260908-axkpjacb92
- SHA256 6aa989710b4d0f865407473b13d892b03a26e2222b9a56b222b2ad268bc1921f
- MD5 b4e4c913b511885a489ba6563dfb04be
- SHA1 605e679616b06550ac599fc1b8006923cc9d03c9
- SHA512 983223cbc4f112598e4b588156d044ee237671625aeddccd3a2515c602a1b35296dfabde82bbc3eb15964df9f1d0e3e8c58accd03630d7c01830ec04a428244a
- SSDEEP 3072:HPotdqMyzpdI5sJ2y5WKe+VMVPIKguPuXFvf:AtdzkXI5sJ35WKfEPIK7PuX5
- TLSH T126B3120195909814FB3B3D246CEA4BDF07AA8F8BD5F9499313735DAE0AC709908BDDE1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
2603786_ESZCY26060888_CFM-FCL-IMP-1309-2026_EXW-GDA_1x40HC_INNPRO-ELEGOO_869DR1YQZ_TSL_SO2332714752.js
Resource
win10v2004-20260513-en
8 signatures
300 seconds
Behavioral task
behavioral2
Sample
2603786_ESZCY26060888_CFM-FCL-IMP-1309-2026_EXW-GDA_1x40HC_INNPRO-ELEGOO_869DR1YQZ_TSL_SO2332714752.js
Resource
win11ltsc2024-20260709-en
7 signatures
300 seconds
Malware Config
Targets
-
- Target 2603786_ESZCY26060888_CFM-FCL-IMP-1309-2026_EXW-GDA_1x40HC_INNPRO-ELEGOO_869DR1YQZ_TSL_SO2332714752.js
- Size 624KB
- SHA256 268680b52e81b4ae61c96457aa59362adb12b50ed884a47607785ccc91a8734a
- MD5 0c458d29f54bcd8c1f424435daaad01a
- SHA1 07976daa6903daa228946ff7baec52621fe09114
- SHA512 102d8de6cf56f46fd1154cb373a13c49351a195b93058a4d0bbe38467e190c058d2f31fc7ac4f484d046e01e4be284af74f4b2bd44bc23c2633533bd609d8bb0
- SSDEEP 768:2bW+HyOACg99FMrUliH9qDaAp/9cOOQp2RJxAEPxTWCT3bOL8To1Ud8r7sCyueqw:2lqRX68YqbGYM0c
- TLSH T144D47696328436C0DF0FDE114636C826F03479F8AF2B73991508B7D62C67596CF899EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.