General

  • Target
    09092026_1427_09092026_CHINERGY DOCUMENTS-INV NO. Q-06564-F9T6.JS.zip
  • Size 6.1MB
  • Sample260909-rssb9awhnd
  • SHA256 ccdedc11e60fe6d9bb509506865b9201089c65677d7345f025bb77e03c14a41d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Targets

    • Target
      CHINERGY DOCUMENTS-INV NO. Q-06564-F9T6.JS
    • Size 18.5MB
    • SHA256 b622bec15238c6384d0824695a7a46adc1424590b3f86f997017e5ba100d0171
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks