General
- Target 09092026_1427_09092026_CHINERGY DOCUMENTS-INV NO. Q-06564-F9T6.JS.zip
- Size 6.1MB
- Sample260909-rssb9awhnd
- SHA256 ccdedc11e60fe6d9bb509506865b9201089c65677d7345f025bb77e03c14a41d
- MD5 0f59386e096ad412b29bafe8d7f558f3
- SHA1 28cc695fa7868dc12fae201690ff0899942af46f
- SHA512 797efbae92142fa48f46eaedae1af5047c07dd04b489f53178ec062661df2c1830cd01ac10a60d4c257bf6585218d82dbd6c361e4b226180844ca0c0fa4bab4b
- SSDEEP 98304:mAloTioE6W6/+VpbTZtcTmRszFeBGCigdegRUne9W1rLgTl1VjMTQ+/jZXnZ5cio:jeTTE6ukBwGDkeg7RNjgzZto
- TLSH T1F156332AC93381A81FDF89CA4E0DA95C753A3D1B31445F2DAE0561DFA49FEED403CA91
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
CHINERGY DOCUMENTS-INV NO. Q-06564-F9T6.js
Resource
win10v2004-20260513-en
7 signatures
300 seconds
Malware Config
Targets
-
- Target CHINERGY DOCUMENTS-INV NO. Q-06564-F9T6.JS
- Size 18.5MB
- SHA256 b622bec15238c6384d0824695a7a46adc1424590b3f86f997017e5ba100d0171
- MD5 9c166433098c088935233c8e7caebeeb
- SHA1 86ae6afe9655e4faa7ea7b89fd6deb4a93acfafe
- SHA512 c4cf07f84447416230389bb2b1a73a9ea36014d80054e1c1eb7b038a18115a912bab75b80bd211a0308706a08a70fa7431a65c40a944cdcaa325af15496632bf
- SSDEEP 393216:YNgSlKa6FNCQkhYyLHOd1Aswgm5W0cAsj7MVFozqMHSbLXCEqc2:YNaGQ6Y3d1AswF5hcDj4jozqMyfyEqc2
- TLSH T128174C9A2768933137219B8D823ADC31D58E666314D5CF2432AED2197B7CD0BB34D9E3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Suspicious use of NtSetInformationThreadHideFromDebugger