Analysis
- max time kernel
299s - max time network
133s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
09/09/2026, 14:27
General
- Target CHINERGY DOCUMENTS-INV NO. Q-06564-F9T6.js
- Size 18.5MB
- Sample260909-rssb9awhnd
- SHA256 b622bec15238c6384d0824695a7a46adc1424590b3f86f997017e5ba100d0171
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
- Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
- Command and Scripting Interpreter: JavaScript 1 TTPs
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Modifies registry class 2 IoCs
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Windows\system32\wscript.exewscript.exe "C:\Users\Admin\AppData\Local\Temp\CHINERGY DOCUMENTS-INV NO. Q-06564-F9T6.js"1⤵
- Modifies registry class
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\Documents\TKHQMNTMUHPSZYGN.PIF"C:\Users\Admin\Documents\TKHQMNTMUHPSZYGN.PIF" C:\Users\Admin\Documents\TKHQMNTMUHPSZYGN.ttf2⤵
- Executes dropped EXE
- Suspicious use of NtSetInformationThreadHideFromDebugger
- System Location Discovery: System Language Discovery
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
TKHQMNTMUHPSZYGN.PIF
TKHQMNTMUHPSZYGN.ttf
memory/5512-32-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-40-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-63-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-72-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-71-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-70-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-69-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-68-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-67-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-66-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-65-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-64-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-62-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-61-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-60-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-59-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-58-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-57-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-55-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-54-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-53-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-52-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-51-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-50-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-49-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-48-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-47-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-46-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-44-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-43-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-42-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-41-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-39-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-38-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-37-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-36-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-35-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-34-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-33-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-31-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-29-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-28-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-25-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-24-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-23-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-22-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-21-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-20-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-19-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-18-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-17-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-16-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-15-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-13-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-12-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-11-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-10-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-56-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-45-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-30-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-27-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-26-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-14-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-9-0x000000007FE90000-0x000000007FEA0000-memory.dmp
memory/5512-3523-0x00000000747B2000-0x00000000747B3000-memory.dmp
memory/5512-3524-0x0000000007150000-0x00000000073AC000-memory.dmp
memory/5512-3525-0x00000000747A0000-0x0000000074F5C000-memory.dmp
memory/5512-3527-0x00000000747B2000-0x00000000747B3000-memory.dmp
memory/5512-3528-0x00000000747A0000-0x0000000074F5C000-memory.dmp