General
- Target 10124658.JS.js
- Size 12.0MB
- Sample260909-wp177shm71
- SHA256 4f2db98a7545d84ebb4d3ba73ebc4874de0dda692c61d56ea14eec2329965bd1
- MD5 07fb7877def87538715fddad8139118d
- SHA1 52f2fe34586bfa6a782fd871006cc88f52988c1c
- SHA512 ccf42e8335fc51484849400d6355f39dce3ce680dc10f804dde370d6c709bc9da89167f90c1563dea4b881dd2e37029ec095995c111f8899927177b5c1afff0d
- SSDEEP 98304:KtlvKF85DrPTvU1s5Nv6mggPnGw8kSt6DA5l8M9tCN3WIhASObpNMGgVf9rllgRr:WZnW5KU43orjMGgVpgRGyf7RsA
- TLSH T153C6E89A230E8470A53E571CD0BA6561C6D93103559ABB1E33FC3308BBB7A2B674CDD6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
10124658.JS.js
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
10124658.JS.js
Resource
win11ltsc2024-20260710-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 10124658.JS.js
- Size 12.0MB
- SHA256 4f2db98a7545d84ebb4d3ba73ebc4874de0dda692c61d56ea14eec2329965bd1
- MD5 07fb7877def87538715fddad8139118d
- SHA1 52f2fe34586bfa6a782fd871006cc88f52988c1c
- SHA512 ccf42e8335fc51484849400d6355f39dce3ce680dc10f804dde370d6c709bc9da89167f90c1563dea4b881dd2e37029ec095995c111f8899927177b5c1afff0d
- SSDEEP 98304:KtlvKF85DrPTvU1s5Nv6mggPnGw8kSt6DA5l8M9tCN3WIhASObpNMGgVf9rllgRr:WZnW5KU43orjMGgVpgRGyf7RsA
- TLSH T153C6E89A230E8470A53E571CD0BA6561C6D93103559ABB1E33FC3308BBB7A2B674CDD6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Accesses Microsoft Outlook profiles
-
Suspicious use of NtSetInformationThreadHideFromDebugger