General
- Target status_order_877037.zip
- Size 8KB
- Sample260913-alyf9aybne
- SHA256 39ec94111e355a74e4609a93150e96c89845023ccec42e49d53669905e051d1a
- MD5 0bbe5bd974fc05063ec494e1680dbce3
- SHA1 7ca2b36be7a2dafd6a317585da6fdac31f703600
- SHA512 b395eb5a5c951fa3ecb851c1593ca400d2c698d4fe00bfa62995c934f07f3ab48d0fd04999120211e9d366604783fdf89bf4a025ffbc8fd6c9d65be92800eb3e
- SSDEEP 192:CSO0oV8Pq3UtVuPROZukDfREkTNC2qvXsgKiXZ8:CSa2vtVsupLekhAjKiJ8
- TLSH T1AD02CF1295AC3155E6A78CB650CFE9A387727B28FF813538C03A16C4885EE27D3D423D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
payment_199b5c7.js
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
payment_199b5c7.js
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
payment_details_502864.js
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
payment_details_502864.js
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target payment_199b5c7.js
- Size 7KB
- SHA256 91a1483e1c7f9121b1e330fff9291c6f2c737051e94822399c1e2a96e0f94342
- MD5 162ba0278d528eb0cc917ac2034f031b
- SHA1 0e616b0a27253de28e6763079969fadd5520ff69
- SHA512 5b9a990665c4488338349c676302e6dbe2f2bcd44500a18f1c4d21c4740d5ce07db95231eebf049d9ff246efeadac0aff338487171783d92596ac30173553028
- SSDEEP 192:7oXe5ZVCgWETZWijDrexiwXAjCdV6vb/lOUBWUXm5XCN0DtX:7t53PWo7jD/wQjMVYbTBWU20SF
- TLSH T1D6F158987697B961AE5B183581AF880AB2BABDE0265CD454C448F4843D60179CBF3EFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target payment_details_502864.js
- Size 7KB
- SHA256 6316163d0e7bb7c865c890382789efc076b3026f7ddf26ecdbd67547368f65f2
- MD5 be1da0713d875bb6225007b39ef94130
- SHA1 f1025f2ccb85795433b1b2e72ad4e1e066b286b9
- SHA512 af9cb4ad7190c4396180031cc04b29ff32caf270472dd8b131601dffb1014ec82714ae6c93edf117b27cbf77eaac6836940cb2e6fc1f7870e1eaaec2cf3d9d0f
- SSDEEP 192:ANWgtYtlI0EQrJAVePuSHKmh4Dz84P3D2c9lOZenONBuXyQV8eZX8oYB8Tbe6y5:ANDtWeqr2V3SHKgWzd3D2c9lOZeONBuY
- TLSH T158F1478C72C7B575AB8B4535446F880AB6A97AE0264CC454C819F4A83E65078DBF3EFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.