General
- Target Document and Invoices.JS.js
- Size 4.0MB
- Sample260924-ger48afb98
- SHA256 8b51334a342cfb0443c2a6013faf13c55350ed4c464d72b97c12793486aa3c75
- MD5 656097f8f6dc2144274a75807225bb09
- SHA1 baa7dd631daf64888c94ac3a3b1fcddf252a2a95
- SHA512 4ea9ef72508d2f94f0d01a47137e5f81181afb3c94103bff61e2f98285983384041a723dfecab96f7a1d8f4a745d52fa0105686364251cf78504476faf1ff45c
- SSDEEP 98304:ERwZGyP2qpIQxgCmyDKJXKnydf2NNOekia+Qlc15srxQiUpgVNQyloLH9pZ6rfp:WwlPjSKgHWKJXKUf2NNzsrxBSgjk9a9
- TLSH T1EA16A33C846C789239A7B33B811575F08F042BD70F416E2A346ED483AFB76C9694B9E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Document and Invoices.JS.js
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
Document and Invoices.JS.js
Resource
win11ltsc2024-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target Document and Invoices.JS.js
- Size 4.0MB
- SHA256 8b51334a342cfb0443c2a6013faf13c55350ed4c464d72b97c12793486aa3c75
- MD5 656097f8f6dc2144274a75807225bb09
- SHA1 baa7dd631daf64888c94ac3a3b1fcddf252a2a95
- SHA512 4ea9ef72508d2f94f0d01a47137e5f81181afb3c94103bff61e2f98285983384041a723dfecab96f7a1d8f4a745d52fa0105686364251cf78504476faf1ff45c
- SSDEEP 98304:ERwZGyP2qpIQxgCmyDKJXKnydf2NNOekia+Qlc15srxQiUpgVNQyloLH9pZ6rfp:WwlPjSKgHWKJXKUf2NNzsrxBSgjk9a9
- TLSH T1EA16A33C846C789239A7B33B811575F08F042BD70F416E2A346ED483AFB76C9694B9E5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Suspicious use of SetThreadContext