General
- Target Technical Parameters Polyvalcoatings.js
- Size 29KB
- Sample260924-qrybfaee36
- SHA256 5f8422a667491d7480ee9ab608a07b817f49f2b26ee5e21a09645bae2f10efe4
- MD5 49dda0d952a5fd590903a62b9e73695a
- SHA1 ef1a4289533478dfcb68c6a43f58877f849ee588
- SHA512 1587a4816d2086ffa740a7e096cf93612ae480aa043e54553f77206329bc8340c455ea5bc0225194819aba88df4aaa9355ffd19d328dc43bbf338f3b0d497634
- SSDEEP 768:3LDQ0JuS2Lv0nREyhjtUYlcQVHSDOU72krwlB9ynHnvU6/3USmZqnZcdW:bxbuA0xLH
- TLSH T105D20B405982749093336B7AA726A8E8F77B067B01948943B83CB494EFF1D08DFE5DB5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
Technical Parameters Polyvalcoatings.js
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
Technical Parameters Polyvalcoatings.js
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target Technical Parameters Polyvalcoatings.js
- Size 29KB
- SHA256 5f8422a667491d7480ee9ab608a07b817f49f2b26ee5e21a09645bae2f10efe4
- MD5 49dda0d952a5fd590903a62b9e73695a
- SHA1 ef1a4289533478dfcb68c6a43f58877f849ee588
- SHA512 1587a4816d2086ffa740a7e096cf93612ae480aa043e54553f77206329bc8340c455ea5bc0225194819aba88df4aaa9355ffd19d328dc43bbf338f3b0d497634
- SSDEEP 768:3LDQ0JuS2Lv0nREyhjtUYlcQVHSDOU72krwlB9ynHnvU6/3USmZqnZcdW:bxbuA0xLH
- TLSH T105D20B405982749093336B7AA726A8E8F77B067B01948943B83CB494EFF1D08DFE5DB5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.