General
- Target Documents_.JS.js
- Size 3.1MB
- Sample260924-qtpgbas13m
- SHA256 f58c7e2a30cb8a5f1b92049cbeb1a0cf4e1818998d963dbec111f3519129d573
- MD5 03a01fd1e5cb070f925459585e1e9281
- SHA1 d2903ad4c9d1be589cbc4c1e81e11e8d49e94cb1
- SHA512 6254fd7efa8c741ee7592a229a48e3099f8be3784ebde645f71bb8c735ca5b9e783b819e27c0061fb45cc1b0eea4c3fedb35fd5cf7f313b2b88204c328fe7b44
- SSDEEP 98304:oZZbsgBKoBOXupGT3kTcAtRwCQjjjQH7LEuTXSvUgvqgzPnKUY:oZZblKoBOXgGT3kcA/wCQ47LVTX5gvqx
- TLSH T133E5A3812784F3327329A77DD2759EA495CEA80324E9CF18316DE6347A5C9076F28BD3
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Documents_.JS.js
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
Documents_.JS.js
Resource
win11ltsc2024-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target Documents_.JS.js
- Size 3.1MB
- SHA256 f58c7e2a30cb8a5f1b92049cbeb1a0cf4e1818998d963dbec111f3519129d573
- MD5 03a01fd1e5cb070f925459585e1e9281
- SHA1 d2903ad4c9d1be589cbc4c1e81e11e8d49e94cb1
- SHA512 6254fd7efa8c741ee7592a229a48e3099f8be3784ebde645f71bb8c735ca5b9e783b819e27c0061fb45cc1b0eea4c3fedb35fd5cf7f313b2b88204c328fe7b44
- SSDEEP 98304:oZZbsgBKoBOXupGT3kTcAtRwCQjjjQH7LEuTXSvUgvqgzPnKUY:oZZblKoBOXgGT3kcA/wCQ47LVTX5gvqx
- TLSH T133E5A3812784F3327329A77DD2759EA495CEA80324E9CF18316DE6347A5C9076F28BD3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Suspicious use of SetThreadContext