General
- Target test.protected.js
- Size 238KB
- Sample260928-vs627aca22
- SHA256 f941e49543044954f4935da7b69c36a8e4e9ea32407d6718cdc05fd78202b35c
- MD5 42c49b903c75a23126c4765b2ee1e4fd
- SHA1 02c4e8b9df2c94a7e82b202cfc32ab418ae30a96
- SHA512 29ef86f608c9faa0042554107bc6a041bdbaccd1ea7c858cfd29a0344c86c9772cd9c3bdd4a99d8e64b8b5dea046799e5ca2fb825b605029faf5f6cb92ede770
- SSDEEP 3072:JfCj4rWqFFnToDXkXiScP1QkQKgAy0OBSo:JfCwTSFbq
- TLSH T12F342AE85056186A01DFCDBD5E3FB182D8159C284484DCE7AB42FFA9CCE8F47A0A3E55
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
test.protected.js
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
test.protected.js
Resource
win11ltsc2024-20260911-en
21 signatures
150 seconds
Malware Config
Targets
-
- Target test.protected.js
- Size 238KB
- SHA256 f941e49543044954f4935da7b69c36a8e4e9ea32407d6718cdc05fd78202b35c
- MD5 42c49b903c75a23126c4765b2ee1e4fd
- SHA1 02c4e8b9df2c94a7e82b202cfc32ab418ae30a96
- SHA512 29ef86f608c9faa0042554107bc6a041bdbaccd1ea7c858cfd29a0344c86c9772cd9c3bdd4a99d8e64b8b5dea046799e5ca2fb825b605029faf5f6cb92ede770
- SSDEEP 3072:JfCj4rWqFFnToDXkXiScP1QkQKgAy0OBSo:JfCwTSFbq
- TLSH T12F342AE85056186A01DFCDBD5E3FB182D8159C284484DCE7AB42FFA9CCE8F47A0A3E55
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
A potential corporate email address has been identified in the URL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.