General
- Target Invoice – IALOPC342526-279302670s1.js
- Size 735KB
- Sample260930-kdthfasdnh
- SHA256 477f0cb821df28828cf96c798b3b7dc713cc5f982ccd085e1c372d4c08e52491
- MD5 6f65c1b2be568af7d9966c0d592e069a
- SHA1 61af89fc1f0710321e4aaa0d41cadb7e59ae4db9
- SHA512 a3f2e737667234421dde3a891e6acf10709b8b2a8cb29c360ef34b160235b47f7c1489529b0cb2cc0ec7bb0d82cc15d9ab8f86e5c3cddbb72c35faebe2ab09f5
- SSDEEP 12288:ki8piR0wAXh7W/NsxSNlIB1PCBNOWXXJ6q7xqIZBaKlgRTx6rHUg5OgMi6h8PKz2:kqR0th0NsUcPwPo+xt7e5kUDxiHPKz5I
- TLSH T14CF4E00952479A2035D8EB0E5BCFCA2526B9B781D70AD9C6FC0CC3D16B6B27181F5E6C
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Invoice – IALOPC342526-279302670s1.js
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
Invoice – IALOPC342526-279302670s1.js
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target Invoice – IALOPC342526-279302670s1.js
- Size 735KB
- SHA256 477f0cb821df28828cf96c798b3b7dc713cc5f982ccd085e1c372d4c08e52491
- MD5 6f65c1b2be568af7d9966c0d592e069a
- SHA1 61af89fc1f0710321e4aaa0d41cadb7e59ae4db9
- SHA512 a3f2e737667234421dde3a891e6acf10709b8b2a8cb29c360ef34b160235b47f7c1489529b0cb2cc0ec7bb0d82cc15d9ab8f86e5c3cddbb72c35faebe2ab09f5
- SSDEEP 12288:ki8piR0wAXh7W/NsxSNlIB1PCBNOWXXJ6q7xqIZBaKlgRTx6rHUg5OgMi6h8PKz2:kqR0th0NsUcPwPo+xt7e5kUDxiHPKz5I
- TLSH T14CF4E00952479A2035D8EB0E5BCFCA2526B9B781D70AD9C6FC0CC3D16B6B27181F5E6C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Hide Artifacts: Hidden Files and Directories
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Process Injection
1Defense Evasion
Hide Artifacts
2Hidden Files and Directories
2Modify Registry
1Process Injection
1