General
- Target IN Payee Advice_513441c650814ea0b441c650812ea06b.JS.js
- Size 5.7MB
- Sample261025-mtkxcagh35
- SHA256 88e7a7bb3117463591b2a6233b30f7d79abfb7f00308462b1fe2d3f8d0a1d030
- MD5 d92ac36300b91fbb0fb5e0a4ef0c64f1
- SHA1 fae9174783f178c81dd63c41634fee8fe6a6672c
- SHA512 58ed3a05a98954ad3a2d12d2aadf6b1c90318d6de4910a7ec28b63c4eb8b55735ccd30db278ed846b4fd892598a84e1d2f4b87c6cd1dd8fe8320f0f1c4783fa3
- SSDEEP 98304:CCRqxaWjT3qbkd3xJt6zsjtjcJYvKdoJ30me5wjTRq5pZsyZtrFzQI1vFv1nsAol:CRxaWXLBL6ctjVKf+Nq5pdDkivFvFoM8
- TLSH T1475672863360D03FA295D79C4DB1B810B42D502368C9CF24B19EBD15BA6ED07536AFFA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
IN Payee Advice_513441c650814ea0b441c650812ea06b.JS.js
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
IN Payee Advice_513441c650814ea0b441c650812ea06b.JS.js
Resource
win11ltsc2024-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target IN Payee Advice_513441c650814ea0b441c650812ea06b.JS.js
- Size 5.7MB
- SHA256 88e7a7bb3117463591b2a6233b30f7d79abfb7f00308462b1fe2d3f8d0a1d030
- MD5 d92ac36300b91fbb0fb5e0a4ef0c64f1
- SHA1 fae9174783f178c81dd63c41634fee8fe6a6672c
- SHA512 58ed3a05a98954ad3a2d12d2aadf6b1c90318d6de4910a7ec28b63c4eb8b55735ccd30db278ed846b4fd892598a84e1d2f4b87c6cd1dd8fe8320f0f1c4783fa3
- SSDEEP 98304:CCRqxaWjT3qbkd3xJt6zsjtjcJYvKdoJ30me5wjTRq5pZsyZtrFzQI1vFv1nsAol:CRxaWXLBL6ctjVKf+Nq5pdDkivFvFoM8
- TLSH T1475672863360D03FA295D79C4DB1B810B42D502368C9CF24B19EBD15BA6ED07536AFFA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Suspicious use of NtSetInformationThreadHideFromDebugger
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2JavaScript
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1