General
- Target BBK Transfer-SOA.rar
- Size 1.6MB
- Sample261102-mmmglavt7n
- SHA256 ec575d595901888dea2a55ab992a7d47273e9fd17fce0eaac46220211f349e71
- MD5 3fb82c653f6cb7aee65314da43abb049
- SHA1 3fa100ed60ae6ab4f221ca33c62e7d71cfc15bd6
- SHA512 dbc0cc7598da824f1ef67b7afb8a7bbcee033a92953344cb3bf56b9cba38539d35067aae0c9c61a152c14ea374565e4773c6b2f5c1de96c663a458720bdfb326
- SSDEEP 49152:AROjVG8Ip0y4KVtC34Z+T2fzMcIMgwGbK:S0G94KL6EfzMcngC
- TLSH T12A75335C9BB9E840E3E38AE02BB0B11F8797A65F90E47F0FD56E1B33519060965CC5E2
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
BBK Transfer-SOA.js
Resource
win11ltsc2024-20260911-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
BBK Transfer-SOA.js
Resource
win10v2004-20260911-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target BBK Transfer-SOA.JS
- Size 4.0MB
- SHA256 0ac637abca7833bb2941fcc0d82a11ecd00a8b4d3e228a0b4f09d39a3c1dbd67
- MD5 df114e107d2c133898fe0f8e5c598141
- SHA1 4bab2f0621d5d07b00092c552ef55d933fcb21de
- SHA512 bc28f435c146ebe246e039a003b366c45367a720ab418c1c34db275ec597923b132b20561e4e051a162d923283c7509d1b89c86e2f3dbfbb21e8ffd10f13780b
- SSDEEP 98304:tMGunUTwHa502LsKptYp79p7cdxjBrWrkThkl1h7UIoRz+1STkLdW6bIwg/2IVKK:tMGunUTwHQ02LsKptYp79p7cdxjBrWrG
- TLSH T11E16B3A217A5D2327328AB8F86FBDC31940A5D531DC5CB7831ADD619361CD1BA318BF2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Accesses Microsoft Outlook profiles
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2JavaScript
1Windows Command Shell
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1