General
-
Target
RFQ.zip
-
Size
4KB
-
Sample
210419-skzlh8zndx
-
MD5
166f05cd9d7399e9c6458e2c739c5728
-
SHA1
535ec102d25512252320c69e6fb61521ce94a969
-
SHA256
79d106ff2c81b306bd3a030a14e3b3c3aa1c533c9bc71a1e8d20532471090a06
-
SHA512
e6e97653d2281929b8752d68e7e232427ffa09e1f8d6afff35a97a3d3653002ee75ec634467a3f9af4019c079be188165404c2d2fac733feac186e90facaa329
Static task
static1
Behavioral task
behavioral1
Sample
RFQ.js
Resource
win7v20210408
Behavioral task
behavioral2
Sample
RFQ.js
Resource
win10v20210410
Malware Config
Targets
-
-
Target
RFQ.js
-
Size
3KB
-
MD5
f68bfaf10007b75b933c2a2acab4d54c
-
SHA1
7cabe5b37ea9d22450e80d41378c5e8eefa7eea5
-
SHA256
a89127ec0c19df41166916cfa4c199d97eade3ec4f0cf4d2281408cfe2790c2a
-
SHA512
7ea74f93293e6171338e896243e2ecb696c6b4fbd7cfeffba6e0312a4b8c3789a949e9a0e4e8a566f946d36ebaad59d8477fcaf7681e91b9cc399ff865219a8d
Score10/10-
Blocklisted process makes network request
-
Drops startup file
-
Adds Run key to start application
-