General
- Target documento.js
- Size 30KB
- Sample230323-pgln8afe53
- SHA256 4a658f49bc680e3f8d07042aecde68a357f65e1c72ed7793f91c8fcd39dec53c
- MD5 5db097161a059f2e4763d606b2fa25f6
- SHA1 cd3ae5ae40834064c0e36f663f0a302d78fe09fa
- SHA512 511528e42799b7491ee952073901b9e99f48adb510d1b7a8b13412cec269d602be62a43f56853fe9792fdb98b8ac4f708d14fc337153ea89ffa704d118f60197
- SSDEEP 768:9puzvtUSU5Z+RHlFirGTT07vpbsssz1HD:9iUSUUFirJ7+j
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
documento.js
Resource
win7-20230220-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
documento.js
Resource
win10v2004-20230220-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target documento.js
- Size 30KB
- SHA256 4a658f49bc680e3f8d07042aecde68a357f65e1c72ed7793f91c8fcd39dec53c
- MD5 5db097161a059f2e4763d606b2fa25f6
- SHA1 cd3ae5ae40834064c0e36f663f0a302d78fe09fa
- SHA512 511528e42799b7491ee952073901b9e99f48adb510d1b7a8b13412cec269d602be62a43f56853fe9792fdb98b8ac4f708d14fc337153ea89ffa704d118f60197
- SSDEEP 768:9puzvtUSU5Z+RHlFirGTT07vpbsssz1HD:9iUSUUFirJ7+j
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Blocklisted process makes network request