General
- Target Booking_Information.js
- Size 1.3MB
- Sample260116-khlcmabt9f
- SHA256 7435e0348abf7c79711a33c217f6e6f3c590249122de3aaf37b07a95c877267f
- MD5 a53006169ad1a0f307daffc25cb7abfa
- SHA1 a231a79d25f64c96006532b48c5e5c580a3654a0
- SHA512 d28af8096f89b3996c5c590b20f4aca0b4c58f517d83aeea4cfb29d07401fa21835ef853c753c733e6ab3633d0643f3e5ba35842970802ba45c984329221257a
- SSDEEP 384:YA3NT1jxPq0MOyoUPC8u081JotmQRtdiPHg7Eu0vdqDgDFBeiP7KuAbqFXp4iPi4:Y4
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
Booking_Information.js
Resource
win10v2004-20251231-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Booking_Information.js
Resource
win10ltsc2021-20260115.1-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
Booking_Information.js
Resource
win11-20251229-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target Booking_Information.js
- Size 1.3MB
- SHA256 7435e0348abf7c79711a33c217f6e6f3c590249122de3aaf37b07a95c877267f
- MD5 a53006169ad1a0f307daffc25cb7abfa
- SHA1 a231a79d25f64c96006532b48c5e5c580a3654a0
- SHA512 d28af8096f89b3996c5c590b20f4aca0b4c58f517d83aeea4cfb29d07401fa21835ef853c753c733e6ab3633d0643f3e5ba35842970802ba45c984329221257a
- SSDEEP 384:YA3NT1jxPq0MOyoUPC8u081JotmQRtdiPHg7Eu0vdqDgDFBeiP7KuAbqFXp4iPi4:Y4
- MD5 SHA1 SHA512 SSDEEP
Score10/10Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.