General
- Target 17042026_1648_16426rfq-VNSTEEL_product drawing_specifiction.js.zip
- Size 34KB
- Sample260417-va698sgv4v
- SHA256 867e7c02504f785243cb5f32b71f6f5a1dcfd3c8b8a20eb1f1ca3e4df5cae4a7
- MD5 6df8b88c51df950694e5b268b10281b8
- SHA1 5806af9e964d63562d8eecd923769bb9c4783831
- SHA512 9c245761939836c8ec5aa018b7744ff75ff9b93d846e13687c413729614944eef4166bdadc27ebd2b649986b395b211d48dcb396cf3db0b678187078cf2b15c6
- SSDEEP 384:izgYEYkI+L8jVD9JV15gzs0YECxsNLz7GOgqaapEuM55uL/M4OtByreqzcDCZwbF:i0p8pJYd/13pEXLuL/OtYauwb04
- TLSH T175F2ADF28B80EC4B653A5E90CB960EF0CE9E0073944445D9F6BAEED49B138C4424F51F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
16426rfq-VNSTEEL_product drawing_specifiction.js
Resource
win10v2004-20260130-en
6 signatures
300 seconds
Behavioral task
behavioral2
Sample
16426rfq-VNSTEEL_product drawing_specifiction.js
Resource
win11-20260130-en
6 signatures
300 seconds
Malware Config
Targets
-
- Target 16426rfq-VNSTEEL_product drawing_specifiction.js
- Size 2.1MB
- SHA256 485c99d8fcd9edd19671b291be5ec1cf9e31e9624015c0992ec36393a27d37d6
- MD5 ce12596692cfbb3c4c1d58b0016f8749
- SHA1 f256e4c36b8c1300134da948413d3fd0823feee5
- SHA512 5c7ad9f245d0d1ab99a4c2a9c94737e42502631bab23b6503e67e38ed7c231e2629cd7a6b59d58a6c530838a491c799dee79138d2f018bd9ded59d742fca5359
- SSDEEP 768:x4w4w4w4w4w4w4w4w4w4w4w4w4w4w4w4w4w4w4w4w4w4w4w4w4w4w4w4w4w4w4w2:8
- TLSH T112A5ED2CD0A1A7F8EEE4DCA8864DFCB69C444B245BC5FF2D934C6AC66895CE4C9641E0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.