General

  • Target
    17042026_1648_16426rfq-VNSTEEL_product drawing_specifiction.js.zip
  • Size 34KB
  • Sample260417-va698sgv4v
  • SHA256 867e7c02504f785243cb5f32b71f6f5a1dcfd3c8b8a20eb1f1ca3e4df5cae4a7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Targets

    • Target
      16426rfq-VNSTEEL_product drawing_specifiction.js
    • Size 2.1MB
    • SHA256 485c99d8fcd9edd19671b291be5ec1cf9e31e9624015c0992ec36393a27d37d6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

MITRE ATT&CK Enterprise v16

Tasks