General
- Target _b2648781c7e1f1a022912b5e76fb1cad4bf461e25bfd7e8f9f0581cb6cc9bf2e.txt
- Size 3.2MB
- Sample260604-he3rdsax8w
- SHA256 b2648781c7e1f1a022912b5e76fb1cad4bf461e25bfd7e8f9f0581cb6cc9bf2e
- MD5 719f421b34b878bea17f0737bb88a6be
- SHA1 e51cdc31785f2a1a28efda3f0b2cbc9f07a6ef9a
- SHA512 b053d46e74cedc35f08042f8cc23db84c467fd8e0910f09fe2ee278fe5830bc5786a65f3be6e9caf6afa7f1cb0e529b0ad19c44769f392ab73811e14902e67a4
- SSDEEP 384:Uk1FQ8Zvkw3bTEk4MQBiYCZJEdCHKkJcu7hjlktM+KSFnWHi0QTnHuAyL034Mkl0:5A
- TLSH T15FF5C63BE3D58C161458611DE36BB3B0E6E01193F8657DB490DECF528328F51A8E8AF9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
_b2648781c7e1f1a022912b5e76fb1cad4bf461e25bfd7e8f9f0581cb6cc9bf2e.js
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
_b2648781c7e1f1a022912b5e76fb1cad4bf461e25bfd7e8f9f0581cb6cc9bf2e.js
Resource
win11-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target _b2648781c7e1f1a022912b5e76fb1cad4bf461e25bfd7e8f9f0581cb6cc9bf2e.txt
- Size 3.2MB
- SHA256 b2648781c7e1f1a022912b5e76fb1cad4bf461e25bfd7e8f9f0581cb6cc9bf2e
- MD5 719f421b34b878bea17f0737bb88a6be
- SHA1 e51cdc31785f2a1a28efda3f0b2cbc9f07a6ef9a
- SHA512 b053d46e74cedc35f08042f8cc23db84c467fd8e0910f09fe2ee278fe5830bc5786a65f3be6e9caf6afa7f1cb0e529b0ad19c44769f392ab73811e14902e67a4
- SSDEEP 384:Uk1FQ8Zvkw3bTEk4MQBiYCZJEdCHKkJcu7hjlktM+KSFnWHi0QTnHuAyL034Mkl0:5A
- TLSH T15FF5C63BE3D58C161458611DE36BB3B0E6E01193F8657DB490DECF528328F51A8E8AF9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.