General
- Target mhjkgwsvahfscnmtcfqffukjhnylopbqatgeqspumvchgbtty.js
- Size 36KB
- Sample260622-vspsxaew4q
- SHA256 0289342b64665663d7495e8761b80c3d1b999cfd7dea40f85c80d64b178fdd1d
- MD5 c52efcb6888479e1ccef165da0b73677
- SHA1 52085606c364875eb56ba6e768320bf084567d38
- SHA512 76f07b26ad8d76db7276f6940ba6a343b4dbe83a1e0d02d32122a96790e374402ae07c56bfc7cd86fcb4a8f6a43e7ff4642bd76ad61f58e3917b98583fca4a59
- SSDEEP 768:YAFlNHl4Yynxs9bkpzuRE2JhudzNDVyCp7nPOC8QG:YAFlNHl4Yyni9bkYRE2zyJPp7nKQG
- TLSH T1D3F284AA3AC6B0A45352E47F3E27B0D6F13E5C86B24D1040F799B489FC99309D639F58
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
mhjkgwsvahfscnmtcfqffukjhnylopbqatgeqspumvchgbtty.js
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target mhjkgwsvahfscnmtcfqffukjhnylopbqatgeqspumvchgbtty.js
- Size 36KB
- SHA256 0289342b64665663d7495e8761b80c3d1b999cfd7dea40f85c80d64b178fdd1d
- MD5 c52efcb6888479e1ccef165da0b73677
- SHA1 52085606c364875eb56ba6e768320bf084567d38
- SHA512 76f07b26ad8d76db7276f6940ba6a343b4dbe83a1e0d02d32122a96790e374402ae07c56bfc7cd86fcb4a8f6a43e7ff4642bd76ad61f58e3917b98583fca4a59
- SSDEEP 768:YAFlNHl4Yynxs9bkpzuRE2JhudzNDVyCp7nPOC8QG:YAFlNHl4Yyni9bkYRE2zyJPp7nKQG
- TLSH T1D3F284AA3AC6B0A45352E47F3E27B0D6F13E5C86B24D1040F799B489FC99309D639F58
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Formbook payload
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext