General
- Target WindowsUpdate_evClient.js
- Size 106KB
- Sample260625-ssh91scy5v
- SHA256 c90c42b27f5bd76c587d7c17ed5d16df7a58120b21331fdc8d2306ad561898f2
- MD5 ee4d386131d7e9bcaaadc75e52896b5b
- SHA1 67c20b48a09fd4de2a126cc0a895e49b118d953f
- SHA512 668f75df37801e17da249896e60afbe70f1d6c71d7732d2e4b687eb193d879f6ed29a0a19caae60cd907ae4d12c741b909285e00bb98edc8f51ca15fdb2525ee
- SSDEEP 3072:AvfcswIUMdF9n0895SAJFk6mZ8Tr3MBnRldAXTLeRH5lm3:ARVUMdFdCAVNn+n3SXvoH5M
- TLSH T142B36DCAC92A45925C1077F17D2E6FCE6A2C82EDC4CC539DF549E2B03E4C27D259EA08
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
WindowsUpdate_evClient.js
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
WindowsUpdate_evClient.js
Resource
win11ltsc2024-20260617-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target WindowsUpdate_evClient.js
- Size 106KB
- SHA256 c90c42b27f5bd76c587d7c17ed5d16df7a58120b21331fdc8d2306ad561898f2
- MD5 ee4d386131d7e9bcaaadc75e52896b5b
- SHA1 67c20b48a09fd4de2a126cc0a895e49b118d953f
- SHA512 668f75df37801e17da249896e60afbe70f1d6c71d7732d2e4b687eb193d879f6ed29a0a19caae60cd907ae4d12c741b909285e00bb98edc8f51ca15fdb2525ee
- SSDEEP 3072:AvfcswIUMdF9n0895SAJFk6mZ8Tr3MBnRldAXTLeRH5lm3:ARVUMdFdCAVNn+n3SXvoH5M
- TLSH T142B36DCAC92A45925C1077F17D2E6FCE6A2C82EDC4CC539DF549E2B03E4C27D259EA08
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.