Extracted

Extracted

• • Target
    FACTURA.js
  • Size 98KB
  • SHA256 69be2fb242004d25e62678907c4fec02a79fcafff49956a85a38e6a20d6e3a0f
  • MD5 1c64bbe6bc42c08902199a9aa0d36adc
  • SHA1 8db76b61596fba10de86ba9a04236135e64a124e
  • SHA512 c458bfa05a818c6e235db0ade282a96e2b0b9b82f60d3c107584e9986350129a2e82c6ebb32c9c4d1b27ffc7021b589215ee53a9579c09999187a545ce978745
  • SSDEEP 3072:38Li8LATjQu8LVTjQa8LVTjQa8LVTjQeT:MDBcczT
  • TLSH
    T17DA37C48CEB482CE3E36772C973F5515FAD49A138865D105B54DF9040FB884A8EFEAE8
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  execution

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Drops startup file

  • Command and Scripting Interpreter: PowerShell

    Using powershell.exe command.

    execution
  behavioral1behavioral2