General
- Target Sardelle.js
- Size 100KB
- Sample260714-mas4lsax7m
- SHA256 ae41ff70e01087351812394f34575d4f5debac0e76888c16ebaf1c3ed7267bd6
- MD5 9f78b1cd79f3f4227724d1419be7c82e
- SHA1 d436fde67254b80e5705db28485975e52312d2f3
- SHA512 20a7ffa0a58cec89c80ea0d63c58b8f0bca72ff273474735f839656b6bfac0a32cf1c818b9ea31e8992bfc37277ca6e1a853ff9f9a4a1e6d680280f1598c0b65
- SSDEEP 3072:gWclhmmFp8/th0NTGQQbuPB4W7SOgob9uT4Kbr5qg:e0m8VctQUmW75b9cVp
- TLSH T16EA34A30DE5146770F83AB88FDA50661C67DC325863A04B1FAD98B0D85099ECF77C6AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Sardelle.js
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Sardelle.js
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target Sardelle.js
- Size 100KB
- SHA256 ae41ff70e01087351812394f34575d4f5debac0e76888c16ebaf1c3ed7267bd6
- MD5 9f78b1cd79f3f4227724d1419be7c82e
- SHA1 d436fde67254b80e5705db28485975e52312d2f3
- SHA512 20a7ffa0a58cec89c80ea0d63c58b8f0bca72ff273474735f839656b6bfac0a32cf1c818b9ea31e8992bfc37277ca6e1a853ff9f9a4a1e6d680280f1598c0b65
- SSDEEP 3072:gWclhmmFp8/th0NTGQQbuPB4W7SOgob9uT4Kbr5qg:e0m8VctQUmW75b9cVp
- TLSH T16EA34A30DE5146770F83AB88FDA50661C67DC325863A04B1FAD98B0D85099ECF77C6AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.