General
- Target Ordine da clienti ITALIA - 6320.js
- Size 220KB
- Sample260715-ja2h7set9q
- SHA256 791b77c7ccb414a3edf27fc19ad2af606463b520c201f528235e02d9abca2fa8
- MD5 e056fe4708e727a783b54f167c455427
- SHA1 76d5f27209840d54f2c7e015870a2eb258e7510f
- SHA512 16bf829a15b2923b3bd77dd3cde27d0281b5f838dd6a7a74a6a2361535d24b38a75e60ad86c3adaa030cf5a63eb5e9c1d6f506578081ce5e21f4cf85bfe7c944
- SSDEEP 6144:YAewOthBI/sFpg5pUnyzgHRrIP5Q9DBqbhVgtKrIAAbq3mfIp:Y5riUyzg85tbhusUA1
- TLSH T125244970DA2002774F87AB98FCB94661C62DD315852705B1FAC98B0D900E9ECF7BD66B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Ordine da clienti ITALIA - 6320.js
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target Ordine da clienti ITALIA - 6320.js
- Size 220KB
- SHA256 791b77c7ccb414a3edf27fc19ad2af606463b520c201f528235e02d9abca2fa8
- MD5 e056fe4708e727a783b54f167c455427
- SHA1 76d5f27209840d54f2c7e015870a2eb258e7510f
- SHA512 16bf829a15b2923b3bd77dd3cde27d0281b5f838dd6a7a74a6a2361535d24b38a75e60ad86c3adaa030cf5a63eb5e9c1d6f506578081ce5e21f4cf85bfe7c944
- SSDEEP 6144:YAewOthBI/sFpg5pUnyzgHRrIP5Q9DBqbhVgtKrIAAbq3mfIp:Y5riUyzg85tbhusUA1
- TLSH T125244970DA2002774F87AB98FCB94661C62DD315852705B1FAC98B0D900E9ECF7BD66B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Drops file in System32 directory
-
Suspicious use of NtSetInformationThreadHideFromDebugger