Extracted

Extracted

• • Target
    FACTURA.js
  • Size 91KB
  • SHA256 1a603f9cdb93d2b7f2a40261cd2df4418ba4d32fae1dbdf20b26f9ea8f16a0ff
  • MD5 987c327196adc874c4212adeefcc8c9a
  • SHA1 d7798d2bb9b123ef3d0daabd90462719f63e579a
  • SHA512 e2a81eacd14300f60ed628f1858a65e1aaf059056c277c5167cd106dabd881453aaa8cce05e8ad084ff19bae96cd547d6587d40ca4481d1361a06bae9423158f
  • SSDEEP 1536:3YdLVTjNm9F+YdLVTjNm9FqYdLVTjNm9FqYdLVTjNm9Fu2:38LVTjQu8LVTjQa8LVTjQa8LVTjQe2
  • TLSH
    T132936B48CEB482CE3E36762C973F5515FAD49A138865D105B54DF9040FB884A8EFEEE8
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  execution

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Command and Scripting Interpreter: PowerShell

    Run Powershell and hide display window.

    execution

  • Drops startup file

  behavioral1behavioral2