General
- Target ZJ41-50038037 - 1.js
- Size 1.7MB
- Sample260720-jg7c2aat4j
- SHA256 ac02050f714750b9bb82b71c689bb48163a27ec3c53d1d92f24fd886d8ebecb5
- MD5 3d29e472e3a23c656d2255dc52572ca8
- SHA1 d3d21deb546fbb06d4bbce03c5a5979803d02ff6
- SHA512 3f0c036646ed3f4e45ea42f90989c8e792b20c02eeae70075b396c5700e7a78b6d8026e0da569581057cf304ef5c9e74048da34909605342229c8051ec327d0e
- SSDEEP 768:InvATSYN9/VRgKoIyjdJTEpWhh5m5h56OK7YSM8poMiYCeXX8loNKXHAwaUx7C4o:CZ
- TLSH T1748509A6C5690B439DF0EE318C9BD4A8DFA0943A4CE319E4746CC5F0DF6259B4892F39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
ZJ41-50038037 - 1.js
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
ZJ41-50038037 - 1.js
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target ZJ41-50038037 - 1.js
- Size 1.7MB
- SHA256 ac02050f714750b9bb82b71c689bb48163a27ec3c53d1d92f24fd886d8ebecb5
- MD5 3d29e472e3a23c656d2255dc52572ca8
- SHA1 d3d21deb546fbb06d4bbce03c5a5979803d02ff6
- SHA512 3f0c036646ed3f4e45ea42f90989c8e792b20c02eeae70075b396c5700e7a78b6d8026e0da569581057cf304ef5c9e74048da34909605342229c8051ec327d0e
- SSDEEP 768:InvATSYN9/VRgKoIyjdJTEpWhh5m5h56OK7YSM8poMiYCeXX8loNKXHAwaUx7C4o:CZ
- TLSH T1748509A6C5690B439DF0EE318C9BD4A8DFA0943A4CE319E4746CC5F0DF6259B4892F39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Drops startup file