General
- Target Ordine principale (BOQ allegato).gz
- Size 11KB
- Sample260722-kmclaasame
- SHA256 abe790d6d95294f92fb7ac2489553819146396d81d26c044d6e6524c85f8dc53
- MD5 abcb2d572689e5f35ae9f2ae3432e5fc
- SHA1 acd8828bda85699c895b8ba76c2417ccb6146394
- SHA512 08eb2fa1fdcd1d015d6bd4ec34ea27f67e8563476a601d91b77bd71c81b40d87fb7121f4a87be69cb125778dc840c4c53ab0d93a0012654117cf1f97dbb2f6f4
- SSDEEP 48:XDP5+idtcGLVsHLLNOzR1oiaWoD5AkXjgESRTQWZn4G0kSL002:TP5pcGLVMLZOzRcVJjbYNZwA02
- TLSH T194428E2BAA391B5DA52538CB0F1C45401D097BABC53C993945FF6F30DE2AE08B300711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
Ordine principale (BOQ allegato).js
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Ordine principale (BOQ allegato).js
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target Ordine principale (BOQ allegato).js
- Size 2.3MB
- SHA256 6068fa3b867b94dd98cabc42cc23a89e645e28223c42ce2a5265ff945d294e7b
- MD5 5049efbfaebb7d19b75954b7e4582547
- SHA1 7a2df8cdde9afe9f73f40c518fec010e1695aea8
- SHA512 e447b1845850c4ed3ebbdd76c0586703982b822d3d09b4efa9e0ad3ff4876c135538d702ac7b1c26d9e70cef81c8ad64ff0bfd2bc03811a7de3a4a0224d50c11
- SSDEEP 192:P44444444444444444444444444444444444444444444444444444444444444o:I6qVXCjkdO3X1N3b3O3XairhHbCKwXK
- TLSH T173B501E023C58430C2FB6B479A75AE7D9B63A1E02837136DFE1C0AD6ADF57894855B30
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.