General
- Target FF40000006932.xml.z
- Size 2KB
- Sample260722-l112gadd66
- SHA256 91a7e8e64ac74d45dbb87f45047c2c675bfdde5b340def5afea4d5de6cce50f2
- MD5 7a9f4f4e8e33535e618ba3d80b30eaac
- SHA1 ce773a5a2321738dba951f04013389d26fd7b447
- SHA512 5638f2cbd353d73cbe572c477ff3a0864e44a520ec8ae4fcd59b484394606dc37a2ab6a4908edb8e92c0cb6ef314ec5e34ee80c7c524df3be25b517242e94678
- TLSH T11E515E75D9ACCF16F5B3DB7331A3DAB669442104778F133DA27510E4E4B11005383451
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
FF40000006932.xml.js
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
FF40000006932.xml.js
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target FF40000006932.xml.js
- Size 1.7MB
- SHA256 f19602cb3c020106446ee2d4314ce4cf3aeb6b6ccb9dd429d6df015fc14ffba0
- MD5 8ad1b62688ce114a53a93cf4896269f3
- SHA1 7f8469d9e30db4ff2347aafac726a390ef4cb67e
- SHA512 dc6acc58c9a9b2508881e0c87bef6f26da4cb943442430821d071859cab2e0d49816b385ceafd2bbcd72c17c1031bc20f67b90871f2ed8bcf120280318c22721
- SSDEEP 12288:W88888888888888888888888888888888888888888888888888888888888888J:y
- TLSH T1EC8509EF27DE1491D5208175471AAC529F7288121DD7EACF383E8B889B371992372FB1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.