General
- Target SATIN ALMA SİPARİŞ FORMU_xlsx.js
- Size 1.4MB
- Sample260727-md5a2sad83
- SHA256 c94d8d3467ed5eb1697103133cd47600c7095d6ac34b3424e1dc26c2f126145f
- MD5 6d35991c80b4b89ee4acf2294c63d14c
- SHA1 e18fb4adbbb1b02e21f8273042ee84158f8e4234
- SHA512 9d486f469288005f75c453949ca5a02d3830fdfd825b8fca13e9b0cb6bed3690f04201c9955d96274fb2c2034d4200530f4932eda8f8ea35c33c069d6fb23ad5
- SSDEEP 384:y6Q6Q6Q6Q6Q6Q6Q6Q6Q6Q6Q6Q6Q6Q6Q6Q6Q6Q6Q6Q6Q6Q6Q6Q6Q6Q6Q6Q6Q6Q6Qt:XxyRtZz
- TLSH T1CE65931D67CC2F0B48B92F39CEF657463A37CAA18E0BC15E752BB054E9DE78443949A0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
SATIN ALMA SİPARİŞ FORMU_xlsx.js
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
SATIN ALMA SİPARİŞ FORMU_xlsx.js
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target SATIN ALMA SİPARİŞ FORMU_xlsx.js
- Size 1.4MB
- SHA256 c94d8d3467ed5eb1697103133cd47600c7095d6ac34b3424e1dc26c2f126145f
- MD5 6d35991c80b4b89ee4acf2294c63d14c
- SHA1 e18fb4adbbb1b02e21f8273042ee84158f8e4234
- SHA512 9d486f469288005f75c453949ca5a02d3830fdfd825b8fca13e9b0cb6bed3690f04201c9955d96274fb2c2034d4200530f4932eda8f8ea35c33c069d6fb23ad5
- SSDEEP 384:y6Q6Q6Q6Q6Q6Q6Q6Q6Q6Q6Q6Q6Q6Q6Q6Q6Q6Q6Q6Q6Q6Q6Q6Q6Q6Q6Q6Q6Q6Q6Qt:XxyRtZz
- TLSH T1CE65931D67CC2F0B48B92F39CEF657463A37CAA18E0BC15E752BB054E9DE78443949A0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Drops startup file