Extracted

• • Target
    FACTURA.js
  • Size 22KB
  • SHA256 29967263bad4e5f38fbcae0fd83b86dcaf0a75fb24e4f079d33a649a084f6b8d
  • MD5 c6480674c91ddb79ea025a6964ac0f6c
  • SHA1 ccd593b0ab1d89e3d283f58e6037e1075efe1a8b
  • SHA512 8a2d38443862cf8771fff23ad7c4dce71762230f1ce5181a5e5082a3a0c79ddd0a41c7ed24fc6aafc359fc37e897d56e9124f4e1995631d6e410cc642a2bac93
  • SSDEEP 384:u699kxTFo8e3BDhLtmVd8Z3FY8+jBvhfImVd8Z3FY8+jBvhf0wlsD:FWKWCiNCiKh
  • TLSH
    T12FA23AC4504E402DF9AAA7B322F15B78F06466D1CC61AC3EB5CDA7AA8FE45604413BF7
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  executionpersistenceprivilege_escalation

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Creates a file in the Startup directory

    A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.

    persistenceprivilege_escalation
  behavioral1behavioral2