General
- Target RFQ230092.rar
- Size 2KB
- Sample260728-scgfgsydrb
- SHA256 d6fb2c1db9addb338eae76290878ab6fb0701f139e415a3d2dffacdde4392489
- MD5 8cb47bef835912ab8708671914a2bcf1
- SHA1 2388cc2ea6811b69d9dcb04693a42f417b45a8ea
- SHA512 d4e1b4bffc7b9ccb6775decea689a016df09960449fe4e9e71a926e751eece25f8a7982bb1de5261edcac8eb8f8885f9a34b4386b063604b3d6767520763e8b9
- TLSH T17E516DCAE92C6667EC28B4B7741512FE0BC47701713AF1E4BDE95AE510477A721312B0
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
RFQ230092.js
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
RFQ230092.js
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target RFQ230092.js
- Size 2.1MB
- SHA256 04812630dcb086af236a69d05fbd85d4e6359c118048cacf2a1964ee330c2204
- MD5 319e1e3803fe1ce76c35d48a9d673565
- SHA1 636527a99be24d74edc39f0143b862501227e96e
- SHA512 568d67b17b0505b865d2ce2fe8e2f1fb9824cc2faf1a5a3bea9f5fd81668a4c122cfedeea8e7d26971bc89b72e2cbc3c6534b9e70459e190de14f8d034fab4a6
- SSDEEP 768:eXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX4:BJ
- TLSH T15AA511F51B574B01A13126FBFFE701B0BD79F1784867469FA4C46EA3628E50A092CE72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.