General

  • Target
    RFQ230092.rar
  • Size 2KB
  • Sample260728-scgfgsydrb
  • SHA256 d6fb2c1db9addb338eae76290878ab6fb0701f139e415a3d2dffacdde4392489
  • MD5 SHA1 SHA512 TLSH

Malware Config

Targets

    • Target
      RFQ230092.js
    • Size 2.1MB
    • SHA256 04812630dcb086af236a69d05fbd85d4e6359c118048cacf2a1964ee330c2204
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Creates a file in the Startup directory

      A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.

MITRE ATT&CK Enterprise v16

Tasks