General
- Target PO-0001334282.js
- Size 1.5MB
- Sample260803-njs1msxxe1
- SHA256 a2ad85f481f81bd21d6815726244505670d5cc5e9a7259a96e334016a957562c
- MD5 0b4c3c582ebf0e7096f65a5c8fde2db6
- SHA1 3cfdaaa67bfeecd617d52ceb95353c29aec903d2
- SHA512 4e700ca37959a7b7f6cf5de7bf22761e0b37829643c113131cf02e4c8b0fe7902b5a0291e9e9b52b245f2e8cd9e8db102faf6054c8b2da348d8026807bb4fe07
- SSDEEP 192:Ussssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssm:vaxZ+LgyWqT
- TLSH T16E65984C93AC8AB4E1211F72EF9B002AB8D5E63C9E157949314D69CE0CD1D94F3A3D6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
PO-0001334282.js
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
PO-0001334282.js
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target PO-0001334282.js
- Size 1.5MB
- SHA256 a2ad85f481f81bd21d6815726244505670d5cc5e9a7259a96e334016a957562c
- MD5 0b4c3c582ebf0e7096f65a5c8fde2db6
- SHA1 3cfdaaa67bfeecd617d52ceb95353c29aec903d2
- SHA512 4e700ca37959a7b7f6cf5de7bf22761e0b37829643c113131cf02e4c8b0fe7902b5a0291e9e9b52b245f2e8cd9e8db102faf6054c8b2da348d8026807bb4fe07
- SSDEEP 192:Ussssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssm:vaxZ+LgyWqT
- TLSH T16E65984C93AC8AB4E1211F72EF9B002AB8D5E63C9E157949314D69CE0CD1D94F3A3D6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.