General

  • Target
    Meu dados para reserva hotel_9815910-22-4929-60YX46.js
  • Size 537KB
  • Sample260803-pjp5esxdrc
  • SHA256 bc0d1335b65f653c75e3c34212d4bad67cd436067d9eb434bf915d0158bb8999
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Meu dados para reserva hotel_9815910-22-4929-60YX46.js
    • Size 537KB
    • SHA256 bc0d1335b65f653c75e3c34212d4bad67cd436067d9eb434bf915d0158bb8999
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

    • Deletes itself

    • Adds Run key to start application

MITRE ATT&CK Enterprise v16

Tasks