General
- Target Orden de compra POF0000095.js
- Size 1.0MB
- Sample260806-kjeapsgl6s
- SHA256 50b550faebd9e8e28676a307f8b826d2cce0756a97bbaf8e286a20fd044d779e
- MD5 59a5dd1bdfcdc227cff4b4878726a127
- SHA1 aa8a1dd1d053f7e4aa3c118c3b9432909c994b9c
- SHA512 030bf053374aba013c70115657a0d09689899c5f323e8f7d9ef7d9778f58aac79cb66bea4a1ee04a183fc323494ef50cd5897e18e6bba628076acad20c4ecd9b
- SSDEEP 768:L8SFT/eT9ze/gqhF9N+pp8tpIzqQe9hq+qNOS9NSkpSqQ8SkqhFpe9Q82NS/fS8l:B4
- TLSH T1D23572DA8F4778C8919E3587CE26B6B6EF97370982C86A8C3644AC716CF1165D70CB70
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
Orden de compra POF0000095.js
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
Orden de compra POF0000095.js
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target Orden de compra POF0000095.js
- Size 1.0MB
- SHA256 50b550faebd9e8e28676a307f8b826d2cce0756a97bbaf8e286a20fd044d779e
- MD5 59a5dd1bdfcdc227cff4b4878726a127
- SHA1 aa8a1dd1d053f7e4aa3c118c3b9432909c994b9c
- SHA512 030bf053374aba013c70115657a0d09689899c5f323e8f7d9ef7d9778f58aac79cb66bea4a1ee04a183fc323494ef50cd5897e18e6bba628076acad20c4ecd9b
- SSDEEP 768:L8SFT/eT9ze/gqhF9N+pp8tpIzqQe9hq+qNOS9NSkpSqQ8SkqhFpe9Q82NS/fS8l:B4
- TLSH T1D23572DA8F4778C8919E3587CE26B6B6EF97370982C86A8C3644AC716CF1165D70CB70
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.