General

  • Target
    760530263.js
  • Size 24.8MB
  • Sample260807-mbrbeawsgx
  • SHA256 24662333e3c68aad11b140421caa6d5ad883ff9d3d992c5b04fe1e0fc11fd9bb
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      760530263.js
    • Size 24.8MB
    • SHA256 24662333e3c68aad11b140421caa6d5ad883ff9d3d992c5b04fe1e0fc11fd9bb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

    • Creates a file in the Startup directory

      A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.

MITRE ATT&CK Enterprise v16

Tasks