Extracted

• • Target
    booking.js
  • Size 58KB
  • SHA256 19ed9a9a724758fb9cd41e3a0ae8ecf424ae62bbeae61272d6a9a9d31de350ed
  • MD5 3c4e841ff6c8d065874db1971f81db98
  • SHA1 b31f8eff831ae47a3c748c5f92ec33fbdcee4811
  • SHA512 bbbea7318d3b936ed512986e5dd817d602885f9f339802987263381bae536aff23bb3d69e10c25a9fb5b77452493f144123faa9723c099b5384e618a6bf2eeb3
  • SSDEEP 384:MUe/oAohUyU1UtoWU1U2kUT3UrUezUeBoQUtkUvUezU16UPKkUt14kUgd3UCkUDH:q0n01Ldy92
  • TLSH
    T13243EBB9670D22A10F817C94D97E4EC1E0E23E88624F47EB775CEEA1914E784D211EF6
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  execution

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Command and Scripting Interpreter: PowerShell

    Using powershell.exe command.

    execution
  behavioral1behavioral2