General
- Target 1.gz
- Size 11KB
- Sample260811-prnlkazvas
- SHA256 83569b127114a2183711bdb6181a3d5868d633b7aa3993b91cc40595207bf3b1
- MD5 5b537089db2b82c549257491bf812afd
- SHA1 7cdba74244587fece211863d769add0e0834d630
- SHA512 deb32755424555c42e77d7c276d571b73faae4e995d4edac450370b98e2ff040bcd183174690a0d977a12748255fd3b82bd7942d4e9f7d951278f2451ee05785
- SSDEEP 192:e/Wm9av3XeLX97nuaYHmWagEHk91DM/qdICBAhQ7c6cN0+zkiKc/18unt:cOXep7njYHEAayJBAaY0GYcCut
- TLSH T1CA42BFE4E7B79170195763E34D904AF42F28BC873E14667FCAE1CB561411C6FD20A927
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
Purchase Order for Project Borcelik GIS Hitachi 202608030548.js
Resource
win11-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Purchase Order for Project Borcelik GIS Hitachi 202608030548.js
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target Purchase Order for Project Borcelik GIS Hitachi 202608030548.js
- Size 979KB
- SHA256 8ffb3051a4855e294eca36e7a0b33f15297dce56083f827c17129f759409506e
- MD5 10b30a233fd6673ba7cc8ba1eed5bd16
- SHA1 4587105d17d1e7f9efe58a77465adefd6cdfe399
- SHA512 fca16ba2fd5b2be970fd38fe250daaf3a93ae3d80b8fc061c69c9bb96c5ba950393759285af1dfa70da22f5b668e2a637bfeb042388480d9e84106d99fabd14c
- SSDEEP 768:rZiibe9nbEiCml8mYm1MZibEiL8mYmU5fYibY51nL5hNm1eR8mpZMZiCmYm1ECmg:dCJaCeJcvii
- TLSH T18F25B6FB7AE1DB93907CFB17BD78C3A96A62C83746C90D0F7E48695996D4580A200CF1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.