Extracted

• • Target
    FACTURA DE PAGO-5466352-AGO-2026.js
  • Size 359KB
  • SHA256 5d8412afa31465b53132d25931a36eb24c3660ea7a65b0669721adfecbd0d709
  • MD5 08dcd2c80f6c29c8c8bfe81187a8c655
  • SHA1 38030e72217996ad5338e678b87b6c89e23d1378
  • SHA512 78d46ff7a1a8be182e247a5b61d3a73db174895bdef94ddd82ca6022477b2dff967f85d76cf5cb7e9dd0dd4da90339dfc96e066af150a84260ea4373bed9b4d5
  • SSDEEP 384:xLRgqVgHIM2ATeTlh7reBRBzHB49qJ2pF+KH2xEiroZd4pZdCOWo3KTD0/5JMg:xLRgqV+IjA6TlVWiMaFNOEgWo3KE/5JB
  • TLSH
    T1A174E2F2A2A72310839716BDCC13EC8FE6096FADF219893CB1A99FD4C95911545FDE20
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  executionpersistence

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Command and Scripting Interpreter: PowerShell

    Using powershell.exe command.

    execution

  • Suspicious use of SetThreadContext

  behavioral1behavioral2