General

  • Target
    67DESCdY3521425.zip
  • Size 14KB
  • Sample260813-r39dhsbe88
  • SHA256 611656cdadfc3573208c5428fdd4dda6872aff0fc2b410a3c094acc6c085fbcd
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      FİYAT TEKLİF _Ramadan PO_NETES Mühendislik ve Dış Tic. A.Ş_P1..js
    • Size 61KB
    • SHA256 145a579c17c3a67eb4e34ef7ec73aff326c64dd9cc90e840dd49bee29499f9b8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Creates a file in the Startup directory

      A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.

MITRE ATT&CK Enterprise v16

Tasks