General
- Target 67DESCdY3521425.zip
- Size 14KB
- Sample260813-r39dhsbe88
- SHA256 611656cdadfc3573208c5428fdd4dda6872aff0fc2b410a3c094acc6c085fbcd
- MD5 c6def50544fc0b642d72806d771cb7ea
- SHA1 1d7720aa36aea5b9202772defc578bee716bc7db
- SHA512 0df9fa91bd297e6c1ea1350214ce1c2b3dddf01809f904bad18b6beabcd9f6fa02120c2d0f18f0570e2eb26940bff98a5df0bcdfae12893ad12ed9a7027c6764
- SSDEEP 384:yuH+ZqN/c+TynKbFj1qSVaLgIpVVjADCJLs+:JHnpc+TyngN1q0e1jLVB
- TLSH T1B362CF99506DA3F0CF54952BC5F3FB7603AA3E63300D8969766DC07E8890972C664ECE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
FİYAT TEKLİF _Ramadan PO_NETES Mühendislik ve Dış Tic. A.Ş_P1..js
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
FİYAT TEKLİF _Ramadan PO_NETES Mühendislik ve Dış Tic. A.Ş_P1..js
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target FİYAT TEKLİF _Ramadan PO_NETES Mühendislik ve Dış Tic. A.Ş_P1..js
- Size 61KB
- SHA256 145a579c17c3a67eb4e34ef7ec73aff326c64dd9cc90e840dd49bee29499f9b8
- MD5 350b80732e28d6b33b650e540d4fd9ad
- SHA1 c472d150e32fddfb80191deb6dd7f2549e2b9137
- SHA512 aee87e4433effac8f9fd2a141b3a40bb7f48a7ae5f7192f391608deca1f51311e9853b8123dc7f06af1cdc071b3d481be0b48fee84f2d960d27f88a006ffe8ba
- SSDEEP 96:Jb+b1b6bBbAb33RKgFb6bBb1bdRpbBbLgFbNgFb6bCRWRtbAb3CbbRpbGgFbdRpU:PfENQPvmBiNcg
- TLSH T1E153385967A984E4F4BEA334E846FF0E605D95DEC94C1C08360379F524B2863C4E6BEE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.