General
- Target FACTURA.js
- Size 25KB
- Sample260820-gyd2ps1bpf
- SHA256 f8d105d5ae7e102386763dc3df44d9e373cc4b92c084c84132c6769ef83a3cbb
- MD5 afd689dd0f6f8d1c5cf273729f745d28
- SHA1 48c1706a8c0c4385eba26ea0f59e7167ce7c3aa6
- SHA512 90450babb69e5ebb94292a03bb5b8aae1c138724eda186c7444c1981849ae9a5a1ae4881af0a84573fd37bdc772e337919a08bfc57b2680082ebd52241a21539
- SSDEEP 384:u699kxTFo8e3BDhLtmVd8Z3FY8+jBvhfImVd8Z3FY8+jBvhfgwFD:FWKWCiNCiec
- TLSH T106C22CC4904A4C2CFA6A677222B05FECF06466D18CE39C2AB6DD73A56EDC5504C13AF7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
FACTURA.js
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
FACTURA.js
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target FACTURA.js
- Size 25KB
- SHA256 f8d105d5ae7e102386763dc3df44d9e373cc4b92c084c84132c6769ef83a3cbb
- MD5 afd689dd0f6f8d1c5cf273729f745d28
- SHA1 48c1706a8c0c4385eba26ea0f59e7167ce7c3aa6
- SHA512 90450babb69e5ebb94292a03bb5b8aae1c138724eda186c7444c1981849ae9a5a1ae4881af0a84573fd37bdc772e337919a08bfc57b2680082ebd52241a21539
- SSDEEP 384:u699kxTFo8e3BDhLtmVd8Z3FY8+jBvhfImVd8Z3FY8+jBvhfgwFD:FWKWCiNCiec
- TLSH T106C22CC4904A4C2CFA6A677222B05FECF06466D18CE39C2AB6DD73A56EDC5504C13AF7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.