Extracted

• • Target
    Booking_Confrmation.js
  • Size 284KB
  • SHA256 9f9e0b512b1d9a521eec3c0fca55ed8618f1d3f303708880c4f26994580704ee
  • MD5 94abb50c2a932b9d508f1436d9827f89
  • SHA1 fec2c1de1a8abe8011edbb548d836a2631be3d71
  • SHA512 f078e2ae9601150eca93c558a887092c123d2096ffe11086c445ce2aa8fe15b76a99d5ce3048d79e88ec36734e0ca73b4e8345faef03e438f055afd226a82f0b
  • SSDEEP 1536:R5GBEpG76/7WlmFCg5YAihy17yI02UDU7O1r2odDVoXKRxZHnOfHqLcFt1Q1zkoL:Efr
  • TLSH
    T170540904E506F4490939A608DA9E64C8FA7EB73F539A193373FC3F648F240C956E9A58
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  execution

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Command and Scripting Interpreter: PowerShell

    Using powershell.exe command.

    execution
  behavioral1behavioral2