General
- Target 648b2a01342f139efefe21cd8109237294ea988bb0df3159a244393817012228
- Size 503KB
- Sample260919-n1cd8afa26
- SHA256 648b2a01342f139efefe21cd8109237294ea988bb0df3159a244393817012228
Score
10/10
Malware Config
Targets
-
- Target RFQ-OUR REF RET-402-143.TXT
- Size 20.8MB
- SHA256 269ffaf8068b8bcea05e288d5d0b9d90feb2c7704fba571cab05c82337363524
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Command and Scripting Interpreter: PowerShell
Run Powershell and hide display window.