General
- Target 25092026_1030_24092026_NO_068798_HY205879_PO_0905860_MQ20285.rar
- Size 113KB
- Sample260925-mj3peatfqe
- SHA256 db02384ccce5f6a2135070753dfbf1d831ff67eeab621134a5a8587795d966ba
Score
10/10
Malware Config
Targets
-
- Target NO_068798_HY205879_PO_0905860_MQ20285.js
- Size 4.8MB
- SHA256 692ddfd67cc353ad50d5539dc390f4b34a93ebb9261c23578653e6c0d57f58d6
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Command and Scripting Interpreter: PowerShell
Run Powershell and hide display window.