General

  • Target
    25092026_1045_25092026_67531790113_EAG-MED265006A.gz
  • Size 141KB
  • Sample260925-mtfbvsv17j
  • SHA256 5311bcce698c4f0055ab3eea9754bd5d504e6ede31d3a0d001fdf989fee87924
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Targets

    • Target
      67531790113_EAG-MED265006A.js
    • Size 5.4MB
    • SHA256 40f0eb77a5b869f2451db73a18169645c4070ccdf82ff74a50d29f0d46507317
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

MITRE ATT&CK Enterprise v16

Tasks