General
- Target 3z9Natx-67450-08gAB6D31818B0CE4CA6891f0c5.txt
- Size 51KB
- Sample261006-p3fp4agy5v
- SHA256 4b28760fb5f3181ac38de057bb773cb4f5b03fb2be7d4e8536ea857e2b822665
Score
10/10
Malware Config
Targets
-
- Target comprobante de Pago.rar
- Size 4KB
- SHA256 ef0cecac930638bbd63b0f38f402f10424d5e7bd29ad21c7e4f2cf50088ce407
Score1/10 -
- Target comprobante de Pago.js
- Size 31KB
- SHA256 88f412054b7f54679a109121da725070f4bce99f3f486cd0f4d94fb32782d38f
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Command and Scripting Interpreter: PowerShell
Run Powershell and hide display window.
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.