Extracted

• • Target
    COMPROBANTE DE PAGO.js
  • Size 99KB
  • SHA256 8e2dd5512aff7942a8c3a08d5227d387f8b0244b1c429d09608ace21cc6317b1
  • MD5 57eb988dc15d4b40cf2dbaece9646602
  • SHA1 b9bb4250e00f28fe63e2185e4343ee4d57631ca7
  • SHA512 97670edeef82b147267154c67addfc43e275a6d5bc1eeb7d023a419556652d5d6e0db947cc4ff7a6eb96cf290d4a0dcda23de7d2daaadad18153225add71a2c1
  • SSDEEP 384:QTFD27dIkdAlx0c9NpZLHM7eVWA2B2czFGPL2Po0rX1Irx2T2xwy465s4MJ9MSTR:4MDodQXACx5ImIcyOJOpMiaEqY4Zvp
  • TLSH
    T100A3133D1D69023B56FAC75CC4C5094BF0A3996776316C4D94EFA3898BA3283B9C136E
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoveryexecution

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Command and Scripting Interpreter: PowerShell

    Run Powershell and hide display window.

    execution
  behavioral1behavioral2