General
- Target payment swift.js
- Size 613KB
- Sample261102-qtnj1stycv
- SHA256 fb0aa622952e1e45c4b4aef05fd1732bb00c8dc6581a2bd784607276f5afedda
- MD5 99e3c259d57073b5f3e6817e937ef269
- SHA1 4e55330bf9e9fdb978f30b82075776230a1d360c
- SHA512 638c4a777480d8c52787a44ccc3b9cc433b08d1dfcfd36430bf652df446b41c24d7fa6a700575ca0de3ef4ef18cde3299c3e5e7abeea93551840a1d2c0439a9e
- SSDEEP 12288:YPj8/aLngDJxW+GkVyMoNhxNZ0Qa7DaU1uvzkH9qsxVE0aA:YPj8/aMDWyVydh7Z0nDa2GYHIsc0l
- TLSH T1FDD423A49D43287F87BCCB15996E1F2C1A6593B204547B9F40FB90F00BBE7C16256CAA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
payment swift.js
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target payment swift.js
- Size 613KB
- SHA256 fb0aa622952e1e45c4b4aef05fd1732bb00c8dc6581a2bd784607276f5afedda
- MD5 99e3c259d57073b5f3e6817e937ef269
- SHA1 4e55330bf9e9fdb978f30b82075776230a1d360c
- SHA512 638c4a777480d8c52787a44ccc3b9cc433b08d1dfcfd36430bf652df446b41c24d7fa6a700575ca0de3ef4ef18cde3299c3e5e7abeea93551840a1d2c0439a9e
- SSDEEP 12288:YPj8/aLngDJxW+GkVyMoNhxNZ0Qa7DaU1uvzkH9qsxVE0aA:YPj8/aMDWyVydh7Z0nDa2GYHIsc0l
- TLSH T1FDD423A49D43287F87BCCB15996E1F2C1A6593B204547B9F40FB90F00BBE7C16256CAA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
Suspicious use of SetThreadContext