General

  • Target
    payment swift.js
  • Size 613KB
  • Sample261102-qtnj1stycv
  • SHA256 fb0aa622952e1e45c4b4aef05fd1732bb00c8dc6581a2bd784607276f5afedda
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      payment swift.js
    • Size 613KB
    • SHA256 fb0aa622952e1e45c4b4aef05fd1732bb00c8dc6581a2bd784607276f5afedda
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks