General
- Target Pending-invoicependingformapayment.js
- Size 12.2MB
- Sample260204-ryptbag14f
- SHA256 c07cc41e7acf586cc74eb81b717be75d7881264e755815da2eee07d9294bcdbb
- MD5 f70b4b972004ca8022fee4a3d5db187e
- SHA1 1ce1a5851760cc44a85fd41fc6f385123875d08e
- SHA512 8865d659c8bf70eb22018609a5b4e9fcede77c421808ba30c2a9f15d8a2eff132503eb5d79e3e6251ad4e0fe9d3663975e3b5a69b99c31d5b1906362d5d2577f
- SSDEEP 24576:YssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssZ:S
- TLSH T18AD6022D11AF15C4001E08989679974E5C3CA8AEADE3EB3EF5A3F7DD9440F4C3196B29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
Pending-invoicependingformapayment.js
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Pending-invoicependingformapayment.js
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target Pending-invoicependingformapayment.js
- Size 12.2MB
- SHA256 c07cc41e7acf586cc74eb81b717be75d7881264e755815da2eee07d9294bcdbb
- MD5 f70b4b972004ca8022fee4a3d5db187e
- SHA1 1ce1a5851760cc44a85fd41fc6f385123875d08e
- SHA512 8865d659c8bf70eb22018609a5b4e9fcede77c421808ba30c2a9f15d8a2eff132503eb5d79e3e6251ad4e0fe9d3663975e3b5a69b99c31d5b1906362d5d2577f
- SSDEEP 24576:YssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssZ:S
- TLSH T18AD6022D11AF15C4001E08989679974E5C3CA8AEADE3EB3EF5A3F7DD9440F4C3196B29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.