General
- Target Pending-invoicependingformapayment.js
- Size 12.2MB
- Sample260204-ryptbag14f
- SHA256 c07cc41e7acf586cc74eb81b717be75d7881264e755815da2eee07d9294bcdbb
- MD5 f70b4b972004ca8022fee4a3d5db187e
- SHA1 1ce1a5851760cc44a85fd41fc6f385123875d08e
- SHA512 8865d659c8bf70eb22018609a5b4e9fcede77c421808ba30c2a9f15d8a2eff132503eb5d79e3e6251ad4e0fe9d3663975e3b5a69b99c31d5b1906362d5d2577f
- SSDEEP 24576:YssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssZ:S
- TLSH T18AD6022D11AF15C4001E08989679974E5C3CA8AEADE3EB3EF5A3F7DD9440F4C3196B29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
Pending-invoicependingformapayment.js
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Pending-invoicependingformapayment.js
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target Pending-invoicependingformapayment.js
- Size 12.2MB
- SHA256 c07cc41e7acf586cc74eb81b717be75d7881264e755815da2eee07d9294bcdbb
- MD5 f70b4b972004ca8022fee4a3d5db187e
- SHA1 1ce1a5851760cc44a85fd41fc6f385123875d08e
- SHA512 8865d659c8bf70eb22018609a5b4e9fcede77c421808ba30c2a9f15d8a2eff132503eb5d79e3e6251ad4e0fe9d3663975e3b5a69b99c31d5b1906362d5d2577f
- SSDEEP 24576:YssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssZ:S
- TLSH T18AD6022D11AF15C4001E08989679974E5C3CA8AEADE3EB3EF5A3F7DD9440F4C3196B29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.