Overview

overview

10

Static

static

10

167c73656e...ad2.js

windows7_x64

8

167c73656e...ad2.js

windows10_x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    167c73656e26e69d418a9cbc4a811cdbacbf130bcc06ae3e6e4a4794ae94bad2.js
  • Size 184KB
  • Sample201015-wqwsna7afn
  • SHA256 167c73656e26e69d418a9cbc4a811cdbacbf130bcc06ae3e6e4a4794ae94bad2
  • MD5 SHA1 SHA512
Score
10/10
wshratpersistence

Malware Config

Targets

    • Target
      167c73656e26e69d418a9cbc4a811cdbacbf130bcc06ae3e6e4a4794ae94bad2.js
    • Size 184KB
    • SHA256 167c73656e26e69d418a9cbc4a811cdbacbf130bcc06ae3e6e4a4794ae94bad2
    • MD5 SHA1 SHA512
    Score
    8/10
    persistence

    • Blacklisted process makes network request

    • Drops startup file

    • Adds Run key to start application

      persistence

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks