General

  • Target
    FACTURE N° 15 250 B 090.pdf.js
  • Size 39KB
  • Sample210114-sfl2j2wlgn
  • SHA256 8fcdabf8ebe883f4d78a00f6abc301395188d2c26604ea44e955bd2af220f272
  • MD5 SHA1 SHA512

Malware Config

Targets

    • Target
      FACTURE N° 15 250 B 090.pdf.js
    • Size 39KB
    • SHA256 8fcdabf8ebe883f4d78a00f6abc301395188d2c26604ea44e955bd2af220f272
    • MD5 SHA1 SHA512
    • Vjw0rm

      Vjw0rm is a remote access trojan written in JavaScript.

    • Blocklisted process makes network request

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks