General
-
Target
000117061.doc.js
-
Size
38KB
-
Sample
210115-tc4c25t4l6
-
MD5
0cc28681f876b7308ab01ac899a15254
-
SHA1
08d864dff97c0a2e632101c5a92b9659c31d882d
-
SHA256
58d3c192d644d498253d871ad5bd6022cc2a99ebdec7609ef991e04a0705ee6e
-
SHA512
5403902f2ca280b3201229b785dc9b3eff5b2a48b119ecc3f54c1c561ddde20a7902b052f5cecd187a6388ecb0998112fe7f690d97d7c96d2dd15e8b33325caf
Static task
static1
Behavioral task
behavioral1
Sample
000117061.doc.js
Resource
win7v20201028
Behavioral task
behavioral2
Sample
000117061.doc.js
Resource
win10v20201028
Malware Config
Extracted
C:\Users\Admin\AppData\Local\Temp\a.txt
1HGjCFUm6kt4sdipE7nanTAXaBxuZGe7bT
http://futengcapital.com/counter/?a=1HGjCFUm6kt4sdipE7nanTAXaBxuZGe7bT
http://clermontcentralchurch.org/counter/?a=1HGjCFUm6kt4sdipE7nanTAXaBxuZGe7bT
http://bellefremee.com/counter/?a=1HGjCFUm6kt4sdipE7nanTAXaBxuZGe7bT
http://sandrahalbe.com/counter/?a=1HGjCFUm6kt4sdipE7nanTAXaBxuZGe7bT
http://glamcook.com/counter/?a=1HGjCFUm6kt4sdipE7nanTAXaBxuZGe7bT
Targets
-
-
Target
000117061.doc.js
-
Size
38KB
-
MD5
0cc28681f876b7308ab01ac899a15254
-
SHA1
08d864dff97c0a2e632101c5a92b9659c31d882d
-
SHA256
58d3c192d644d498253d871ad5bd6022cc2a99ebdec7609ef991e04a0705ee6e
-
SHA512
5403902f2ca280b3201229b785dc9b3eff5b2a48b119ecc3f54c1c561ddde20a7902b052f5cecd187a6388ecb0998112fe7f690d97d7c96d2dd15e8b33325caf
Score10/10-
Blocklisted process makes network request
-
Adds Run key to start application
-