General
-
Target
!ZXOPMBNT82OPM9.js
-
Size
10KB
-
Sample
210417-dxqs5w7f66
-
MD5
d2aa6ce87b5a04efe5f7f1781c9532a8
-
SHA1
cf65ab36eee3dc8479a6dad4cecfd67ce78afd7e
-
SHA256
45c58c8acba2fc00f3b054e715b07bd1a50c8076232aaae1b755d1be1f6640da
-
SHA512
f6b069d932f317969b89df9d9e2c527d50a26e75fce250c9faacd6114be91cf91cdbf8d11b067f09e90a6d62e9e63ae9ee80d19b7986beb10a7c6af415901e37
Static task
static1
Behavioral task
behavioral1
Sample
!ZXOPMBNT82OPM9.js
Resource
win7v20210410
Behavioral task
behavioral2
Sample
!ZXOPMBNT82OPM9.js
Resource
win10v20210410
Malware Config
Targets
-
-
Target
!ZXOPMBNT82OPM9.js
-
Size
10KB
-
MD5
d2aa6ce87b5a04efe5f7f1781c9532a8
-
SHA1
cf65ab36eee3dc8479a6dad4cecfd67ce78afd7e
-
SHA256
45c58c8acba2fc00f3b054e715b07bd1a50c8076232aaae1b755d1be1f6640da
-
SHA512
f6b069d932f317969b89df9d9e2c527d50a26e75fce250c9faacd6114be91cf91cdbf8d11b067f09e90a6d62e9e63ae9ee80d19b7986beb10a7c6af415901e37
Score10/10-
Blocklisted process makes network request
-
Drops startup file
-
Adds Run key to start application
-