Analysis
-
max time kernel
148s -
max time network
149s -
platform
windows10_x64 -
resource
win10v20210410 -
submitted
03-06-2021 08:45
General
-
Target
PaymentDetails.js
-
Size
23KB
-
MD5
4567e892ebbf0c2baa6590bb239cf649
-
SHA1
f2ec49073e5c5b42b573bcbdc081ca596a0bd2f9
-
SHA256
662d7f915601868bfdbf927466436434cf80456d4bd5c85ca8b8e7353cc835a7
-
SHA512
3fc80659f98f19107444e07e6d425aed82e768fb56c49c08989a19ebae93cd2e35eadd3321c775be20963f2f04637f74f9dd01627ad8d3537dfb6970af535ec8
Score
10/10
Malware Config
Signatures
-
Vjw0rm
Vjw0rm is a remote access trojan written in JavaScript.
-
Blocklisted process makes network request 19 IoCs
Processes
-
C:\Windows\system32\wscript.exewscript.exe C:\Users\Admin\AppData\Local\Temp\PaymentDetails.js1⤵
- Blocklisted process makes network request