Analysis

  • max time kernel
    149s
  • max time network
    197s
  • platform
    windows7_x64
  • resource
    win7v20210408
  • submitted
    04-07-2021 07:08

General

  • Target

    image002.js

  • Size

    8KB

  • MD5

    0811c1e9b739c886647b8cda211e7694

  • SHA1

    2eef51888ec70df07e1a7178659d9531cbf41a10

  • SHA256

    edeede41a001593a50ecc11347480c31937a7de92b7b3f39d7125d332c8a9cb7

  • SHA512

    bb192e4bf9062d84656f8e66ff86468c9dcea52ae4aba7e33d76c23c58f28bcfb2225889cbe3d797d8c6ab71c43692dc9eeab3f013f69490cbe9d3395a4292b7

Score
10/10

Malware Config

Signatures

  • Vjw0rm

    Vjw0rm is a remote access trojan written in JavaScript.

  • Blocklisted process makes network request 18 IoCs

Processes

  • C:\Windows\system32\wscript.exe
    wscript.exe C:\Users\Admin\AppData\Local\Temp\image002.js
    1⤵
    • Blocklisted process makes network request
    PID:1988

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads