Overview

overview

10

Static

static

details_5494.js

windows7_x64

10

details_5494.js

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    details_5494.js
  • Size 562KB
  • Sample210727-b4d84xx7ex
  • SHA256 ccc76001e413ebe889c2d445f817fc024b50d2bfc6676e01aaebfa3ff9a91d4e
  • MD5 SHA1 SHA512
Score
10/10

Malware Config

Extracted

Language

  • ps1

Deobfuscated
Source
URLs
  • ps1.dropper

    http://netvalleykenya.com/crm.php

Targets

    • Target
      details_5494.js
    • Size 562KB
    • SHA256 ccc76001e413ebe889c2d445f817fc024b50d2bfc6676e01aaebfa3ff9a91d4e
    • MD5 SHA1 SHA512
    Score
    10/10

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks