vjw0rm | 44c4da720bcd803731900f96e48662ea55da18b4fdcf1152192ca4322b9cb328 | Triage

Sharing

General

Target

GySjyuTJbo.js
Size

9KB
Sample

210904-b4p39sdfc6
MD5

f62440f09898b39fea134065ef66629f
SHA1

6481a10130d0f04b618edffe25e447f361b610bd
SHA256

44c4da720bcd803731900f96e48662ea55da18b4fdcf1152192ca4322b9cb328
SHA512

cfdd9fe2ab94e698d6616e1a4143a0ecbb970f01259ce555fded0673a605e1b0799ed877a77c011b9ce0cf912c3fc3d693bb9796253199321606e9136b38b33f

Score

10^/10

vjw0rm persistence trojan worm

Malware Config

Targets

- Target
  
  GySjyuTJbo.js
- Size
  
  9KB
- MD5
  
  f62440f09898b39fea134065ef66629f
- SHA1
  
  6481a10130d0f04b618edffe25e447f361b610bd
- SHA256
  
  44c4da720bcd803731900f96e48662ea55da18b4fdcf1152192ca4322b9cb328
- SHA512
  
  cfdd9fe2ab94e698d6616e1a4143a0ecbb970f01259ce555fded0673a605e1b0799ed877a77c011b9ce0cf912c3fc3d693bb9796253199321606e9136b38b33f
Score

10^/10

vjw0rm persistence trojan worm
- Vjw0rm
  Vjw0rm is a remote access trojan written in JavaScript.
  trojan worm vjw0rm
- Blocklisted process makes network request
- Drops startup file
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

behavioral2

vjw0rmpersistencetrojanworm