General
-
Target
TWR2880MNA.js
-
Size
6KB
-
Sample
210920-we54eahdbp
-
MD5
048ffe6b625abc3eed6cbb5d6a8ac319
-
SHA1
0b48722a48691193dfe105e6959c95ce4af7ad8d
-
SHA256
ec2c96e7e47adb1aa3045bc089253d334c67d5a7b51667347e822c1b9d47e57a
-
SHA512
1df14c334b64083caf40b82acc3661de9966743736b7af506eb8f714e006d0f2d8ef7a411a4bebfbbdd7547ba3d061cb8e7a3a5bc3865ac52fe6163571189202
Static task
static1
Behavioral task
behavioral1
Sample
TWR2880MNA.js
Resource
win7-en-20210920
Behavioral task
behavioral2
Sample
TWR2880MNA.js
Resource
win10v20210408
Malware Config
Targets
-
-
Target
TWR2880MNA.js
-
Size
6KB
-
MD5
048ffe6b625abc3eed6cbb5d6a8ac319
-
SHA1
0b48722a48691193dfe105e6959c95ce4af7ad8d
-
SHA256
ec2c96e7e47adb1aa3045bc089253d334c67d5a7b51667347e822c1b9d47e57a
-
SHA512
1df14c334b64083caf40b82acc3661de9966743736b7af506eb8f714e006d0f2d8ef7a411a4bebfbbdd7547ba3d061cb8e7a3a5bc3865ac52fe6163571189202
Score10/10-
Blocklisted process makes network request
-
Drops startup file
-
Adds Run key to start application
-