General
-
Target
eReceipt.js
-
Size
25KB
-
Sample
211012-kg4gtabhdl
-
MD5
75c51e4760f40c18863f675ef0d06501
-
SHA1
64a0bdded7dd1a220f77958f3bf322376cdb832f
-
SHA256
041857494d57688060972d7a46663f5295df45223e3445afa95d43e674fd053c
-
SHA512
7b2ba2b9fca230a2f5eb6ef4fa02b635bef472b6a506da914838645bdcb2e3ca5ff2734c0015ba9d1e65b615747b3ba3db0f6264184e6f0b980a5b216db83a42
Static task
static1
Behavioral task
behavioral1
Sample
eReceipt.js
Resource
win7v20210408
Behavioral task
behavioral2
Sample
eReceipt.js
Resource
win10-en-20210920
Malware Config
Extracted
vjw0rm
http://loadcash.duckdns.org:7778
Targets
-
-
Target
eReceipt.js
-
Size
25KB
-
MD5
75c51e4760f40c18863f675ef0d06501
-
SHA1
64a0bdded7dd1a220f77958f3bf322376cdb832f
-
SHA256
041857494d57688060972d7a46663f5295df45223e3445afa95d43e674fd053c
-
SHA512
7b2ba2b9fca230a2f5eb6ef4fa02b635bef472b6a506da914838645bdcb2e3ca5ff2734c0015ba9d1e65b615747b3ba3db0f6264184e6f0b980a5b216db83a42
Score10/10-
Blocklisted process makes network request
-
Drops startup file
-
Adds Run key to start application
-