General
-
Target
receipt#.js
-
Size
22KB
-
Sample
211204-hx815addc5
-
MD5
13fb0284023b235db4c118f0173c272c
-
SHA1
71bf685ab695101244f4c2aebc4f257911b7e302
-
SHA256
b2fb92728d4406136e6934be420befd0306ea69b03540e73e0d718a6d09e0f70
-
SHA512
e8d635e4695f0905331d263f71706a2ce404140de9037f1a9691616e30009c990e1512b1921c5e3e4041aa49743fa8fab10c8588910cc401fc7f12068af0daed
Static task
static1
Behavioral task
behavioral1
Sample
receipt#.js
Resource
win7-en-20211104
Behavioral task
behavioral2
Sample
receipt#.js
Resource
win10-en-20211104
Malware Config
Extracted
vjw0rm
http://zeegod.duckdns.org:9998
Targets
-
-
Target
receipt#.js
-
Size
22KB
-
MD5
13fb0284023b235db4c118f0173c272c
-
SHA1
71bf685ab695101244f4c2aebc4f257911b7e302
-
SHA256
b2fb92728d4406136e6934be420befd0306ea69b03540e73e0d718a6d09e0f70
-
SHA512
e8d635e4695f0905331d263f71706a2ce404140de9037f1a9691616e30009c990e1512b1921c5e3e4041aa49743fa8fab10c8588910cc401fc7f12068af0daed
Score10/10-
Blocklisted process makes network request
-
Drops startup file
-
Adds Run key to start application
-