Overview

overview

8

Static

static

kf.js

windows7_x64

8

kf.js

windows10_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    kf.js

  • Size

    1KB

  • Sample

    211216-ecnb5sbbe2

  • MD5

    36be0a55e7d8afcfc445e990a570dea1

  • SHA1

    06332482d724bdbcc3ad74974612733d977f649f

  • SHA256

    c7d3cabf68151b9207d6262f3fd739f70f18a736a5a8d04479150f08448bd7bf

  • SHA512

    ab55261286bf93b8c097a04cd6b349414e772a966c1ddae8bc39966b4ca2f4303533ceca93b2406bce1d07338fdcbc2f1cac375a3f4145548449fc66e4a5bed1

Score
8/10

Malware Config

Targets

    • Target

      kf.js

    • Size

      1KB

    • MD5

      36be0a55e7d8afcfc445e990a570dea1

    • SHA1

      06332482d724bdbcc3ad74974612733d977f649f

    • SHA256

      c7d3cabf68151b9207d6262f3fd739f70f18a736a5a8d04479150f08448bd7bf

    • SHA512

      ab55261286bf93b8c097a04cd6b349414e772a966c1ddae8bc39966b4ca2f4303533ceca93b2406bce1d07338fdcbc2f1cac375a3f4145548449fc66e4a5bed1

    Score
    8/10

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Collection

    Command and Control

      Credential Access

        Defense Evasion

          Discovery

            Execution

              Exfiltration

                Impact

                  Initial Access

                    Lateral Movement

                      Persistence

                        Privilege Escalation