General
-
Target
Scanned_copy.js
-
Size
3KB
-
Sample
211216-j8fpdsbec2
-
MD5
069760354f3e37200a7112a84aaa3f3b
-
SHA1
7b55b0e82f004e922f2e886e800e9379c9e09250
-
SHA256
df29cf83fe008627f1475b86bf67530eab0680bc18995786f51719136d079926
-
SHA512
e77bc7cd7fbc38da4b9c59bcc1336c9a2e46e040606c8e6db12649cc6e29907ddbd6aa76005e760074ee3b04b6df9b3ac23d33927b41f134a2922ddf759a6d99
Static task
static1
Behavioral task
behavioral1
Sample
Scanned_copy.js
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
Scanned_copy.js
Resource
win10-en-20211208
Malware Config
Extracted
vjw0rm
http://2ndversionjs.duckdns.org:9100
Targets
-
-
Target
Scanned_copy.js
-
Size
3KB
-
MD5
069760354f3e37200a7112a84aaa3f3b
-
SHA1
7b55b0e82f004e922f2e886e800e9379c9e09250
-
SHA256
df29cf83fe008627f1475b86bf67530eab0680bc18995786f51719136d079926
-
SHA512
e77bc7cd7fbc38da4b9c59bcc1336c9a2e46e040606c8e6db12649cc6e29907ddbd6aa76005e760074ee3b04b6df9b3ac23d33927b41f134a2922ddf759a6d99
Score10/10-
Blocklisted process makes network request
-
Drops startup file
-
Adds Run key to start application
-