Extracted

• • Target

    GKOPEWRYU.js

  • Size

    61KB

  • MD5

    6c65767545d7ad14fa6f2aa28fdd37e1

  • SHA1

    7a31fc2c58c387e538b8d2c6e288cfacee899ea2

  • SHA256

    4659be2ae1f69a483f84a858f35ab0b184031a1dbdccfb8b89decaa75004f249

  • SHA512

    73161f26b1cbd297c89a7b9811837b3bae6a44bf022aadd94ec1c57daddc2092c43809b002e4aab2cd59ecd2cb8ad106ede24d459be2831bf38537c6b8396ea8

  Score

  10^/10

  vjw0rmpersistencetrojanworm

  • Vjw0rm

    Vjw0rm is a remote access trojan written in JavaScript.

    trojanwormvjw0rm

  • Blocklisted process makes network request

  • Drops startup file

  • Adds Run key to start application

    persistence
  behavioral1behavioral2