Overview

overview

10

Static

static

10

97c97ad2ba...48c.js

windows7_x64

10

97c97ad2ba...48c.js

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    97c97ad2baef37eea023549131c192f441aa7976747166cd31095e7dad17948c

  • Size

    19KB

  • Sample

    220520-s963eahgf2

  • MD5

    f226dbe5dc77fe071ffc8c5d3c82e424

  • SHA1

    b4a63bd81c5388390dbda8b92770da88581610d1

  • SHA256

    97c97ad2baef37eea023549131c192f441aa7976747166cd31095e7dad17948c

  • SHA512

    11303231b6f854588cf182933af31f54060244cc4a8dbb73e41e3fca673b2c7d33457513d131c098808b60db8ebbaa6acd394d9b458fe1e2dc9c090fe02b9251

Score
10/10
evilnumtrojan

Malware Config

Targets

    • Target

      97c97ad2baef37eea023549131c192f441aa7976747166cd31095e7dad17948c

    • Size

      19KB

    • MD5

      f226dbe5dc77fe071ffc8c5d3c82e424

    • SHA1

      b4a63bd81c5388390dbda8b92770da88581610d1

    • SHA256

      97c97ad2baef37eea023549131c192f441aa7976747166cd31095e7dad17948c

    • SHA512

      11303231b6f854588cf182933af31f54060244cc4a8dbb73e41e3fca673b2c7d33457513d131c098808b60db8ebbaa6acd394d9b458fe1e2dc9c090fe02b9251

    Score
    10/10
    evilnumtrojan

    • EvilNum JS Component

    • Evilnum

      A malware family with multiple components distributed through LNK files.

      trojanevilnum

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks