General

  • Target

    List_Of_Transfers_and_Managers_promotions_dtd_details_pdf.js

  • Size

    403KB

  • Sample

    220617-n13amsecg6

  • MD5

    863c56001819a39a8b63da22f03920ef

  • SHA1

    b9dd426309b1d26b667f748dc35aba3c1d741bb9

  • SHA256

    91a70ece7662934450a1fa1567311523cec2656d2b1865f20abfad5557362a06

  • SHA512

    4d4779b8c2a6d1b71826adff55545d9ad7aea0b10bf023c1941bc774425cc3a186d44d23813a1c25f5bbca5de615d700c84df798f0826173dc2c13e1f0437bab

Score
10/10

Malware Config

Targets

    • Target

      List_Of_Transfers_and_Managers_promotions_dtd_details_pdf.js

    • Size

      403KB

    • MD5

      863c56001819a39a8b63da22f03920ef

    • SHA1

      b9dd426309b1d26b667f748dc35aba3c1d741bb9

    • SHA256

      91a70ece7662934450a1fa1567311523cec2656d2b1865f20abfad5557362a06

    • SHA512

      4d4779b8c2a6d1b71826adff55545d9ad7aea0b10bf023c1941bc774425cc3a186d44d23813a1c25f5bbca5de615d700c84df798f0826173dc2c13e1f0437bab

    Score
    10/10
    • Vjw0rm

      Vjw0rm is a remote access trojan written in JavaScript.

    • Blocklisted process makes network request

MITRE ATT&CK Matrix

Tasks