General
-
Target
justificante de la transferencia.jar
-
Size
633KB
-
Sample
220629-jrjdyshee2
-
MD5
fbbe867f061bcb408da65984170ba74e
-
SHA1
b590a6713dea76b60b5e4fd485e2b3359db656b5
-
SHA256
95c7d2c1ca46c6e1ac08ad933faa802f8d71eaacaa78e8df96a2f487b3030d78
-
SHA512
a4bc77de1b68ee3375e83a40a2a501355a82ca51d12beaf86a608953883770fdf0d023688b70665d7649289094d0851ce1b5898c00939c51858d7f91e71dede8
Static task
static1
Behavioral task
behavioral1
Sample
justificante de la transferencia.jar
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
justificante de la transferencia.jar
Resource
win10v2004-20220414-en
Malware Config
Extracted
vjw0rm
http://paypalintelsassistant.duia.ro:8153
Targets
-
-
Target
justificante de la transferencia.jar
-
Size
633KB
-
MD5
fbbe867f061bcb408da65984170ba74e
-
SHA1
b590a6713dea76b60b5e4fd485e2b3359db656b5
-
SHA256
95c7d2c1ca46c6e1ac08ad933faa802f8d71eaacaa78e8df96a2f487b3030d78
-
SHA512
a4bc77de1b68ee3375e83a40a2a501355a82ca51d12beaf86a608953883770fdf0d023688b70665d7649289094d0851ce1b5898c00939c51858d7f91e71dede8
Score10/10-
Blocklisted process makes network request
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Adds Run key to start application
-
Drops file in System32 directory
-