Overview

overview

8

Static

static

Document_8...019.js

windows7-x64

8

Document_8...019.js

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    55720b5fe9d835adf78bc5c3b5ea7054c99e8cc5eb99b07ae5794e3af846de85

  • Size

    11KB

  • Sample

    220725-tgqemadca7

  • MD5

    6f4e9c319addc0d3ba27f7dd11fe4eb0

  • SHA1

    9f9b4a49e7c86e9f452f0f2da774c13d85c5612a

  • SHA256

    55720b5fe9d835adf78bc5c3b5ea7054c99e8cc5eb99b07ae5794e3af846de85

  • SHA512

    858b8e0238ad2cbd966e3660246fa015e5544273aaac715d8fd4501a1c21e6c0d19bca0b9e6672eddac7bd689396da4d2d15754c8aaf61ba800b8a6620072a07

Score
8/10

Malware Config

Targets

    • Target

      Document_8178908243US_Apr_20_2019.js

    • Size

      38KB

    • MD5

      85ed645c9a46521018e97abbc4605395

    • SHA1

      dbbeea5fd963bddb9a826ab6b6b44d3b5a651599

    • SHA256

      79c6cc4ed2307ad107c2b7018b2ce8ed6887f85c1034c6c04766c255c1932d06

    • SHA512

      e557b95e3a213f2c01418c14c51c4a5a5b4e369032a390d68b414bb205185c67b9688f954b7212baf653e1e8e93e06ce71434befba005da0afd24809b60c61ec

    Score
    8/10

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks