vjw0rm | 9005a39c203e068daa077fe244e2608d36852dbef6f6ce8b28cc5cc015b89b1b | Triage

Submit
Reports

Overview

overview

Static

static

98e3648add...2b0.js

windows7-x64

98e3648add...2b0.js

windows10-2004-x64

Sharing

General

Target

98e3648add4ab0724ebeb54eb720e8ad97ad52b0
Size

378KB
Sample

230117-x75tsaec37
MD5

484e1f6925d5957e9d486e420dc010b7
SHA1

98e3648add4ab0724ebeb54eb720e8ad97ad52b0
SHA256

9005a39c203e068daa077fe244e2608d36852dbef6f6ce8b28cc5cc015b89b1b
SHA512

5b32912e30b446357ce6fe626b8136ae3262cdf4c60b7bc56b16171156a8979001a1a52168c0fe34b2b7526379b4519b7b04c86e17e18f40a62b7361acb0617c
SSDEEP

6144:6V0EJTElOz43XdvK4tHOh6WfkHi4FjqWkQ2M4MMPpsiscuzAOgied24iD+:cJMW43NsZghqekPpNqAOgBd7iD+

Score

10^/10

vjw0rm trojan worm

Static task

static1

Behavioral task

behavioral1

Sample

98e3648add4ab0724ebeb54eb720e8ad97ad52b0.js

Resource

win7-20220812-en

vjw0rm trojan worm

windows7-x64

13 signatures

150 seconds

Behavioral task

behavioral2

Sample

98e3648add4ab0724ebeb54eb720e8ad97ad52b0.js

Resource

win10v2004-20220812-en

vjw0rm trojan worm

windows10-2004-x64

15 signatures

150 seconds

Malware Config

Targets

- Target
  
  98e3648add4ab0724ebeb54eb720e8ad97ad52b0
- Size
  
  378KB
- MD5
  
  484e1f6925d5957e9d486e420dc010b7
- SHA1
  
  98e3648add4ab0724ebeb54eb720e8ad97ad52b0
- SHA256
  
  9005a39c203e068daa077fe244e2608d36852dbef6f6ce8b28cc5cc015b89b1b
- SHA512
  
  5b32912e30b446357ce6fe626b8136ae3262cdf4c60b7bc56b16171156a8979001a1a52168c0fe34b2b7526379b4519b7b04c86e17e18f40a62b7361acb0617c
- SSDEEP
  
  6144:6V0EJTElOz43XdvK4tHOh6WfkHi4FjqWkQ2M4MMPpsiscuzAOgied24iD+:cJMW43NsZghqekPpNqAOgBd7iD+
Score

10^/10

vjw0rm trojan worm
- Vjw0rm
  Vjw0rm is a remote access trojan written in JavaScript.
  trojan worm vjw0rm
- Blocklisted process makes network request
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Drops startup file
- Loads dropped DLL
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Command-Line Interface

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

vjw0rmtrojanworm

behavioral2

vjw0rmtrojanworm

© 2018-2025

Terms | Privacy