Overview

overview

8

Static

static

1

dms_default

windows10-2004-x64

8

dms_fakenet

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    Jjhsxjbn.js

  • Size

    115KB

  • Sample

    230523-ehxsrsef2t

  • MD5

    249a092c305465326bd5e50726894c49

  • SHA1

    afbcf8b7ca32c0a9dc1fa45cd695b03259d1b07b

  • SHA256

    9724e6203af000a660014baedaa7fe4e580806cd9b19d045cbb28526b6be5921

  • SHA512

    b108f95a540ffa6df8aef259b476fd8adbdcf8c5cdf657155b6277e3db5d196244fabc8cd5be84c5568486dffc21174afeea9b42dadf2840011f966b7fd1ef19

  • SSDEEP

    1536:pz3Tmfhjtz+rL2c9eU9DCp7qL9AFhnLuyruxj/AH7QqVVmJHqQqdB7aM:If8CBUJy7qLwhLu2cj/AbQqzmzqj7aM

Score
8/10

Malware Config

Targets

    • Target

      Jjhsxjbn.js

    • Size

      115KB

    • MD5

      249a092c305465326bd5e50726894c49

    • SHA1

      afbcf8b7ca32c0a9dc1fa45cd695b03259d1b07b

    • SHA256

      9724e6203af000a660014baedaa7fe4e580806cd9b19d045cbb28526b6be5921

    • SHA512

      b108f95a540ffa6df8aef259b476fd8adbdcf8c5cdf657155b6277e3db5d196244fabc8cd5be84c5568486dffc21174afeea9b42dadf2840011f966b7fd1ef19

    • SSDEEP

      1536:pz3Tmfhjtz+rL2c9eU9DCp7qL9AFhnLuyruxj/AH7QqVVmJHqQqdB7aM:If8CBUJy7qLwhLu2cj/AbQqzmzqj7aM

    Score
    8/10

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks