Overview

overview

8

Static

static

1

rwlkerjo3i.js

windows7-x64

3

rwlkerjo3i.js

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    rwlkerjo3i.js

  • Size

    185KB

  • Sample

    230523-qxagkagd2v

  • MD5

    1573def23627aded402f5d0f7006cba7

  • SHA1

    4374841bb8c27e5f394618dc0a16a8aa9ee01880

  • SHA256

    d7162aaa5c7ff30cb49d27136e2eac760b7a934a18d9da137801b35b3fad067c

  • SHA512

    fc64d3269cea62e3d300b07cd5026bc64a47278dd309e7dd59bd3395625063305798da3852687153b8c86cbd256d7d9fed23dad3a17e30bf93a335b4d65e171e

  • SSDEEP

    3072:Uq/DTpTpJYe1F8nR3pp/DYEh5kiPxyjKth8eE:UgDTpTpJYe1F8nR5pLYEh7CKthE

Score
8/10

Malware Config

Targets

    • Target

      rwlkerjo3i.js

    • Size

      185KB

    • MD5

      1573def23627aded402f5d0f7006cba7

    • SHA1

      4374841bb8c27e5f394618dc0a16a8aa9ee01880

    • SHA256

      d7162aaa5c7ff30cb49d27136e2eac760b7a934a18d9da137801b35b3fad067c

    • SHA512

      fc64d3269cea62e3d300b07cd5026bc64a47278dd309e7dd59bd3395625063305798da3852687153b8c86cbd256d7d9fed23dad3a17e30bf93a335b4d65e171e

    • SSDEEP

      3072:Uq/DTpTpJYe1F8nR3pp/DYEh5kiPxyjKth8eE:UgDTpTpJYe1F8nR5pLYEh7CKthE

    Score
    8/10

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks