General

  • Target

    marxist.js

  • Size

    300KB

  • Sample

    230525-hj8s7sgh6s

  • MD5

    51d364bf32eff9357ebc607f1d8e1dfe

  • SHA1

    7ba0aadf16486656966d722bce250dd62ec0b3ac

  • SHA256

    4b16bcc633f22fc8feacc0fcd6bfeba94fd52882bcc9e27b5caf4134ddd3ebff

  • SHA512

    d85bde6483658c89c4c479cd35dd8cee095f8a7a19767a257346213c8bbc948d1a2fcbff43bcca064a578c3995878f0185291123a69188bc610c74ef14f88437

  • SSDEEP

    6144:KQUu1goeypv2UoyYFW7nsDhMox+hfiVB1:KQUkV705+OT

Score
8/10

Malware Config

Targets

    • Target

      marxist.js

    • Size

      300KB

    • MD5

      51d364bf32eff9357ebc607f1d8e1dfe

    • SHA1

      7ba0aadf16486656966d722bce250dd62ec0b3ac

    • SHA256

      4b16bcc633f22fc8feacc0fcd6bfeba94fd52882bcc9e27b5caf4134ddd3ebff

    • SHA512

      d85bde6483658c89c4c479cd35dd8cee095f8a7a19767a257346213c8bbc948d1a2fcbff43bcca064a578c3995878f0185291123a69188bc610c74ef14f88437

    • SSDEEP

      6144:KQUu1goeypv2UoyYFW7nsDhMox+hfiVB1:KQUkV705+OT

    Score
    8/10
    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v6

Tasks