Overview

overview

10

Static

static

1

ntrHCBLBIT.js

windows7-x64

10

ntrHCBLBIT.js

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ntrHCBLBIT.js

  • Size

    346KB

  • Sample

    230615-jwaydafb7w

  • MD5

    1c50a0279d38af4da4d39a9287096ca6

  • SHA1

    767180b03827b30622691670f0814f40f47ccfe8

  • SHA256

    f0859092ba6f050b746556c0957dfc4d0faa35ffade29ad199d028cb6e14c9bc

  • SHA512

    2d30a9f332f5a38bd2551986bd976d6cf9a75ed2600a76de48113e2c840ebf831624bcef801c74623c33429f56efbbdcf0b73528661ce82207f808cfb35e2eaa

  • SSDEEP

    6144:eQfPBx5q0sQ1o7rsbHC01mDBpNW2mTMSbpuV860:eQ3B7qgpB

Score
10/10
vjw0rmtrojanworm

Malware Config

Targets

    • Target

      ntrHCBLBIT.js

    • Size

      346KB

    • MD5

      1c50a0279d38af4da4d39a9287096ca6

    • SHA1

      767180b03827b30622691670f0814f40f47ccfe8

    • SHA256

      f0859092ba6f050b746556c0957dfc4d0faa35ffade29ad199d028cb6e14c9bc

    • SHA512

      2d30a9f332f5a38bd2551986bd976d6cf9a75ed2600a76de48113e2c840ebf831624bcef801c74623c33429f56efbbdcf0b73528661ce82207f808cfb35e2eaa

    • SSDEEP

      6144:eQfPBx5q0sQ1o7rsbHC01mDBpNW2mTMSbpuV860:eQ3B7qgpB

    Score
    10/10
    vjw0rmtrojanworm

    • Vjw0rm

      Vjw0rm is a remote access trojan written in JavaScript.

      trojanwormvjw0rm

    • Blocklisted process makes network request

    • Drops startup file

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks