Overview

overview

8

Static

static

1

Tat.js

windows7-x64

3

Tat.js

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    Tat.js

  • Size

    581KB

  • Sample

    230616-t1hh5afg82

  • MD5

    c55c0aa73b27339d7cef6aeff7961783

  • SHA1

    14000522c0fa494fbe30afa067a55ad42e73c3fe

  • SHA256

    f87467551e01a7056e15d488cdca3c60d9a3210eab46d31c5ebba9f01136d9bf

  • SHA512

    e9bdb60d3a5ec754b92ec2dc66b11cf78809b163c21d7a95f06707f427ef47f6d02996ff5cbe8b46d359abd8e963758933f85888d14ceae018f5a67704600634

  • SSDEEP

    12288:xWGJKxqUwYJpnwhdIhiZAwIQ4Cj8kA4dywL0u+p+fm3DB29vRQIXQrQHRtzggojw:xuZ9KCkHR5ggoo5vuDf2Ag//nt0n4GrS

Score
8/10

Malware Config

Targets

    • Target

      Tat.js

    • Size

      581KB

    • MD5

      c55c0aa73b27339d7cef6aeff7961783

    • SHA1

      14000522c0fa494fbe30afa067a55ad42e73c3fe

    • SHA256

      f87467551e01a7056e15d488cdca3c60d9a3210eab46d31c5ebba9f01136d9bf

    • SHA512

      e9bdb60d3a5ec754b92ec2dc66b11cf78809b163c21d7a95f06707f427ef47f6d02996ff5cbe8b46d359abd8e963758933f85888d14ceae018f5a67704600634

    • SSDEEP

      12288:xWGJKxqUwYJpnwhdIhiZAwIQ4Cj8kA4dywL0u+p+fm3DB29vRQIXQrQHRtzggojw:xuZ9KCkHR5ggoo5vuDf2Ag//nt0n4GrS

    Score
    8/10

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks