Extracted

• • Target

    js-beautified-1.js

  • Size

    5KB

  • MD5

    1758c6821ea484c0d5fb3aa1d947f011

  • SHA1

    eaf96c77fa04d2bb6fdb571edfb256a4cc5e26f5

  • SHA256

    76910decc28fb39ebd3b59a94fbb88d2aad13b4d87953ce6b9826877027d673d

  • SHA512

    27e1fcdc0b55b332633fc7aa687887aa8fd2207163b656a06933103e05059d7b8aeb1b628fb40906282849b34f4554784607ed3008149207ab9f6731f2745725

  • SSDEEP

    96:IRAsKzGMyfwNLqqvgJ0ADPHk3LtekmPswEzYszpWpkpGQwOGhTpq3OGhQGFmnXr7:fSMy0nAnPHk/mPJEzYs1gk4Qw/2cnXrD

  Score

  10^/10

  vjw0rmpersistencetrojanworm

  • Vjw0rm

    Vjw0rm is a remote access trojan written in JavaScript.

    trojanwormvjw0rm

  • Blocklisted process makes network request

  • Drops startup file

  • Adds Run key to start application

    persistence
  behavioral1behavioral2behavioral3