Overview

overview

10

Static

static

1

Mi3873653.js

windows7-x64

10

Mi3873653.js

windows10-1703-x64

10

Mi3873653.js

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Mi3873653.js

  • Size

    300.0MB

  • Sample

    231013-p5g1yabf85

  • MD5

    eb87c0978863c945b3a63e2d381adb53

  • SHA1

    792a1332160d24394ced681d4fc0e9b58a0e3377

  • SHA256

    40d56bd4eaf6c81e0e6ad44c8a67e9f01edc3a437044d6018613a5d6ed0b01e3

  • SHA512

    0224bb5b69044186ff1d81022d8c4a71ebb1c7cc791a53183d1eaee477a019bb0d86d033cad05d627351dbb0b36c6b7bb7c8e4fbc5a164be0d4c1e2046f2cc0b

  • SSDEEP

    192:nlu4lgWWzi75WbAZv61hdh12cB5kw94tMa3dZYkVdPrv1kc8uIVLk5/lWWWnazci:chWWz5K0y24jHuUqWWRIHKSqm

Score
10/10
vjw0rmpersistencetrojanworm

Malware Config

Targets

    • Target

      Mi3873653.js

    • Size

      300.0MB

    • MD5

      eb87c0978863c945b3a63e2d381adb53

    • SHA1

      792a1332160d24394ced681d4fc0e9b58a0e3377

    • SHA256

      40d56bd4eaf6c81e0e6ad44c8a67e9f01edc3a437044d6018613a5d6ed0b01e3

    • SHA512

      0224bb5b69044186ff1d81022d8c4a71ebb1c7cc791a53183d1eaee477a019bb0d86d033cad05d627351dbb0b36c6b7bb7c8e4fbc5a164be0d4c1e2046f2cc0b

    • SSDEEP

      192:nlu4lgWWzi75WbAZv61hdh12cB5kw94tMa3dZYkVdPrv1kc8uIVLk5/lWWWnazci:chWWz5K0y24jHuUqWWRIHKSqm

    Score
    10/10
    vjw0rmpersistencetrojanworm

    • Vjw0rm

      Vjw0rm is a remote access trojan written in JavaScript.

      trojanwormvjw0rm

    • Blocklisted process makes network request

    • Drops startup file

    • Adds Run key to start application

      persistence
    behavioral1behavioral2behavioral3

MITRE ATT&CK Enterprise v15

Tasks