Overview

overview

8

Static

static

1

Decuy.js

windows7-x64

8

Decuy.js

windows10-1703-x64

8

Decuy.js

windows10-2004-x64

8

Decuy.js

windows11-21h2-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    PFY.zip

  • Size

    19KB

  • Sample

    231222-qpdh9agggj

  • MD5

    5070aa47c50d78ad36bcde97242e1046

  • SHA1

    d212f8e8b9f4d5e47a5db91690a9167c5da6b391

  • SHA256

    57eccf0795f124f8a9df6546c6d1ab74ab646f601c9949431b96806d1191e22c

  • SHA512

    0ba08568e00654f438e37ac49288e02fbff6b406c6bf04dc5e373fbfde3ffa725677b2b233527740d8a3d6cc84217cb31996ff3213498a0779c9cabd4d83d205

  • SSDEEP

    384:2MXg7Q6qhU0dP0OWs3fpRFYQ3wY6BR4KYJTT7uqzmJHt96m8FGKx:2Mw7Q3hU0N0OWyRiFY6Pudyq6lv6ma

Score
8/10

Malware Config

Targets

    • Target

      Decuy.js

    • Size

      64KB

    • MD5

      1d3f6ed7311735a444d6476a38e7aee1

    • SHA1

      417c149545b2540c77a795570fbfff6c8e97dc17

    • SHA256

      3f0abcafae8954ff4b4638efb83a7e286bf8aa2876032dab9f778cb91b74c984

    • SHA512

      b297ec60eb79203726445c43dd01d2eebb417d0376b85c3250391297df72ce56687f0ce032724d4fba3ea1364cfe624f923dc994e2e2be64f3bf87c9dc4e9be5

    • SSDEEP

      768:U0lkTF16szQM0NHMSK6Plp7lx1VghlNm7PUKmeHlRGcZgx/4jYx0WAdl2Albhcoz:U0USszFKEkcp2EUfgK4ze3nKT7EcVW

    Score
    8/10

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks