Overview

overview

10

Static

static

1

f6a0c90577...35f.js

windows7-x64

10

f6a0c90577...35f.js

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f6a0c90577be13a03ce39b87a5a8435f

  • Size

    116KB

  • Sample

    231222-t6mp2accc5

  • MD5

    f6a0c90577be13a03ce39b87a5a8435f

  • SHA1

    51326015ee690361761a076fd1edf845c94b8c42

  • SHA256

    5bb9ac9554d7d5b6dc6267071c9e8861f7c4e3b6699fa813adcfd8e68d931ca3

  • SHA512

    6d101f510fdb20e6bb121221195c2881e0725f860c5cb7951d12dca12148487bc1694cc08d646d6aa47378bde2a3e6b53102d343d9925dc0b4722c6369725ae5

  • SSDEEP

    192:n0u40xWWHrW9WHxq0i1dhwhw9AFX9xFMM9cfR8BCO92spMU5f4sv1Ml8zDktfME8:t9WWHFTLL2RyCDlGTWW5qKLaMiOfF

Score
10/10
vjw0rmpersistencetrojanworm

Malware Config

Targets

    • Target

      f6a0c90577be13a03ce39b87a5a8435f

    • Size

      116KB

    • MD5

      f6a0c90577be13a03ce39b87a5a8435f

    • SHA1

      51326015ee690361761a076fd1edf845c94b8c42

    • SHA256

      5bb9ac9554d7d5b6dc6267071c9e8861f7c4e3b6699fa813adcfd8e68d931ca3

    • SHA512

      6d101f510fdb20e6bb121221195c2881e0725f860c5cb7951d12dca12148487bc1694cc08d646d6aa47378bde2a3e6b53102d343d9925dc0b4722c6369725ae5

    • SSDEEP

      192:n0u40xWWHrW9WHxq0i1dhwhw9AFX9xFMM9cfR8BCO92spMU5f4sv1Ml8zDktfME8:t9WWHFTLL2RyCDlGTWW5qKLaMiOfF

    Score
    10/10
    vjw0rmpersistencetrojanworm

    • Vjw0rm

      Vjw0rm is a remote access trojan written in JavaScript.

      trojanwormvjw0rm

    • Blocklisted process makes network request

    • Drops startup file

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks