vjw0rm | 081eeadfe8d8bfa3e5669cc1cc89be28a3de9db66cea58e402aede9fb03a8578

Analysis

max time kernel
151s
max time network
162s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
27/12/2023, 01:14

Target
9ad1d856169c18930850287e3d9cc5d5.js
Size 23KB
Sample231227-bl13tadeel
SHA256 081eeadfe8d8bfa3e5669cc1cc89be28a3de9db66cea58e402aede9fb03a8578
MD5 9ad1d856169c18930850287e3d9cc5d5
SHA1 21585013c49d4717285df2048581e5c05db88fe8
SHA512 04e5e42755fbfc97346a198829a1db8e7ea11eacac6f6fe66e674650634ed3dce30c4677e0ca66d3f812fdc68f727b20e4257db50531740ecda647dd7001a1b8
SSDEEP 384:QXLuqaZcP3D0mZVJt64QGVhwVUkw6VWVEVUmFVwJVFEqVUq0dQVbVyvQbnBvVizU:WZk4QG/wn/jlq502NtbnhUDuU7BK9Sa
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

vjw0rm trojan worm

Vjw0rm
Vjw0rm is a remote access trojan written in JavaScript.
trojan worm vjw0rm

Blocklisted process makes network request 6 IoCs

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\9ad1d856169c18930850287e3d9cc5d5.js
1⤵
- Blocklisted process makes network request
PID:2916