vjw0rm | b57cfc1af523cd35c88bad88736b56631eaed2d0e695cd22abe2e3a4ba4b135c | Triage

Sharing

General

Target

03240e51f616b0cb511a2dd0067a920c.unknown
Size

205KB
Sample

231230-vwxb6adch8
MD5

03240e51f616b0cb511a2dd0067a920c
SHA1

c7a40396ffac70068ff23137fd91226af60220dd
SHA256

b57cfc1af523cd35c88bad88736b56631eaed2d0e695cd22abe2e3a4ba4b135c
SHA512

619c8b4f3b02e47d6c2e78c6634c441699ff205b13dbff58d044ebdb0b94f3436dcd21cddbcfe0239a16e4d7d80b7ffd3bd7bd2edc4479f1f41d4fd2ad793016
SSDEEP

3072:IhDGvrklJG02a9x7UOOHOwGtu+Qpdjo5+tKs10s7Ke05DgHPA9d3Z6K6/0Pmb+o:5siaT7UO9wGETdw+tKs1Z7Kp4A9DgjZ

Score

10^/10

vjw0rm discovery persistence trojan worm

Malware Config

Targets

- Target
  
  03240e51f616b0cb511a2dd0067a920c.unknown
- Size
  
  205KB
- MD5
  
  03240e51f616b0cb511a2dd0067a920c
- SHA1
  
  c7a40396ffac70068ff23137fd91226af60220dd
- SHA256
  
  b57cfc1af523cd35c88bad88736b56631eaed2d0e695cd22abe2e3a4ba4b135c
- SHA512
  
  619c8b4f3b02e47d6c2e78c6634c441699ff205b13dbff58d044ebdb0b94f3436dcd21cddbcfe0239a16e4d7d80b7ffd3bd7bd2edc4479f1f41d4fd2ad793016
- SSDEEP
  
  3072:IhDGvrklJG02a9x7UOOHOwGtu+Qpdjo5+tKs10s7Ke05DgHPA9d3Z6K6/0Pmb+o:5siaT7UO9wGETdw+tKs1Z7Kp4A9DgjZ
Score

10^/10

vjw0rm persistence trojan worm discovery
- Vjw0rm
  Vjw0rm is a remote access trojan written in JavaScript.
  trojan worm vjw0rm
- Drops startup file
- Modifies file permissions
  discovery
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

File and Directory Permissions Modification

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

vjw0rmpersistencetrojanworm

behavioral2