General

  • Target

    2d59355fbdada25c304edf911a63281d

  • Size

    12KB

  • Sample

    231231-h91waaabc3

  • MD5

    2d59355fbdada25c304edf911a63281d

  • SHA1

    2200956e98b3b32e0693ed54af08b3372f541f37

  • SHA256

    0fe50396b25c43452630b9cac1e2ddda31a9358cb7be5e8145cf382fc6e8d95c

  • SHA512

    27b74c61783b8f97d55f89759bb6407eba558675ae2287f3df1572473b31578a3dd6eaa2222d45fb29b0518602b42a274b56f325447febcff6eac29bd7c498ff

  • SSDEEP

    192:e7fID5S39Auo7+nPPl/zsgDkuRxl7VXbTJWQpPqWxFhXwaf5ybRqD+eLdOg:eTIs3Ro2lsgttrlFXRjhbjdB

Malware Config

Targets

    • Target

      2d59355fbdada25c304edf911a63281d

    • Size

      12KB

    • MD5

      2d59355fbdada25c304edf911a63281d

    • SHA1

      2200956e98b3b32e0693ed54af08b3372f541f37

    • SHA256

      0fe50396b25c43452630b9cac1e2ddda31a9358cb7be5e8145cf382fc6e8d95c

    • SHA512

      27b74c61783b8f97d55f89759bb6407eba558675ae2287f3df1572473b31578a3dd6eaa2222d45fb29b0518602b42a274b56f325447febcff6eac29bd7c498ff

    • SSDEEP

      192:e7fID5S39Auo7+nPPl/zsgDkuRxl7VXbTJWQpPqWxFhXwaf5ybRqD+eLdOg:eTIs3Ro2lsgttrlFXRjhbjdB

    • Vjw0rm

      Vjw0rm is a remote access trojan written in JavaScript.

    • Blocklisted process makes network request

    • Drops startup file

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks