vjw0rm | 081eeadfe8d8bfa3e5669cc1cc89be28a3de9db66cea58e402aede9fb03a8578

Analysis

max time kernel
143s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
14-02-2024 05:04

Target

9ad1d856169c18930850287e3d9cc5d5.js
Size

23KB
MD5

9ad1d856169c18930850287e3d9cc5d5
SHA1

21585013c49d4717285df2048581e5c05db88fe8
SHA256

081eeadfe8d8bfa3e5669cc1cc89be28a3de9db66cea58e402aede9fb03a8578
SHA512

04e5e42755fbfc97346a198829a1db8e7ea11eacac6f6fe66e674650634ed3dce30c4677e0ca66d3f812fdc68f727b20e4257db50531740ecda647dd7001a1b8
SSDEEP

384:QXLuqaZcP3D0mZVJt64QGVhwVUkw6VWVEVUmFVwJVFEqVUq0dQVbVyvQbnBvVizU:WZk4QG/wn/jlq502NtbnhUDuU7BK9Sa

Score

10^/10

vjw0rm trojan worm

Vjw0rm
Vjw0rm is a remote access trojan written in JavaScript.
trojan worm vjw0rm

Blocklisted process makes network request 6 IoCs

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\9ad1d856169c18930850287e3d9cc5d5.js
1⤵
- Blocklisted process makes network request
PID:4764