Overview

overview

10

Static

static

1

54676885.js

windows7-x64

10

54676885.js

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    54676885.js

  • Size

    6KB

  • Sample

    240216-ryr9face89

  • MD5

    edd277e7a04ec062c49bafdb7d8b07af

  • SHA1

    1ff9c18bacf61a830f4f7001c5e19f8868ceb6b8

  • SHA256

    9b647c40e98c2de028ce703d6b5558b6a9a9d75a59c7cdd81d78e71aea0c25d7

  • SHA512

    fe118202237beae08ed786fa6905c418e18c9b27a40083911ebe77bd23c7584124eb5ff4422a0b9f9d49f7dbc7a618b2a30cefc938cdbcb36cc30d6b711778af

  • SSDEEP

    96:FnYZH1uypXd3HofJBslCFGJc9lBdqlr+bXcCnTBw5BdeCldb+rNeUo0:BYZVhDrLlriXcCnTBw5BdnldCrNHo0

Score
10/10
vjw0rmpersistencetrojanworm

Malware Config

Targets

    • Target

      54676885.js

    • Size

      6KB

    • MD5

      edd277e7a04ec062c49bafdb7d8b07af

    • SHA1

      1ff9c18bacf61a830f4f7001c5e19f8868ceb6b8

    • SHA256

      9b647c40e98c2de028ce703d6b5558b6a9a9d75a59c7cdd81d78e71aea0c25d7

    • SHA512

      fe118202237beae08ed786fa6905c418e18c9b27a40083911ebe77bd23c7584124eb5ff4422a0b9f9d49f7dbc7a618b2a30cefc938cdbcb36cc30d6b711778af

    • SSDEEP

      96:FnYZH1uypXd3HofJBslCFGJc9lBdqlr+bXcCnTBw5BdeCldb+rNeUo0:BYZVhDrLlriXcCnTBw5BdnldCrNHo0

    Score
    10/10
    vjw0rmpersistencetrojanworm

    • Vjw0rm

      Vjw0rm is a remote access trojan written in JavaScript.

      trojanwormvjw0rm

    • Blocklisted process makes network request

    • Drops startup file

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks