vjw0rm | edb6e160869e2a4e91ea436cc66cd7f1c239d09c3459e76eb163e1450fc4e2e7 | Triage

Sharing

General

Target

a7deb33bf9c672522776d5428d18bd6f
Size

8KB
Sample

240227-bv22gadb32
MD5

a7deb33bf9c672522776d5428d18bd6f
SHA1

c286414e8493d4684ed9ce9f8de8b4fa50e0ba5a
SHA256

edb6e160869e2a4e91ea436cc66cd7f1c239d09c3459e76eb163e1450fc4e2e7
SHA512

0d5443fd1d1ea84a01a7bdefd182d120906220a5f64446fbe05db4bb3e02a9f7dbc3e2ef7f6124514ba7744609f6434c56be9d213a39299192cb6a6203dfcc1a
SSDEEP

192:QulATYKzKckldMSRdT99s0pnICSX/BaCImefrBiEe:QtTtCMSRdT99son3saCImej+

Score

10^/10

vjw0rm trojan worm

Malware Config

Targets

- Target
  
  a7deb33bf9c672522776d5428d18bd6f
- Size
  
  8KB
- MD5
  
  a7deb33bf9c672522776d5428d18bd6f
- SHA1
  
  c286414e8493d4684ed9ce9f8de8b4fa50e0ba5a
- SHA256
  
  edb6e160869e2a4e91ea436cc66cd7f1c239d09c3459e76eb163e1450fc4e2e7
- SHA512
  
  0d5443fd1d1ea84a01a7bdefd182d120906220a5f64446fbe05db4bb3e02a9f7dbc3e2ef7f6124514ba7744609f6434c56be9d213a39299192cb6a6203dfcc1a
- SSDEEP
  
  192:QulATYKzKckldMSRdT99s0pnICSX/BaCImefrBiEe:QtTtCMSRdT99son3saCImej+
Score

10^/10

vjw0rm trojan worm
- Vjw0rm
  Vjw0rm is a remote access trojan written in JavaScript.
  trojan worm vjw0rm
- Blocklisted process makes network request
- Drops startup file
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

vjw0rmtrojanworm

behavioral2

vjw0rmtrojanworm