Overview

overview

10

Static

static

1

bd402a7b48...2c.jar

windows7-x64

10

bd402a7b48...2c.jar

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bd402a7b48f2b162736f4848c329792c

  • Size

    147KB

  • Sample

    240310-bc8rasgc8w

  • MD5

    bd402a7b48f2b162736f4848c329792c

  • SHA1

    fc17278dbfe1e9d65a3b8f2cb8a972017eaf1cc6

  • SHA256

    2013959396545e0d1c1a0c178544a778764ff12c4fba9a6637835a202cce979b

  • SHA512

    af6d380d7c3cc1540b9aa9c1bf070178f4120b78f6c571e67b43af1a4cd6199c139a2dd7890b03920cc8cfcfa5c2f56f627b553f0cb09ae71ca495bd73cf7ccc

  • SSDEEP

    3072:vAnBzB/sfK4/mNwKEoZ/4+TK8tA3uQr+22kj5Duor+rS:oB6K4mSKZC39r+6Duor+G

Score
10/10
vjw0rmdiscoverypersistencetrojanworm

Malware Config

Targets

    • Target

      bd402a7b48f2b162736f4848c329792c

    • Size

      147KB

    • MD5

      bd402a7b48f2b162736f4848c329792c

    • SHA1

      fc17278dbfe1e9d65a3b8f2cb8a972017eaf1cc6

    • SHA256

      2013959396545e0d1c1a0c178544a778764ff12c4fba9a6637835a202cce979b

    • SHA512

      af6d380d7c3cc1540b9aa9c1bf070178f4120b78f6c571e67b43af1a4cd6199c139a2dd7890b03920cc8cfcfa5c2f56f627b553f0cb09ae71ca495bd73cf7ccc

    • SSDEEP

      3072:vAnBzB/sfK4/mNwKEoZ/4+TK8tA3uQr+22kj5Duor+rS:oB6K4mSKZC39r+6Duor+G

    Score
    10/10
    vjw0rmpersistencetrojanwormdiscovery

    • Vjw0rm

      Vjw0rm is a remote access trojan written in JavaScript.

      trojanwormvjw0rm

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Modifies file permissions

      discovery

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks