Overview

overview

10

Static

static

8

URLScan

urlscan

1

https://www.teclub.o...

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    https://www.teclub.org.tw/1z2a4e/#dGVzdDExMUBnbWFpbC5jb20=

  • Sample

    240404-z7enpsaf6z

Score
10/10
vjw0rmpersistencephishingtrojanworm

Malware Config

Targets

    • Target

      https://www.teclub.org.tw/1z2a4e/#dGVzdDExMUBnbWFpbC5jb20=

    Score
    10/10
    vjw0rmpersistencetrojanworm

    • Vjw0rm

      Vjw0rm is a remote access trojan written in JavaScript.

      trojanwormvjw0rm

    • Blocklisted process makes network request

    • Drops startup file

    • Adds Run key to start application

      persistence

    • Legitimate hosting services abused for malware hosting/C2

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks