General

  • Target

    https://staygeraldine.nz/cs/april-29-receipt.zip

  • Sample

    240430-gjb9kaed71

Score
10/10

Malware Config

Extracted

Family

vjw0rm

C2

http://aprijs7250.duckdns.org:7250

Targets

    • Target

      https://staygeraldine.nz/cs/april-29-receipt.zip

    Score
    10/10
    • Vjw0rm

      Vjw0rm is a remote access trojan written in JavaScript.

    • Blocklisted process makes network request

MITRE ATT&CK Enterprise v15

Tasks