vjw0rm | b0b14275a84d2abbf520c389d7e1f2125c50d779ff0072cb6e61a734858f0eb2 | Triage

Submit
Reports

Overview

overview

Static

static

5

a35e8029ff...18.exe

windows7-x64

a35e8029ff...18.exe

windows10-2004-x64

Sharing

General

Target

a35e8029ffe51da82af5008f82c1ecb5_JaffaCakes118
Size

5.7MB
Sample

240613-bw23vssgrj
MD5

a35e8029ffe51da82af5008f82c1ecb5
SHA1

22b0e92ac081f7630755d2ee640f5e84960f3a82
SHA256

b0b14275a84d2abbf520c389d7e1f2125c50d779ff0072cb6e61a734858f0eb2
SHA512

8189f7fdbdb995ce42d913bcc06c7c36b6e7cbb0e6ce3d757146d8cbad83426d2b63be1fa5fa0bd9f7feee316ae2f074216ae780369d1e5bad9df734ec2c48f1
SSDEEP

98304:f2cPK8lCwxBHuB0XGZzwM+SX4ARTe3O3gzraBt9zZAfUG5+l/Y0zhvgbcoVj:+CKFwJQ0XGqMH4ART6OU+TCUGiWj

Score

10^/10

vjw0rm execution trojan worm

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

a35e8029ffe51da82af5008f82c1ecb5_JaffaCakes118.exe

Resource

win7-20240611-en

vjw0rm execution trojan worm

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral2

Sample

a35e8029ffe51da82af5008f82c1ecb5_JaffaCakes118.exe

Resource

win10v2004-20240508-en

vjw0rm execution trojan worm

windows10-2004-x64

12 signatures

150 seconds

Malware Config

Targets

- Target
  
  a35e8029ffe51da82af5008f82c1ecb5_JaffaCakes118
- Size
  
  5.7MB
- MD5
  
  a35e8029ffe51da82af5008f82c1ecb5
- SHA1
  
  22b0e92ac081f7630755d2ee640f5e84960f3a82
- SHA256
  
  b0b14275a84d2abbf520c389d7e1f2125c50d779ff0072cb6e61a734858f0eb2
- SHA512
  
  8189f7fdbdb995ce42d913bcc06c7c36b6e7cbb0e6ce3d757146d8cbad83426d2b63be1fa5fa0bd9f7feee316ae2f074216ae780369d1e5bad9df734ec2c48f1
- SSDEEP
  
  98304:f2cPK8lCwxBHuB0XGZzwM+SX4ARTe3O3gzraBt9zZAfUG5+l/Y0zhvgbcoVj:+CKFwJQ0XGqMH4ART6OU+TCUGiWj
Score

10^/10

vjw0rm execution trojan worm
- Vjw0rm
  Vjw0rm is a remote access trojan written in JavaScript.
  trojan worm vjw0rm
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Drops startup file
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

vjw0rmexecutiontrojanworm

behavioral2

vjw0rmexecutiontrojanworm

© 2018-2024

Terms | Privacy