181dcc16a930a5b891cc5afc04761025980b1a4ef118795129f63b671e5b225a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5503259271483810695.js
Size

18KB
Sample

240725-lqgj3s1flm
MD5

eca28c6e00500318eb2d68f372c79685
SHA1

6ece795e262521857b9bb08280d4511a317d077f
SHA256

181dcc16a930a5b891cc5afc04761025980b1a4ef118795129f63b671e5b225a
SHA512

df2bd51e3c101dd4019e9f599b0b712d5f81ce7a853c3fffda87af11106ef0f207cd4a303b3c365b8daabb9f472e69e9e2c54b156dc82edb30e37b4110145b2d
SSDEEP

192:uRZ8I4kY+AeHxGvzVfzWVYrmRMey+T19ah:AZ8I4EAeRGLVfzWerV+TGh

Score

7^/10

defense_evasion execution

Malware Config

Targets

- Target
  
  5503259271483810695.js
- Size
  
  18KB
- MD5
  
  eca28c6e00500318eb2d68f372c79685
- SHA1
  
  6ece795e262521857b9bb08280d4511a317d077f
- SHA256
  
  181dcc16a930a5b891cc5afc04761025980b1a4ef118795129f63b671e5b225a
- SHA512
  
  df2bd51e3c101dd4019e9f599b0b712d5f81ce7a853c3fffda87af11106ef0f207cd4a303b3c365b8daabb9f472e69e9e2c54b156dc82edb30e37b4110145b2d
- SSDEEP
  
  192:uRZ8I4kY+AeHxGvzVfzWVYrmRMey+T19ah:AZ8I4EAeRGLVfzWerV+TGh
Score

7^/10

defense_evasion execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Obfuscated Files or Information: Command Obfuscation
  Adversaries may obfuscate content during command execution to impede detection.
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Obfuscated Files or Information

Command Obfuscation

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasionexecution

behavioral2

defense_evasionexecution