1c9cc8472757b0b48f7bcd332a926ec2c57c690a902ccdb5148848d61b508eac | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c9cc8472757b0b48f7bcd332a926ec2c57c690a902ccdb5148848d61b508eac.js
Size

16KB
Sample

240725-va2pravhpe
MD5

4f8d64d35ba5f2700b29b18b1b7f689e
SHA1

c04d603e8810e36f5c2b8d0bf9e7a9f6f454ef3d
SHA256

1c9cc8472757b0b48f7bcd332a926ec2c57c690a902ccdb5148848d61b508eac
SHA512

f016e650c005aea8c43255900a8a091ef8b31f39e12ceb8c9fbae7e8014175a644e93355eb9e7c877fb01098782bdff07fd7830655acc55169592a2b009426c1
SSDEEP

192:xJ9It+vt28EI7KF+ZkEt3r7M+dlBtjY6nKJbwZolsw0LktbB:xJmt4lAu8n

Score

7^/10

defense_evasion execution

Malware Config

Targets

- Target
  
  1c9cc8472757b0b48f7bcd332a926ec2c57c690a902ccdb5148848d61b508eac.js
- Size
  
  16KB
- MD5
  
  4f8d64d35ba5f2700b29b18b1b7f689e
- SHA1
  
  c04d603e8810e36f5c2b8d0bf9e7a9f6f454ef3d
- SHA256
  
  1c9cc8472757b0b48f7bcd332a926ec2c57c690a902ccdb5148848d61b508eac
- SHA512
  
  f016e650c005aea8c43255900a8a091ef8b31f39e12ceb8c9fbae7e8014175a644e93355eb9e7c877fb01098782bdff07fd7830655acc55169592a2b009426c1
- SSDEEP
  
  192:xJ9It+vt28EI7KF+ZkEt3r7M+dlBtjY6nKJbwZolsw0LktbB:xJmt4lAu8n
Score

7^/10

defense_evasion execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Obfuscated Files or Information: Command Obfuscation
  Adversaries may obfuscate content during command execution to impede detection.
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Obfuscated Files or Information

Command Obfuscation

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasionexecution

behavioral2

defense_evasionexecution