7749a2b67ce4b9953a9d1c538be4446ab0027a70aea55456c10c750837a21b7a | Triage

Sharing

General

Target

169720341759912807.js
Size

17KB
Sample

240725-yz29csvhlb
MD5

fc60f0c30d8afab31868e3d7306c3445
SHA1

6a56fb2832fbfc3a238f7767ea545d77c92d65d1
SHA256

7749a2b67ce4b9953a9d1c538be4446ab0027a70aea55456c10c750837a21b7a
SHA512

f0f5a40eb58b38a179278f55af7113996752718d1f8b286b596280c847f073d3523e3933f74358d20dbd8d01d2eec99f35b9dc071671b11f4a4aa84bc1b15110
SSDEEP

384:L5+OIHtSgRFW2ZIRTWbOeWd14q821fET4Cdds+iWprS9prORWHFr1PK5CMTpnbh1:L5+OIHtSgRFW2ZIRTWbOeWd14q821fEt

Score

7^/10

defense_evasion execution

Malware Config

Targets

- Target
  
  169720341759912807.js
- Size
  
  17KB
- MD5
  
  fc60f0c30d8afab31868e3d7306c3445
- SHA1
  
  6a56fb2832fbfc3a238f7767ea545d77c92d65d1
- SHA256
  
  7749a2b67ce4b9953a9d1c538be4446ab0027a70aea55456c10c750837a21b7a
- SHA512
  
  f0f5a40eb58b38a179278f55af7113996752718d1f8b286b596280c847f073d3523e3933f74358d20dbd8d01d2eec99f35b9dc071671b11f4a4aa84bc1b15110
- SSDEEP
  
  384:L5+OIHtSgRFW2ZIRTWbOeWd14q821fET4Cdds+iWprS9prORWHFr1PK5CMTpnbh1:L5+OIHtSgRFW2ZIRTWbOeWd14q821fEt
Score

7^/10

defense_evasion execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Obfuscated Files or Information: Command Obfuscation
  Adversaries may obfuscate content during command execution to impede detection.
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Obfuscated Files or Information

Command Obfuscation

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasionexecution

behavioral2

defense_evasionexecution