Overview

overview

8

Static

static

1

DRAFT DOCUMENTS.js

windows7-x64

8

DRAFT DOCUMENTS.js

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    DRAFT DOCUMENTS.js

  • Size

    479KB

  • Sample

    240727-plw1razaqp

  • MD5

    b5f0861bf48f0fb76e6c504eba4a0128

  • SHA1

    7cf3a28b5255bbda0cff658a6f2a08b132d75e80

  • SHA256

    f3075816f60feaf04e278ad2ed3ab2aff1345b77c0978f1ebbd1bf3dd3b9677a

  • SHA512

    dfc3d832a2bb39546f80e8b96c2337317f5a33d6dac3a948fe805683c7416711088dbbe9b4361ff98f2becd492ffa65b2af0cb86772a414dbacaf821a9b21ff4

  • SSDEEP

    12288:ljuNGDcp8kQrSKUjlhkEgV/54KG9dvbcYImaKu82ZYHs5dMM8AQ11WGrp0sa:KGDcpIEjW

Score
8/10
discoveryexecution

Malware Config

Targets

    • Target

      DRAFT DOCUMENTS.js

    • Size

      479KB

    • MD5

      b5f0861bf48f0fb76e6c504eba4a0128

    • SHA1

      7cf3a28b5255bbda0cff658a6f2a08b132d75e80

    • SHA256

      f3075816f60feaf04e278ad2ed3ab2aff1345b77c0978f1ebbd1bf3dd3b9677a

    • SHA512

      dfc3d832a2bb39546f80e8b96c2337317f5a33d6dac3a948fe805683c7416711088dbbe9b4361ff98f2becd492ffa65b2af0cb86772a414dbacaf821a9b21ff4

    • SSDEEP

      12288:ljuNGDcp8kQrSKUjlhkEgV/54KG9dvbcYImaKu82ZYHs5dMM8AQ11WGrp0sa:KGDcpIEjW

    Score
    8/10
    executiondiscovery

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks