0394b4dab5a978c75c4cb6e44c85df9093506d4b80ffaa76c49cd9d049d80d6c | Triage

Sharing

General

Target

0394b4dab5a978c75c4cb6e44c85df9093506d4b80ffaa76c49cd9d049d80d6c.js
Size

13KB
Sample

240820-rnlc5swfqg
MD5

9bc4f73e7159cf45dfb20db78240c671
SHA1

8c3a77d8268755fcdace5fbc5544d890cf694e20
SHA256

0394b4dab5a978c75c4cb6e44c85df9093506d4b80ffaa76c49cd9d049d80d6c
SHA512

19b294158f52069dfc409b654376fb3337890c8354bb1b51b0c0ec0bb571762490e0b941c0900730ac3891c4f64e61ae12ef839278c2c4c2a90bea5f9da849d7
SSDEEP

96:j9PfCI9V4AAd4d8Eo7t43ZY8Xs903gtoIlykvXj1u6I0PCq903gtoIlykvXj1uKP:9f4I6M67

Score

7^/10

defense_evasion execution

Malware Config

Targets

- Target
  
  0394b4dab5a978c75c4cb6e44c85df9093506d4b80ffaa76c49cd9d049d80d6c.js
- Size
  
  13KB
- MD5
  
  9bc4f73e7159cf45dfb20db78240c671
- SHA1
  
  8c3a77d8268755fcdace5fbc5544d890cf694e20
- SHA256
  
  0394b4dab5a978c75c4cb6e44c85df9093506d4b80ffaa76c49cd9d049d80d6c
- SHA512
  
  19b294158f52069dfc409b654376fb3337890c8354bb1b51b0c0ec0bb571762490e0b941c0900730ac3891c4f64e61ae12ef839278c2c4c2a90bea5f9da849d7
- SSDEEP
  
  96:j9PfCI9V4AAd4d8Eo7t43ZY8Xs903gtoIlykvXj1u6I0PCq903gtoIlykvXj1uKP:9f4I6M67
Score

7^/10

defense_evasion execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Obfuscated Files or Information: Command Obfuscation
  Adversaries may obfuscate content during command execution to impede detection.
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Obfuscated Files or Information

Command Obfuscation

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasionexecution

behavioral2

defense_evasionexecution