0d7d6ce2afc5fde8e35197667805a1c8b46feb62793ae008319abadcd75b3dd4 | Triage

Sharing

General

Target

0d7d6ce2afc5fde8e35197667805a1c8b46feb62793ae008319abadcd75b3dd4.js
Size

8KB
Sample

240820-rwhxzs1drj
MD5

f4e7eb825ae54cf12d25350d99837c42
SHA1

5d4bf885646cf64ed5fd318c8623ea601f3f7bbd
SHA256

0d7d6ce2afc5fde8e35197667805a1c8b46feb62793ae008319abadcd75b3dd4
SHA512

a203712ba316b0456b83597132427818a07ca5bf007a0d23b84acf6fe8e0f903d1ee242dcd1eba7eec8b6cc9f7343c3fd9f560bf7a9557b513569942bc6a44e9
SSDEEP

192:6tOJNkoWcm6H87EiAZt6fgpuJNpPqUuRoXrjCyIzHyI6VBQMkCURFNybthgAmtqZ:6tD7EiAZt6fUuJ3PqUuRoXrjCyIzHyII

Score

7^/10

defense_evasion execution

Malware Config

Targets

- Target
  
  0d7d6ce2afc5fde8e35197667805a1c8b46feb62793ae008319abadcd75b3dd4.js
- Size
  
  8KB
- MD5
  
  f4e7eb825ae54cf12d25350d99837c42
- SHA1
  
  5d4bf885646cf64ed5fd318c8623ea601f3f7bbd
- SHA256
  
  0d7d6ce2afc5fde8e35197667805a1c8b46feb62793ae008319abadcd75b3dd4
- SHA512
  
  a203712ba316b0456b83597132427818a07ca5bf007a0d23b84acf6fe8e0f903d1ee242dcd1eba7eec8b6cc9f7343c3fd9f560bf7a9557b513569942bc6a44e9
- SSDEEP
  
  192:6tOJNkoWcm6H87EiAZt6fgpuJNpPqUuRoXrjCyIzHyI6VBQMkCURFNybthgAmtqZ:6tD7EiAZt6fUuJ3PqUuRoXrjCyIzHyII
Score

7^/10

defense_evasion execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Obfuscated Files or Information: Command Obfuscation
  Adversaries may obfuscate content during command execution to impede detection.
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Obfuscated Files or Information

Command Obfuscation

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasionexecution

behavioral2

defense_evasionexecution