27d8e0705ef237521ac45fe9b796def7af69b58825a2ae41de88ef81ee83a9e5 | Triage

Sharing

General

Target

27d8e0705ef237521ac45fe9b796def7af69b58825a2ae41de88ef81ee83a9e5.js
Size

10KB
Sample

240821-snsb5awapd
MD5

d7ec801eb974be2879a17aedece6e4b9
SHA1

296d886b1edce7b3266422bdd82e32106622ca16
SHA256

27d8e0705ef237521ac45fe9b796def7af69b58825a2ae41de88ef81ee83a9e5
SHA512

3fe958e7911d0d02703831aecba83a84ca78e22a71e7e32f6b412f85082fc43a5e2352873e6d2d8ac578f02e64184ca4cdde9681e81899fae3d816b41b3f47af
SSDEEP

192:F9TYiDr4JiZpy6QunRA2p/WXOAmSG+ql2p/WXOAm6YCVz/:F9D0izbnVpwftFpwLr

Score

7^/10

defense_evasion execution

Malware Config

Targets

- Target
  
  27d8e0705ef237521ac45fe9b796def7af69b58825a2ae41de88ef81ee83a9e5.js
- Size
  
  10KB
- MD5
  
  d7ec801eb974be2879a17aedece6e4b9
- SHA1
  
  296d886b1edce7b3266422bdd82e32106622ca16
- SHA256
  
  27d8e0705ef237521ac45fe9b796def7af69b58825a2ae41de88ef81ee83a9e5
- SHA512
  
  3fe958e7911d0d02703831aecba83a84ca78e22a71e7e32f6b412f85082fc43a5e2352873e6d2d8ac578f02e64184ca4cdde9681e81899fae3d816b41b3f47af
- SSDEEP
  
  192:F9TYiDr4JiZpy6QunRA2p/WXOAmSG+ql2p/WXOAm6YCVz/:F9D0izbnVpwftFpwLr
Score

7^/10

defense_evasion execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Obfuscated Files or Information: Command Obfuscation
  Adversaries may obfuscate content during command execution to impede detection.
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Obfuscated Files or Information

Command Obfuscation

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasionexecution

behavioral2

defense_evasionexecution