3466dd125371231ea46bf2a6650449e9959f4c833464b41ed9dc99ebc8d7e329 | Triage

Sharing

General

Target

3466dd125371231ea46bf2a6650449e9959f4c833464b41ed9dc99ebc8d7e329.js
Size

14KB
Sample

240821-sq8rwswbra
MD5

fbda107460c6392a06acc9e97aa4b843
SHA1

efd144b0c6e4d91f0d251ba5a1dc32209c0664bb
SHA256

3466dd125371231ea46bf2a6650449e9959f4c833464b41ed9dc99ebc8d7e329
SHA512

cd249c59be0ac175041c9afb1b7132c8f9c3c6d9cd72202c37f691e73ef76f0ddfbe6dcd0913bcb380eb9074c708f7427f5d4f4ff6dc427140be1e3945015f92
SSDEEP

96:OsiX+0LocMRqJBT1Ii5ge3eC4yWvBuC4yrV4:OrX+0LolEJBT1Ii5ge3z

Score

7^/10

defense_evasion execution

Malware Config

Targets

- Target
  
  3466dd125371231ea46bf2a6650449e9959f4c833464b41ed9dc99ebc8d7e329.js
- Size
  
  14KB
- MD5
  
  fbda107460c6392a06acc9e97aa4b843
- SHA1
  
  efd144b0c6e4d91f0d251ba5a1dc32209c0664bb
- SHA256
  
  3466dd125371231ea46bf2a6650449e9959f4c833464b41ed9dc99ebc8d7e329
- SHA512
  
  cd249c59be0ac175041c9afb1b7132c8f9c3c6d9cd72202c37f691e73ef76f0ddfbe6dcd0913bcb380eb9074c708f7427f5d4f4ff6dc427140be1e3945015f92
- SSDEEP
  
  96:OsiX+0LocMRqJBT1Ii5ge3eC4yWvBuC4yrV4:OrX+0LolEJBT1Ii5ge3z
Score

7^/10

defense_evasion execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Obfuscated Files or Information: Command Obfuscation
  Adversaries may obfuscate content during command execution to impede detection.
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Obfuscated Files or Information

Command Obfuscation

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasionexecution

behavioral2

defense_evasionexecution