4a207e0688b62fcbc1399f15e4da06c0fdfc60c12bdccc133e035574890f7ec3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a207e0688b62fcbc1399f15e4da06c0fdfc60c12bdccc133e035574890f7ec3.js
Size

12KB
Sample

240821-svf8fazbpp
MD5

0aeee8738a476deb8b7f84059ac5df70
SHA1

9822d4d33df8b719bde23e0b6b2b6c44564fc9db
SHA256

4a207e0688b62fcbc1399f15e4da06c0fdfc60c12bdccc133e035574890f7ec3
SHA512

1b17d706bddefc918614afad4234e743c60df13de1133f001443a31cf4cec54de650117fd298d2ca03c55136789623456f86a9f15d362d50af446c70bce531a5
SSDEEP

96:/K+VNmAmU4ekN+f424+i4/DFWPU646r4AbsDc4Gwwrr4z8Im:/KmsAHBTfjUgDFWs6ZrrbsYBvr+85

Score

7^/10

defense_evasion execution

Malware Config

Targets

- Target
  
  4a207e0688b62fcbc1399f15e4da06c0fdfc60c12bdccc133e035574890f7ec3.js
- Size
  
  12KB
- MD5
  
  0aeee8738a476deb8b7f84059ac5df70
- SHA1
  
  9822d4d33df8b719bde23e0b6b2b6c44564fc9db
- SHA256
  
  4a207e0688b62fcbc1399f15e4da06c0fdfc60c12bdccc133e035574890f7ec3
- SHA512
  
  1b17d706bddefc918614afad4234e743c60df13de1133f001443a31cf4cec54de650117fd298d2ca03c55136789623456f86a9f15d362d50af446c70bce531a5
- SSDEEP
  
  96:/K+VNmAmU4ekN+f424+i4/DFWPU646r4AbsDc4Gwwrr4z8Im:/KmsAHBTfjUgDFWs6ZrrbsYBvr+85
Score

7^/10

defense_evasion execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Obfuscated Files or Information: Command Obfuscation
  Adversaries may obfuscate content during command execution to impede detection.
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Obfuscated Files or Information

Command Obfuscation

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasionexecution

behavioral2

defense_evasionexecution