e9b6376e52d9aaaa1a1b5d1ee35f5c467ca6eb964c22650e2953571746f66599 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e9b6376e52d9aaaa1a1b5d1ee35f5c467ca6eb964c22650e2953571746f66599.js
Size

9KB
Sample

240821-ttq7paydpc
MD5

b1cdb5e4a233794ad1482d4c03241474
SHA1

da982f986cef09ea837afd19be048788af32132b
SHA256

e9b6376e52d9aaaa1a1b5d1ee35f5c467ca6eb964c22650e2953571746f66599
SHA512

49b6e381552363719b7ba10b3e2b5cd0069bed0a7da1a64a8a0d59550e8913bfcbd88b6964ac34dd8ea998058741b0927911bd3ed998fe5a0e2247236de5d7ff
SSDEEP

192:9Emr4jsVT72486iTIIo7vdolmZo7vdHNzfVTQq2:9Es4u648m

Score

7^/10

defense_evasion execution

Malware Config

Targets

- Target
  
  e9b6376e52d9aaaa1a1b5d1ee35f5c467ca6eb964c22650e2953571746f66599.js
- Size
  
  9KB
- MD5
  
  b1cdb5e4a233794ad1482d4c03241474
- SHA1
  
  da982f986cef09ea837afd19be048788af32132b
- SHA256
  
  e9b6376e52d9aaaa1a1b5d1ee35f5c467ca6eb964c22650e2953571746f66599
- SHA512
  
  49b6e381552363719b7ba10b3e2b5cd0069bed0a7da1a64a8a0d59550e8913bfcbd88b6964ac34dd8ea998058741b0927911bd3ed998fe5a0e2247236de5d7ff
- SSDEEP
  
  192:9Emr4jsVT72486iTIIo7vdolmZo7vdHNzfVTQq2:9Es4u648m
Score

7^/10

defense_evasion execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Obfuscated Files or Information: Command Obfuscation
  Adversaries may obfuscate content during command execution to impede detection.
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Obfuscated Files or Information

Command Obfuscation

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasionexecution

behavioral2

defense_evasionexecution