ea226e60df903d37ffea5ccd0e54d69604947d9d350460e96fffa4939c75e880 | Triage

Sharing

General

Target

ea226e60df903d37ffea5ccd0e54d69604947d9d350460e96fffa4939c75e880.js
Size

14KB
Sample

240821-ttvj4sydqb
MD5

98abfab78de143c46b73522cc2e55a7a
SHA1

4de605e8f4e140c7d0ccecf0a0d0cca61b927385
SHA256

ea226e60df903d37ffea5ccd0e54d69604947d9d350460e96fffa4939c75e880
SHA512

1d1a50457e9f7f2e51deb6afdc852b007d5e44faff5a22cb7626149a03592dede21b8e58d29087c508ef805d38bb300fc042172e82090fffa715bc397cb8e55e
SSDEEP

384:Jqo5Sb86SPV67MOlG8S8KuplGMhbBt2JCOGJC7cqS06ShveMD8JS6S5fSP3Q96FK:JqowyWOWbAvoDOWbAB

Score

7^/10

defense_evasion execution

Malware Config

Targets

- Target
  
  ea226e60df903d37ffea5ccd0e54d69604947d9d350460e96fffa4939c75e880.js
- Size
  
  14KB
- MD5
  
  98abfab78de143c46b73522cc2e55a7a
- SHA1
  
  4de605e8f4e140c7d0ccecf0a0d0cca61b927385
- SHA256
  
  ea226e60df903d37ffea5ccd0e54d69604947d9d350460e96fffa4939c75e880
- SHA512
  
  1d1a50457e9f7f2e51deb6afdc852b007d5e44faff5a22cb7626149a03592dede21b8e58d29087c508ef805d38bb300fc042172e82090fffa715bc397cb8e55e
- SSDEEP
  
  384:Jqo5Sb86SPV67MOlG8S8KuplGMhbBt2JCOGJC7cqS06ShveMD8JS6S5fSP3Q96FK:JqowyWOWbAvoDOWbAB
Score

7^/10

defense_evasion execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Obfuscated Files or Information: Command Obfuscation
  Adversaries may obfuscate content during command execution to impede detection.
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Obfuscated Files or Information

Command Obfuscation

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasionexecution

behavioral2

defense_evasionexecution