Overview

overview

10

Static

static

1

Proof Of Payment.js

windows7-x64

3

Proof Of Payment.js

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Proof Of Payment.js

  • Size

    210KB

  • Sample

    240925-sjgd3avgld

  • MD5

    998f56502dcef7e0f79005a15b347369

  • SHA1

    9e95598310cbdc5539dfd87f9aa535ac45453082

  • SHA256

    aa32cd6ebf65a0a27f1c0acb9958cc7557db7f2d32da89d288ca60d77f8dc66c

  • SHA512

    f24afdc911f4a9c20acda4b875922ed03b467166e9448fc0559f80b142390e3dfbd552e44500a30fbbe9654a0530e489a177d67c507171e239cf00e1c230d747

  • SSDEEP

    6144:HQGpYsLdKl0dTvG7ma45y36H+DvTsnLJ+DwNa:w+nFYYLBg

Score
10/10
strratexecutionstealertrojan

Malware Config

Targets

    • Target

      Proof Of Payment.js

    • Size

      210KB

    • MD5

      998f56502dcef7e0f79005a15b347369

    • SHA1

      9e95598310cbdc5539dfd87f9aa535ac45453082

    • SHA256

      aa32cd6ebf65a0a27f1c0acb9958cc7557db7f2d32da89d288ca60d77f8dc66c

    • SHA512

      f24afdc911f4a9c20acda4b875922ed03b467166e9448fc0559f80b142390e3dfbd552e44500a30fbbe9654a0530e489a177d67c507171e239cf00e1c230d747

    • SSDEEP

      6144:HQGpYsLdKl0dTvG7ma45y36H+DvTsnLJ+DwNa:w+nFYYLBg

    Score
    10/10
    executionstrratstealertrojan

    • STRRAT

      STRRAT is a remote access tool than can steal credentials and log keystrokes.

      trojanstealerstrrat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks