Overview

overview

10

Static

static

1

Quotation#4873920.js

windows7-x64

3

Quotation#4873920.js

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Quotation#4873920.js

  • Size

    207KB

  • Sample

    241003-h14kta1cmp

  • MD5

    0444071c6c7d8675aa708e00bdad9787

  • SHA1

    639c3c2fc315ce73b3d179be4ba1fa8c94644c9b

  • SHA256

    cb19162767f15a3043137f8124c6df663861b6537b28cfe7d930fd18cec33c6b

  • SHA512

    1b32599cff480157f6d2030d088caf71983cdbca12073dde4a83580f92e93fc4f202272e9ccbc21b25a8a6afe228fdf2ca3e571a18bdd5bb0207db2542a56ae8

  • SSDEEP

    6144:HQxCFBSSouokamJqydZZeL9ekQNMwMS0TrqLHEwnHj:w4tLS5VajT

Score
10/10
strratexecutionstealertrojan

Malware Config

Targets

    • Target

      Quotation#4873920.js

    • Size

      207KB

    • MD5

      0444071c6c7d8675aa708e00bdad9787

    • SHA1

      639c3c2fc315ce73b3d179be4ba1fa8c94644c9b

    • SHA256

      cb19162767f15a3043137f8124c6df663861b6537b28cfe7d930fd18cec33c6b

    • SHA512

      1b32599cff480157f6d2030d088caf71983cdbca12073dde4a83580f92e93fc4f202272e9ccbc21b25a8a6afe228fdf2ca3e571a18bdd5bb0207db2542a56ae8

    • SSDEEP

      6144:HQxCFBSSouokamJqydZZeL9ekQNMwMS0TrqLHEwnHj:w4tLS5VajT

    Score
    10/10
    executionstrratstealertrojan

    • STRRAT

      STRRAT is a remote access tool than can steal credentials and log keystrokes.

      trojanstealerstrrat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks