ca3a8107b0c1ecf1a9f258e5b155a652e81710a2fa910bfd5ed31305a10ed06f | Triage

Sharing

General

Target

30380270752820223330.js
Size

179KB
Sample

241018-emxzbsygkl
MD5

4381a19f7cdefed07d6582d2ef4edea5
SHA1

31549df8207d845d31fe3617ef07c080c70b40b6
SHA256

ca3a8107b0c1ecf1a9f258e5b155a652e81710a2fa910bfd5ed31305a10ed06f
SHA512

626502bf3c8f03b4cdcb03725da6ea56d0d12becb15290e4b8845ec0cbd7dd4056532e47b5f24c202b87f2b84e4e1e025d7d0bee33c8ebcc04fde149adc8345b
SSDEEP

1536:+wTY3P30itez3m2h9jKRhosE0grz0pBf0Q19D/saVsosa0Qop8nynSX2osR0NhbW:1Y3PkipL4FeWoLVuSljog+

Score

7^/10

defense_evasion execution

Malware Config

Targets

- Target
  
  30380270752820223330.js
- Size
  
  179KB
- MD5
  
  4381a19f7cdefed07d6582d2ef4edea5
- SHA1
  
  31549df8207d845d31fe3617ef07c080c70b40b6
- SHA256
  
  ca3a8107b0c1ecf1a9f258e5b155a652e81710a2fa910bfd5ed31305a10ed06f
- SHA512
  
  626502bf3c8f03b4cdcb03725da6ea56d0d12becb15290e4b8845ec0cbd7dd4056532e47b5f24c202b87f2b84e4e1e025d7d0bee33c8ebcc04fde149adc8345b
- SSDEEP
  
  1536:+wTY3P30itez3m2h9jKRhosE0grz0pBf0Q19D/saVsosa0Qop8nynSX2osR0NhbW:1Y3PkipL4FeWoLVuSljog+
Score

7^/10

defense_evasion execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Obfuscated Files or Information: Command Obfuscation
  Adversaries may obfuscate content during command execution to impede detection.
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Obfuscated Files or Information

Command Obfuscation

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasionexecution

behavioral2

defense_evasionexecution