f855665d2e619540baf439f2ab2b0601a5689293b02666528ad35ee589535336 | Triage

Sharing

General

Target

f855665d2e619540baf439f2ab2b0601a5689293b02666528ad35ee589535336.js
Size

1.8MB
Sample

241119-sgc9mayarq
MD5

1f8ecc640f63c8a4a4245c7d44a1fe74
SHA1

e418170953c7203372c4e8aa8fe7ecef43de633b
SHA256

f855665d2e619540baf439f2ab2b0601a5689293b02666528ad35ee589535336
SHA512

b061a433bd91738376266ba4b1e9c10e29a9377d8255126edb6c67622946922dcbb7d9151f8a5ee5a7b4238285f7db5ae8c6b76fb3292407b3466131b01bf43b
SSDEEP

6144:GEymDOUEP/gKJKydz7X6xix10X6xixqC5rEC6TkshH:GE1DSdz7Kxir0KxikkHkH

Score

7^/10

defense_evasion execution

Malware Config

Targets

- Target
  
  f855665d2e619540baf439f2ab2b0601a5689293b02666528ad35ee589535336.js
- Size
  
  1.8MB
- MD5
  
  1f8ecc640f63c8a4a4245c7d44a1fe74
- SHA1
  
  e418170953c7203372c4e8aa8fe7ecef43de633b
- SHA256
  
  f855665d2e619540baf439f2ab2b0601a5689293b02666528ad35ee589535336
- SHA512
  
  b061a433bd91738376266ba4b1e9c10e29a9377d8255126edb6c67622946922dcbb7d9151f8a5ee5a7b4238285f7db5ae8c6b76fb3292407b3466131b01bf43b
- SSDEEP
  
  6144:GEymDOUEP/gKJKydz7X6xix10X6xixqC5rEC6TkshH:GE1DSdz7Kxir0KxikkHkH
Score

7^/10

defense_evasion execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Obfuscated Files or Information: Command Obfuscation
  Adversaries may obfuscate content during command execution to impede detection.
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Obfuscated Files or Information

Command Obfuscation

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasionexecution

behavioral2

defense_evasionexecution