vjw0rm | c346c5553d730a5f500588c0cb604454019e0a9a8c234b09e3050de08c5c4de9 | Triage

Sharing

General

Target

JaffaCakes118_c346c5553d730a5f500588c0cb604454019e0a9a8c234b09e3050de08c5c4de9
Size

10KB
Sample

241223-wskdvsxjam
MD5

bd854a8caf7e7c7755481169afebeb9d
SHA1

46d81477627836bdda15137a8837d10eb84bbbfc
SHA256

c346c5553d730a5f500588c0cb604454019e0a9a8c234b09e3050de08c5c4de9
SHA512

5d311fdf3958f117d5b06cb4e975a7bd373a1b9e8379e2df133472bcd30dca710afd382b848bffaf3899cfa1e887f0fe74f019878a24c326a081d15afa73e3e5
SSDEEP

192:gkMig/R6za3lOkLkE5mJcwbEMLZkkaRXB4QqcQpspQJg0w:giaVaEYJwML6kAKcQpspQJgB

Score

10^/10

vjw0rm execution persistence trojan worm

Malware Config

Targets

- Target
  
  JaffaCakes118_c346c5553d730a5f500588c0cb604454019e0a9a8c234b09e3050de08c5c4de9
- Size
  
  10KB
- MD5
  
  bd854a8caf7e7c7755481169afebeb9d
- SHA1
  
  46d81477627836bdda15137a8837d10eb84bbbfc
- SHA256
  
  c346c5553d730a5f500588c0cb604454019e0a9a8c234b09e3050de08c5c4de9
- SHA512
  
  5d311fdf3958f117d5b06cb4e975a7bd373a1b9e8379e2df133472bcd30dca710afd382b848bffaf3899cfa1e887f0fe74f019878a24c326a081d15afa73e3e5
- SSDEEP
  
  192:gkMig/R6za3lOkLkE5mJcwbEMLZkkaRXB4QqcQpspQJg0w:giaVaEYJwML6kAKcQpspQJgB
Score

10^/10

vjw0rm execution persistence trojan worm
- Vjw0rm
  Vjw0rm is a remote access trojan written in JavaScript.
  trojan worm vjw0rm
- Vjw0rm family
  vjw0rm
- Drops startup file
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

vjw0rmexecutionpersistencetrojanworm

behavioral2

vjw0rmexecutionpersistencetrojanworm