Overview

overview

8

Static

static

1

shd.js

windows10-2004-x64

8

shd.js

windows11-21h2-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    16042026_0441_shd.js.rar
  • Size 1.4MB
  • Sample260416-fa43jsay2v
  • SHA256 1096d7e2570f1c44c06b9f044d4126bf91d2dbd5f9b67fd7c4aef51d402a1a98
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasionexecution

Malware Config

Targets

    • Target
      shd.js
    • Size 2.0MB
    • SHA256 cc6731c27c054cc7008bf9000d455bdd4a52f0d83b031a492b3622561a923024
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    defense_evasionexecution

    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

      execution

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • ConfuserEx .NET packer

      Detects ConfuserEx .NET packer.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks