General
- Target stage4.js
- Size 7KB
- Sample260930-wccdbaec95
- SHA256 3635ee889c55579c417141237e13b5014b7296f2926d310a67c5e4a61046bd81
- MD5 7418d2f9bf18c72845b71bbf4182f39b
- SHA1 85faabeb2b64e102b140d9caafd8204a57839a8c
- SHA512 24cfcb05c6b3fb95c767a7c91086ada2859a58ed860027119b77fa18d6158d37245d9a4473974d0536649d2a59d983940c31b89cfc53828d5abde340da071b51
- SSDEEP 192:nnxdewXhaGN66meKRVG6VEvbEJyFeZ/DjymD/Atq2Hg:HX1keKTrEvbEo+D2yIvg
- TLSH T1A8F1A7883BC5E024A672B4AF2E1221D5E61A6CC0F35D48C5F21D3E81FD987B0F65A758
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
stage4.js
Resource
ubuntu1804-amd64-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
stage4.js
Resource
ubuntu2404-amd64-20260127-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target stage4.js
- Size 7KB
- SHA256 3635ee889c55579c417141237e13b5014b7296f2926d310a67c5e4a61046bd81
- MD5 7418d2f9bf18c72845b71bbf4182f39b
- SHA1 85faabeb2b64e102b140d9caafd8204a57839a8c
- SHA512 24cfcb05c6b3fb95c767a7c91086ada2859a58ed860027119b77fa18d6158d37245d9a4473974d0536649d2a59d983940c31b89cfc53828d5abde340da071b51
- SSDEEP 192:nnxdewXhaGN66meKRVG6VEvbEJyFeZ/DjymD/Atq2Hg:HX1keKTrEvbEo+D2yIvg
- TLSH T1A8F1A7883BC5E024A672B4AF2E1221D5E61A6CC0F35D48C5F21D3E81FD987B0F65A758
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2JavaScript
1Unix Shell
1User Execution
2Malicious File
1