Overview

overview

8

Static

static

AutoUpdater.js

windows7-x64

8

AutoUpdater.js

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    AutoUpdater.js

  • Size

    8KB

  • Sample

    220805-wme7ysdcek

  • MD5

    c249583badbaef9a09e430a433a35914

  • SHA1

    6fec191fc99d6d4bf85ece108d0cdb191d2a9fcf

  • SHA256

    376180cf80a62085441a0b2a19e9b0fb2abdf3e1020955cfc4bd549e4bcc6726

  • SHA512

    64bd4c7ba9f05a7a30d373e99605ce851d6ec8e635343053e26d6f1bedb96aa2e7e6b25cb2923fcb5a3bfdb38d261f860b3e8226c5d2f0c5958c5025c899011d

Score
8/10

Malware Config

Targets

    • Target

      AutoUpdater.js

    • Size

      8KB

    • MD5

      c249583badbaef9a09e430a433a35914

    • SHA1

      6fec191fc99d6d4bf85ece108d0cdb191d2a9fcf

    • SHA256

      376180cf80a62085441a0b2a19e9b0fb2abdf3e1020955cfc4bd549e4bcc6726

    • SHA512

      64bd4c7ba9f05a7a30d373e99605ce851d6ec8e635343053e26d6f1bedb96aa2e7e6b25cb2923fcb5a3bfdb38d261f860b3e8226c5d2f0c5958c5025c899011d

    Score
    8/10

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

1
T1130

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks