🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 040ff3c295925c2d1f0be963d307b7e5b10c261adfd12e19188c623c1178c621. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Vjw0rm


Vendor detections: 6


Intelligence 6 IOCs 1 YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 040ff3c295925c2d1f0be963d307b7e5b10c261adfd12e19188c623c1178c621
SHA3-384 hash: b0226b9f379a336a63c6a4a71ea62465cbeeed613f7a0c0bdea504a0f0cd507ad1555cf6b252bc13511ac272e68013ab
SHA1 hash: 997adf7facebcfde2999825dd24ea0f0d2946be3
MD5 hash: 840e3025bd92a75b9f5b588c92c69232
humanhash: four-blue-red-fillet
File name:NewCopy.js
Download: download sample
Signature Vjw0rm
Create hunting rule
File size:23'394 bytes
First seen:2021-08-26 16:22:20 UTC
Last seen:Never
File type:Java Script (JS) js
MIME type:text/plain
ssdeep 384:fpMEgPwgfvT+ydwoRjbSYcSqaqAg0ruV3i8Zg/SizIY6gF0eKrywg1SYcSqUbbiS:BAP3fvT+ydwoRjbSYcSqaqAg0ruV3i8u
TLSH T1BFB2BE3ECC28C23FC5B7D21D8DC65A07E89A4917230CED9F68D77397922A193789219D
Reporter abuse_ch
Tags:js vjw0rm


Avatar
abuse_ch
Vjw0rm C2:
http://194.5.98.75:4532/Vre

Indicators Of Compromise (IOCs)

Below is a list of indicators of compromise (IOCs) associated with this malware samples.

IOCThreatFox Reference
http://194.5.98.75:4532/Vre https://threatfox.abuse.ch/ioc/200117/

Intelligence

File Origin
# of uploads :
1
# of downloads :
232
Origin country :
n/a
Vendor Threat Intelligence
Detection:
vjworm
Create hunting rule
Link:
https://mwdb.cert.pl/sample/040ff3c295925c2d1f0be963d307b7e5b10c261adfd12e19188c623c1178c621/
Threat name:
Script-JS.Trojan.Cryxos
Create hunting rule
Status:
Malicious
First seen:
2021-08-26 16:23:09 UTC
AV detection:
11 of 41 (26.83%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=aqh7hquvsjoc2hyl5fr5gb5x4wyqyjq237is4giyrrrdyelyyyqq._file
Result
Malware family:
vjw0rm
Create hunting rule
Score:
  10/10
Tags:
family:vjw0rm trojan worm
Link:
https://tria.ge/reports/210826-hby1d6dyqx/
Behaviour
Blocklisted process makes network request
Vjw0rm
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Vjw0rm
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/040ff3c295925c2d1f0be963d307b7e5b10c261adfd12e19188c623c1178c621

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Comments