Extracted

• • Target

    c1ae38afb6c82b9107868d66318095f1c00f1e92dddc0ee953c23a8de4ace353

  • Size

    287KB

  • MD5

    ef45a5b40438205dc050f4afebc278b5

  • SHA1

    6760ea10d2e201b688d841ee11c841653ede94f5

  • SHA256

    c1ae38afb6c82b9107868d66318095f1c00f1e92dddc0ee953c23a8de4ace353

  • SHA512

    fcceff6a644a09fdae46ffc306743277d6cc078c273b7dd6f85be97592aa23ca4631bf6564dbd130f9aaa38536066af3b61713a07984e9d7e0a9909cd635b021

  Score

  10^/10

  gootkit6546bankerbotnettrojan

  • Gootkit

    Gootkit is a banking trojan, where large parts are written in node.JS.

    trojanbankerbotnetgootkit

  • Checks BIOS information in registry

    BIOS information is often read in order to detect sandboxing environments.

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  behavioral1behavioral2