Analysis
- max time kernel
150s - max time network
152s - platform
windows10_x64 - resource
win10-20220414-en - submitted
28/07/2022, 10:43
General
- Target b28f40b8f1fee4e985198f6980e26ed069cfe79915991a9ec671d7ece0934875.js
- Sample220728-msbmaaehf6
Score
10/10
Malware Config
Signatures
- GootLoader
JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.
- Blocklisted process makes network request 3 IoCs
- Script User-Agent 3 IoCs
Uses user-agent string associated with script host/environment.
Processes
-
C:\Windows\system32\wscript.exewscript.exe C:\Users\Admin\AppData\Local\Temp\b28f40b8f1fee4e985198f6980e26ed069cfe79915991a9ec671d7ece0934875.js1⤵
- Blocklisted process makes network request