General
- Target 19-Aug-7853856135.zip
- Size 402KB
- Sample220819-pl81bagaa8
- SHA256 8db0367e7b139d7b408efbafb0e9535f45bba7453356bcc2b626d66cfdbb8b28
- MD5 5c23e3aef1ede0e58ac93d27ca25375c
- SHA1 d730416d841d474eaa69431b0e012504943bf7e8
- SHA512 57bc250d74b79f8f8271e3e871b5ab07e8e31a1fc7e2646a0eef974a792188cb004b077c96351500e79edcad2d238dca837b22e5830be732c947c11fce564b07
- SSDEEP 6144:TqmJBlSdCaruelGvIX2fOxYWxdoGAkUc2VAI4pNXIWeNOPZx+/HeGYRgXGWpkbzP:7SdRoAGm6zAzeOPZ4/mZwkMeKM
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
0aa115edeb004c16fcf140331ed4a632048bc29d2944cddfd0eab4b6f4989530.js
Resource
win10-20220812-en
Behavioral task
behavioral2
Sample
55016304d118fc369bf78f5549efffd189985b260b717ad630adda3014f8eb1c.js
Resource
win10-20220812-en
Behavioral task
behavioral3
Sample
9b7b25f766aa873657499992984ee312fed59c84aa2408b9ba78e82b3c98918a.js
Resource
win10-20220812-en
Behavioral task
behavioral4
Sample
How_is_sales_tax_calculated_on_a_car_lease_in_california (itn).js
Resource
win10-20220812-en
Malware Config
Targets
-
- Target 0aa115edeb004c16fcf140331ed4a632048bc29d2944cddfd0eab4b6f4989530
- Size 483KB
- SHA256 0aa115edeb004c16fcf140331ed4a632048bc29d2944cddfd0eab4b6f4989530
- MD5 949fc34efbd96d410d7da28ba06464ef
- SHA1 ac57f8520bc424b1014f2e06ff19fb832650a0da
- SHA512 f9b4ec0788d25a826d9aa924a9f7f851fb0904f07423723ff60a032198c67f39b401901d0f7f57aa48add0ab56615601d9fc78c69b739c4c2cf7daf7dc71ad78
- SSDEEP 6144:ZQuXSWulaxl4vhEfDDxA7Wiagmd4iLAmWR64dF:WJhEfDDxviagmd4iLAmWR6a
- MD5 SHA1 SHA512 SSDEEP
Score10/10GootLoader
JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.
Blocklisted process makes network request
-
- Target 55016304d118fc369bf78f5549efffd189985b260b717ad630adda3014f8eb1c
- Size 483KB
- SHA256 55016304d118fc369bf78f5549efffd189985b260b717ad630adda3014f8eb1c
- MD5 03741673907cacb4d88e4b470f36a0c4
- SHA1 d6c2064bda20af71507386d3b4864711cc4a183f
- SHA512 a0cae2eea42a5401314f27fafc4a0c9e277262fc41f443969960d742b92182ff3998dcf1dbca0c69e5b8e933794f19ff223c9f2c3abaa5e47592dbea45324e88
- SSDEEP 6144:MQjXzTulatl4khEfD3mA7Aiagmd4iLAmWR6DSF:N9hEfD3mviagmd4iLAmWR6Q
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target 9b7b25f766aa873657499992984ee312fed59c84aa2408b9ba78e82b3c98918a
- Size 483KB
- SHA256 9b7b25f766aa873657499992984ee312fed59c84aa2408b9ba78e82b3c98918a
- MD5 f6e10ba869a25002fe9326a7b5f35e12
- SHA1 b71fea24ce8603454b0d46fc87c0db7939f02ad4
- SHA512 b126a9205bd49ee5f0a363a4dfe407b8311ce3550ef0485ec9ceaff8df67662e17f92ef8aa68efa5a847264a02d35b22c7cba764d047a8200d63c5a7c4b01428
- SSDEEP 6144:PkQaXS2ulaxl4khEfDWxm7uiagmd4iLAmWk6HSF:PRqhEfDWxZiagmd4iLAmWk6U
- MD5 SHA1 SHA512 SSDEEP
Score10/10GootLoader
JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.
Blocklisted process makes network request
-
- Target How_is_sales_tax_calculated_on_a_car_lease_in_california (itn).js
- Size 483KB
- SHA256 9b7b25f766aa873657499992984ee312fed59c84aa2408b9ba78e82b3c98918a
- MD5 f6e10ba869a25002fe9326a7b5f35e12
- SHA1 b71fea24ce8603454b0d46fc87c0db7939f02ad4
- SHA512 b126a9205bd49ee5f0a363a4dfe407b8311ce3550ef0485ec9ceaff8df67662e17f92ef8aa68efa5a847264a02d35b22c7cba764d047a8200d63c5a7c4b01428
- SSDEEP 6144:PkQaXS2ulaxl4khEfDWxm7uiagmd4iLAmWk6HSF:PRqhEfDWxZiagmd4iLAmWk6U
- MD5 SHA1 SHA512 SSDEEP
Score10/10GootLoader
JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.
Blocklisted process makes network request