General
- Target 20-Aug-7890886130.zip
- Size 303KB
- Sample220820-ssledagab5
- SHA256 cebfc0e1e78b356427d0154b7940fc8cd9fa6a7287a7c9329a13742ea7071e17
- MD5 f8e4c5e257a436f87ddcebaecce70c4d
- SHA1 4c165e3bc85c88ee8fddf710e417bc3b826cb962
- SHA512 4fec392f0727e89aba9929d726ba38cab8c8c7b7225592d03e8d1e74f8777d6dc4fea59f6884e93ba840c45d2a91c1806e0c30a20d068a529f1d69b50c49502d
- SSDEEP 6144:UHE1N9SqwBUeQJ9ydCxidtgF2ie3bGSmgzlBk4Gp9OO5rJ/d:UHWiBUeQDyKGty2ZGgE4GzOO5z
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
0fc3a414c4296c97ee38ef048b34a7088ffaee52fbbe5e2f703c3ae28502f547.js
Resource
win10-20220812-en
3 signatures
300 seconds
Behavioral task
behavioral2
Sample
476c8803bd65afd36ac082c9194a2a3ee13930a3b647bab9409ab12e6d36647d.js
Resource
win10-20220812-en
3 signatures
300 seconds
Behavioral task
behavioral3
Sample
8d44c9ad85c910a541f3f4d441e650b9929bd3dd91c313fa0fc9c71af8548b9e.js
Resource
win10-20220812-en
3 signatures
300 seconds
Malware Config
Targets
-
- Target 0fc3a414c4296c97ee38ef048b34a7088ffaee52fbbe5e2f703c3ae28502f547
- Size 483KB
- SHA256 0fc3a414c4296c97ee38ef048b34a7088ffaee52fbbe5e2f703c3ae28502f547
- MD5 81516e92d939f26485e346ce703fae94
- SHA1 56908bf0d9c129aa292d505571a307afbd644e82
- SHA512 b2c790bfe111681eeabad9de470784727caf0e03267907e8cf27b5b9a0ecbe088d8fc309d22f0c604749e325e1fae6984801c1e5e6d16a40e88efc06e721f868
- SSDEEP 6144:3kQtXssulaxl4khEfD3xA71iagmd4iLAmWn6QSF:M4hEfD3xOiagmd4iLAmWn6d
- MD5 SHA1 SHA512 SSDEEP
Score10/10GootLoader
JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.
Blocklisted process makes network request
-
- Target 476c8803bd65afd36ac082c9194a2a3ee13930a3b647bab9409ab12e6d36647d
- Size 483KB
- SHA256 476c8803bd65afd36ac082c9194a2a3ee13930a3b647bab9409ab12e6d36647d
- MD5 3fdbea9104d5a433edbef7bac7bdfd82
- SHA1 b31137320c0962216fa6983766355533daadb4fe
- SHA512 87068675a2175a9677df8480bfc8a09831bc68631fa9b5af7ba8b3bf76b1583549ab45528a919282df4d1dd52b2ae3fffff72deab3fe46a828aaf2db665632ae
- SSDEEP 6144:tQE0W4W8ulaxl4khEfD3MA7WiagmdqiLAmWR6tSF:v7ohEfD3MviagmdqiLAmWR6a
- MD5 SHA1 SHA512 SSDEEP
Score10/10GootLoader
JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.
Blocklisted process makes network request
-
- Target 8d44c9ad85c910a541f3f4d441e650b9929bd3dd91c313fa0fc9c71af8548b9e
- Size 483KB
- SHA256 8d44c9ad85c910a541f3f4d441e650b9929bd3dd91c313fa0fc9c71af8548b9e
- MD5 ffe40dde341220910b46ff66252a717b
- SHA1 0b3c9277b52a1de79ce1014622b9402b51cb38ba
- SHA512 4260c805a6e634fd5fce73a9aca6499dac71b94a82061c4b2bf28b3c9d29ef528ac446526ecf33963e8309ddda4fb7c75773d7eca95fcb910b7093cba44cd114
- SSDEEP 6144:ChpQZUa88ulaxl4KhEfDexA7Wiagmd4iLAmWR60SF:CGgmhEfDexviagmd4iLAmWR6x
- MD5 SHA1 SHA512 SSDEEP
Score10/10GootLoader
JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.
Blocklisted process makes network request