Analysis
- max time kernel
262s - max time network
245s - platform
windows10-2004_x64 - resource
win10v2004-20220812-en - resource tags
- submitted
29/08/2022, 13:20
General
- Target 1a2ccb7a95413bfebfc4e5ba6b93cdad3b9b2575bd5fdd663f969c68d3673a7c.js
- Size 483KB
- Sample220829-qlkhdsbab9
- SHA256 1a2ccb7a95413bfebfc4e5ba6b93cdad3b9b2575bd5fdd663f969c68d3673a7c
Score
10/10
Malware Config
Signatures
- GootLoader
JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.
- Blocklisted process makes network request 3 IoCs
- Script User-Agent 3 IoCs
Uses user-agent string associated with script host/environment.
Processes
-
C:\Windows\system32\wscript.exewscript.exe C:\Users\Admin\AppData\Local\Temp\1a2ccb7a95413bfebfc4e5ba6b93cdad3b9b2575bd5fdd663f969c68d3673a7c.js1⤵
- Blocklisted process makes network request