General
- Target Airplane_hangar_lease_agreement (hwl).js
- Size 483KB
- Sample220906-rh56csbchr
- SHA256 fde9c98c6e489ce409b098347493d3cc5cbd96d12d7248ee0152ecd2a67e8fed
- MD5 d0350cb565e1f8e2c6b2064650236f2d
- SHA1 531c2b62ecb4f66c5ac5573983cb6c9d2c234ce5
- SHA512 60688831097d66156cc9160c22e1977ca2e855bb2aef2e84c42c3a0c6e754aed9ad293cb95ffdb5d0b2d4eccbc8f952b7bc341ad9a2f213b224b0c2e6528d2bf
- SSDEEP 6144:sQ/mSNulaxl4khEfDOxA7aiagmd4iLAmW+6duF:DDhEfDOxfiagmd4iLAmW+62
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
Airplane_hangar_lease_agreement (hwl).js
Resource
win10-20220901-en
4 signatures
300 seconds
Malware Config
Targets
-
- Target Airplane_hangar_lease_agreement (hwl).js
- Size 483KB
- SHA256 fde9c98c6e489ce409b098347493d3cc5cbd96d12d7248ee0152ecd2a67e8fed
- MD5 d0350cb565e1f8e2c6b2064650236f2d
- SHA1 531c2b62ecb4f66c5ac5573983cb6c9d2c234ce5
- SHA512 60688831097d66156cc9160c22e1977ca2e855bb2aef2e84c42c3a0c6e754aed9ad293cb95ffdb5d0b2d4eccbc8f952b7bc341ad9a2f213b224b0c2e6528d2bf
- SSDEEP 6144:sQ/mSNulaxl4khEfDOxA7aiagmd4iLAmW+6duF:DDhEfDOxfiagmd4iLAmW+62
- MD5 SHA1 SHA512 SSDEEP
Score10/10GootLoader
JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.
Blocklisted process makes network request