Resubmissions

08/09/2022, 12:37

220908-ptplmsbgck10

08/09/2022, 12:30

220908-pprv7seeg910

General

  • Target
    8-Sept-7962386133.zip
  • Size 300KB
  • Sample220908-ptplmsbgck
  • SHA256 3c14fbc117fc287a39d8af860552008d7d5ae5c31cb8acc69be448e04e117860
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Targets

    • Target
      2426d4b21e5f3804a7bdd97d6d2eaa5d80874a32cbc8ccce846eaaf34ca033dc
    • Size 483KB
    • SHA256 2426d4b21e5f3804a7bdd97d6d2eaa5d80874a32cbc8ccce846eaaf34ca033dc
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • GootLoader

      JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.

    • Blocklisted process makes network request

    • Target
      75d8102c0b4ebfd0bce76198c2292ac5bf806772426c93039427a5102b8c188c
    • Size 483KB
    • SHA256 75d8102c0b4ebfd0bce76198c2292ac5bf806772426c93039427a5102b8c188c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • GootLoader

      JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.

    • Blocklisted process makes network request

    • Target
      How_to_calculate_partnership_capital_account (zoe).js
    • Size 483KB
    • SHA256 2426d4b21e5f3804a7bdd97d6d2eaa5d80874a32cbc8ccce846eaaf34ca033dc
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • GootLoader

      JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.

    • Blocklisted process makes network request

MITRE ATT&CK Enterprise v6

Tasks