Resubmissions

08-09-2022 12:37

220908-ptplmsbgck 10

08-09-2022 12:30

220908-pprv7seeg9 10

General

  • Target

    8-Sept-7962386133.zip

  • Size

    300KB

  • Sample

    220908-ptplmsbgck

  • MD5

    1ce08e158e61a1431c9b791c6a69ecbe

  • SHA1

    cb7357051d49571259c37aea045272dc44fa3893

  • SHA256

    3c14fbc117fc287a39d8af860552008d7d5ae5c31cb8acc69be448e04e117860

  • SHA512

    7bc601c325768e9629a48aab3ca8186f920a25793bc1ff9bc1c0a5699f1a7ae8c3172f4d8b324d7ffeff46e1273536ae293591175ceddf0b0f33b8431ec65794

  • SSDEEP

    6144:DXuVLdyOHwi07iDgOH/uT8onwOdJCenv/riXQJXQPQTkKx:IEOM747i2qQMkG

Score
10/10

Malware Config

Targets

    • Target

      2426d4b21e5f3804a7bdd97d6d2eaa5d80874a32cbc8ccce846eaaf34ca033dc

    • Size

      483KB

    • MD5

      5e54370bed87473308b7ec0935a36337

    • SHA1

      fdbd250b7b64e23838cf7c14e35ce3fa6e4802af

    • SHA256

      2426d4b21e5f3804a7bdd97d6d2eaa5d80874a32cbc8ccce846eaaf34ca033dc

    • SHA512

      b06615e26cce40ac7f84c813694cfce62407d37348b7584c0985fdd795b4b6851008341241551a0bb9f6badd84f8bdf14eb064eba487d25dada6b74f7c30bffe

    • SSDEEP

      6144:AoQpXS3ulaxl4HhEfD3rgA7Viagmd4iLAmWR6TSd:AiOhEfD38Siagmd4iLAmWR66

    Score
    10/10
    • GootLoader

      JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.

    • Blocklisted process makes network request

    • Target

      75d8102c0b4ebfd0bce76198c2292ac5bf806772426c93039427a5102b8c188c

    • Size

      483KB

    • MD5

      b72014373bdd29f244376d013f037825

    • SHA1

      cbc73d375b915b07328dc7e30b44a9a5662bfd77

    • SHA256

      75d8102c0b4ebfd0bce76198c2292ac5bf806772426c93039427a5102b8c188c

    • SHA512

      391cf4285580e4da0bacce9919e7c0fd9b4a0a0ec3eb21c09424b1d2229a05c14ea169bdc62a52c30cd1bafce1ba7ffe48e033e00a38c841fbeee311ac861050

    • SSDEEP

      6144:ZDQlXSnulaxl40hEfDHxU7Wiagmd4iLAmWR6JAF:HthEfDHxjiagmd4iLAmWR6s

    Score
    10/10
    • GootLoader

      JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.

    • Blocklisted process makes network request

    • Target

      How_to_calculate_partnership_capital_account (zoe).js

    • Size

      483KB

    • MD5

      5e54370bed87473308b7ec0935a36337

    • SHA1

      fdbd250b7b64e23838cf7c14e35ce3fa6e4802af

    • SHA256

      2426d4b21e5f3804a7bdd97d6d2eaa5d80874a32cbc8ccce846eaaf34ca033dc

    • SHA512

      b06615e26cce40ac7f84c813694cfce62407d37348b7584c0985fdd795b4b6851008341241551a0bb9f6badd84f8bdf14eb064eba487d25dada6b74f7c30bffe

    • SSDEEP

      6144:AoQpXS3ulaxl4HhEfD3rgA7Viagmd4iLAmWR6TSd:AiOhEfD38Siagmd4iLAmWR66

    Score
    10/10
    • GootLoader

      JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.

    • Blocklisted process makes network request

MITRE ATT&CK Enterprise v6

Tasks