Overview

overview

10

Static

static

Agreement_...ph).js

windows10-1703-x64

10

How_to_fil...vv).js

windows10-1703-x64

10

Iowa_unifo...hi).js

windows10-1703-x64

10

Alberta_pa...cs).js

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    13-September-7996136135.zip
  • Size 395KB
  • Sample220913-p5aa4affc6
  • SHA256 60fb7d5d08e4b91eb6978af3bcf3cc0143834fe0e98c7c3a7af7f7d52084e961
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
gootloaderloader

Malware Config

Targets

    • Target
      Agreement_of_guiding_principles_(property_insurance) (envph).js
    • Size 483KB
    • SHA256 e5b9b96238ad4b273421fb5fa05765538633979f825ef2a529e6feced1b9bd01
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    gootloaderloader

    • GootLoader

      JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.

      loadergootloader

    • Blocklisted process makes network request

    behavioral1
    • Target
      How_to_fill_t1-ovp_form (owvv).js
    • Size 483KB
    • SHA256 02e477b52df4ea910526f3bad988aeaabcb2ac4d5e98b4cbc47a4c36b32acf4f
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    gootloaderloader

    • GootLoader

      JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.

      loadergootloader

    • Blocklisted process makes network request

    behavioral2
    • Target
      Iowa_uniform_premarital_agreement_act (ashi).js
    • Size 483KB
    • SHA256 8869891e2142771fc5457c26edc1192022704647e0ce6b4d06b6c238b8e1cd2e
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    gootloaderloader

    • GootLoader

      JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.

      loadergootloader

    • Blocklisted process makes network request

    behavioral3
    • Target
      Alberta_painting_collective_agreement (bycs).js
    • Size 483KB
    • SHA256 c2e6a362109e81acdb8d01c57a9bd898e6178254329c8b64be95e26543e225b5
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    gootloaderloader

    • GootLoader

      JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.

      loadergootloader

    • Blocklisted process makes network request

    behavioral4

MITRE ATT&CK Matrix

Tasks