General
-
Target
13-sept-2-8008026128.zip
-
Size
202KB
-
Sample
220913-xpcqaacbhn
-
MD5
669c9b816c5c482531d009d8287411fe
-
SHA1
44035458dae6e2c27eded11fe028985d146cab61
-
SHA256
0006e9d0f4ed8309cb2a7191ededcfd5f361aefeadbe4079c09873be9c188190
-
SHA512
a4be38a5e42dfa10d2aa797b2ca89db502be3f07b52c466d18870f94126351bf59e1c6b3e5f55b473b7e7d22442e1abe11176c8328bae1c0d6988cd0c0cd07ea
-
SSDEEP
6144:UDbnK+mapNJbZ0xC9RRRdlpkWriML0Kuosa5YijYIMVb:UDbnK+VeYbXrpHriMLZsUir
Static task
static1
Behavioral task
behavioral1
Sample
0e8b2922ea7ba8603f21b1d3555a9e56d24ac7b791a9b5faf100506ac039ff89.js
Resource
win10-20220812-en
Behavioral task
behavioral2
Sample
244b3a104682ba299675837cbc505c69bedcb41e97be4b2832c98d92898acc5d.js
Resource
win10-20220812-en
Malware Config
Targets
-
-
Target
0e8b2922ea7ba8603f21b1d3555a9e56d24ac7b791a9b5faf100506ac039ff89
-
Size
483KB
-
MD5
15a86f876979788f4389843564607fc8
-
SHA1
08d1dc30b020267cc99fccfb5abc7320e6ac7413
-
SHA256
0e8b2922ea7ba8603f21b1d3555a9e56d24ac7b791a9b5faf100506ac039ff89
-
SHA512
1d2e0d8bee7eaf693d968a76d8a3702221f33ed3f8d23876f2b3489a2c617d49a61fd31f53e8dd4a5195f42cc7566fb11469e0757cb12478f5e655adb9dde524
-
SSDEEP
6144:F8QOJHTulaxl4khEfD3rAsWiagmd4iLAmWK6PSF:FEhhEfD3r+iagmd4iLAmWK6M
Score10/10-
GootLoader
JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.
-
Blocklisted process makes network request
-
-
-
Target
244b3a104682ba299675837cbc505c69bedcb41e97be4b2832c98d92898acc5d
-
Size
483KB
-
MD5
2fb55e8b06887489abf102093d5f6f12
-
SHA1
4dbff15887bf7b64b7c7848b79c516c7986eeb2d
-
SHA256
244b3a104682ba299675837cbc505c69bedcb41e97be4b2832c98d92898acc5d
-
SHA512
05b7080e390c583f77eaaf1bb4419e2cedb3c5315ca755bfefdfd4499505d15ba5469f717e26227b774441e4506721754fc1bc01efa444fc7ae837c4ba14ff2f
-
SSDEEP
6144:7fXQsPNyTula/l4shEfD3aFd7tiagmd4iLAmWQ6oSi:RYZhEfD3yHiagmd4iLAmWQ6C
Score10/10-
GootLoader
JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.
-
Blocklisted process makes network request
-