Overview

overview

10

Static

static

Settlement...qp).js

windows7-x64

10

Settlement...qp).js

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Settlement_agreement_jsa (qp).js

  • Size

    483KB

  • Sample

    220915-ws8fpahear

  • MD5

    d160076603f0a0dc78fef73f99a2baaa

  • SHA1

    4962be66e6a355048d912be62954a5550ac4c039

  • SHA256

    9b8583a18fc7760407ea39b09c419abc45386863293a19b87a8e19fc07da2606

  • SHA512

    21af0364479f9a72c4c945aa929371e5128d652404b33d31d6a55cf38176d19fd8d9e8e5e248797f398727eae11a4614d26a5ff6c0925149cfcddc39d343a773

  • SSDEEP

    6144:nQnMl5ulaxl4khEfD3xA7Wiagmd4iLAmWR6uNF:TPhEfD3xviagmd4iLAmWR6Q

Score
10/10
gootloaderloader

Malware Config

Targets

    • Target

      Settlement_agreement_jsa (qp).js

    • Size

      483KB

    • MD5

      d160076603f0a0dc78fef73f99a2baaa

    • SHA1

      4962be66e6a355048d912be62954a5550ac4c039

    • SHA256

      9b8583a18fc7760407ea39b09c419abc45386863293a19b87a8e19fc07da2606

    • SHA512

      21af0364479f9a72c4c945aa929371e5128d652404b33d31d6a55cf38176d19fd8d9e8e5e248797f398727eae11a4614d26a5ff6c0925149cfcddc39d343a773

    • SSDEEP

      6144:nQnMl5ulaxl4khEfD3xA7Wiagmd4iLAmWR6uNF:TPhEfD3xviagmd4iLAmWR6Q

    Score
    10/10
    gootloaderloader

    • GootLoader

      JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.

      loadergootloader

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks