Overview

overview

10

Static

static

6f5fe53a35...566.js

windows10-1703-x64

10

a79e2f777a...989.js

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    20-september-8035096130.zip

  • Size

    202KB

  • Sample

    220920-t86wpahdek

  • MD5

    475a5eef54c6508674f439f5515d6da6

  • SHA1

    19724c77b403210bc44cc924e9259127522cefe9

  • SHA256

    1a7e1bd7462f72a77512759558d49fc45a777dfa043afed135dadb0786cecc42

  • SHA512

    a05ada300d965fc81a7b856bba31ff14f0fabedddc2bdc4fa25d360efe9166723a0545024c1006650a2a17d5e13bd9907671f033e3714649b439fd60edecfb65

  • SSDEEP

    3072:+dG1b5PYSiZVy2gE8Inan6ApJQN5PiHeIMTX7qVjCOfzVG5i2hDIvWC9CuT6rK:+4NYSB2gE8JGLPiHeICLD4GtDI+C9JJ

Score
10/10
gootloaderloader

Malware Config

Targets

    • Target

      6f5fe53a35e556255d6df96734cffba175d79c21a8bbfd08bb9d97225f503566

    • Size

      483KB

    • MD5

      4f774c3bf5bc71f86d8d12524928418b

    • SHA1

      58220367e9ff9199c69031064db48bbd56225273

    • SHA256

      6f5fe53a35e556255d6df96734cffba175d79c21a8bbfd08bb9d97225f503566

    • SHA512

      d66bb49a58b7f0dbf24d090de92b605833f99eae034c38ee5fa1e01cc8562736834cd602d4b2dbdc01e7a69c14d1379fd199d397775fd7ecaaf20bfa981fe556

    • SSDEEP

      6144:1XQTYjdhculaxl41hEfDdxA7WiagmduiLAmWR6USg:VX5hEfDdxviagmduiLAmWR6s

    Score
    10/10
    gootloaderloader

    • GootLoader

      JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.

      loadergootloader

    • Blocklisted process makes network request

    behavioral1

    • Target

      a79e2f777a0fbeada056d560077fe0283af6c5acc0e9e44fce0fad702b962989

    • Size

      483KB

    • MD5

      886d1e2aa84734964dc9141f58dc7ddf

    • SHA1

      93a1923dc244d4c565588598c0bcc9f285a9a958

    • SHA256

      a79e2f777a0fbeada056d560077fe0283af6c5acc0e9e44fce0fad702b962989

    • SHA512

      bdcbb1fcf6051fa14c2c0a63abb063000335709fc9957ccb72ca5ce313fa5cb3751eeb4fc9187f7a085d41fee771294f0879f8525911555946bcdf05b576389c

    • SSDEEP

      6144:uQ4XjTula/l44hEfD3MA7Wiagmd4iLAmWR6USF:qLhEfD3Mviagmd4iLAmWR6R

    Score
    10/10
    gootloaderloader

    • GootLoader

      JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.

      loadergootloader

    • Blocklisted process makes network request

    behavioral2

MITRE ATT&CK Matrix

Tasks