Overview

overview

10

Static

static

Travelers_...pk).js

windows7-x64

8

Travelers_...pk).js

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    15-Travelers waiver of probate and agreement of indemnity exhibit c (67184).zip.7z
  • Size 98KB
  • Sample221012-qlgrhadfbq
  • SHA256 c254d2ade6ce2ec380c69d7efcc2ebb64a533eb2c8cd8714b8c091a983477bc1
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
gootloaderloader

Malware Config

Targets

    • Target
      Travelers_waiver_of_probate_and_agreement_of_indemnity_exhibit_c (mfypk).js
    • Size 483KB
    • SHA256 9e3100fd0ce07054eb636321f1f148e29d3fce123f52707ec46a7030472cdca0
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    gootloaderloader

    • GootLoader

      JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.

      loadergootloader

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks