General
- Target Difference_between_license_agreement_and_concession_agreement_46847.7z
- Size 35KB
- Sample230629-le5grsce82
- SHA256 1d8b7f7ea3f1cdb83824b2d7e4d4e1fefe78ad2621e79e7126edad68703ab658
- MD5 1d6b94b66c39bd3f2009726881551330
- SHA1 bd7aceb88f39eb3f9da4d8155bcec4b9a29f34ab
- SHA512 831b8ef3b9f1fd6cc48c1056c3d759a3c7dea597554000b3468e6b0bcd159645ccda9216610f59c0cbeaafdf580fb2a80862b3948034750aee212aff6aec4d74
- SSDEEP 768:A675fXdg/uodz/MgiUxW9GJHyOqg+kV48irJ9difUjANpYFFOL4kQ:FNt2uodz/MVypnp4T8rpYO
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
difference between license agreement and concession agreement 16581.js
Resource
win7-20230621-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
difference between license agreement and concession agreement 16581.js
Resource
win10v2004-20230621-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target difference between license agreement and concession agreement 16581.js
- Size 160KB
- SHA256 9b3e8591f163538867d5962f7dd1281214ded9184361f431aff7d6bffc6c345a
- MD5 10fcd3a832b51329217273795018a89f
- SHA1 826c928fd35859bc17d81d8ff9ac205cb5455a95
- SHA512 fc6678fa77b50797113e0ea81e1de86ef4d84c408f16df8187901db4901f8019f7a6bbf91a34c764a0938d1c2e5b209550e58020c214f2a67602e764ed22e9e4
- SSDEEP 3072:oAg1kjSdLgjr6y8odCeiu3g0yR63uTO8MSaV6cZGHxeFKQJXecOkC6cbHiHNEku+:oAg1kjSdLgj2y8odLiu3g0yR63uTO8Mh
- MD5 SHA1 SHA512 SSDEEP
Score10/10GootLoader
JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.
Checks computer location settings
Looks up country code configured in the registry, likely geofence.