General
- Target 30102023_2200_verb agreement with multiple subjects 15954.zip
- Size 45KB
- Sample231030-rbae4sfc25
- SHA256 5f3ba1376f068e2dcc5e3a1c630e96fb6d6993f32d135ce63746836c0c3aae6a
- MD5 4d7bd55ffe241a4fa7923e33eec20c03
- SHA1 527cc1d63b6f4356f05620db80c23f1700b9094b
- SHA512 c797ebae81d3f5c25be1d445cb9b471d2b99dbad5d167bfd483f897471e2a4aee99342ea65677cb95fd2ef66b6d05249424815bce4ce948074b1bdb09ef3b97f
- SSDEEP 768:6pfucs3tUtiMs/0f5XXvvltuOav28OYj6pDt8jFzEELFXbffUPiXaJLJAUa:6RuXtUsMs/QX/z1avjat8jGELxffUsau
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
verb agreement with multiple subjects 15954.js
Resource
win7-20231023-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
verb agreement with multiple subjects 15954.js
Resource
win10v2004-20231023-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target verb agreement with multiple subjects 15954.js
- Size 133KB
- SHA256 7f3a2d43241a08b0d948d148f7b55fb867ff1b1b3220a631ec552ddf283410d7
- MD5 c6c94e2c29c80162826d950187a6a4cf
- SHA1 67c7ba4cb65f5a27338d892057ced6922f769a9d
- SHA512 d16a857d7a6f95b9708b3d94c184cb40af159d7c978789a5a07727d397aca66cda7921e0de3b385e35f23657f685b8629aa4469aa314df6810b8d79de2cc695a
- SSDEEP 3072:2LZVHVLxcC5uPTbRb8dF4Cx+SEzKm2yLbWZ8v3TiqJ/16zoKSC/Cf4Z61q:2LvpBL4CQ2oWZ8fTfJ/1oxb61q
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
GootLoader
JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.