Overview

overview

10

Static

static

1

bcnu colle...039.js

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    Bcnu_collective_agreement_vacation_carry_over_84290.zip
  • Size 228KB
  • Sample240111-wpw89addfr
  • SHA256 574f4ee10692132da330dc6df2575260fca20397628e0718bd8ddbc26ffaa84a
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
gootloaderloader

Malware Config

Targets

    • Target
      bcnu collective agreement vacation carry over 51039.js
    • Size 841KB
    • SHA256 7ddc5c4b9f8bbd009a48e42e95c55f53ab30723644847f4aa2800367861ae341
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    gootloaderloader

    • GootLoader

      JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.

      loadergootloader

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks