General

  • Target
    pa collective agreement pay 49470.js
  • Size 840KB
  • Sample240124-rnpesscdgj
  • SHA256 dd8fff0f11ef6b1c16507c348d6d424fb0cd9635d1f5da917c3ef4ee56831432
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Targets

    • Target
      pa collective agreement pay 49470.js
    • Size 840KB
    • SHA256 dd8fff0f11ef6b1c16507c348d6d424fb0cd9635d1f5da917c3ef4ee56831432
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • GootLoader

      JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks