General
- Target pa collective agreement pay 49470.js
- Size 840KB
- Sample240124-rnpesscdgj
- SHA256 dd8fff0f11ef6b1c16507c348d6d424fb0cd9635d1f5da917c3ef4ee56831432
- MD5 f2edfdf0a93aefa588078e307b24dbca
- SHA1 ad1485f8a60bd09dbc863839df741bbc73a48d43
- SHA512 cdbb7a81a81e9a2c87fc2d65b5372c37bcf24df1e03373e148ec815db50aa5470d6f519e944e4b8f93ef72baa0a965bb349df5a600aa1c7023cdfe415c5dc684
- SSDEEP 24576:JSCgo+ogQc5WfNnZmD/nLLzqJHJegkeE7aWpyQTaEFNE3NEr:JSCgo+ogQc5WfNnZmD/nvzqJ052WpyQd
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
pa collective agreement pay 49470.js
Resource
win10v2004-20231215-en
9 signatures
600 seconds
Malware Config
Targets
-
- Target pa collective agreement pay 49470.js
- Size 840KB
- SHA256 dd8fff0f11ef6b1c16507c348d6d424fb0cd9635d1f5da917c3ef4ee56831432
- MD5 f2edfdf0a93aefa588078e307b24dbca
- SHA1 ad1485f8a60bd09dbc863839df741bbc73a48d43
- SHA512 cdbb7a81a81e9a2c87fc2d65b5372c37bcf24df1e03373e148ec815db50aa5470d6f519e944e4b8f93ef72baa0a965bb349df5a600aa1c7023cdfe415c5dc684
- SSDEEP 24576:JSCgo+ogQc5WfNnZmD/nLLzqJHJegkeE7aWpyQTaEFNE3NEr:JSCgo+ogQc5WfNnZmD/nvzqJ052WpyQd
- MD5 SHA1 SHA512 SSDEEP
Score10/10GootLoader
JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.
Blocklisted process makes network request
Checks computer location settings
Looks up country code configured in the registry, likely geofence.