General

  • Target
    Pa_collective_agreement_pay_67803.zip
  • Size 228KB
  • Sample240131-qw2vesdcc2
  • SHA256 df96b93fc7c52327665ff8427d154a2b5217cd303bb88328ee399bcf2c2d0931
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Targets

    • Target
      pa collective agreement pay 24715.js
    • Size 842KB
    • SHA256 54687c4159e816ac1e2ee3d6cde53e6c7ce7360cd0c82d6bcefc64d2876cc59c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • GootLoader

      JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks