Resubmissions

12/02/2024, 14:31

240212-rvse2aga7z 10

12/02/2024, 14:15

240212-rkhsvahd58 10

General

  • Target

    pa collective agreement pay 24448.js

  • Size

    3.6MB

  • Sample

    240212-rkhsvahd58

  • MD5

    6314e5e6e94aa922e252e8adc30f551b

  • SHA1

    a81fc5389d61fc35daa35c15d9ec3c72a9d11917

  • SHA256

    c8f47dbfc46c2878f96ece788de84672b1d2b230721c3cd577c5b39071cb1070

  • SHA512

    2aeaefa9ea6b2a95f6dbb9d4a05e028c1ad031a07349088e05617f18b14ac7254c89ae41aa6edea4f27b279f451506ae49cc10170c75744442613df3654b0790

  • SSDEEP

    49152:Nx3ii6gobYQS3QpOVtFBgiAEn0i2pdl8rgx0pPqaeqNn0i2pdliWtAXiAwyfMtAX:NQpwtFBgY

Score
10/10

Malware Config

Targets

    • Target

      pa collective agreement pay 24448.js

    • Size

      3.6MB

    • MD5

      6314e5e6e94aa922e252e8adc30f551b

    • SHA1

      a81fc5389d61fc35daa35c15d9ec3c72a9d11917

    • SHA256

      c8f47dbfc46c2878f96ece788de84672b1d2b230721c3cd577c5b39071cb1070

    • SHA512

      2aeaefa9ea6b2a95f6dbb9d4a05e028c1ad031a07349088e05617f18b14ac7254c89ae41aa6edea4f27b279f451506ae49cc10170c75744442613df3654b0790

    • SSDEEP

      49152:Nx3ii6gobYQS3QpOVtFBgiAEn0i2pdl8rgx0pPqaeqNn0i2pdliWtAXiAwyfMtAX:NQpwtFBgY

    Score
    10/10
    • GootLoader

      JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks