General
- Target pa collective agreement pay 26049.js
- Size 3.6MB
- Sample240214-raz95sce5w
- SHA256 577cca30e1a97e5f09fb8477f97a84fb7619b81729033a008043afc4333cd9bb
- MD5 d39aea6e40faa413dfbac96ea38c873b
- SHA1 52ed74003c7a9bc5890146560d54a26746500f0e
- SHA512 b109ab17fe2f13910e5496abb40938af74fedebde3fe9b28b930fe208d79e94326697c3a95e7ab913a378c03291fe599973e98d954d8b902648826c3335ce50f
- SSDEEP 49152:Nx3ii6gobYQS3QpOVtFBgiAEn0i2pdl36gD0o0lqaeqNn0i2pdliWtAXiAwyfMtO:NQpwtFBgd4
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
pa collective agreement pay 26049.js
Resource
win10v2004-20231215-en
9 signatures
600 seconds
Malware Config
Targets
-
- Target pa collective agreement pay 26049.js
- Size 3.6MB
- SHA256 577cca30e1a97e5f09fb8477f97a84fb7619b81729033a008043afc4333cd9bb
- MD5 d39aea6e40faa413dfbac96ea38c873b
- SHA1 52ed74003c7a9bc5890146560d54a26746500f0e
- SHA512 b109ab17fe2f13910e5496abb40938af74fedebde3fe9b28b930fe208d79e94326697c3a95e7ab913a378c03291fe599973e98d954d8b902648826c3335ce50f
- SSDEEP 49152:Nx3ii6gobYQS3QpOVtFBgiAEn0i2pdl36gD0o0lqaeqNn0i2pdliWtAXiAwyfMtO:NQpwtFBgd4
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
GootLoader
JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.
-
Blocklisted process makes network request
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.