General
- Target MDE_File_Sample_8f78384f9dc97a46c866404cd21c06b7e8be3ea5.zip
- Size 725KB
- Sample240215-rcdtxshb78
- SHA256 12aa67830737600d923dc52cf4245ffbc6366ab9646482580799d6ed715d6767
- MD5 efd5075692741f2eeed10db0ec7ab1ac
- SHA1 1d76ba6501d852c7af364b96b7abebd5e7f34172
- SHA512 f8f6631528ed57bbc74cd8051cfb59b7ba1eaadedc9f5f00e41956abdd3a96c85a416ed7389b4aedc08d6d23aa4a19e0c418a8f129426fe1dca3e995905e1074
- SSDEEP 12288:UWAEO2EufV6DSyzEdh01knkK2rDdAVZSub3dC0/fgyC945nOBvQeF73Uob:Un9iV6DSyAY1YkKpc0/fa9eop5Uob
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
MDE_File_Sample_8f78384f9dc97a46c866404cd21c06b7e8be3ea5.zip
Resource
win10-20240214-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Thomas_telford_school_funding_agreement_45888.zip
Resource
win10-20240214-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
thomas telford school funding agreement 48994.js
Resource
win10-20240214-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target MDE_File_Sample_8f78384f9dc97a46c866404cd21c06b7e8be3ea5.zip
- Size 725KB
- SHA256 12aa67830737600d923dc52cf4245ffbc6366ab9646482580799d6ed715d6767
- MD5 efd5075692741f2eeed10db0ec7ab1ac
- SHA1 1d76ba6501d852c7af364b96b7abebd5e7f34172
- SHA512 f8f6631528ed57bbc74cd8051cfb59b7ba1eaadedc9f5f00e41956abdd3a96c85a416ed7389b4aedc08d6d23aa4a19e0c418a8f129426fe1dca3e995905e1074
- SSDEEP 12288:UWAEO2EufV6DSyzEdh01knkK2rDdAVZSub3dC0/fgyC945nOBvQeF73Uob:Un9iV6DSyAY1YkKpc0/fa9eop5Uob
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target Thomas_telford_school_funding_agreement_45888.zip
- Size 725KB
- SHA256 05b0185115e721dda5074f1a8a323bc19309d86f073bc001c2fb1ddf2d8c3e45
- MD5 9d3e05468fd206a7952612dc3510557b
- SHA1 8f78384f9dc97a46c866404cd21c06b7e8be3ea5
- SHA512 4863724beb6ec89c1c59b7c867cee0cb5bb203c37da5dd126180d689fde41b2b7838a2a06ac80529b32de9a7809c51a730abe0119e1c96222aac475e9e2deada
- SSDEEP 12288:37n3q4qxLBPPG3SCFUCfPH+/0I9xvkoAYImL0ab1MW0+cteomobcVY9Rj5xBJyWS:3L7C4FUyHRQvjvXLZ190TWyLBgxE+gXm
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target thomas telford school funding agreement 48994.js
- Size 3.6MB
- SHA256 926951353ff8f9629ebf61bdef0fc9c3a5e19c16af3aa2a399bc61d593e0a9f5
- MD5 67f92f971bd3a5e552a5c01480b80702
- SHA1 6ce7e6a5b2b311f73538879b3b70bb5106df8368
- SHA512 2b1cfec95084762d718a25bc5829531f0d8400ef493fb44caab82ef01047b88b45b270d4af7cad10162761989cc246f25981fd85f0fd66c4c7e22fe60eb5a7dd
- SSDEEP 49152:Nx3ii6gobYQS3QpOVtFBgiAEn0i2pdlEJgx0GJ+qaeqNn0i2pdliWtAXiAwyfMtO:NQpwtFBgjK
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
GootLoader
JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.