General
- Target pa collective agreement pay 67300.js
- Size 3.6MB
- Sample240216-rxft1scb2t
- SHA256 aad5265c00350aff50d8315e50d2894fec97390f4582efc8d658187267e19326
- MD5 eec26517f1327f8e4bd6e6a9c54a0242
- SHA1 7a6bd47dadc7fd023c0f192723ca9a9ff0543b12
- SHA512 c726a8707a3c8ad2cdcab00adf046aba9537ef3e7efe41b23e0fef7d792c19c4a29b22536fc5e1005f3e49193abf2ec7063f43ff05cafa8469a8b341c80d3248
- SSDEEP 49152:Nx3ii6gobYQS3QpOVtFBgiAEn0i2pdl7ggK0FUqaeqNn0i2pdliWtAXiAwyfMtAX:NQpwtFBg8
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
pa collective agreement pay 67300.js
Resource
win10v2004-20231215-en
9 signatures
600 seconds
Malware Config
Targets
-
- Target pa collective agreement pay 67300.js
- Size 3.6MB
- SHA256 aad5265c00350aff50d8315e50d2894fec97390f4582efc8d658187267e19326
- MD5 eec26517f1327f8e4bd6e6a9c54a0242
- SHA1 7a6bd47dadc7fd023c0f192723ca9a9ff0543b12
- SHA512 c726a8707a3c8ad2cdcab00adf046aba9537ef3e7efe41b23e0fef7d792c19c4a29b22536fc5e1005f3e49193abf2ec7063f43ff05cafa8469a8b341c80d3248
- SSDEEP 49152:Nx3ii6gobYQS3QpOVtFBgiAEn0i2pdl7ggK0FUqaeqNn0i2pdliWtAXiAwyfMtAX:NQpwtFBg8
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
GootLoader
JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.
-
Blocklisted process makes network request
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.