General
- Target pa collective agreement pay 97171.js
- Size 1.7MB
- Sample240224-qe4bxsce99
- SHA256 7bb5c830b2cd040909890b724193109190d4419add34f699a270258ba6312363
- MD5 c52249b1f2c2bb883ed9818e640ba7f5
- SHA1 06d23ebcf49ddceb401073e73dcd2ba1258655dc
- SHA512 ce1a93c377de5721babea8e3611ab6bd5f355f6eaa88ea0efb6a0e37de06897107cbbfd0245d8396c9f15445f7784022b41362c7fed291158fe256bdaefc068d
- SSDEEP 12288:Sew6eYbhfw4Y/lz2z+FIE5AlQlDu90TsDJWx5u1xNydLpg8hC6gQl6GfwgqqQkvK:SewIbhfj8uWHu1/wD5HroObm
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
pa collective agreement pay 97171.js
Resource
win10v2004-20240221-en
9 signatures
600 seconds
Malware Config
Targets
-
- Target pa collective agreement pay 97171.js
- Size 1.7MB
- SHA256 7bb5c830b2cd040909890b724193109190d4419add34f699a270258ba6312363
- MD5 c52249b1f2c2bb883ed9818e640ba7f5
- SHA1 06d23ebcf49ddceb401073e73dcd2ba1258655dc
- SHA512 ce1a93c377de5721babea8e3611ab6bd5f355f6eaa88ea0efb6a0e37de06897107cbbfd0245d8396c9f15445f7784022b41362c7fed291158fe256bdaefc068d
- SSDEEP 12288:Sew6eYbhfw4Y/lz2z+FIE5AlQlDu90TsDJWx5u1xNydLpg8hC6gQl6GfwgqqQkvK:SewIbhfj8uWHu1/wD5HroObm
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
GootLoader
JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.
-
Blocklisted process makes network request
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.