Overview

overview

10

Static

static

1

Gst_on_ser...14.zip

windows7-x64

1

Gst_on_ser...14.zip

windows10-2004-x64

1

gst on ser...317.js

windows7-x64

3

gst on ser...317.js

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    MDE_File_Sample_091938251975e3c394cbd4bc8361ff0e6eaa56a6.zip
  • Size 270KB
  • Sample240312-k5f2esfb73
  • SHA256 a2b7af2875c738b09e0765bf0d8175e9d7af4bfb75e0b5b45d7a56bd6bc70c7b
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
gootloaderloader

Malware Config

Targets

    • Target
      Gst_on_services_provided_to_foreign_company_in_india_37714.zip
    • Size 270KB
    • SHA256 c5fa3bd37b1212f5043bcac7631b6534152c40e50a9b64a96c666565b79ec3ec
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral1behavioral2
    • Target
      gst on services provided to foreign company in india 89317.js
    • Size 1.7MB
    • SHA256 f47c5cf098750c861b5745b173448a43918b55aa6759b47ccbdcf2a901eda40c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    gootloaderloader

    • GootLoader

      JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.

      loadergootloader

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks