Overview

overview

10

Static

static

1

MATHEM~1.js

windows7-x64

10

MATHEM~1.js

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    MATHEM~1.JS
  • Size 39.7MB
  • Sample240312-ljpbcafe77
  • SHA256 17a3d5b53bf83cd336efc8e45f080fab13735e0806e0af8f0e542acc04e0a4fe
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
gootloaderloader

Malware Config

Targets

    • Target
      MATHEM~1.JS
    • Size 39.7MB
    • SHA256 17a3d5b53bf83cd336efc8e45f080fab13735e0806e0af8f0e542acc04e0a4fe
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    gootloaderloader

    • GootLoader

      JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.

      loadergootloader

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks