Overview

overview

10

Static

static

1

co-trustee...445.js

windows7-x64

3

co-trustee...445.js

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    8e99bdf3c7257e5ba99d55e995d1974836d563c30f77843ba2e8a0dcb70d17a1.zip
  • Size 4.9MB
  • Sample240403-by7fcscb56
  • SHA256 8e99bdf3c7257e5ba99d55e995d1974836d563c30f77843ba2e8a0dcb70d17a1
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
gootloaderloader

Malware Config

Targets

    • Target
      co-trustee delegation agreement 66445.js
    • Size 22.5MB
    • SHA256 1aeea9f11766b43172a31323560f1198647e219aaa8ba332aabc8e27c59fa07b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    gootloaderloader

    • GootLoader

      JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.

      loadergootloader

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks