General
- Target cde69e630a95af5d7ce0445c10534bc8-sample.zip
- Size 6.3MB
- Sample240405-12qz8aee49
- SHA256 2c84d62d067a3abd72485d759dff184aee864fa6b6015c557834f331766be14b
- MD5 4c347279aacd32331ed649ba33261ce7
- SHA1 984ea03f001ab3be29a5217acaeea91368bf97c1
- SHA512 9f1df8450138708d0df866cefe24bc735db4df82542657475673fe1c1275f5005e100cf4cb75c488d5cfecfd89822456b6b40e85deaac37fcc3af7ffc996a3fe
- SSDEEP 196608:u3WFozDiCo2hArkLhRHrCCouoqhF1RENO98C1l6/kcvYrYU:LoXfo2hDrCCozm798CSlYcU
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
california law on heating in rented property 57920.js
Resource
win7-20231129-en
5 signatures
1800 seconds
Behavioral task
behavioral2
Sample
california law on heating in rented property 57920.js
Resource
win10v2004-20240226-en
9 signatures
1800 seconds
Malware Config
Targets
-
- Target california law on heating in rented property 57920.js
- Size 28.9MB
- SHA256 faa386a653305f00e34bcd94511480b809b221ebf7205319578ef4ec9c050605
- MD5 6549d39c02c70808198741b87b6aec8d
- SHA1 8a2d9af6453338427b63cd9f7e3020f37ac1aa73
- SHA512 8d6f83edec2082e99aa02fb47964828c2d6b0a2e26016720dbbd64430e45c37499a3224c7fdb7f14c679dfc0a68431e0460e4600c969fbdb523a099ef188f839
- SSDEEP 49152:v7BZzjCxbgqHlpRwVON0kLhG5JizUYzYBGZP+8Hzm3nI/NlHGy/R3qy/a7gbcEOI:2
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
GootLoader
JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.
-
Blocklisted process makes network request
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.