Resubmissions

24/04/2024, 03:53

240424-efty4aef5510

24/04/2024, 02:54

240424-ddvxyaed4310

General

  • Target
    sumsj.js
  • Size 12.9MB
  • Sample240424-ddvxyaed43
  • SHA256 ce02817c1a10ba1f49a139db19394fe67b5a1b2485c866d92cc26ef361e0a9d6
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Targets

    • Target
      sumsj.js
    • Size 12.9MB
    • SHA256 ce02817c1a10ba1f49a139db19394fe67b5a1b2485c866d92cc26ef361e0a9d6
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • GootLoader

      JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks