General
-
Target
sumsj.js
-
Size
12.9MB
-
Sample
240424-ddvxyaed43
-
MD5
413da71d07370c4579943cc5dfb074e3
-
SHA1
cdb7f3c1d61c9c61b61a835a17f4b79402199e05
-
SHA256
ce02817c1a10ba1f49a139db19394fe67b5a1b2485c866d92cc26ef361e0a9d6
-
SHA512
afbf8142ced6f01a05b4eb34a5845e73a8be356555ab686e4fc3291a6b93838f989ac25e2009ffe08bb46ae36a05ab0231d95f64bb741c7d6438483f2778fe58
-
SSDEEP
49152:C7BfzjCxbqqHlp4rHfN0MNhzoNszsYzYBgE5+85R33uK/zp+GiR93quKLagucEP6:H
Static task
static1
Behavioral task
behavioral1
Sample
sumsj.js
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
sumsj.js
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
sumsj.js
-
Size
12.9MB
-
MD5
413da71d07370c4579943cc5dfb074e3
-
SHA1
cdb7f3c1d61c9c61b61a835a17f4b79402199e05
-
SHA256
ce02817c1a10ba1f49a139db19394fe67b5a1b2485c866d92cc26ef361e0a9d6
-
SHA512
afbf8142ced6f01a05b4eb34a5845e73a8be356555ab686e4fc3291a6b93838f989ac25e2009ffe08bb46ae36a05ab0231d95f64bb741c7d6438483f2778fe58
-
SSDEEP
49152:C7BfzjCxbqqHlp4rHfN0MNhzoNszsYzYBgE5+85R33uK/zp+GiR93quKLagucEP6:H
Score10/10-
GootLoader
JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.
-
Blocklisted process makes network request
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-