Overview

overview

10

Static

static

1

sumsj.js

windows10-1703-x64

10

sumsj.js

windows10-2004-x64

10

sumsj.js

windows11-21h2-x64

10

Resubmissions

24/04/2024, 03:53

240424-efty4aef5510

24/04/2024, 02:54

240424-ddvxyaed4310

Sharing

Copy URL Twitter E-mail

General

  • Target
    sumsj.js
  • Size 12.9MB
  • Sample240424-efty4aef55
  • SHA256 ce02817c1a10ba1f49a139db19394fe67b5a1b2485c866d92cc26ef361e0a9d6
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
gootloaderloader

Malware Config

Targets

    • Target
      sumsj.js
    • Size 12.9MB
    • SHA256 ce02817c1a10ba1f49a139db19394fe67b5a1b2485c866d92cc26ef361e0a9d6
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    gootloaderloader

    • GootLoader

      JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.

      loadergootloader

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2behavioral3

MITRE ATT&CK Enterprise v15

Tasks