General
- Target 29042024_0926_Requirements_for_nc3_renewal_26062.zip
- Size 7.0MB
- Sample240429-btyyesef6s
- SHA256 47d9516aed0f18aa2ddff05bca814193e3f94dc786b17c0faf3221dab06399a9
- MD5 e203be00c62654978f6285c5e270af86
- SHA1 e4f001c219f2e83e144a39bd9b974a57270cb51c
- SHA512 93d8294ac3db35815771492d361e4c131c6ada07a45b69614031002517ab210274eef49e16ca406e6af30d7d3bcef9eb275c81165d5c9fbe1c149d883417974a
- SSDEEP 98304:4EDRLDNkkMW8O9Xb1XLekaKa9VOkpQsMXl/RN/56Tg5kZSujaK3Iz4oTXNY:dRLjZ9L1XqkWV1p4xSq4P
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
requirements for nc3 renewal 99344.js
Resource
win7-20240221-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
requirements for nc3 renewal 99344.js
Resource
win10v2004-20240419-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target requirements for nc3 renewal 99344.js
- Size 32.2MB
- SHA256 2ecf36346572fdf6842f5ae5f15245948fb5a0d580092630c40fc73ac302b860
- MD5 fa420a05d4a433b20e9b6d5b4b397851
- SHA1 04266f28dc45984ba3a6951f139b153b8b5020ff
- SHA512 fa926931b4afcb8af1ec505f3f48512d2188b177307833ff41018c4125ee014ed45ccd26cfb05a71a4b69acde82826bb3fcc9641680a50074c7aacd73a3145f3
- SSDEEP 49152:u74WzjCxb4qHlp4ihrN0qOhRektz0YzYB7jB+8l3m33E/mJRG6dO3qWAxegicEbt:d
- MD5 SHA1 SHA512 SSDEEP
Score10/10GootLoader
JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.
Checks computer location settings
Looks up country code configured in the registry, likely geofence.