Overview

overview

10

Static

static

1

Are_serval...74.zip

windows10-2004-x64

1

are serval...069.js

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    Are_serval_cats_legal_in_texas_33574.zip
  • Size 1.9MB
  • Sample240503-tf93msde53
  • SHA256 d4bc24b7dfe2ed6a5f08ca58ad731da5773a31a38f7357cf6bb02bb3145be589
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
gootloaderexecutionloader

Malware Config

Targets

    • Target
      Are_serval_cats_legal_in_texas_33574.zip
    • Size 1.9MB
    • SHA256 d4bc24b7dfe2ed6a5f08ca58ad731da5773a31a38f7357cf6bb02bb3145be589
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral1
    • Target
      are serval cats legal in texas 97069.js
    • Size 7.7MB
    • SHA256 29c23cd3a5d7d9b67f3ccca1dc7e11b390ee76bbb821eac2e91d3d8b1d5979fc
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    gootloaderexecutionloader

    • GootLoader

      JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.

      loadergootloader

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral2

MITRE ATT&CK Enterprise v15

Tasks