General
- Target 193463d447dec8fe81001a909aeefbe810d916276f6c62d2ae2cdc2cd8d86eaa.js
- Size 7.7MB
- Sample240508-p52eksga43
- SHA256 193463d447dec8fe81001a909aeefbe810d916276f6c62d2ae2cdc2cd8d86eaa
- MD5 0eb066f65aa3d18672949aa983266f22
- SHA1 e96454cc5aa7adc2f88845ad82b593676c2a41db
- SHA512 b6c602c7b04ea64b6669a6944b38991b1df1647f216bfdb1083308a73d7d3aef3b4361137954dc795eb47e7db215faf8d891c4965a65d64ead215e033b3ead6b
- SSDEEP 49152:s9ytwpCQK+fm9ytwpCQK+fm9ytwpCQK+fm9ytwpCQK+fm9ytwpCQK+fm9ytwpCQY:m
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
193463d447dec8fe81001a909aeefbe810d916276f6c62d2ae2cdc2cd8d86eaa.js
Resource
win7-20240221-en
6 signatures
300 seconds
Behavioral task
behavioral2
Sample
193463d447dec8fe81001a909aeefbe810d916276f6c62d2ae2cdc2cd8d86eaa.js
Resource
win10v2004-20240226-en
10 signatures
300 seconds
Malware Config
Targets
-
- Target 193463d447dec8fe81001a909aeefbe810d916276f6c62d2ae2cdc2cd8d86eaa.js
- Size 7.7MB
- SHA256 193463d447dec8fe81001a909aeefbe810d916276f6c62d2ae2cdc2cd8d86eaa
- MD5 0eb066f65aa3d18672949aa983266f22
- SHA1 e96454cc5aa7adc2f88845ad82b593676c2a41db
- SHA512 b6c602c7b04ea64b6669a6944b38991b1df1647f216bfdb1083308a73d7d3aef3b4361137954dc795eb47e7db215faf8d891c4965a65d64ead215e033b3ead6b
- SSDEEP 49152:s9ytwpCQK+fm9ytwpCQK+fm9ytwpCQK+fm9ytwpCQK+fm9ytwpCQK+fm9ytwpCQY:m
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
GootLoader
JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.
-
Blocklisted process makes network request
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.