General

  • Target

    is it legal to pan for gold in georgia 53961.js

  • Size

    9.9MB

  • Sample

    240518-byn9sadh73

  • MD5

    54ec9e1d29608f6d5e3090e90ac38a15

  • SHA1

    06e376d1778623aafa5ffec261b8e8be10a48ddd

  • SHA256

    a23dd0d4665be9c9064bfd377abd005651c1cdb9238c8d798283ac9caa638f91

  • SHA512

    017bed8be12bcb1753b9f238a1cba5ab9862efeeb9ff739ffe71df07db7b27899d8e48a573272582493cdeab44deebc8d1252ba03de6f903e7e7e6be85a3d3d6

  • SSDEEP

    49152:fiytwpCQK+TBiytwpCQK+TBiytwpCQK+TBiytwpCQK+TBiytwpCQK+TBiytwpCQE:fGGGGGGGGO

Malware Config

Targets

    • Target

      is it legal to pan for gold in georgia 53961.js

    • Size

      9.9MB

    • MD5

      54ec9e1d29608f6d5e3090e90ac38a15

    • SHA1

      06e376d1778623aafa5ffec261b8e8be10a48ddd

    • SHA256

      a23dd0d4665be9c9064bfd377abd005651c1cdb9238c8d798283ac9caa638f91

    • SHA512

      017bed8be12bcb1753b9f238a1cba5ab9862efeeb9ff739ffe71df07db7b27899d8e48a573272582493cdeab44deebc8d1252ba03de6f903e7e7e6be85a3d3d6

    • SSDEEP

      49152:fiytwpCQK+TBiytwpCQK+TBiytwpCQK+TBiytwpCQK+TBiytwpCQK+TBiytwpCQE:fGGGGGGGGO

    • GootLoader

      JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks