Overview

overview

10

Static

static

1

a23dd0d466...f91.js

windows7-x64

10

a23dd0d466...f91.js

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a23dd0d4665be9c9064bfd377abd005651c1cdb9238c8d798283ac9caa638f91.js

  • Size

    9.9MB

  • Sample

    240519-kpmt2aba4t

  • MD5

    54ec9e1d29608f6d5e3090e90ac38a15

  • SHA1

    06e376d1778623aafa5ffec261b8e8be10a48ddd

  • SHA256

    a23dd0d4665be9c9064bfd377abd005651c1cdb9238c8d798283ac9caa638f91

  • SHA512

    017bed8be12bcb1753b9f238a1cba5ab9862efeeb9ff739ffe71df07db7b27899d8e48a573272582493cdeab44deebc8d1252ba03de6f903e7e7e6be85a3d3d6

  • SSDEEP

    49152:fiytwpCQK+TBiytwpCQK+TBiytwpCQK+TBiytwpCQK+TBiytwpCQK+TBiytwpCQE:fGGGGGGGGO

Score
10/10
gootloaderexecutionloader

Malware Config

Targets

    • Target

      a23dd0d4665be9c9064bfd377abd005651c1cdb9238c8d798283ac9caa638f91.js

    • Size

      9.9MB

    • MD5

      54ec9e1d29608f6d5e3090e90ac38a15

    • SHA1

      06e376d1778623aafa5ffec261b8e8be10a48ddd

    • SHA256

      a23dd0d4665be9c9064bfd377abd005651c1cdb9238c8d798283ac9caa638f91

    • SHA512

      017bed8be12bcb1753b9f238a1cba5ab9862efeeb9ff739ffe71df07db7b27899d8e48a573272582493cdeab44deebc8d1252ba03de6f903e7e7e6be85a3d3d6

    • SSDEEP

      49152:fiytwpCQK+TBiytwpCQK+TBiytwpCQK+TBiytwpCQK+TBiytwpCQK+TBiytwpCQE:fGGGGGGGGO

    Score
    10/10
    gootloaderexecutionloader

    • GootLoader

      JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.

      loadergootloader

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks