General

  • Target
    pa collective agreement pay 58692.js
  • Size 8.8MB
  • Sample240519-m7le2afb3w
  • SHA256 8e8c98b0b3f304306d11734bc14c93e14c8b9c3b0f9f44d1df8848e12c4398cc
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      pa collective agreement pay 58692.js
    • Size 8.8MB
    • SHA256 8e8c98b0b3f304306d11734bc14c93e14c8b9c3b0f9f44d1df8848e12c4398cc
    • MD5 SHA1 SHA512 SSDEEP
    • GootLoader

      JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks