General
-
Target
pa collective agreement pay 48495.js
-
Size
6.6MB
-
Sample
240525-n6pazahc37
-
MD5
2849d3933ec7151c700658f88b394697
-
SHA1
646ef3ab09d88b11149c4c7c87fd5f3aa37819d6
-
SHA256
e5391d5bb4636c7ae31e60e7765b774260ece20b76dfece36a64e05523f8ccce
-
SHA512
f029296d5fc33b4ecceda10cdc033fd96601ccd53a1541f86e821d78b0034decf1afef3db1907c4ac6032b6813ba11150fbdad33fb2054bcbf09cba926630c66
-
SSDEEP
49152:uytwpCQK+z4ytwpCQK+z4ytwpCQK+z4ytwpCQK+z4ytwpCQK+z4ytwpCQK+zp:h
Static task
static1
Behavioral task
behavioral1
Sample
pa collective agreement pay 48495.js
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
pa collective agreement pay 48495.js
-
Size
6.6MB
-
MD5
2849d3933ec7151c700658f88b394697
-
SHA1
646ef3ab09d88b11149c4c7c87fd5f3aa37819d6
-
SHA256
e5391d5bb4636c7ae31e60e7765b774260ece20b76dfece36a64e05523f8ccce
-
SHA512
f029296d5fc33b4ecceda10cdc033fd96601ccd53a1541f86e821d78b0034decf1afef3db1907c4ac6032b6813ba11150fbdad33fb2054bcbf09cba926630c66
-
SSDEEP
49152:uytwpCQK+z4ytwpCQK+z4ytwpCQK+z4ytwpCQK+z4ytwpCQK+z4ytwpCQK+zp:h
Score10/10-
GootLoader
JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.
-
Blocklisted process makes network request
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-