Resubmissions

29/05/2024, 20:45

240529-zjph1aab2410

27/05/2024, 12:20

240527-phzbpsbf6t10

General

  • Target
    pa collective agreement pay 4276.js
  • Size 9.9MB
  • Sample240527-phzbpsbf6t
  • SHA256 9ed8a1e46824ec9f06dbd63c5d43c79db62f7c2db3f463156396f2acab927140
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      pa collective agreement pay 4276.js
    • Size 9.9MB
    • SHA256 9ed8a1e46824ec9f06dbd63c5d43c79db62f7c2db3f463156396f2acab927140
    • MD5 SHA1 SHA512 SSDEEP
    • GootLoader

      JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks