Overview

overview

10

Static

static

1

9ed8a1e468...140.js

windows7-x64

10

9ed8a1e468...140.js

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9ed8a1e46824ec9f06dbd63c5d43c79db62f7c2db3f463156396f2acab927140

  • Size

    9.9MB

  • Sample

    240529-z4qlssab2y

  • MD5

    50d8be57ade9dfef0d88ceebaed045e7

  • SHA1

    88925bcacd1a933e0be0d9b4c7c5c39cb778615b

  • SHA256

    9ed8a1e46824ec9f06dbd63c5d43c79db62f7c2db3f463156396f2acab927140

  • SHA512

    cd78210384b12978fe4712e1ae137a7a941718caa478b42a51bdf45995ce05369469f8e7dafbb2f77eded67eb77867b76913d0bf7f44b2a3316994b3431fdead

  • SSDEEP

    49152:jytwpCQK+qFytwpCQK+qFytwpCQK+qFytwpCQK+qFytwpCQK+qFytwpCQK+qFytl:m

Score
10/10
gootloaderexecutionloader

Malware Config

Targets

    • Target

      9ed8a1e46824ec9f06dbd63c5d43c79db62f7c2db3f463156396f2acab927140

    • Size

      9.9MB

    • MD5

      50d8be57ade9dfef0d88ceebaed045e7

    • SHA1

      88925bcacd1a933e0be0d9b4c7c5c39cb778615b

    • SHA256

      9ed8a1e46824ec9f06dbd63c5d43c79db62f7c2db3f463156396f2acab927140

    • SHA512

      cd78210384b12978fe4712e1ae137a7a941718caa478b42a51bdf45995ce05369469f8e7dafbb2f77eded67eb77867b76913d0bf7f44b2a3316994b3431fdead

    • SSDEEP

      49152:jytwpCQK+qFytwpCQK+qFytwpCQK+qFytwpCQK+qFytwpCQK+qFytwpCQK+qFytl:m

    Score
    10/10
    gootloaderexecutionloader

    • GootLoader

      JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.

      loadergootloader

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks