Overview

overview

10

Static

static

1

pa collect...765.js

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    pa collective agreement pay 65765.js

  • Size

    8.8MB

  • Sample

    240602-q5b1cseh23

  • MD5

    94c6bf75759e9cc731a48b702e1b2e47

  • SHA1

    e23adcee4cb9312bdd251b3f9ab8933f188ab1e0

  • SHA256

    17e92a35ed0c11258bb6067fc55d799f51fa4f3502979d6a60518c8d9247d643

  • SHA512

    c5fe4861d5179bdf3cc7c8ea20b58dc0e7beb65239f206b463c88587b79baf69d677824b73c944b6052144298bbd1cb4d07166344b884faa1d17ebec162b3ce8

  • SSDEEP

    49152:TytwpCQK+3BytwpCQK+3BytwpCQK+3BytwpCQK+3BytwpCQK+3BytwpCQK+3BytM:X

Score
10/10
gootloaderexecutionloader

Malware Config

Targets

    • Target

      pa collective agreement pay 65765.js

    • Size

      8.8MB

    • MD5

      94c6bf75759e9cc731a48b702e1b2e47

    • SHA1

      e23adcee4cb9312bdd251b3f9ab8933f188ab1e0

    • SHA256

      17e92a35ed0c11258bb6067fc55d799f51fa4f3502979d6a60518c8d9247d643

    • SHA512

      c5fe4861d5179bdf3cc7c8ea20b58dc0e7beb65239f206b463c88587b79baf69d677824b73c944b6052144298bbd1cb4d07166344b884faa1d17ebec162b3ce8

    • SSDEEP

      49152:TytwpCQK+3BytwpCQK+3BytwpCQK+3BytwpCQK+3BytwpCQK+3BytwpCQK+3BytM:X

    Score
    10/10
    gootloaderexecutionloader

    • GootLoader

      JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.

      loadergootloader

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks