Overview

overview

10

Static

static

1

pa collect...294.js

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    pa collective agreement pay 95294.js

  • Size

    11.0MB

  • Sample

    240603-qq6anahd44

  • MD5

    c1d3483fbffc6d3087679895de921916

  • SHA1

    3226fb2eb8456a8b484cf0ade2f83d023e886657

  • SHA256

    d778fded9742121cb0fdf292b1ac51857be0c9704ee5c9855e591582201f9171

  • SHA512

    68277181d89343f4df74167495528a6b54e8c76675111eefe7f2ca1fa190b31c0723a09e1701c4ca307a9333ccaea25bb53d15053a7feb4af78e611f5253287b

  • SSDEEP

    49152:CytwpCQK+DkytwpCQK+DkytwpCQK+DkytwpCQK+DkytwpCQK+DkytwpCQK+DkytZ:h

Score
10/10
gootloaderexecutionloader

Malware Config

Targets

    • Target

      pa collective agreement pay 95294.js

    • Size

      11.0MB

    • MD5

      c1d3483fbffc6d3087679895de921916

    • SHA1

      3226fb2eb8456a8b484cf0ade2f83d023e886657

    • SHA256

      d778fded9742121cb0fdf292b1ac51857be0c9704ee5c9855e591582201f9171

    • SHA512

      68277181d89343f4df74167495528a6b54e8c76675111eefe7f2ca1fa190b31c0723a09e1701c4ca307a9333ccaea25bb53d15053a7feb4af78e611f5253287b

    • SSDEEP

      49152:CytwpCQK+DkytwpCQK+DkytwpCQK+DkytwpCQK+DkytwpCQK+DkytwpCQK+DkytZ:h

    Score
    10/10
    gootloaderexecutionloader

    • GootLoader

      JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.

      loadergootloader

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks