Overview

overview

10

Static

static

1

pa collect...574.js

windows10-2004-x64

10

Resubmissions

17-07-2024 20:01

240717-yr1qkawfkp 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    pa collective agreement pay 21574.js

  • Size

    4.4MB

  • Sample

    240605-pqxsvagc64

  • MD5

    ca8b85cc76257b18d1a991a4cacc8a92

  • SHA1

    cde314a8b94168195210e6c41ac679e289c141c4

  • SHA256

    9bc7e91a019211cdb07ba42c1432c10d4ae0bfbeaaf843f13bad37c137dfc8d7

  • SHA512

    9c7acb647f136ba034f58851fa82096ab28737acd164d25c5e28767a76db40b8229e311a60dd79062e442a98373f90bf69f2ed618592d1dab5c81ed5b51f19c8

  • SSDEEP

    49152:yQytwpCQK+AYQytwpCQK+AYQytwpCQK+AYQytwpCQK+Ap:y444J

Score
10/10
gootloaderexecutionloader

Malware Config

Targets

    • Target

      pa collective agreement pay 21574.js

    • Size

      4.4MB

    • MD5

      ca8b85cc76257b18d1a991a4cacc8a92

    • SHA1

      cde314a8b94168195210e6c41ac679e289c141c4

    • SHA256

      9bc7e91a019211cdb07ba42c1432c10d4ae0bfbeaaf843f13bad37c137dfc8d7

    • SHA512

      9c7acb647f136ba034f58851fa82096ab28737acd164d25c5e28767a76db40b8229e311a60dd79062e442a98373f90bf69f2ed618592d1dab5c81ed5b51f19c8

    • SSDEEP

      49152:yQytwpCQK+AYQytwpCQK+AYQytwpCQK+AYQytwpCQK+Ap:y444J

    Score
    10/10
    gootloaderexecutionloader

    • GootLoader

      JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.

      loadergootloader

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks