Resubmissions

18-06-2024 12:51

240618-p3pb8syclm 10

18-06-2024 12:36

240618-ps1yaatdnb 10

General

  • Target

    pa collective agreement pay 44189.js

  • Size

    18.5MB

  • Sample

    240618-ps1yaatdnb

  • MD5

    9a85a58f8b7f117cf590d03a2ff14b38

  • SHA1

    c813b5ef1649cda4da12a2c2ada177756695549c

  • SHA256

    39e57f888df18a927d66ea343badddd691952fafa1625a01497be903de381750

  • SHA512

    03a7b10c5156d8643e8d84e9d7278658e9bf7dc01067d3cf649802da872bbd3f093bd9f9727a4ec4185a890ece15ab9e78b4258b5cba493fbb659baec8be9027

  • SSDEEP

    49152:RU508dPXWR4ba/JOtdF5pHE2lsfiaahM3o43ORV59VDKtDOU508dPXWR4ba/JOtZ:5c43mPc43mPc43mPc43ml

Malware Config

Targets

    • Target

      pa collective agreement pay 44189.js

    • Size

      18.5MB

    • MD5

      9a85a58f8b7f117cf590d03a2ff14b38

    • SHA1

      c813b5ef1649cda4da12a2c2ada177756695549c

    • SHA256

      39e57f888df18a927d66ea343badddd691952fafa1625a01497be903de381750

    • SHA512

      03a7b10c5156d8643e8d84e9d7278658e9bf7dc01067d3cf649802da872bbd3f093bd9f9727a4ec4185a890ece15ab9e78b4258b5cba493fbb659baec8be9027

    • SSDEEP

      49152:RU508dPXWR4ba/JOtdF5pHE2lsfiaahM3o43ORV59VDKtDOU508dPXWR4ba/JOtZ:5c43mPc43mPc43mPc43ml

    • GootLoader

      JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Matrix ATT&CK v13

Execution

Command and Scripting Interpreter

1
T1059

JavaScript

1
T1059.007

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Tasks