General

  • Target

    pa collective agreement pay 90187.js

  • Size

    13.9MB

  • Sample

    240621-p546gavalp

  • MD5

    dbf0b40fe1c4a164458b2d7bdc2986ca

  • SHA1

    5d4784a28643532902824d7087b7618936fcff91

  • SHA256

    2daecff5a57a5233b1f662aac82cc8b3d5f3997df46d27e8dd444a8c371b2e5e

  • SHA512

    bb0bc6c3ef92b313ff6a81c98c7eed8c22f54931f557d819a36cb71b25d65f13b4936f94afdc9d0040fa28afaaed1b8d5beb93897b43f1352df77bae57cb81f6

  • SSDEEP

    49152:Czbw08dPXWR4ba/JOtdF5pHE2lsfiaahM3o43ORV59VDKtDtzbw08dPXWR4ba/JQ:ic43mMc43mMc43ml

Malware Config

Targets

    • Target

      pa collective agreement pay 90187.js

    • Size

      13.9MB

    • MD5

      dbf0b40fe1c4a164458b2d7bdc2986ca

    • SHA1

      5d4784a28643532902824d7087b7618936fcff91

    • SHA256

      2daecff5a57a5233b1f662aac82cc8b3d5f3997df46d27e8dd444a8c371b2e5e

    • SHA512

      bb0bc6c3ef92b313ff6a81c98c7eed8c22f54931f557d819a36cb71b25d65f13b4936f94afdc9d0040fa28afaaed1b8d5beb93897b43f1352df77bae57cb81f6

    • SSDEEP

      49152:Czbw08dPXWR4ba/JOtdF5pHE2lsfiaahM3o43ORV59VDKtDtzbw08dPXWR4ba/JQ:ic43mMc43mMc43ml

    • GootLoader

      JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks