General

  • Target

    pa collective agreement pay 14907.js

  • Size

    13.9MB

  • Sample

    240623-q1wtzasflf

  • MD5

    3b4066dc8b4c74928ad4b3eae7e725b3

  • SHA1

    e692e594ae8261b0284c08edb865e40209d65fdf

  • SHA256

    4a8dd206483b71084346cb468eb864c9a8a7a44d62d367219619611d4a2b4153

  • SHA512

    502c22f9475b070f622ac1803d1d342ba34bbd32c0da05a7cd0d96fc95ccf121f44a4965906121e408f6a9f16d12b3147169b09317b74da9570b76535917b85a

  • SSDEEP

    49152:rrH08dPXWR4ba/JOtdF5pHE2lsfiaahM3o43ORV59VDKtD4rH08dPXWR4ba/JOt1:+c43mEc43mEc43ml

Malware Config

Targets

    • Target

      pa collective agreement pay 14907.js

    • Size

      13.9MB

    • MD5

      3b4066dc8b4c74928ad4b3eae7e725b3

    • SHA1

      e692e594ae8261b0284c08edb865e40209d65fdf

    • SHA256

      4a8dd206483b71084346cb468eb864c9a8a7a44d62d367219619611d4a2b4153

    • SHA512

      502c22f9475b070f622ac1803d1d342ba34bbd32c0da05a7cd0d96fc95ccf121f44a4965906121e408f6a9f16d12b3147169b09317b74da9570b76535917b85a

    • SSDEEP

      49152:rrH08dPXWR4ba/JOtdF5pHE2lsfiaahM3o43ORV59VDKtD4rH08dPXWR4ba/JOt1:+c43mEc43mEc43ml

    • GootLoader

      JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks