Overview

overview

10

Static

static

1

government...296.js

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    government of bc collective agreement 94296.js

  • Size

    13.7MB

  • Sample

    240727-ngx7ksxbmj

  • MD5

    c835b80525ef4b87d4022e416e79ef72

  • SHA1

    7a0de6ccf0b0f8169f81ec33e08512e57c29f18f

  • SHA256

    49eb4738de02fcc27f4e50cb40ab16688bc1db012ed2361d911666ba5b0693f4

  • SHA512

    b3c0825260099faa621e3ceed14402a88ece0fea20a700814d898085537b9de6ec6e8ef4059ce2347b464889a26a7c669bf0ba1715e19710c006889965bb1c5b

  • SSDEEP

    49152:YYRxr8uC0NjaCX6KgYRxr8uC0NjaCX6Kf:8/u

Score
10/10
gootloaderexecutionloader

Malware Config

Targets

    • Target

      government of bc collective agreement 94296.js

    • Size

      13.7MB

    • MD5

      c835b80525ef4b87d4022e416e79ef72

    • SHA1

      7a0de6ccf0b0f8169f81ec33e08512e57c29f18f

    • SHA256

      49eb4738de02fcc27f4e50cb40ab16688bc1db012ed2361d911666ba5b0693f4

    • SHA512

      b3c0825260099faa621e3ceed14402a88ece0fea20a700814d898085537b9de6ec6e8ef4059ce2347b464889a26a7c669bf0ba1715e19710c006889965bb1c5b

    • SSDEEP

      49152:YYRxr8uC0NjaCX6KgYRxr8uC0NjaCX6Kf:8/u

    Score
    10/10
    gootloaderexecutionloader

    • GootLoader

      JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.

      loadergootloader

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks