General
- Target a5bfa20263e563377182958dda2eb84d507618e50aef9186b3a62d7a2164a5d6.js
- Size 18.5MB
- Sample240802-cnfekazdlm
- SHA256 a5bfa20263e563377182958dda2eb84d507618e50aef9186b3a62d7a2164a5d6
- MD5 cfb2bcf1ba2da7959607296ef737e408
- SHA1 81d5ecf0744a0efeb46d9690919baeada1db2089
- SHA512 d691119bc8de513c1b2efcb66afbb5fa0bd54155b30a94741d7a7013a3c57cdb414ae9ed5e8b6191e5e5062bea5579fd6b6a039cc7eeed6cde7c8e83a972215b
- SSDEEP 49152:kAw08dPXWR4ba/JOtdF5pHE2lsfiaahM3o43ORV59VDKtDxAw08dPXWR4ba/JOtH:3c43m5c43m5c43m5c43ml
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
a5bfa20263e563377182958dda2eb84d507618e50aef9186b3a62d7a2164a5d6.js
Resource
win7-20240729-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
a5bfa20263e563377182958dda2eb84d507618e50aef9186b3a62d7a2164a5d6.js
Resource
win10v2004-20240730-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target a5bfa20263e563377182958dda2eb84d507618e50aef9186b3a62d7a2164a5d6.js
- Size 18.5MB
- SHA256 a5bfa20263e563377182958dda2eb84d507618e50aef9186b3a62d7a2164a5d6
- MD5 cfb2bcf1ba2da7959607296ef737e408
- SHA1 81d5ecf0744a0efeb46d9690919baeada1db2089
- SHA512 d691119bc8de513c1b2efcb66afbb5fa0bd54155b30a94741d7a7013a3c57cdb414ae9ed5e8b6191e5e5062bea5579fd6b6a039cc7eeed6cde7c8e83a972215b
- SSDEEP 49152:kAw08dPXWR4ba/JOtdF5pHE2lsfiaahM3o43ORV59VDKtDxAw08dPXWR4ba/JOtH:3c43m5c43m5c43m5c43ml
- MD5 SHA1 SHA512 SSDEEP
Score10/10GootLoader
JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.
Blocklisted process makes network request
Checks computer location settings
Looks up country code configured in the registry, likely geofence.