General
- Target a5bfa20263e563377182958dda2eb84d507618e50aef9186b3a62d7a2164a5d6.js
- Size 18.5MB
- Sample240802-cnfekazdlm
- SHA256 a5bfa20263e563377182958dda2eb84d507618e50aef9186b3a62d7a2164a5d6
- MD5 cfb2bcf1ba2da7959607296ef737e408
- SHA1 81d5ecf0744a0efeb46d9690919baeada1db2089
- SHA512 d691119bc8de513c1b2efcb66afbb5fa0bd54155b30a94741d7a7013a3c57cdb414ae9ed5e8b6191e5e5062bea5579fd6b6a039cc7eeed6cde7c8e83a972215b
- SSDEEP 49152:kAw08dPXWR4ba/JOtdF5pHE2lsfiaahM3o43ORV59VDKtDxAw08dPXWR4ba/JOtH:3c43m5c43m5c43m5c43ml
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
a5bfa20263e563377182958dda2eb84d507618e50aef9186b3a62d7a2164a5d6.js
Resource
win7-20240729-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
a5bfa20263e563377182958dda2eb84d507618e50aef9186b3a62d7a2164a5d6.js
Resource
win10v2004-20240730-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target a5bfa20263e563377182958dda2eb84d507618e50aef9186b3a62d7a2164a5d6.js
- Size 18.5MB
- SHA256 a5bfa20263e563377182958dda2eb84d507618e50aef9186b3a62d7a2164a5d6
- MD5 cfb2bcf1ba2da7959607296ef737e408
- SHA1 81d5ecf0744a0efeb46d9690919baeada1db2089
- SHA512 d691119bc8de513c1b2efcb66afbb5fa0bd54155b30a94741d7a7013a3c57cdb414ae9ed5e8b6191e5e5062bea5579fd6b6a039cc7eeed6cde7c8e83a972215b
- SSDEEP 49152:kAw08dPXWR4ba/JOtdF5pHE2lsfiaahM3o43ORV59VDKtDxAw08dPXWR4ba/JOtH:3c43m5c43m5c43m5c43ml
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
GootLoader
JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.
-
Blocklisted process makes network request
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.