General
-
Target
34fa85f029342b00dc2887280668014b7317d2d9bfb26bafd95a353e9a44d404.js
-
Size
13.7MB
-
Sample
240803-bm4v4asepb
-
MD5
09f808a8e6517ec82c2753ed19ac734d
-
SHA1
85abf5a92fc8e84ec3cd018b3344b36e727facdd
-
SHA256
34fa85f029342b00dc2887280668014b7317d2d9bfb26bafd95a353e9a44d404
-
SHA512
ea94fff7d2c84270dafe079ccd5b9f549e0fa9f3fd6644f01634e1fc7e701e9ce2cd3f6a6387415290919f421a1fb98a3f62c02600e0c8ddafd71a5941be5d7e
-
SSDEEP
49152:YYRxr8uC0NjaCXkrCKgYRxr8uC0NjaCXkrCKf:eCz
Static task
static1
Behavioral task
behavioral1
Sample
34fa85f029342b00dc2887280668014b7317d2d9bfb26bafd95a353e9a44d404.js
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
34fa85f029342b00dc2887280668014b7317d2d9bfb26bafd95a353e9a44d404.js
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
34fa85f029342b00dc2887280668014b7317d2d9bfb26bafd95a353e9a44d404.js
-
Size
13.7MB
-
MD5
09f808a8e6517ec82c2753ed19ac734d
-
SHA1
85abf5a92fc8e84ec3cd018b3344b36e727facdd
-
SHA256
34fa85f029342b00dc2887280668014b7317d2d9bfb26bafd95a353e9a44d404
-
SHA512
ea94fff7d2c84270dafe079ccd5b9f549e0fa9f3fd6644f01634e1fc7e701e9ce2cd3f6a6387415290919f421a1fb98a3f62c02600e0c8ddafd71a5941be5d7e
-
SSDEEP
49152:YYRxr8uC0NjaCXkrCKgYRxr8uC0NjaCXkrCKf:eCz
Score10/10-
GootLoader
JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.
-
Blocklisted process makes network request
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-