Overview

overview

10

Static

static

1

government...223.js

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    government of bc collective agreement 223.js

  • Size

    20.5MB

  • Sample

    240804-p5t1hawajm

  • MD5

    253d34a167c0598e9b1b075163ed3a75

  • SHA1

    3e984b48c5b993171dfd56f749a21d815bc30345

  • SHA256

    ef8b490bbe794791063f53be5d9e595267b6bae5af165162f8e713359df17774

  • SHA512

    c4d32e2a86aaa31ab20f1b00e7fe0ba82b18b0f7ce723b47bd1db87e63b9349ba6310abccb4a4aa936a878cb470414219f2ad3d6d0851aa2013d738df3a966d0

  • SSDEEP

    49152:YYRxr8uC0NjaCXzPMygYRxr8uC0NjaCXzPMygYRxr8uC0NjaCXzPMyf:50c0c0G

Score
10/10
gootloaderexecutionloader

Malware Config

Targets

    • Target

      government of bc collective agreement 223.js

    • Size

      20.5MB

    • MD5

      253d34a167c0598e9b1b075163ed3a75

    • SHA1

      3e984b48c5b993171dfd56f749a21d815bc30345

    • SHA256

      ef8b490bbe794791063f53be5d9e595267b6bae5af165162f8e713359df17774

    • SHA512

      c4d32e2a86aaa31ab20f1b00e7fe0ba82b18b0f7ce723b47bd1db87e63b9349ba6310abccb4a4aa936a878cb470414219f2ad3d6d0851aa2013d738df3a966d0

    • SSDEEP

      49152:YYRxr8uC0NjaCXzPMygYRxr8uC0NjaCXzPMygYRxr8uC0NjaCXzPMyf:50c0c0G

    Score
    10/10
    gootloaderexecutionloader

    • GootLoader

      JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.

      loadergootloader

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks