Overview

overview

10

Static

static

1

ef8b490bbe...774.js

windows7-x64

10

ef8b490bbe...774.js

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ef8b490bbe794791063f53be5d9e595267b6bae5af165162f8e713359df17774

  • Size

    20.5MB

  • Sample

    240804-qbdl4awbkl

  • MD5

    253d34a167c0598e9b1b075163ed3a75

  • SHA1

    3e984b48c5b993171dfd56f749a21d815bc30345

  • SHA256

    ef8b490bbe794791063f53be5d9e595267b6bae5af165162f8e713359df17774

  • SHA512

    c4d32e2a86aaa31ab20f1b00e7fe0ba82b18b0f7ce723b47bd1db87e63b9349ba6310abccb4a4aa936a878cb470414219f2ad3d6d0851aa2013d738df3a966d0

  • SSDEEP

    49152:YYRxr8uC0NjaCXzPMygYRxr8uC0NjaCXzPMygYRxr8uC0NjaCXzPMyf:50c0c0G

Score
10/10
gootloaderexecutionloader

Malware Config

Targets

    • Target

      ef8b490bbe794791063f53be5d9e595267b6bae5af165162f8e713359df17774

    • Size

      20.5MB

    • MD5

      253d34a167c0598e9b1b075163ed3a75

    • SHA1

      3e984b48c5b993171dfd56f749a21d815bc30345

    • SHA256

      ef8b490bbe794791063f53be5d9e595267b6bae5af165162f8e713359df17774

    • SHA512

      c4d32e2a86aaa31ab20f1b00e7fe0ba82b18b0f7ce723b47bd1db87e63b9349ba6310abccb4a4aa936a878cb470414219f2ad3d6d0851aa2013d738df3a966d0

    • SSDEEP

      49152:YYRxr8uC0NjaCXzPMygYRxr8uC0NjaCXzPMygYRxr8uC0NjaCXzPMyf:50c0c0G

    Score
    10/10
    gootloaderexecutionloader

    • GootLoader

      JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.

      loadergootloader

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks