General

  • Target

    indiana landlord-tenant law utilities 22224.js

  • Size

    12.9MB

  • Sample

    240806-fb9dnatflg

  • MD5

    5f761a954992d759fe1ab41bc4e5f137

  • SHA1

    f83b3c632fbbe7ff2a83c7112dd5c901e83c7e81

  • SHA256

    40531325a0b291947914591060d561c685f900628d554cf43cc2371bf4599a8f

  • SHA512

    bea41ecfa9d457dbc756e376a0953a09f5a783efd93ef42dc86f44444045ff19a2d00e308f571e7843d84cafd582a3df275b32b55adf15e0bdbdfb2c374086e1

  • SSDEEP

    49152:57DOzjCxbxqHlpMiMNN0D6hO22DzhYzYBmv9+8pJm3hp/KPAG6C+3qUxc8g7cEXn:n

Malware Config

Targets

    • Target

      indiana landlord-tenant law utilities 22224.js

    • Size

      12.9MB

    • MD5

      5f761a954992d759fe1ab41bc4e5f137

    • SHA1

      f83b3c632fbbe7ff2a83c7112dd5c901e83c7e81

    • SHA256

      40531325a0b291947914591060d561c685f900628d554cf43cc2371bf4599a8f

    • SHA512

      bea41ecfa9d457dbc756e376a0953a09f5a783efd93ef42dc86f44444045ff19a2d00e308f571e7843d84cafd582a3df275b32b55adf15e0bdbdfb2c374086e1

    • SSDEEP

      49152:57DOzjCxbxqHlpMiMNN0D6hO22DzhYzYBmv9+8pJm3hp/KPAG6C+3qUxc8g7cEXn:n

    • GootLoader

      JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks