Overview

overview

10

Static

static

1

government...136.js

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    government of bc collective agreement 31136.js

  • Size

    13.7MB

  • Sample

    240809-phemaszgrr

  • MD5

    0244ef693fa8811a6b09df943bad6db3

  • SHA1

    2e4ecb93d68dd5798075b7e96c00c671aab45530

  • SHA256

    227732bdbfcc1778e5b3a79a303f652fbd4e01df06c7cb3f763881bba981ca8b

  • SHA512

    ad7984f09e9e65bf6c9b4a68df5717a5973d43f3f72919b5b710f2ce3d57a890e0ab480758df194ad3faee388a237815b163fcb607a85b5839c5859c331ecb7e

  • SSDEEP

    49152:YYRxr8uC0NjaCXdbMgYRxr8uC0NjaCXdbMf:vbGbk

Score
10/10
gootloaderexecutionloader

Malware Config

Targets

    • Target

      government of bc collective agreement 31136.js

    • Size

      13.7MB

    • MD5

      0244ef693fa8811a6b09df943bad6db3

    • SHA1

      2e4ecb93d68dd5798075b7e96c00c671aab45530

    • SHA256

      227732bdbfcc1778e5b3a79a303f652fbd4e01df06c7cb3f763881bba981ca8b

    • SHA512

      ad7984f09e9e65bf6c9b4a68df5717a5973d43f3f72919b5b710f2ce3d57a890e0ab480758df194ad3faee388a237815b163fcb607a85b5839c5859c331ecb7e

    • SSDEEP

      49152:YYRxr8uC0NjaCXdbMgYRxr8uC0NjaCXdbMf:vbGbk

    Score
    10/10
    gootloaderexecutionloader

    • GootLoader

      JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.

      loadergootloader

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks