Overview

overview

10

Static

static

1

c6f5c62a57...158.js

windows7-x64

10

c6f5c62a57...158.js

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c6f5c62a57cb5a26d5323942d2b6e2d679b67e97f1dfb8b9b57e176e44c9b158

  • Size

    20.5MB

  • Sample

    240813-p189mayfnk

  • MD5

    14ba353c9a503b37db512772ca1a79ac

  • SHA1

    1c7a64b736e9bb74bbef6f942af77efb48e57d58

  • SHA256

    c6f5c62a57cb5a26d5323942d2b6e2d679b67e97f1dfb8b9b57e176e44c9b158

  • SHA512

    b3bdd9ead7d4fa047c9c1e21694082f80cb244751d38c7465778a0f54f9ee61a2f906a0f84cf1e6a862c7d2b213731a99f7260b052c23ad4f8f989a25daeaeef

  • SSDEEP

    49152:YYRxr8uC0NjaCX3UgYRxr8uC0NjaCX3UgYRxr8uC0NjaCX3Uf:5228

Score
10/10
gootloaderexecutionloader

Malware Config

Targets

    • Target

      c6f5c62a57cb5a26d5323942d2b6e2d679b67e97f1dfb8b9b57e176e44c9b158

    • Size

      20.5MB

    • MD5

      14ba353c9a503b37db512772ca1a79ac

    • SHA1

      1c7a64b736e9bb74bbef6f942af77efb48e57d58

    • SHA256

      c6f5c62a57cb5a26d5323942d2b6e2d679b67e97f1dfb8b9b57e176e44c9b158

    • SHA512

      b3bdd9ead7d4fa047c9c1e21694082f80cb244751d38c7465778a0f54f9ee61a2f906a0f84cf1e6a862c7d2b213731a99f7260b052c23ad4f8f989a25daeaeef

    • SSDEEP

      49152:YYRxr8uC0NjaCX3UgYRxr8uC0NjaCX3UgYRxr8uC0NjaCX3Uf:5228

    Score
    10/10
    gootloaderexecutionloader

    • GootLoader

      JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.

      loadergootloader

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks