Overview

overview

10

Static

static

1

government...930.js

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    government of bc collective agreement 85930.js
  • Size 20.5MB
  • Sample240813-pxvbastflc
  • SHA256 c6f5c62a57cb5a26d5323942d2b6e2d679b67e97f1dfb8b9b57e176e44c9b158
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
gootloaderexecutionloader

Malware Config

Targets

    • Target
      government of bc collective agreement 85930.js
    • Size 20.5MB
    • SHA256 c6f5c62a57cb5a26d5323942d2b6e2d679b67e97f1dfb8b9b57e176e44c9b158
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    gootloaderexecutionloader

    • GootLoader

      JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.

      loadergootloader

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks