Overview

overview

10

Static

static

1

755618e7ea...a94.js

windows7-x64

10

755618e7ea...a94.js

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    755618e7ea05f85de857743d10cdf95bb3c09529b40ec5b430faa0db982aca94

  • Size

    19.8MB

  • Sample

    240817-p2jelawema

  • MD5

    1dabc0ec28edb2de81fb7cfdad33ba70

  • SHA1

    5c09c537cc273b0abb16b0ea8183f40a53ebe57a

  • SHA256

    755618e7ea05f85de857743d10cdf95bb3c09529b40ec5b430faa0db982aca94

  • SHA512

    00d954d1b35e1a2bef5918e3083c509bcbf43f463d0c04aec2fc5c8cc685b58a6ac36327d4c14450266f8e3862852c4d52700ca318dca2c982b2a3d3b4d0a1fd

  • SSDEEP

    49152:e+GH+R4FbEc6GhQj579l+4SSNRLFjzW03NZPn3SbYmGBl+Kn8P4BlwUC3kiQijs7:Z3k3k3k3k3k3k3k3K

Score
10/10
gootloaderexecutionloader

Malware Config

Targets

    • Target

      755618e7ea05f85de857743d10cdf95bb3c09529b40ec5b430faa0db982aca94

    • Size

      19.8MB

    • MD5

      1dabc0ec28edb2de81fb7cfdad33ba70

    • SHA1

      5c09c537cc273b0abb16b0ea8183f40a53ebe57a

    • SHA256

      755618e7ea05f85de857743d10cdf95bb3c09529b40ec5b430faa0db982aca94

    • SHA512

      00d954d1b35e1a2bef5918e3083c509bcbf43f463d0c04aec2fc5c8cc685b58a6ac36327d4c14450266f8e3862852c4d52700ca318dca2c982b2a3d3b4d0a1fd

    • SSDEEP

      49152:e+GH+R4FbEc6GhQj579l+4SSNRLFjzW03NZPn3SbYmGBl+Kn8P4BlwUC3kiQijs7:Z3k3k3k3k3k3k3k3K

    Score
    10/10
    gootloaderexecutionloader

    • GootLoader

      JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.

      loadergootloader

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks