General
- Target union_of_taxation_employees_collective_agreement(58886).js
- Size 9.3MB
- Sample240909-qwnb2ashqa
- SHA256 f080d2cca20366f85b97d77ec9f452bd3e14da61a69f618d86a224caebab66fb
- MD5 25f77f707f73fa2834d2e19a9cabd9db
- SHA1 826949de3bfc79ebe179481c0528f43dffee4d74
- SHA512 2711098d3ea183febcb4f18d61c619e421e45ccf07196dfad7b99a1ab8c61bb7afa8c999138e8e77cf881638cb8cb2e46daa61755a2f2801fad416b095106647
- SSDEEP 49152:5okJnhuzwccTPYG/s+LfHQGokJnhuzwccTPYG/s+LfHQGokJnhuzwccTPYG/s+L7:5JJJJJJX
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
union_of_taxation_employees_collective_agreement(58886).js
Resource
win10v2004-20240802-en
10 signatures
300 seconds
Malware Config
Targets
-
- Target union_of_taxation_employees_collective_agreement(58886).js
- Size 9.3MB
- SHA256 f080d2cca20366f85b97d77ec9f452bd3e14da61a69f618d86a224caebab66fb
- MD5 25f77f707f73fa2834d2e19a9cabd9db
- SHA1 826949de3bfc79ebe179481c0528f43dffee4d74
- SHA512 2711098d3ea183febcb4f18d61c619e421e45ccf07196dfad7b99a1ab8c61bb7afa8c999138e8e77cf881638cb8cb2e46daa61755a2f2801fad416b095106647
- SSDEEP 49152:5okJnhuzwccTPYG/s+LfHQGokJnhuzwccTPYG/s+LfHQGokJnhuzwccTPYG/s+L7:5JJJJJJX
- MD5 SHA1 SHA512 SSDEEP
Score10/10GootLoader
JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.
Blocklisted process makes network request
Checks computer location settings
Looks up country code configured in the registry, likely geofence.