Overview

overview

10

Static

static

1

union_of_t...21).js

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    union_of_taxation_employees_collective_agreement(221).js

  • Size

    10.6MB

  • Sample

    240909-rdpmtathre

  • MD5

    1d0bf84687e2a729b33f415e558e7fdb

  • SHA1

    cc4e6437fa0a216540b10498c7d5e7c7854b4550

  • SHA256

    b72dc2b479a9f8a1a9e55eb6bd21a823d4f5ccefc20e566b3d00fd8811185a7f

  • SHA512

    950bd85e04d2be8aab4f68d7cbba73144557bd4a08c7086a8805f01260b19f8ea069ecb9caa15f5dcadd0e4e2b7baf963fa0cfecb6939054750560d168c14391

  • SSDEEP

    49152:ZZmKvXnWYiwPNgEHF/s+LfHQeZmKvXnWYiwPNgEHF/s+LfHQeZmKvXnWYiwPNgE1:Z1F1F1F1F1F1F1F1z

Score
10/10
gootloaderexecutionloader

Malware Config

Targets

    • Target

      union_of_taxation_employees_collective_agreement(221).js

    • Size

      10.6MB

    • MD5

      1d0bf84687e2a729b33f415e558e7fdb

    • SHA1

      cc4e6437fa0a216540b10498c7d5e7c7854b4550

    • SHA256

      b72dc2b479a9f8a1a9e55eb6bd21a823d4f5ccefc20e566b3d00fd8811185a7f

    • SHA512

      950bd85e04d2be8aab4f68d7cbba73144557bd4a08c7086a8805f01260b19f8ea069ecb9caa15f5dcadd0e4e2b7baf963fa0cfecb6939054750560d168c14391

    • SSDEEP

      49152:ZZmKvXnWYiwPNgEHF/s+LfHQeZmKvXnWYiwPNgEHF/s+LfHQeZmKvXnWYiwPNgE1:Z1F1F1F1F1F1F1F1z

    Score
    10/10
    gootloaderexecutionloader

    • GootLoader

      JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.

      loadergootloader

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks