General
- Target b72dc2b479a9f8a1a9e55eb6bd21a823d4f5ccefc20e566b3d00fd8811185a7f
- Size 10.6MB
- Sample240909-rh311avbpd
- SHA256 b72dc2b479a9f8a1a9e55eb6bd21a823d4f5ccefc20e566b3d00fd8811185a7f
- MD5 1d0bf84687e2a729b33f415e558e7fdb
- SHA1 cc4e6437fa0a216540b10498c7d5e7c7854b4550
- SHA512 950bd85e04d2be8aab4f68d7cbba73144557bd4a08c7086a8805f01260b19f8ea069ecb9caa15f5dcadd0e4e2b7baf963fa0cfecb6939054750560d168c14391
- SSDEEP 49152:ZZmKvXnWYiwPNgEHF/s+LfHQeZmKvXnWYiwPNgEHF/s+LfHQeZmKvXnWYiwPNgE1:Z1F1F1F1F1F1F1F1z
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
b72dc2b479a9f8a1a9e55eb6bd21a823d4f5ccefc20e566b3d00fd8811185a7f.js
Resource
win7-20240903-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
b72dc2b479a9f8a1a9e55eb6bd21a823d4f5ccefc20e566b3d00fd8811185a7f.js
Resource
win10v2004-20240802-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target b72dc2b479a9f8a1a9e55eb6bd21a823d4f5ccefc20e566b3d00fd8811185a7f
- Size 10.6MB
- SHA256 b72dc2b479a9f8a1a9e55eb6bd21a823d4f5ccefc20e566b3d00fd8811185a7f
- MD5 1d0bf84687e2a729b33f415e558e7fdb
- SHA1 cc4e6437fa0a216540b10498c7d5e7c7854b4550
- SHA512 950bd85e04d2be8aab4f68d7cbba73144557bd4a08c7086a8805f01260b19f8ea069ecb9caa15f5dcadd0e4e2b7baf963fa0cfecb6939054750560d168c14391
- SSDEEP 49152:ZZmKvXnWYiwPNgEHF/s+LfHQeZmKvXnWYiwPNgEHF/s+LfHQeZmKvXnWYiwPNgE1:Z1F1F1F1F1F1F1F1z
- MD5 SHA1 SHA512 SSDEEP
Score10/10GootLoader
JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.
Blocklisted process makes network request
Checks computer location settings
Looks up country code configured in the registry, likely geofence.