General

  • Target
    b72dc2b479a9f8a1a9e55eb6bd21a823d4f5ccefc20e566b3d00fd8811185a7f
  • Size 10.6MB
  • Sample240909-rh311avbpd
  • SHA256 b72dc2b479a9f8a1a9e55eb6bd21a823d4f5ccefc20e566b3d00fd8811185a7f
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      b72dc2b479a9f8a1a9e55eb6bd21a823d4f5ccefc20e566b3d00fd8811185a7f
    • Size 10.6MB
    • SHA256 b72dc2b479a9f8a1a9e55eb6bd21a823d4f5ccefc20e566b3d00fd8811185a7f
    • MD5 SHA1 SHA512 SSDEEP
    • GootLoader

      JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks