General
- Target union_of_taxation_employees_collective_agreement(28424).js
- Size 3.9MB
- Sample241007-p69scazfmb
- SHA256 919e71361afffa7a9edd5fdf11efaeff25f2e742c9a24cbbb030d192d041ddfb
- MD5 052d55bc0edd41bc0c7a26155be6d359
- SHA1 d1173d863f73736e9585facdab76c964d02681c4
- SHA512 4f9da4c35e67b29b69cd8015c5fdb8f0ab4c009118f3438f3e1c1102fc7b0e9d08e28cda65452de9070d4787e6ffed7ec967a20ca10cc4bc1960e3bf45f43edc
- SSDEEP 24576:pvZ5xxv6JbHQPV9LfvZ5xxv6JbHQPV9LfvZ5xxv6JbHQPV9LZ:pvqJEPV97vqJEPV97vqJEPV9l
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
union_of_taxation_employees_collective_agreement(28424).js
Resource
win10v2004-20241007-en
10 signatures
300 seconds
Malware Config
Targets
-
- Target union_of_taxation_employees_collective_agreement(28424).js
- Size 3.9MB
- SHA256 919e71361afffa7a9edd5fdf11efaeff25f2e742c9a24cbbb030d192d041ddfb
- MD5 052d55bc0edd41bc0c7a26155be6d359
- SHA1 d1173d863f73736e9585facdab76c964d02681c4
- SHA512 4f9da4c35e67b29b69cd8015c5fdb8f0ab4c009118f3438f3e1c1102fc7b0e9d08e28cda65452de9070d4787e6ffed7ec967a20ca10cc4bc1960e3bf45f43edc
- SSDEEP 24576:pvZ5xxv6JbHQPV9LfvZ5xxv6JbHQPV9LfvZ5xxv6JbHQPV9LZ:pvqJEPV97vqJEPV97vqJEPV9l
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
GootLoader
JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.
-
Blocklisted process makes network request
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.