General

  • Target
    union_of_taxation_employees_collective_agreement(28424).js
  • Size 3.9MB
  • Sample241007-p69scazfmb
  • SHA256 919e71361afffa7a9edd5fdf11efaeff25f2e742c9a24cbbb030d192d041ddfb
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      union_of_taxation_employees_collective_agreement(28424).js
    • Size 3.9MB
    • SHA256 919e71361afffa7a9edd5fdf11efaeff25f2e742c9a24cbbb030d192d041ddfb
    • MD5 SHA1 SHA512 SSDEEP
    • GootLoader

      JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks