gootloader | 307327d97f9ea9febfc79484836e04b2a1c05c0f17e15f86ee8b1e12bbdba82b

Analysis

max time kernel
150s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
13-10-2024 11:58

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

307327d97f9ea9febfc79484836e04b2a1c05c0f17e15f86ee8b1e12bbdba82bN.js
Size

483KB
MD5

2c65821f5cfc47eed6711c567aa39b30
SHA1

e65a5fc04c87c9dce6e4f319fd35da64e97110e9
SHA256

307327d97f9ea9febfc79484836e04b2a1c05c0f17e15f86ee8b1e12bbdba82b
SHA512

2fbbdd3d0bcdbb89d99e5eaa8a07068ba8afd2c53d60700c9866dea7d954be96182ec79e34c7e0b40410927aa9ee2012b1b93626b4c7ffec263ffed91341f950
SSDEEP

6144:SQwK3Snulaxl4khEfD3xA7Wiagmd4iLAmWC6AfF:obFhEfD3xviagmd4iLAmWC6a

Score

10^/10

gootloader execution loader

Malware Config

Signatures

GootLoader
JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.
loader gootloader

Blocklisted process makes network request 2 IoCs

Processes:

wscript.exe

flow	pid	Process
37	2396	wscript.exe
46	2396	wscript.exe

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

Script User-Agent 1 IoCs

Uses user-agent string associated with script host/environment.

Processes:

description	flow	ioc
HTTP User-Agent header	37	Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\307327d97f9ea9febfc79484836e04b2a1c05c0f17e15f86ee8b1e12bbdba82bN.js
1⤵
- Blocklisted process makes network request
PID:2396

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads