General
-
Target
union_of_taxation_employees_collective_agreement(40836).js
-
Size
7.7MB
-
Sample
241017-nmwwpsvgle
-
MD5
ae9263d83761365bde29227b2a670104
-
SHA1
0c3bdc722df32ec3cf63ba94f9c1a8814c1384c3
-
SHA256
a79eb8b19a5fde18c6f569df389aea8a2ca930dd5718690e81328a0d087471ef
-
SHA512
13c9910312cbfecf565d2c4649f66524a151562def1e4ff44426dc09b34e9f9c6e0bb8bf30d3515c8fe90cb1f30cb5efb16c37a74161578d18bf846d4104643b
-
SSDEEP
49152:hsFCnPV9rsFCnPV9rsFCnPV9rsFCnPV9rsFCnPV9rsFCnPV9l:JPVNPVNPVNPVNPVNPVD
Static task
static1
Behavioral task
behavioral1
Sample
union_of_taxation_employees_collective_agreement(40836).js
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
union_of_taxation_employees_collective_agreement(40836).js
-
Size
7.7MB
-
MD5
ae9263d83761365bde29227b2a670104
-
SHA1
0c3bdc722df32ec3cf63ba94f9c1a8814c1384c3
-
SHA256
a79eb8b19a5fde18c6f569df389aea8a2ca930dd5718690e81328a0d087471ef
-
SHA512
13c9910312cbfecf565d2c4649f66524a151562def1e4ff44426dc09b34e9f9c6e0bb8bf30d3515c8fe90cb1f30cb5efb16c37a74161578d18bf846d4104643b
-
SSDEEP
49152:hsFCnPV9rsFCnPV9rsFCnPV9rsFCnPV9rsFCnPV9rsFCnPV9l:JPVNPVNPVNPVNPVNPVD
Score10/10-
GootLoader
JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.
-
Blocklisted process makes network request
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-