Overview

overview

10

Static

static

1

water escr...912.js

windows7-x64

10

water escr...912.js

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    water escrow agreement 77912.js

  • Size

    19.3MB

  • Sample

    241017-rqmc8a1bqg

  • MD5

    67da9c54b9fba4ded6d308dde26f8ff8

  • SHA1

    6c67286c6f33e2110e3db8c8240a491506313668

  • SHA256

    9149f8b2afe9f24692b628c0c014ccbcccb7b54561e4ab544656c83164a3f279

  • SHA512

    11a3070294d948c716a0a6321f1c7967c31a09117b61f022537fb98f4849f10c0f6f3357438165efed937b25679d85f9be19f5204610ed0476c6eab525974d9d

  • SSDEEP

    49152:j7BRzjCxbUqHlp4nv5N0+ChM/5bzSYzYBBji+8j3d3O6/+PQGoI13qu2FJEYcE2W:X

Score
10/10
gootloaderexecutionloader

Malware Config

Targets

    • Target

      water escrow agreement 77912.js

    • Size

      19.3MB

    • MD5

      67da9c54b9fba4ded6d308dde26f8ff8

    • SHA1

      6c67286c6f33e2110e3db8c8240a491506313668

    • SHA256

      9149f8b2afe9f24692b628c0c014ccbcccb7b54561e4ab544656c83164a3f279

    • SHA512

      11a3070294d948c716a0a6321f1c7967c31a09117b61f022537fb98f4849f10c0f6f3357438165efed937b25679d85f9be19f5204610ed0476c6eab525974d9d

    • SSDEEP

      49152:j7BRzjCxbUqHlp4nv5N0+ChM/5bzSYzYBBji+8j3d3O6/+PQGoI13qu2FJEYcE2W:X

    Score
    10/10
    gootloaderexecutionloader

    • GootLoader

      JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.

      loadergootloader

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks