General

  • Target

    19899132768.zip

  • Size

    101KB

  • Sample

    241114-mf1qmsxhqm

  • MD5

    19f5d31576a6efc9ef1670b0f13de372

  • SHA1

    f468af34bcec81df7e8e500c4859ab20bf259b10

  • SHA256

    db8d4db2a61b23914bc24bc2cef8aba013df1d0fc23d60fce7378ae22bfb26a7

  • SHA512

    0fb96c247320a4a22e172d98ce3749549d098613442e04df6a9b4ef23b5730b4943b2304dd094b0cd9e04afbc208f70d40e40f06db142f322e7dd24dc29436bf

  • SSDEEP

    3072:oPfnCUG8azgfIyHUk/nc0FQc9tFlo3Xvf9h8rOw:UfjGVgAyHbc0FT9HO3Xvf+

Malware Config

Targets

    • Target

      b868a88c78e8f58481cd319f15a4d64bd7610431eb90e2f0d9264889489cf973

    • Size

      483KB

    • MD5

      eac33be6bac86920722d19845e4819ad

    • SHA1

      60e75ff64eb5ec43770cc8acb509eb97c23b1953

    • SHA256

      b868a88c78e8f58481cd319f15a4d64bd7610431eb90e2f0d9264889489cf973

    • SHA512

      214f603d8faafc2adfe732ae740722869782315ac24c23551cc52ceb1d37a9f242e85bc5368d9e4eb7f90eb26b96b7029d3bcccd4e38cbe10abb74f0c8235a2c

    • SSDEEP

      6144:UQhZlvBulaxl4khEfD3xA7Biagmd4iLAmWR6GSF:f3hEfD3xeiagmd4iLAmWR6j

    • GootLoader

      JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.

    • Gootloader family

    • Blocklisted process makes network request

MITRE ATT&CK Enterprise v15

Tasks