Extracted

Extracted

• • Target

    trigger.js

  • Size

    1KB

  • MD5

    e1d3dafb61e3ccceb928c4b583445826

  • SHA1

    008eb8905da7838bcd8380f259794ec3ad26c9cd

  • SHA256

    d9d8088e85136f539f6db8397f2b3b0664fcdc66d93effbe81978b04dfdb24c6

  • SHA512

    960f3179e597920a8e2d79a30816fbe64c5bbeb35525e1366dfe3246905adb629699a61e5d130a5370e081666207ecccefceebb4227ecce5029556c25d26b135

  Score

  10^/10

  discoveryexecutionkoiloaderloader

  • KoiLoader

    KoiLoader is a malware loader written in C++.

    loaderkoiloader

  • Koiloader family

    koiloader

  • Detects KoiLoader payload

    loader

  • Blocklisted process makes network request

  • Command and Scripting Interpreter: PowerShell

    Powershell Invoke Web Request.

    execution

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2