General
- Target tmprb3k8u4s
- Size 13.7MB
- Sample260523-crlezsdw3x
- SHA256 b41cc5bbc8e836c57260ebcf3d61e2790ec4b6d2fd10c367d94751d4c36cb8cc
- MD5 92e6cb8641e076331bd36d69dd7a8533
- SHA1 132ce2dfb397e170b89a987399ba1589d0ffe9e6
- SHA512 60a10c7f04691240081056dac1e8052450e7c85638f4ed9b53021f778c14a13dfbf7730924e9e4500f68a7800e26540cbe9046c21c9b1c052e039c19eeb38fc9
- SSDEEP 49152:YYRxr8uC0NjaCXoK5gYRxr8uC0NjaCXoK5f:m9g
- TLSH T1EDE6E15CD6B48CA309CA607259BE1902F57481DB8D183C2A7F9C097C8F9D92D16FE39E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
tmprb3k8u4s.js
Resource
win10ltsc2021-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmprb3k8u4s.js
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmprb3k8u4s.js
Resource
win11-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target tmprb3k8u4s
- Size 13.7MB
- SHA256 b41cc5bbc8e836c57260ebcf3d61e2790ec4b6d2fd10c367d94751d4c36cb8cc
- MD5 92e6cb8641e076331bd36d69dd7a8533
- SHA1 132ce2dfb397e170b89a987399ba1589d0ffe9e6
- SHA512 60a10c7f04691240081056dac1e8052450e7c85638f4ed9b53021f778c14a13dfbf7730924e9e4500f68a7800e26540cbe9046c21c9b1c052e039c19eeb38fc9
- SSDEEP 49152:YYRxr8uC0NjaCXoK5gYRxr8uC0NjaCXoK5f:m9g
- TLSH T1EDE6E15CD6B48CA309CA607259BE1902F57481DB8D183C2A7F9C097C8F9D92D16FE39E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Family: GootLoader
JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
Checks computer location settings
Looks up country code configured in the registry, likely geofence.