General
- Target tmpnc01u7b7
- Size 8.8MB
- Sample260523-dddnnaes7w
- SHA256 95e2205bfcc9cd16ce54c703dd3f514e49d6a606f8265fbf77b60388ba0fb00c
- MD5 ca93562528adff608bee7c962c65ed02
- SHA1 8b2d9cb6f0133522f765c0de5222c24640ac1c4b
- SHA512 ed3a37a286297c2036e184e74073a8cbb6158ed2425ee16d1f6ddacc6803561758adee1c6828fce374abfdde492b2d5be8052664836e1db82f709c4a0a839b47
- SSDEEP 49152:6ytwpCQK+7cytwpCQK+7cytwpCQK+7cytwpCQK+7cytwpCQK+7cytwpCQK+7cytd:H
- TLSH T10B962A5D7FF21122065771B64ABFA00AF2B98413941CD954F96CC3D02FE092986FBEE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
tmpnc01u7b7.js
Resource
win10ltsc2021-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmpnc01u7b7.js
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmpnc01u7b7.js
Resource
win11-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target tmpnc01u7b7
- Size 8.8MB
- SHA256 95e2205bfcc9cd16ce54c703dd3f514e49d6a606f8265fbf77b60388ba0fb00c
- MD5 ca93562528adff608bee7c962c65ed02
- SHA1 8b2d9cb6f0133522f765c0de5222c24640ac1c4b
- SHA512 ed3a37a286297c2036e184e74073a8cbb6158ed2425ee16d1f6ddacc6803561758adee1c6828fce374abfdde492b2d5be8052664836e1db82f709c4a0a839b47
- SSDEEP 49152:6ytwpCQK+7cytwpCQK+7cytwpCQK+7cytwpCQK+7cytwpCQK+7cytwpCQK+7cytd:H
- TLSH T10B962A5D7FF21122065771B64ABFA00AF2B98413941CD954F96CC3D02FE092986FBEE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: GootLoader
JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.