General
- Target tmp632513wj.txt
- Size 6.6MB
- Sample260523-dfw8saet2x
- SHA256 5f2ee690f0d412b8e8003f7bdf4ecf813c5f99e930ea7dbda0154f913e68be54
- MD5 5f9509cada03763da54b72f4f3b09e9c
- SHA1 e7b044d7a16bbe841baec19d4d1ed2150f469026
- SHA512 15216d1ca7ed0c7419a2f7d30bdb355597fe4f81ca9b98d0687e960974927f364856629524461b84984bc87d2eb1d837f709539a093384130e2ee40183fe7b62
- SSDEEP 49152:1WytwpCQK+O3WytwpCQK+O3WytwpCQK+O3WytwpCQK+O3WytwpCQK+O3WytwpCQA:1ZZZZZj
- TLSH T123662A5D7FF21122065771B64ABFA00AF2B98413941CD954F96CC3D02FE092986FBEE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
tmp632513wj.js
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmp632513wj.js
Resource
win11-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target tmp632513wj.txt
- Size 6.6MB
- SHA256 5f2ee690f0d412b8e8003f7bdf4ecf813c5f99e930ea7dbda0154f913e68be54
- MD5 5f9509cada03763da54b72f4f3b09e9c
- SHA1 e7b044d7a16bbe841baec19d4d1ed2150f469026
- SHA512 15216d1ca7ed0c7419a2f7d30bdb355597fe4f81ca9b98d0687e960974927f364856629524461b84984bc87d2eb1d837f709539a093384130e2ee40183fe7b62
- SSDEEP 49152:1WytwpCQK+O3WytwpCQK+O3WytwpCQK+O3WytwpCQK+O3WytwpCQK+O3WytwpCQA:1ZZZZZj
- TLSH T123662A5D7FF21122065771B64ABFA00AF2B98413941CD954F96CC3D02FE092986FBEE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: GootLoader
JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.