General
- Target tmpxhq71tfq
- Size 840KB
- Sample260523-ebzzjsct3l
- SHA256 d094fbec439b4de27ad194451f37757c16456a0bf5ef9ce56a07cf617efafb4c
- MD5 23b73a7b6a80fd0f0361b856ea5c4f95
- SHA1 8c141a55f2979dc572acb0d04cdb801b395f4f5f
- SHA512 b1713d821873393cd742e0ee66d527651ec7cd146f4f6254bfaab07ebafe74eea53118df480f2b7765f8e3e66b1862b96b64988458907d22b74a9b5c8b082432
- SSDEEP 24576:JSCgo+ogQc5WfNnZmD/nX2vqpUbeUnIj+WpyQTaEFNE3NEr:JSCgo+ogQc5WfNnZmD/nGvqpDWWpyQTZ
- TLSH T19105E858E7DC241242737078989F94C9AC3CE41A819DAC92FD0CC194AB94AFD997FECD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
tmpxhq71tfq.js
Resource
win10ltsc2021-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmpxhq71tfq.js
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmpxhq71tfq.js
Resource
win11-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target tmpxhq71tfq
- Size 840KB
- SHA256 d094fbec439b4de27ad194451f37757c16456a0bf5ef9ce56a07cf617efafb4c
- MD5 23b73a7b6a80fd0f0361b856ea5c4f95
- SHA1 8c141a55f2979dc572acb0d04cdb801b395f4f5f
- SHA512 b1713d821873393cd742e0ee66d527651ec7cd146f4f6254bfaab07ebafe74eea53118df480f2b7765f8e3e66b1862b96b64988458907d22b74a9b5c8b082432
- SSDEEP 24576:JSCgo+ogQc5WfNnZmD/nX2vqpUbeUnIj+WpyQTaEFNE3NEr:JSCgo+ogQc5WfNnZmD/nGvqpDWWpyQTZ
- TLSH T19105E858E7DC241242737078989F94C9AC3CE41A819DAC92FD0CC194AB94AFD997FECD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Family: GootLoader
JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
Checks computer location settings
Looks up country code configured in the registry, likely geofence.