General
- Target tmpxhq71tfq
- Size 840KB
- Sample260523-ebzzjsct3l
- SHA256 d094fbec439b4de27ad194451f37757c16456a0bf5ef9ce56a07cf617efafb4c
- MD5 23b73a7b6a80fd0f0361b856ea5c4f95
- SHA1 8c141a55f2979dc572acb0d04cdb801b395f4f5f
- SHA512 b1713d821873393cd742e0ee66d527651ec7cd146f4f6254bfaab07ebafe74eea53118df480f2b7765f8e3e66b1862b96b64988458907d22b74a9b5c8b082432
- SSDEEP 24576:JSCgo+ogQc5WfNnZmD/nX2vqpUbeUnIj+WpyQTaEFNE3NEr:JSCgo+ogQc5WfNnZmD/nGvqpDWWpyQTZ
- TLSH T19105E858E7DC241242737078989F94C9AC3CE41A819DAC92FD0CC194AB94AFD997FECD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
tmpxhq71tfq.js
Resource
win10ltsc2021-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmpxhq71tfq.js
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmpxhq71tfq.js
Resource
win11-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target tmpxhq71tfq
- Size 840KB
- SHA256 d094fbec439b4de27ad194451f37757c16456a0bf5ef9ce56a07cf617efafb4c
- MD5 23b73a7b6a80fd0f0361b856ea5c4f95
- SHA1 8c141a55f2979dc572acb0d04cdb801b395f4f5f
- SHA512 b1713d821873393cd742e0ee66d527651ec7cd146f4f6254bfaab07ebafe74eea53118df480f2b7765f8e3e66b1862b96b64988458907d22b74a9b5c8b082432
- SSDEEP 24576:JSCgo+ogQc5WfNnZmD/nX2vqpUbeUnIj+WpyQTaEFNE3NEr:JSCgo+ogQc5WfNnZmD/nGvqpDWWpyQTZ
- TLSH T19105E858E7DC241242737078989F94C9AC3CE41A819DAC92FD0CC194AB94AFD997FECD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: GootLoader
JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.