General
- Target tmp50xwao0q
- Size 296KB
- Sample260523-ec1bpsct3r
- SHA256 67cff334f9bb48402de225d8c7806bb0f9e67f194fd91dfd8a546a44e798af8a
- MD5 296bcd82d6306eb6a9e7811a0d0612d0
- SHA1 5fde8787e87b09b8054b3049a7cd5d21e18cb1c9
- SHA512 c6d1bdb81efa3190777738ec4e313c029e06a1818ca8eb66de90cca2002c77066713284d110ab71418a42291b0723d5fe20a06cda4de84b2b018e54c414e1037
- SSDEEP 6144:9aaKxf/LY8Cv4ok1kFmwgscFbP61t3JMZ/HD0KUWrE4/Xp89SwvY1Z5COs12kpHe:D94FbPCW70KUWrE4/589yzsbHefb7PV3
- TLSH T15C54B3D9734F116F4BA233AAE43B5149FF7DD1B0520550ACB58D997C24A081883BAFBE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
tmp50xwao0q.js
Resource
win10ltsc2021-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmp50xwao0q.js
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmp50xwao0q.js
Resource
win11-20260513-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target tmp50xwao0q
- Size 296KB
- SHA256 67cff334f9bb48402de225d8c7806bb0f9e67f194fd91dfd8a546a44e798af8a
- MD5 296bcd82d6306eb6a9e7811a0d0612d0
- SHA1 5fde8787e87b09b8054b3049a7cd5d21e18cb1c9
- SHA512 c6d1bdb81efa3190777738ec4e313c029e06a1818ca8eb66de90cca2002c77066713284d110ab71418a42291b0723d5fe20a06cda4de84b2b018e54c414e1037
- SSDEEP 6144:9aaKxf/LY8Cv4ok1kFmwgscFbP61t3JMZ/HD0KUWrE4/Xp89SwvY1Z5COs12kpHe:D94FbPCW70KUWrE4/589yzsbHefb7PV3
- TLSH T15C54B3D9734F116F4BA233AAE43B5149FF7DD1B0520550ACB58D997C24A081883BAFBE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: GootLoader
JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.