gootloader | 67cff334f9bb48402de225d8c7806bb0f9e67f194fd91dfd8a546a44e798af8a

Analysis

max time kernel
149s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
23/05/2026, 03:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
tmp50xwao0q.js
Size 296KB
Sample260523-ec1bpsct3r
SHA256 67cff334f9bb48402de225d8c7806bb0f9e67f194fd91dfd8a546a44e798af8a
MD5 296bcd82d6306eb6a9e7811a0d0612d0
SHA1 5fde8787e87b09b8054b3049a7cd5d21e18cb1c9
SHA512 c6d1bdb81efa3190777738ec4e313c029e06a1818ca8eb66de90cca2002c77066713284d110ab71418a42291b0723d5fe20a06cda4de84b2b018e54c414e1037
SSDEEP 6144:9aaKxf/LY8Cv4ok1kFmwgscFbP61t3JMZ/HD0KUWrE4/Xp89SwvY1Z5COs12kpHe:D94FbPCW70KUWrE4/589yzsbHefb7PV3
TLSH
T15C54B3D9734F116F4BA233AAE43B5149FF7DD1B0520550ACB58D997C24A081883BAFBE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

execution gootloader loader

Malware Config

Signatures

Family: GootLoader
JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.
loader gootloader

Badlisted process makes network request 1 IoCs

Network request originating from process or tool commonly abused by malware.

flow	pid	Process
61	732	wscript.exe

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

Script User-Agent 1 IoCs

Uses user-agent string associated with script host/environment.

description	flow	ioc
HTTP User-Agent header	61	Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\tmp50xwao0q.js
1⤵
- Badlisted process makes network request
PID:732

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads