gootkit | 0f1d79b7bebfb7bcfab9823392e986f982d869ba36928bd5f3d61af536ec5a00 | Triage™

Login
Reports

Overview

overview

Static

static

3

tmpdl0b1rse.exe

windows10-ltsc_2021-x64

tmpdl0b1rse.exe

windows10-2004-x64

tmpdl0b1rse.exe

windows11-21h2-x64

Sharing

Copy URL Twitter E-mail

General

Target
tmpdl0b1rse
Size 104KB
Sample260602-rdneragt4k
SHA256 0f1d79b7bebfb7bcfab9823392e986f982d869ba36928bd5f3d61af536ec5a00
MD5 8fe5df8c2a121a573062e4eb8ea1e3e2
SHA1 e26e99a7ccd69a198419c785a5d394c94d19ef73
SHA512 ed65560375b4a030686cccfddb48a1693b48601a733db00fa0b7104300b7eb7c3fb1872a8b2a314cb98fd42642fb0a112d838531d0917e1c27865a0216f0f222
SSDEEP 3072:Lx78Ll6UnxKC6FWhd9aP6YsaS+LQXyjP3a:F7QDxvwWhdgCYspXu3
TLSH
T1B5A3E066BEC520A0D274D3374DD6C7E2DE22FF18CC807AF207B76E540B6650C98661E9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

gootkit 1001 banker botnet discovery trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

tmpdl0b1rse.exe

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

3 signatures

150 seconds

banker botnet 1001 discovery gootkit trojan

Behavioral task

behavioral2

Sample

tmpdl0b1rse.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

banker botnet 1001 discovery gootkit trojan

Behavioral task

behavioral3

Sample

tmpdl0b1rse.exe

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

150 seconds

banker botnet 1001 discovery gootkit trojan

Malware Config

Extracted

Family

gootkit

Botnet

1001

C2

pell-talak.com
gudsline.com

Attributes

vendor_id
1001

Targets

- Target
  tmpdl0b1rse
- Size 104KB
- SHA256 0f1d79b7bebfb7bcfab9823392e986f982d869ba36928bd5f3d61af536ec5a00
- MD5 8fe5df8c2a121a573062e4eb8ea1e3e2
- SHA1 e26e99a7ccd69a198419c785a5d394c94d19ef73
- SHA512 ed65560375b4a030686cccfddb48a1693b48601a733db00fa0b7104300b7eb7c3fb1872a8b2a314cb98fd42642fb0a112d838531d0917e1c27865a0216f0f222
- SSDEEP 3072:Lx78Ll6UnxKC6FWhd9aP6YsaS+LQXyjP3a:F7QDxvwWhdgCYspXu3
- TLSH
  T1B5A3E066BEC520A0D274D3374DD6C7E2DE22FF18CC807AF207B76E540B6650C98661E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

banker botnet 1001 discovery gootkit trojan
- Family: Gootkit
  Gootkit is a banking trojan, where large parts are written in node.JS.
  trojan banker botnet gootkit
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bankerbotnet1001discoverygootkittrojan

behavioral2

bankerbotnet1001discoverygootkittrojan

behavioral3

bankerbotnet1001discoverygootkittrojan

© 2018-2026

Terms | Privacy