General
- Target tmpqlq1ni5w
- Size 11.0MB
- Sample260602-ta2jbaay3p
- SHA256 68e00ba252b8803145f12b4c14500d4eacc01fd3ec57b63a1a2edcb7bc6a48b9
- MD5 3c1ad4a78f81d5b0bb531511b5390e6a
- SHA1 47392960b927a36ee5c60fa401510494577d9edb
- SHA512 fe5a8625074cf730eed4983a26139808f982cab690ae8fc555de4fc0f0fa21a854be61d7719a56127643a59794258e5a672c81c637fca7cf088992d148c94b12
- SSDEEP 49152:+kytwpCQK+fwkytwpCQK+fwkytwpCQK+fwkytwpCQK+fwkytwpCQK+fwkytwpCQ7:H
- TLSH T1A4C62A5D7FF21122065771B64ABFA00AF2B98413941CD954F96CC3D02FE092986FBEE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
tmpqlq1ni5w.js
Resource
win10ltsc2021-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmpqlq1ni5w.js
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmpqlq1ni5w.js
Resource
win11-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target tmpqlq1ni5w
- Size 11.0MB
- SHA256 68e00ba252b8803145f12b4c14500d4eacc01fd3ec57b63a1a2edcb7bc6a48b9
- MD5 3c1ad4a78f81d5b0bb531511b5390e6a
- SHA1 47392960b927a36ee5c60fa401510494577d9edb
- SHA512 fe5a8625074cf730eed4983a26139808f982cab690ae8fc555de4fc0f0fa21a854be61d7719a56127643a59794258e5a672c81c637fca7cf088992d148c94b12
- SSDEEP 49152:+kytwpCQK+fwkytwpCQK+fwkytwpCQK+fwkytwpCQK+fwkytwpCQK+fwkytwpCQ7:H
- TLSH T1A4C62A5D7FF21122065771B64ABFA00AF2B98413941CD954F96CC3D02FE092986FBEE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Family: GootLoader
JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
Checks computer location settings
Looks up country code configured in the registry, likely geofence.