General
- Target tmp50_j82a8
- Size 3.6MB
- Sample260602-twg2ssat6v
- SHA256 577cca30e1a97e5f09fb8477f97a84fb7619b81729033a008043afc4333cd9bb
Score
10/10
Malware Config
Targets
-
- Target tmp50_j82a8
- Size 3.6MB
- SHA256 577cca30e1a97e5f09fb8477f97a84fb7619b81729033a008043afc4333cd9bb
Score10/10-
Family: GootLoader
JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.