General
- Target tmp87tsjbxp
- Size 841KB
- Sample260602-tycvvsbx2j
- SHA256 486bd95de14449c5c7eafe00c34443946342eb6ed0bb04df4e0fcd509d01b413
- MD5 0c3cd1db98224230fbd8bae3142c354b
- SHA1 3fbcd324e1b593cdd7878657ca41daa51c9a925d
- SHA512 fafc1987a4e531d44776445ad3055a31209a8444079dc9c2b302da26ac1fd4e46ee36bde782e292a3704c3a1178f0f836a0cef30990c72cf21b38360df928696
- SSDEEP 24576:FtCgo+ogQc5WfNnZmD/nteVqlNNe4rchWWpyQTaEFNE3NEr:FtCgo+ogQc5WfNnZmD/nAVql6wWpyQTZ
- TLSH T10805E858E7DC600242737078989F94C9AC3CD41A819EAC92FD0CC194AB94AFD997FEDD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
tmp87tsjbxp.js
Resource
win10ltsc2021-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmp87tsjbxp.js
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmp87tsjbxp.js
Resource
win11-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target tmp87tsjbxp
- Size 841KB
- SHA256 486bd95de14449c5c7eafe00c34443946342eb6ed0bb04df4e0fcd509d01b413
- MD5 0c3cd1db98224230fbd8bae3142c354b
- SHA1 3fbcd324e1b593cdd7878657ca41daa51c9a925d
- SHA512 fafc1987a4e531d44776445ad3055a31209a8444079dc9c2b302da26ac1fd4e46ee36bde782e292a3704c3a1178f0f836a0cef30990c72cf21b38360df928696
- SSDEEP 24576:FtCgo+ogQc5WfNnZmD/nteVqlNNe4rchWWpyQTaEFNE3NEr:FtCgo+ogQc5WfNnZmD/nAVql6wWpyQTZ
- TLSH T10805E858E7DC600242737078989F94C9AC3CD41A819EAC92FD0CC194AB94AFD997FEDD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: GootLoader
JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.