General
- Target tmp5coot957
- Size 483KB
- Sample260602-vktf5acv2l
- SHA256 82189758e00d71a51f3298b9876a0804e4d00fd7454eb3c45fce9bd69b82eba7
- MD5 e348e8025adcd99497cadd32322c9435
- SHA1 031745696f2866652993d71cdfe81fe7dec88aae
- SHA512 3221b635f7e46e72afd7b8cbffa7ddb152de89e4880986b5c98add0e6c230136506f1c6825e10358d2eeb0befd32f7aeee1c5e8f861435d1fb1c665789e3bd54
- SSDEEP 6144:ZQTc+YulaEl4WhEfD3xA7Wiagmd4iLAmWi6lSF:KPhEfD3xviagmd4iLAmWi6i
- TLSH T1DAB4B50EABEB3326C52371799F5F9004A535840B661AEC1D7D4C93880F5863D9ABBFE4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
tmp5coot957.js
Resource
win10ltsc2021-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmp5coot957.js
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmp5coot957.js
Resource
win11-20260513-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target tmp5coot957
- Size 483KB
- SHA256 82189758e00d71a51f3298b9876a0804e4d00fd7454eb3c45fce9bd69b82eba7
- MD5 e348e8025adcd99497cadd32322c9435
- SHA1 031745696f2866652993d71cdfe81fe7dec88aae
- SHA512 3221b635f7e46e72afd7b8cbffa7ddb152de89e4880986b5c98add0e6c230136506f1c6825e10358d2eeb0befd32f7aeee1c5e8f861435d1fb1c665789e3bd54
- SSDEEP 6144:ZQTc+YulaEl4WhEfD3xA7Wiagmd4iLAmWi6lSF:KPhEfD3xviagmd4iLAmWi6i
- TLSH T1DAB4B50EABEB3326C52371799F5F9004A535840B661AEC1D7D4C93880F5863D9ABBFE4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: GootLoader
JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.