gootkit | 6b6f47abe5a8103adf1b12e5f3651ed24b632a64c5c94ce297a6f9ca0710f772 | Triage™

Login
Reports

Overview

overview

Static

static

3

tmp90pjwy0j.exe

windows10-ltsc_2021-x64

tmp90pjwy0j.exe

windows10-2004-x64

tmp90pjwy0j.exe

windows11-21h2-x64

Sharing

Copy URL Twitter E-mail

General

Target
tmp90pjwy0j
Size 112KB
Sample260609-p15lfabs7n
SHA256 6b6f47abe5a8103adf1b12e5f3651ed24b632a64c5c94ce297a6f9ca0710f772
MD5 02a7e926c827c520122fcf6a4567314c
SHA1 3c30ff40ef14baaf3d7ea74cabafdd0ab4d6b162
SHA512 bdcb94e511b12f5d987cb6c493c74a609c1582020b06545654a6c79a0fd72372d25a716cac4919108639cae484dbb3d39cb2dda39539c309a03f011bf5fed7ad
SSDEEP 3072:3XVn8iDW2JpOxR7eAN1NdO/9T2/Qx5lCAeD2EFnBSr1rvSgA//:3l8qW2J8yA/NdO/kox5lCd2EFnBSr1ry
TLSH
T112B3F1E439704365FBF6703B5A9451F98660BB94E2B33BA262BFD1B004DDECE1918918
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

gootkit 1001 banker botnet discovery trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

tmp90pjwy0j.exe

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

3 signatures

150 seconds

banker botnet 1001 discovery gootkit trojan

Behavioral task

behavioral2

Sample

tmp90pjwy0j.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

banker botnet 1001 discovery gootkit trojan

Behavioral task

behavioral3

Sample

tmp90pjwy0j.exe

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

150 seconds

banker botnet 1001 discovery gootkit trojan

Malware Config

Extracted

Family

gootkit

Botnet

1001

C2

pell-talak.com
gudsline.com

Attributes

vendor_id
1001

Targets

- Target
  tmp90pjwy0j
- Size 112KB
- SHA256 6b6f47abe5a8103adf1b12e5f3651ed24b632a64c5c94ce297a6f9ca0710f772
- MD5 02a7e926c827c520122fcf6a4567314c
- SHA1 3c30ff40ef14baaf3d7ea74cabafdd0ab4d6b162
- SHA512 bdcb94e511b12f5d987cb6c493c74a609c1582020b06545654a6c79a0fd72372d25a716cac4919108639cae484dbb3d39cb2dda39539c309a03f011bf5fed7ad
- SSDEEP 3072:3XVn8iDW2JpOxR7eAN1NdO/9T2/Qx5lCAeD2EFnBSr1rvSgA//:3l8qW2J8yA/NdO/kox5lCd2EFnBSr1ry
- TLSH
  T112B3F1E439704365FBF6703B5A9451F98660BB94E2B33BA262BFD1B004DDECE1918918
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

banker botnet 1001 discovery gootkit trojan
- Family: Gootkit
  Gootkit is a banking trojan, where large parts are written in node.JS.
  trojan banker botnet gootkit
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bankerbotnet1001discoverygootkittrojan

behavioral2

bankerbotnet1001discoverygootkittrojan

behavioral3

bankerbotnet1001discoverygootkittrojan

© 2018-2026

Terms | Privacy