gootkit | ae8c191199599e133cac67a50307f96e4b878e4ba04ef2f63cdabb17a39f2542 | Triage™

Login
Reports

Overview

overview

Static

static

3

tmpw8m4bjbt.exe

windows10-ltsc_2021-x64

tmpw8m4bjbt.exe

windows10-2004-x64

tmpw8m4bjbt.exe

windows11-21h2-x64

Sharing

Copy URL Twitter E-mail

General

Target
tmpw8m4bjbt
Size 112KB
Sample260609-p2b1hsbs7r
SHA256 ae8c191199599e133cac67a50307f96e4b878e4ba04ef2f63cdabb17a39f2542
MD5 5a768a70151584deef9a4cd29ff56eb9
SHA1 7b8761fb0cd6ab1fdc2a7a3bb3a3bf5115e3a826
SHA512 645e50abbf1221689bd2ac25cf99fbda10b0ec89070a23f2dd78a5e680e009ee6799ce42d7b8968a10243cff87beda66e3b8be09fea27b50de1297d1b85c7ee0
SSDEEP 3072:3XVn8iDW2JpOxR7eAN1NdO/9T2/Qx5lCAuD2klHByblbfCQQPf:3l8qW2J8yA/NdO/kox5lCN2klHByblbi
TLSH
T17BB3F1607B504365FBF6713B5AD491FAC660BB94D2A33BE26BBEC1F004ED0CE5918918
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

gootkit 1001 banker botnet discovery trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

tmpw8m4bjbt.exe

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

3 signatures

150 seconds

banker botnet 1001 discovery gootkit trojan

Behavioral task

behavioral2

Sample

tmpw8m4bjbt.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

banker botnet 1001 discovery gootkit trojan

Behavioral task

behavioral3

Sample

tmpw8m4bjbt.exe

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

150 seconds

banker botnet 1001 discovery gootkit trojan

Malware Config

Extracted

Family

gootkit

Botnet

1001

C2

pell-talak.com
gudsline.com

Attributes

vendor_id
1001

Targets

- Target
  tmpw8m4bjbt
- Size 112KB
- SHA256 ae8c191199599e133cac67a50307f96e4b878e4ba04ef2f63cdabb17a39f2542
- MD5 5a768a70151584deef9a4cd29ff56eb9
- SHA1 7b8761fb0cd6ab1fdc2a7a3bb3a3bf5115e3a826
- SHA512 645e50abbf1221689bd2ac25cf99fbda10b0ec89070a23f2dd78a5e680e009ee6799ce42d7b8968a10243cff87beda66e3b8be09fea27b50de1297d1b85c7ee0
- SSDEEP 3072:3XVn8iDW2JpOxR7eAN1NdO/9T2/Qx5lCAuD2klHByblbfCQQPf:3l8qW2J8yA/NdO/kox5lCN2klHByblbi
- TLSH
  T17BB3F1607B504365FBF6713B5AD491FAC660BB94D2A33BE26BBEC1F004ED0CE5918918
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

banker botnet 1001 discovery gootkit trojan
- Family: Gootkit
  Gootkit is a banking trojan, where large parts are written in node.JS.
  trojan banker botnet gootkit
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bankerbotnet1001discoverygootkittrojan

behavioral2

bankerbotnet1001discoverygootkittrojan

behavioral3

bankerbotnet1001discoverygootkittrojan

© 2018-2026

Terms | Privacy