gootkit | 7af90590d1cd4e6f6d9d54bfc65e827d5ed0b062241e92d0a71eb991d079d989 | Triage™

Login
Reports

Overview

overview

Static

static

3

tmp3ibzhqx0.exe

windows10-ltsc_2021-x64

tmp3ibzhqx0.exe

windows10-2004-x64

tmp3ibzhqx0.exe

windows11-21h2-x64

Sharing

Copy URL Twitter E-mail

General

Target
tmp3ibzhqx0
Size 190KB
Sample260609-p2pxdaav8w
SHA256 7af90590d1cd4e6f6d9d54bfc65e827d5ed0b062241e92d0a71eb991d079d989
MD5 cfe77040029dbc2a5a6a416c02017bd0
SHA1 3b01ffd567b3443d0613f867a69ce4a60d2d7a26
SHA512 5bbc23aee0b94c774b9d0795e94f019f2c86e1966a6bbfec0bca0b71fc0c3caa01754fc8960e70fdfa92cc627bc06602a90aba96d2af25b09b7b2e4d1ec21332
SSDEEP 3072:oNXRWGYvvxDpb2KgrblhAood6h9NhISw8q02pr7mIxXi:oRR3YXxDpbFWLAvu9ISw88pr7m8i
TLSH
T12614595D3AC168A0C8CDF6776B7A7BB569C2133AB21314583A783ADF358BF92116F044
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

gootkit 2855 banker botnet discovery trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

tmp3ibzhqx0.exe

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

5 signatures

150 seconds

banker botnet 2855 discovery gootkit trojan

Behavioral task

behavioral2

Sample

tmp3ibzhqx0.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

banker botnet 2855 discovery gootkit trojan

Behavioral task

behavioral3

Sample

tmp3ibzhqx0.exe

Resource

win11-20260513-en

windows11-21h2-x64

5 signatures

150 seconds

banker botnet 2855 discovery gootkit trojan

Malware Config

Extracted

Family

gootkit

Botnet

2855

C2

me.jmitchelldayton.com
otnhmtkwodm1.site

Attributes

vendor_id
2855

Targets

- Target
  tmp3ibzhqx0
- Size 190KB
- SHA256 7af90590d1cd4e6f6d9d54bfc65e827d5ed0b062241e92d0a71eb991d079d989
- MD5 cfe77040029dbc2a5a6a416c02017bd0
- SHA1 3b01ffd567b3443d0613f867a69ce4a60d2d7a26
- SHA512 5bbc23aee0b94c774b9d0795e94f019f2c86e1966a6bbfec0bca0b71fc0c3caa01754fc8960e70fdfa92cc627bc06602a90aba96d2af25b09b7b2e4d1ec21332
- SSDEEP 3072:oNXRWGYvvxDpb2KgrblhAood6h9NhISw8q02pr7mIxXi:oRR3YXxDpbFWLAvu9ISw88pr7m8i
- TLSH
  T12614595D3AC168A0C8CDF6776B7A7BB569C2133AB21314583A783ADF358BF92116F044
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

banker botnet 2855 discovery gootkit trojan
- Family: Gootkit
  Gootkit is a banking trojan, where large parts are written in node.JS.
  trojan banker botnet gootkit
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bankerbotnet2855discoverygootkittrojan

behavioral2

bankerbotnet2855discoverygootkittrojan

behavioral3

bankerbotnet2855discoverygootkittrojan

© 2018-2026

Terms | Privacy