gootkit | 3079b740d91179832f75ba23052eca8c19983252c274740be1e045cb588886c9 | Triage™

Login
Reports

Overview

overview

Static

static

3

tmp8351cdbo.exe

windows10-ltsc_2021-x64

tmp8351cdbo.exe

windows10-2004-x64

tmp8351cdbo.exe

windows11-21h2-x64

Sharing

Copy URL Twitter E-mail

General

Target
tmp8351cdbo
Size 189KB
Sample260609-p36lhsbt3m
SHA256 3079b740d91179832f75ba23052eca8c19983252c274740be1e045cb588886c9
MD5 3cb577465c985e8b34afc6e40fa8d458
SHA1 4c416ba9ac99e0357dfd30fe39eb897d51bd8195
SHA512 473d1e066af7dd35052bbf8b3cfa87aa273d87754c532f059a224ab19818b103fe76d2ffcdb9b2e0e59c1aa8505538e17abbd175ca40724b2a9452da84653673
SSDEEP 3072:W4dP455lKylgQ8C7/aw2PXVB97cldumsyvf7PvtvNjyI:3dQ55liQTCXho+ybPVvNj
TLSH
T18C146B681EC608A5C88FFE376C7D7BFE69995A3AB2432414377478C77243EC1626E025
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

gootkit 2855 banker botnet discovery trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

tmp8351cdbo.exe

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

5 signatures

150 seconds

banker botnet 2855 discovery gootkit trojan

Behavioral task

behavioral2

Sample

tmp8351cdbo.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

banker botnet 2855 discovery gootkit trojan

Behavioral task

behavioral3

Sample

tmp8351cdbo.exe

Resource

win11-20260513-en

windows11-21h2-x64

5 signatures

150 seconds

banker botnet 2855 discovery gootkit trojan

Malware Config

Extracted

Family

gootkit

Botnet

2855

C2

me.jmitchelldayton.com
otnhmtkwodm1.site

Attributes

vendor_id
2855

Targets

- Target
  tmp8351cdbo
- Size 189KB
- SHA256 3079b740d91179832f75ba23052eca8c19983252c274740be1e045cb588886c9
- MD5 3cb577465c985e8b34afc6e40fa8d458
- SHA1 4c416ba9ac99e0357dfd30fe39eb897d51bd8195
- SHA512 473d1e066af7dd35052bbf8b3cfa87aa273d87754c532f059a224ab19818b103fe76d2ffcdb9b2e0e59c1aa8505538e17abbd175ca40724b2a9452da84653673
- SSDEEP 3072:W4dP455lKylgQ8C7/aw2PXVB97cldumsyvf7PvtvNjyI:3dQ55liQTCXho+ybPVvNj
- TLSH
  T18C146B681EC608A5C88FFE376C7D7BFE69995A3AB2432414377478C77243EC1626E025
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

banker botnet 2855 discovery gootkit trojan
- Family: Gootkit
  Gootkit is a banking trojan, where large parts are written in node.JS.
  trojan banker botnet gootkit
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bankerbotnet2855discoverygootkittrojan

behavioral2

bankerbotnet2855discoverygootkittrojan

behavioral3

bankerbotnet2855discoverygootkittrojan

© 2018-2026

Terms | Privacy