gootkit | 43509f678cd6d6f3ea2d6a8fb86ffbd7b7bca5ee8d4a14be763770769417de5d | Triage™

Login
Reports

Overview

overview

Static

static

3

tmpl0xcep7j.exe

windows10-ltsc_2021-x64

tmpl0xcep7j.exe

windows10-2004-x64

tmpl0xcep7j.exe

windows11-21h2-x64

Sharing

Copy URL Twitter E-mail

General

Target
tmpl0xcep7j
Size 97KB
Sample260609-p3f1vsav9y
SHA256 43509f678cd6d6f3ea2d6a8fb86ffbd7b7bca5ee8d4a14be763770769417de5d
MD5 3be315046348568a36b8976f64ce7297
SHA1 96f95f161f01926928dec5560a5a1c5094e4e6a2
SHA512 d5857f4aa8ddf34334de82f182065a1cb80fc0f17d75620a3677aa6225b3024cf1472fab23ac8f88b0096336dd0845bdfe36270c49ade99d124585a133b5f74a
SSDEEP 3072:7y+EGGxgfhI/5KOEwvDRRVkT6KsFDfTG:7JhyuhIBpRRVgsFH
TLSH
T13EA3F102B180E0EAF4DC02B30D1599D29F537C9BA16D19CB63EE4E498DA75863F5AAC1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

gootkit 1001 banker botnet discovery trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

tmpl0xcep7j.exe

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

3 signatures

150 seconds

banker botnet 1001 discovery gootkit trojan

Behavioral task

behavioral2

Sample

tmpl0xcep7j.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

banker botnet 1001 discovery gootkit trojan

Behavioral task

behavioral3

Sample

tmpl0xcep7j.exe

Resource

win11-20260513-en

windows11-21h2-x64

3 signatures

150 seconds

banker botnet 1001 discovery gootkit trojan

Malware Config

Extracted

Family

gootkit

Botnet

1001

C2

pell-talak.com
gudsline.com

Attributes

vendor_id
1001

Targets

- Target
  tmpl0xcep7j
- Size 97KB
- SHA256 43509f678cd6d6f3ea2d6a8fb86ffbd7b7bca5ee8d4a14be763770769417de5d
- MD5 3be315046348568a36b8976f64ce7297
- SHA1 96f95f161f01926928dec5560a5a1c5094e4e6a2
- SHA512 d5857f4aa8ddf34334de82f182065a1cb80fc0f17d75620a3677aa6225b3024cf1472fab23ac8f88b0096336dd0845bdfe36270c49ade99d124585a133b5f74a
- SSDEEP 3072:7y+EGGxgfhI/5KOEwvDRRVkT6KsFDfTG:7JhyuhIBpRRVgsFH
- TLSH
  T13EA3F102B180E0EAF4DC02B30D1599D29F537C9BA16D19CB63EE4E498DA75863F5AAC1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

banker botnet 1001 discovery gootkit trojan
- Family: Gootkit
  Gootkit is a banking trojan, where large parts are written in node.JS.
  trojan banker botnet gootkit
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bankerbotnet1001discoverygootkittrojan

behavioral2

bankerbotnet1001discoverygootkittrojan

behavioral3

bankerbotnet1001discoverygootkittrojan

© 2018-2026

Terms | Privacy