General
- Target tmpmpm_av34
- Size 3.6MB
- Sample260609-r7m13sct2v
- SHA256 10816ad1a45ae7361ca15adab54adb789d5606a83acc21c7522cf0790be12d3d
- MD5 b96adbd01d13a262ab56d224b4cc55d9
- SHA1 2f14c95fda08c30e0468e38be4c3afdfae62e28e
- SHA512 0a8879bc4fd838eee84826e0a370ae3f7ba39d030b125bfa881dc96e4ad7c0f5a4eb80dfe9f23e3a89baf62360ecce55656982621f7ea742091a09b8468ed795
- SSDEEP 49152:Nx3ii6gobYQS3QpOVtFBgiAEn0i2pdlhkg80xRjqaeqNn0i2pdliWtAXiAwyfMtO:NQpwtFBgl
- TLSH T19E06D49C3CE7226142177039879F5484E939881F5118AC84B48DEAF85F99F3C47FEAE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
tmpmpm_av34.js
Resource
win10ltsc2021-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmpmpm_av34.js
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmpmpm_av34.js
Resource
win11-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target tmpmpm_av34
- Size 3.6MB
- SHA256 10816ad1a45ae7361ca15adab54adb789d5606a83acc21c7522cf0790be12d3d
- MD5 b96adbd01d13a262ab56d224b4cc55d9
- SHA1 2f14c95fda08c30e0468e38be4c3afdfae62e28e
- SHA512 0a8879bc4fd838eee84826e0a370ae3f7ba39d030b125bfa881dc96e4ad7c0f5a4eb80dfe9f23e3a89baf62360ecce55656982621f7ea742091a09b8468ed795
- SSDEEP 49152:Nx3ii6gobYQS3QpOVtFBgiAEn0i2pdlhkg80xRjqaeqNn0i2pdliWtAXiAwyfMtO:NQpwtFBgl
- TLSH T19E06D49C3CE7226142177039879F5484E939881F5118AC84B48DEAF85F99F3C47FEAE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Family: GootLoader
JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
Checks computer location settings
Looks up country code configured in the registry, likely geofence.