General
- Target tmpuibk3a21
- Size 841KB
- Sample260609-r8sb7act6t
- SHA256 7ab78c4cb5a7e4685a320c96c19d63484bb20abf4a51567b7b76917981bf8462
- MD5 c467b747fe1954d8a936323e690e674e
- SHA1 3490005b439d11f17c87d974866e67602d497168
- SHA512 639e289602068874fcf7b599e6d98db831c4ae908f155ca99be7224e751a473c119657a15d836f595b94edb79e73f223dca431e6506a7b3d65dfbc7829beca8c
- SSDEEP 24576:QJCgo+ogQc5WfNnZmD/n1nwqam1yej8+oNWpyQTaEFNE3NEY:QJCgo+ogQc5WfNnZmD/nFwqay6WpyQTS
- TLSH T1BB05E858E7DC240642737078989F94C9AC3CD41A819EAC92FD0CC194AA94BFD997FECD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
tmpuibk3a21.js
Resource
win10ltsc2021-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmpuibk3a21.js
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmpuibk3a21.js
Resource
win11-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target tmpuibk3a21
- Size 841KB
- SHA256 7ab78c4cb5a7e4685a320c96c19d63484bb20abf4a51567b7b76917981bf8462
- MD5 c467b747fe1954d8a936323e690e674e
- SHA1 3490005b439d11f17c87d974866e67602d497168
- SHA512 639e289602068874fcf7b599e6d98db831c4ae908f155ca99be7224e751a473c119657a15d836f595b94edb79e73f223dca431e6506a7b3d65dfbc7829beca8c
- SSDEEP 24576:QJCgo+ogQc5WfNnZmD/n1nwqam1yej8+oNWpyQTaEFNE3NEY:QJCgo+ogQc5WfNnZmD/nFwqay6WpyQTS
- TLSH T1BB05E858E7DC240642737078989F94C9AC3CD41A819EAC92FD0CC194AA94BFD997FECD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Family: GootLoader
JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
Checks computer location settings
Looks up country code configured in the registry, likely geofence.