General
- Target tmpuibk3a21
- Size 841KB
- Sample260609-r8sb7act6t
- SHA256 7ab78c4cb5a7e4685a320c96c19d63484bb20abf4a51567b7b76917981bf8462
- MD5 c467b747fe1954d8a936323e690e674e
- SHA1 3490005b439d11f17c87d974866e67602d497168
- SHA512 639e289602068874fcf7b599e6d98db831c4ae908f155ca99be7224e751a473c119657a15d836f595b94edb79e73f223dca431e6506a7b3d65dfbc7829beca8c
- SSDEEP 24576:QJCgo+ogQc5WfNnZmD/n1nwqam1yej8+oNWpyQTaEFNE3NEY:QJCgo+ogQc5WfNnZmD/nFwqay6WpyQTS
- TLSH T1BB05E858E7DC240642737078989F94C9AC3CD41A819EAC92FD0CC194AA94BFD997FECD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
tmpuibk3a21.js
Resource
win10ltsc2021-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmpuibk3a21.js
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmpuibk3a21.js
Resource
win11-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target tmpuibk3a21
- Size 841KB
- SHA256 7ab78c4cb5a7e4685a320c96c19d63484bb20abf4a51567b7b76917981bf8462
- MD5 c467b747fe1954d8a936323e690e674e
- SHA1 3490005b439d11f17c87d974866e67602d497168
- SHA512 639e289602068874fcf7b599e6d98db831c4ae908f155ca99be7224e751a473c119657a15d836f595b94edb79e73f223dca431e6506a7b3d65dfbc7829beca8c
- SSDEEP 24576:QJCgo+ogQc5WfNnZmD/n1nwqam1yej8+oNWpyQTaEFNE3NEY:QJCgo+ogQc5WfNnZmD/nFwqay6WpyQTS
- TLSH T1BB05E858E7DC240642737078989F94C9AC3CD41A819EAC92FD0CC194AA94BFD997FECD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: GootLoader
JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.