General
- Target tmpsjqvy_tw
- Size 841KB
- Sample260609-r9be3act6z
- SHA256 d3c937335f6eadbe0b2436070e757dfff0b64724d86bf63c0a10aae4d84c5ea4
Score
10/10
Malware Config
Targets
-
- Target tmpsjqvy_tw
- Size 841KB
- SHA256 d3c937335f6eadbe0b2436070e757dfff0b64724d86bf63c0a10aae4d84c5ea4
Score10/10-
Family: GootLoader
JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.