General
- Target tmpsjqvy_tw
- Size 841KB
- Sample260609-r9be3act6z
- SHA256 d3c937335f6eadbe0b2436070e757dfff0b64724d86bf63c0a10aae4d84c5ea4
Score
10/10
Malware Config
Targets
-
- Target tmpsjqvy_tw
- Size 841KB
- SHA256 d3c937335f6eadbe0b2436070e757dfff0b64724d86bf63c0a10aae4d84c5ea4
Score10/10Family: GootLoader
JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
Checks computer location settings
Looks up country code configured in the registry, likely geofence.