General
- Target tmpw6uaeykv
- Size 841KB
- Sample260609-sacphscz5j
- SHA256 562a0027ecbd748ca23e055c3cfd7cb554657dc26127535bc1418afc6c5fd1fa
- MD5 b5162e52fada844a5ca834ecff8c08bf
- SHA1 5b5c5f22ff996cc320e17e40bf2408568f89d393
- SHA512 ba798a7f145f0a2cc6240729d6096bd688a8139ba435d64034d98ea72f4852e11299fb11520054254ad3d9de14ce3ad1480c28573bfd5227f4162d9e0366bd5f
- SSDEEP 24576:OFCgo+ogQc5WfNnZmD/n3gUC9NYeKwUlOWpyQTaEFNE3NEr:OFCgo+ogQc5WfNnZmD/nwUC9jrWpyQTZ
- TLSH T16C05E858E7DC240242737078989F94C9AC3CD41A819EAC92FD0CC194AA94BFD997FEDD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
tmpw6uaeykv.js
Resource
win10ltsc2021-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmpw6uaeykv.js
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmpw6uaeykv.js
Resource
win11-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target tmpw6uaeykv
- Size 841KB
- SHA256 562a0027ecbd748ca23e055c3cfd7cb554657dc26127535bc1418afc6c5fd1fa
- MD5 b5162e52fada844a5ca834ecff8c08bf
- SHA1 5b5c5f22ff996cc320e17e40bf2408568f89d393
- SHA512 ba798a7f145f0a2cc6240729d6096bd688a8139ba435d64034d98ea72f4852e11299fb11520054254ad3d9de14ce3ad1480c28573bfd5227f4162d9e0366bd5f
- SSDEEP 24576:OFCgo+ogQc5WfNnZmD/n3gUC9NYeKwUlOWpyQTaEFNE3NEr:OFCgo+ogQc5WfNnZmD/nwUC9jrWpyQTZ
- TLSH T16C05E858E7DC240242737078989F94C9AC3CD41A819EAC92FD0CC194AA94BFD997FEDD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Family: GootLoader
JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
Checks computer location settings
Looks up country code configured in the registry, likely geofence.