General
- Target tmp8xrujki1
- Size 841KB
- Sample260609-samjqacv2v
- SHA256 cae477bd38d9182a4875d68257eb394182c80cd9ddcaeb70d007540390b2bd1e
- MD5 9e24e3d87a13efb46e631851e330e841
- SHA1 bb37d2ac18661dffb712b92eb2bd6e928dcf7a3b
- SHA512 795d3253706ae8b0975958640342d6e6f292fe3d4d729d57e2b87fd3673d24ad62d2bebfe7f2918d1d515066e2318c428a92cddc062072f1b512dfef3a9ead85
- SSDEEP 24576:bFCgo+ogQc5WfNnZmD/nd/RqiqOeFEtdEWpyQTaEFNE3NEr:bFCgo+ogQc5WfNnZmD/nJRqieNWpyQTZ
- TLSH T12E05E858E7DC201242737078989F94C9AC3CD41A819EAC92FD0CC194AB94AFD997FEDD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
tmp8xrujki1.js
Resource
win10ltsc2021-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmp8xrujki1.js
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmp8xrujki1.js
Resource
win11-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target tmp8xrujki1
- Size 841KB
- SHA256 cae477bd38d9182a4875d68257eb394182c80cd9ddcaeb70d007540390b2bd1e
- MD5 9e24e3d87a13efb46e631851e330e841
- SHA1 bb37d2ac18661dffb712b92eb2bd6e928dcf7a3b
- SHA512 795d3253706ae8b0975958640342d6e6f292fe3d4d729d57e2b87fd3673d24ad62d2bebfe7f2918d1d515066e2318c428a92cddc062072f1b512dfef3a9ead85
- SSDEEP 24576:bFCgo+ogQc5WfNnZmD/nd/RqiqOeFEtdEWpyQTaEFNE3NEr:bFCgo+ogQc5WfNnZmD/nJRqieNWpyQTZ
- TLSH T12E05E858E7DC201242737078989F94C9AC3CD41A819EAC92FD0CC194AB94AFD997FEDD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Family: GootLoader
JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
Checks computer location settings
Looks up country code configured in the registry, likely geofence.