General
- Target tmp1glsplv7
- Size 483KB
- Sample260609-scjkvads2n
- SHA256 392f01bbf643148cf5505d2798d1fe5925d239c7c923d6d2fd312d4e39731fe8
- MD5 5e5a033e1f6dfaaa93d1fc8f59b9c7f8
- SHA1 ac872bc49500fed669f12d12b92dd27e48e68484
- SHA512 b7340ded5c74bac18a9374d6419a79289fbfb9568d7f11ae871e0456c540a6c6ff0c4027f49dd50717eb97e3deb5268f1c33273ea7d22a9cdcd271a10ee7176d
- SSDEEP 6144:4QzHSIulaxl4YhEfDvMA7Wiagmd4iLAmWC6FSF:8YhEfDvMviagmd4iLAmWC6C
- TLSH T10AB4A40EABEB332AC51371799F5F9004A535840B661AEC1D7D4C93880F5863D9ABBFE4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
tmp1glsplv7.js
Resource
win10ltsc2021-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmp1glsplv7.js
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmp1glsplv7.js
Resource
win11-20260513-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target tmp1glsplv7
- Size 483KB
- SHA256 392f01bbf643148cf5505d2798d1fe5925d239c7c923d6d2fd312d4e39731fe8
- MD5 5e5a033e1f6dfaaa93d1fc8f59b9c7f8
- SHA1 ac872bc49500fed669f12d12b92dd27e48e68484
- SHA512 b7340ded5c74bac18a9374d6419a79289fbfb9568d7f11ae871e0456c540a6c6ff0c4027f49dd50717eb97e3deb5268f1c33273ea7d22a9cdcd271a10ee7176d
- SSDEEP 6144:4QzHSIulaxl4YhEfDvMA7Wiagmd4iLAmWC6FSF:8YhEfDvMviagmd4iLAmWC6C
- TLSH T10AB4A40EABEB332AC51371799F5F9004A535840B661AEC1D7D4C93880F5863D9ABBFE4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: GootLoader
JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.