Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
09/06/2026, 15:00
General
- Target tmpu2xb3oqk.js
- Size 39KB
- Sample260609-sdn7qads4l
- SHA256 54ced04c35919d49102ca4f306f5d43c7ef0fe60c05cd2500df0df11ced96dbe
Score
10/10
Malware Config
Signatures
- Family: GootLoader
JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.
- Badlisted process makes network request 1 IoCs
Network request originating from process or tool commonly abused by malware.
- Command and Scripting Interpreter: JavaScript 1 TTPs
- Script User-Agent 1 IoCs
Uses user-agent string associated with script host/environment.
Processes
-
C:\Windows\system32\wscript.exewscript.exe C:\Users\Admin\AppData\Local\Temp\tmpu2xb3oqk.js1⤵
- Badlisted process makes network request