General
- Target tmpwznx2js3
- Size 483KB
- Sample260609-sdzcpads5k
- SHA256 a3a0e7bea2365c2ab8349cdf68d1f7b21d039d1f4f9cb1e5da8da89ff2260511
- MD5 37cc5b3e3b1d41b517ed5d3afccde9f3
- SHA1 a4122f73a1ac35bf37e5cf445deb623515129969
- SHA512 9a015f4683aba4a4712f932083dcb777ae874eba82f2c91ceea4a3d02e37001b3516cfb9fd3fac4db60854ce62ba6867449d51bd2f75736826506ad68379d237
- SSDEEP 6144:iQSfSzulaxl4khEfDLxAtWiagmd4iLAmW667SF:xBhEfDLxviagmd4iLAmW66Y
- TLSH T1EBB4A40EABEB3326C52371799F5F9004A535840B661AEC1D7D4C93880F5863D9ABBFE4
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
tmpwznx2js3.js
Resource
win10ltsc2021-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmpwznx2js3.js
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmpwznx2js3.js
Resource
win11-20260513-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target tmpwznx2js3
- Size 483KB
- SHA256 a3a0e7bea2365c2ab8349cdf68d1f7b21d039d1f4f9cb1e5da8da89ff2260511
- MD5 37cc5b3e3b1d41b517ed5d3afccde9f3
- SHA1 a4122f73a1ac35bf37e5cf445deb623515129969
- SHA512 9a015f4683aba4a4712f932083dcb777ae874eba82f2c91ceea4a3d02e37001b3516cfb9fd3fac4db60854ce62ba6867449d51bd2f75736826506ad68379d237
- SSDEEP 6144:iQSfSzulaxl4khEfDLxAtWiagmd4iLAmW667SF:xBhEfDLxviagmd4iLAmW66Y
- TLSH T1EBB4A40EABEB3326C52371799F5F9004A535840B661AEC1D7D4C93880F5863D9ABBFE4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Family: GootLoader
JavaScript loader known for delivering other families such as Gootkit and Cobaltstrike.
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.